Immich•7mo ago

Traefik v3 and immich

Setup:

Host: TrueNAS scale 24.10
Immich server 1.134.0
Traefik v3.4 (running on a different host). I have SSO via authentik, but even without using SSO the issue with uploading is present.

Usage:

Upload photos directly to the webservice exposed by TrueNAS works without problems.
- Uploading through the reverse proxy provided by Traefik does not. I inserted the respondingTimeout section from https://immich.app/docs/administration/reverse-proxy .
- I am not sure about how to troubleshoot this further and couldn't find any related posts here or via the forums and wanted to see if someone can point me in the right direction.
- Same issue via android app or firefox (tried incognito).
- Nothing remarkable in access.log other than slow calls (90-100s) to api/socket.io from the browser. I am not sure which logs from the docker containers on truenas would be helpful here.

Traefik configs below.

file config:

routers:
   immich:
     entryPoints: https
     rule: "Host(`....`)"
     tls: "true"
     service: immich

services:
  immich:
    loadBalancers:
       servers:
          - url: "http://truenasip:30041"
        passHostHeader: true (tried without this option also)

routers:
   immich:
     entryPoints: https
     rule: "Host(`....`)"
     tls: "true"
     service: immich

services:
  immich:
    loadBalancers:
       servers:
          - url: "http://truenasip:30041"
        passHostHeader: true (tried without this option also)

routers:
   immich:
     entryPoints: https
     rule: "Host(`....`)"
     tls: "true"
     service: immich

services:
  immich:
    loadBalancers:
       servers:
          - url: "http://truenasip:30041"
        passHostHeader: true (tried without this option also)

routers:
   immich:
     entryPoints: https
     rule: "Host(`....`)"
     tls: "true"
     service: immich

services:
  immich:
    loadBalancers:
       servers:
          - url: "http://truenasip:30041"
        passHostHeader: true (tried without this option also)

traefik.yaml:

  entryPoints:
     https:
       transport:
          respondingTimeouts:
             readTimeout: 600s
             idleTimeout: 600s
            writeTimeout: 600s

  entryPoints:
     https:
       transport:
          respondingTimeouts:
             readTimeout: 600s
             idleTimeout: 600s
            writeTimeout: 600s

  entryPoints:
     https:
       transport:
          respondingTimeouts:
             readTimeout: 600s
             idleTimeout: 600s
            writeTimeout: 600s

  entryPoints:
     https:
       transport:
          respondingTimeouts:
             readTimeout: 600s
             idleTimeout: 600s
            writeTimeout: 600s

Immich•6/16/25, 2:20 AM

:wave: Hey @topdeckboltftw,

Thanks for reaching out to us. Please carefully read this message and follow the recommended actions. This will help us be more effective in our support effort and leave more time for building Immich :immich:.

References

Container Logs:
```
docker compose logs
```
```
docker compose logs
```
docs
Container Status:
```
docker ps -a
```
```
docker ps -a
```
docs
Reverse Proxy: https://immich.app/docs/administration/reverse-proxy
Code Formatting https://support.discord.com/hc/en-us/articles/210298617-Markdown-Text-101-Chat-Formatting-Bold-Italic-Underline#h_01GY0DAKGXDEHE263BCAYEGFJA

Immich•6/16/25, 2:20 AM

Checklist

I have...

:ballot_box_with_check: verified I'm on the latest release(note that mobile app releases may take some time).
:ballot_box_with_check: read applicable release notes.
:ballot_box_with_check: reviewed the FAQs for known issues.
:ballot_box_with_check: reviewed Github for known issues.
:ballot_box_with_check: tried accessing Immich via local ip (without a custom reverse proxy).
:ballot_box_with_check: uploaded the relevant information (see below).
:ballot_box_with_check: tried an incognito window, disabled extensions, cleared mobile app cache, logged out and back in, different browsers, etc. as applicable

(an item can be marked as "complete" by reacting with the appropriate number)

Information

In order to be able to effectively help you, we need you to provide clear information to show what the problem is. The exact details needed vary per case, but here is a list of things to consider:

Your docker-compose.yml and .env files.
Logs from all the containers and their status (see above).
All the troubleshooting steps you've tried so far.
Any recent changes you've made to Immich or your system.
Details about your system (both software/OS and hardware).
Details about your storage (filesystems, type of disks, output of commands like
```
fdisk -l
```
```
fdisk -l
```
and
```
df -h
```
```
df -h
```
).
The version of the Immich server, mobile app, and other relevant pieces.
Any other information that you think might be relevant.

Please paste files and logs with proper code formatting, and especially avoid blurry screenshots.
Without the right information we can't work out what the problem is. Help us help you ;)

If this ticket can be closed you can use the

/close

/close

command, and re-open it later if needed.

IImmich ## Checklist I have... 1. :ballot_box_with_check: verified I'm on the latest rel...

ImmichAPP•6/16/25, 2:32 AM

Successfully submitted, a tag has been added to inform contributors. :white_check_mark:

schuhbacca•6/16/25, 1:03 PM

Can' you just set tls: "true"? That doesn't seem right

Mraedis•6/16/25, 1:48 PM

I know nothing about traefik but entryPoints: httpsentryPoints: https is not even an option in the docs

schuhbacca•6/16/25, 1:51 PM

That's fine, they have https defined in their traefik.yml.

schuhbacca•6/16/25, 1:52 PM

Here's my working version
immich.yml

http:
  routers:
    immich_router:
      entryPoints:
        - "https"
      service: service-immich
      rule: "Host(`domain.mydomain.com`)"
      tls:
        certResolver: cloudflare
        options: default

  services:
    service-immich:
      loadBalancer:
        servers:
        - url: http://192.168.1.7:2283

http:
  routers:
    immich_router:
      entryPoints:
        - "https"
      service: service-immich
      rule: "Host(`domain.mydomain.com`)"
      tls:
        certResolver: cloudflare
        options: default

  services:
    service-immich:
      loadBalancer:
        servers:
        - url: http://192.168.1.7:2283

traefik.yml

entryPoints:
  http:
    address: ":80"
    http:
      redirections:
        entryPoint:
          to: https
          scheme: https
  https:
    address: ":443"

entryPoints:
  http:
    address: ":80"
    http:
      redirections:
        entryPoint:
          to: https
          scheme: https
  https:
    address: ":443"

topdeckboltftwOP•6/17/25, 12:05 AM

Thank you for the quick response! I realized that I had a typo in entryPoint, which I fixed. Seeing the ip used in the example made me wonder if maybe the problem is that the hostname resolves to the truenas ip on a different vlan. Changing this did the trick. I don't know why other services are not bothered. But it works now from both my desktop and android.

Traefik v3 and immich

References

Checklist

Information

Similar Threads

Similar Threads

References

Checklist

Information

Similar Threads