Public Album Sharing with Upload Access in Immich: Is It Possible?
Setup details:
Immich running on an Ubuntu Server inside a Docker container
Accessing it via Tailscale
Is there a way to publicly share an album and allow uploads while keeping the rest of the Immich instance private? I’m currently using the immich-public-proxy to publicly share images, but when it comes to albums, it doesn’t allow uploading. If anyone can help, that would be greatly appreciated.
7 Replies
:wave: Hey @Kael,
Thanks for reaching out to us. Please carefully read this message and follow the recommended actions. This will help us be more effective in our support effort and leave more time for building Immich :immich:.
References
- Container Logs:
docker compose logs docs
- Container Status: docker ps -a docs
- Reverse Proxy: https://immich.app/docs/administration/reverse-proxy
- Code Formatting https://support.discord.com/hc/en-us/articles/210298617-Markdown-Text-101-Chat-Formatting-Bold-Italic-Underline#h_01GY0DAKGXDEHE263BCAYEGFJAChecklist
I have...
1. :ballot_box_with_check: verified I'm on the latest release(note that mobile app releases may take some time).
2. :ballot_box_with_check: read applicable release notes.
3. :ballot_box_with_check: reviewed the FAQs for known issues.
4. :ballot_box_with_check: reviewed Github for known issues.
5. :ballot_box_with_check: tried accessing Immich via local ip (without a custom reverse proxy).
6. :ballot_box_with_check: uploaded the relevant information (see below).
7. :ballot_box_with_check: tried an incognito window, disabled extensions, cleared mobile app cache, logged out and back in, different browsers, etc. as applicable
(an item can be marked as "complete" by reacting with the appropriate number)
Information
In order to be able to effectively help you, we need you to provide clear information to show what the problem is. The exact details needed vary per case, but here is a list of things to consider:
- Your docker-compose.yml and .env files.
- Logs from all the containers and their status (see above).
- All the troubleshooting steps you've tried so far.
- Any recent changes you've made to Immich or your system.
- Details about your system (both software/OS and hardware).
- Details about your storage (filesystems, type of disks, output of commands like
fdisk -l and df -h).
- The version of the Immich server, mobile app, and other relevant pieces.
- Any other information that you think might be relevant.
Please paste files and logs with proper code formatting, and especially avoid blurry screenshots.
Without the right information we can't work out what the problem is. Help us help you ;)
If this ticket can be closed you can use the /close command, and re-open it later if needed.GitHub
immich-app immich · Discussions
Explore the GitHub Discussions forum for immich-app immich. Discuss code, ask questions & collaborate with the developer community.
FAQ | Immich
User
GitHub
Issues · immich-app/immich
High performance self-hosted photo and video management solution. - Issues · immich-app/immich
Successfully submitted, a tag has been added to inform contributors. :white_check_mark:
If you mean whether there is a project like immich-public-proxy that allows uploading, no.
I was very happy when I found the Immich public proxy; it put me much more at ease not having to expose the entire application publicly, or adding further authentication just for people to browse a agree link.
I also completely understood (and still understand) why there is a limitation regarding uploading, and I was happy with that.
However, now that I have shared a few albums with various groups, and it works well, people have asked if they can add their photos of an event to the album so they can all be in the same place, rather than scattered all over whichever messaging platform people are using.
It would be preferable for them to be able to view the album AND upload on the same link, but there lies the issue!
So now I’m back to thinking about the optimal setup for my new use case…
I think I’ll have to go back to putting the whole Immich instance behind Cloudflare Access and creating email-based accounts for everyone who needs access. This would be absolutely fine for the people who want to upload, but it’s a bit annoying for people who just want to view (hence why the proxy is good!).
Of course I can have both solutions running simultaneously at the Cloudflare level (public-proxy.domain.com and immich.domain.com) and then instruct the users who want to upload that they have to use a different subdomain for uploading.
Would love to hear if anyone has any ideas?
Not sure I see the point of using the public proxy if you’re going to expose everything else anyway
But that’s not an immich project, so I’m not super familiar with it
well, that's the point I guess! I (and presumably the OP of this thread) don't ideally want to expose the whole instance, which is why we choose to use the public proxy. BUT we do then want to find a way to allow uploads (in certain scenarios). This then raises a question/discussion of how best to do this.
I don't allow it to be access publicly at all - I put cloudflare access in front of one URL ( https://photos-with-upload-ability.domain.com) and that points internally to the full immich instance, and each person who wants to access it has to get a one-time pin sent to their email address, which I have added to cloudflare policy. I also expose the public proxy via cloudflare without Access controls, so when someone visits https://public-proxy-view-only.domain.com they can reach it without obstruction.
This setup isn't too bad - except that there's 2 URLs for "last weekend's event", one to view only (easier for end users) and one for upload (direct to Immich, and as a result requires access control at cloudflare/network level).
I think this is an ok solution, but I was wondering whether there's any other ideas out there!
the other options are:
1) continue using proxy, and have people send their photos to me via Google Drive (haha) or something else (I don't have a great option for this...), and I add them to Immich manually.
2) Expose Immich publicly, get rid of the public proxy
3) create "public proxy with upload" - not something I have the skills or necessarily the desire, to do. But that was OPs question