64
Security considerations about hosting Immich from home (lemmy.world)
submitted 3 months ago* (last edited 3 months ago) by to c/selfhosted@lemmy.world
37 comments fedilink hide all child comments
 

So far, my self-hosting has been limited to Pi-Hole, and a static website. I now want to try out something new, an Immich server.

I have a static IP from my ISP, so I don’t need to rent out a VPS. However, given that this IS a home internet, I want to be extra sure that it is going to be secure.

In my existing website, I use Fail2Ban + BadBotBlocker + Anubis + Nginx rate limits to protect it from scrapers, bots and malicious users, and it works well. With photos (especially family photos) at stake, I just want to know more on how to protect my server.

Add: thanks for the helpful replies. I will be sharing the photos with family, many of whom live abroad.

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 3 months ago (1 child)

The Immich app (at least on Android) supports mTLS client certificates, I use that for my instance.

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
  • [–] 2 points 3 months ago

    It supports it on the iOS client as well but last time I tried it would always lose the mTLS setting on its own after a while. I had to resort to the other method they offer, secret key in a custom HTTP header.

  • permalink
  • fedilink
  • source
  • parent