Configuring public share links onimmich.example.com for my internal Immich instance

Hello Immich community,

I’m running an external Ubuntu 22.04 server with HestiaCP that establishes a WireGuard tunnel into my home LAN (192.168.178.0/24). Inside that LAN, Immich is listening on 192.168.178.173:2283.

I already have a DNS A record for immich.example.com pointing to my external server, and TLS is set up there. What I’m unsure about is how to generate links like https://immich.home/share/<token> on my internal instance and have them work as https://immich.example.com/share/<token> for friends and family on the public Internet.

Could someone guide me on:

  1. How to configure Immich (or a proxy) so that share links use the public domain (immich.example.com) instead of the internal hostname (immich.home).
  2. Any necessary reverse‑proxy settings in HestiaCP/Nginx (or Apache) to forward /share/... requests over WireGuard to 192.168.178.173:2283.
  3. Tips for handling TLS certificates and ensuring no internal IPs or hostnames leak in shared URLs.
Thanks in advance for your help!
Was this page helpful?