Immich•4mo ago

HTTPS impossible on MacOS?

I'm trying to setup HTTPS also with Cloudflare, but I can't follow the instructions on this page: https://immich-distribution.nsg.cc/configuration/https/
because I must run this on a Mac (for various reasons), and I don't have the "snap" command that this seems to imply that I need.

Immich•9/3/25, 1:38 AM

:wave: Hey @iRedMC,

Thanks for reaching out to us. Please carefully read this message and follow the recommended actions. This will help us be more effective in our support effort and leave more time for building Immich :immich:.

References

Container Logs:
```
docker compose logs
```
```
docker compose logs
```
docs
Container Status:
```
docker ps -a
```
```
docker ps -a
```
docs
Reverse Proxy: https://immich.app/docs/administration/reverse-proxy
Code Formatting https://support.discord.com/hc/en-us/articles/210298617-Markdown-Text-101-Chat-Formatting-Bold-Italic-Underline#h_01GY0DAKGXDEHE263BCAYEGFJA

Immich•9/3/25, 1:38 AM

Checklist

I have...

:blue_square: verified I'm on the latest release(note that mobile app releases may take some time).
:ballot_box_with_check: read applicable release notes.
:ballot_box_with_check: reviewed the FAQs for known issues.
:ballot_box_with_check: reviewed Github for known issues.
:ballot_box_with_check: tried accessing Immich via local ip (without a custom reverse proxy).
:ballot_box_with_check: uploaded the relevant information (see below).
:ballot_box_with_check: tried an incognito window, disabled extensions, cleared mobile app cache, logged out and back in, different browsers, etc. as applicable

(an item can be marked as "complete" by reacting with the appropriate number)

Information

In order to be able to effectively help you, we need you to provide clear information to show what the problem is. The exact details needed vary per case, but here is a list of things to consider:

Your docker-compose.yml and .env files.
Logs from all the containers and their status (see above).
All the troubleshooting steps you've tried so far.
Any recent changes you've made to Immich or your system.
Details about your system (both software/OS and hardware).
Details about your storage (filesystems, type of disks, output of commands like
```
fdisk -l
```
```
fdisk -l
```
and
```
df -h
```
```
df -h
```
).
The version of the Immich server, mobile app, and other relevant pieces.
Any other information that you think might be relevant.

Please paste files and logs with proper code formatting, and especially avoid blurry screenshots.
Without the right information we can't work out what the problem is. Help us help you ;)

If this ticket can be closed you can use the

/close

/close

command, and re-open it later if needed.

IImmich ## Checklist I have... 1. :blue_square: verified I'm on the latest release(note ...

ImmichAPP•9/3/25, 1:39 AM

Successfully submitted, a tag has been added to inform contributors. :white_check_mark:

iRedMCOP•9/3/25, 1:40 AM

The thing I was using before, called HFS, the newer version has a pretty much one click button for generating this stuff and turning on HTTPS. Is this planned for Immich? I don't know how I'm supposed to do any of this, but I know I need to.

iRedMCOP•9/3/25, 1:41 AM

One of the problems is that Immich is on port 2283, which is what it said it needed to be on when I was setting it up I think, so I'm afraid to change that to anything else

iRedMCOP•9/3/25, 1:42 AM

Also hosting on port 80 is a REALLY bad idea in this house, because sometimes it'll just load into the router interface, which I'm assuming is extremely dangerous.

Zeus•9/3/25, 1:44 AM

Immich will not include built in HTTPS/web service
The link you posted is not from immich but from a third party immich installer/binary
You will want to research into reverse proxy setup if you want to expose immich on port 80(HTTP) and 443(HTTPS)

iRedMCOP•9/3/25, 1:45 AM

I do not want to expose on either of those ports

iRedMCOP•9/3/25, 1:45 AM

For the reason I mentioned, and because I might in the future want something else there.

iRedMCOP•9/3/25, 1:46 AM

I did see that there's something called nginx or whatever, but I'm really trying not to have to run additional things that break

Zeus•9/3/25, 1:46 AM

there is no way to access immich remotely without any additional tool (proxy, VPN, etc)

iRedMCOP•9/3/25, 1:47 AM

That doesn't seem right - I port forwarded it and it worked fine.

iRedMCOP•9/3/25, 1:47 AM

it's just not HTTPS

Zeus•9/3/25, 1:47 AM

Ok, yeah that’s technically possible but you should never do that because it’s not https as you mentioned

iRedMCOP•9/3/25, 1:47 AM

Precisely why I'm doing this

Zeus•9/3/25, 1:47 AM

So you need an additional tool

iRedMCOP•9/3/25, 1:49 AM

Then I'd need someone to literally step by step tell me what to do, because all of the resources available assume I'm some kind of Linux dev, of which I am very much not, and I don't want to break it like last time

Zeus•9/3/25, 1:49 AM

You might want to look at something like Tailscale VPN. Pretty easy setup

Zeus•9/3/25, 1:50 AM

We dont offer step by step setup for non immich networking stuff

iRedMCOP•9/3/25, 1:51 AM

a VPN is a lil too much - I'd probably have to connected to it on my phone, and I'd have to teach my ex how to do th- it's just a bad idea for my setup.
I'm using Clourflaire... isn't there a way I can just... idk do something easily with that?

ZZeus We dont offer step by step setup for non immich networking stuff

iRedMCOP•9/3/25, 1:51 AM

Fair enough but idk where else I'd go.

Zeus•9/3/25, 1:52 AM

To be honest you don’t have the body of knowledge that I would recommend you just host services exposed at your home

Zeus•9/3/25, 1:52 AM

This requires actual reading/understanding what’s going on. It’s not a 123 step thing

iRedMCOP•9/3/25, 1:53 AM

If someone gave me the instructions, I'd be able to understand and contextualize what's going on

Zeus•9/3/25, 1:53 AM

There’s heaps of videos and guides online. Nginx is a good starting point

IiRedMC a VPN is a lil too much - I'd probably have to connected to it on my phone, and ...

Ninja_Steelblade•9/3/25, 1:53 AM

use a cloudflare tunnel

ZZeus To be honest you don’t have the body of knowledge that I would recommend you jus...

iRedMCOP•9/3/25, 1:53 AM

yea that's why I'm trying to setup Cloudflare

Ninja_Steelblade•9/3/25, 1:54 AM

cloudflare tunnel limitation is 100mb I think, thats the only problem. But its secure though

iRedMCOP•9/3/25, 1:54 AM

I saw someone talk about that too, but they were trying to move away from it - Probably because it requires some app to be running to connect to it on client?

iRedMCOP•9/3/25, 1:54 AM

well my up isn't faster than 20Mbps soooo I doubt I'd ever hit that limit outside the house anyway XD

Ninja_Steelblade•9/3/25, 1:54 AM

that limitation is not speed

iRedMCOP•9/3/25, 1:54 AM

Oh that's a total transfer limit?

Ninja_Steelblade•9/3/25, 1:54 AM

but the file size maximum

iRedMCOP•9/3/25, 1:54 AM

the fuck-

iRedMCOP•9/3/25, 1:54 AM

iRedMCOP•9/3/25, 1:55 AM

Well that's completely out

iRedMCOP•9/3/25, 1:55 AM

I'm regularly sharing IMAGES larger than that

iRedMCOP•9/3/25, 1:55 AM

let alone videos

Ninja_Steelblade•9/3/25, 1:55 AM

Because you can port forward and have cloudflare I recommend doing a reverse proxy

Ninja_Steelblade•9/3/25, 1:55 AM

with crowdsec

Ninja_Steelblade•9/3/25, 1:55 AM

for security

Zeus•9/3/25, 1:56 AM

Thelimit is only on uploads FYI

iRedMCOP•9/3/25, 1:56 AM

I'm just looking to setup HTTPS through Cloudflare - one step at a time lol
I saw many talking about reverse proxies

Ninja_Steelblade•9/3/25, 1:56 AM

you wont have any limitations on speed (except based on your home network speed) and can directly access it

IiRedMC I'm just looking to setup HTTPS through Cloudflare - one step at a time lol I sa...

Ninja_Steelblade•9/3/25, 1:56 AM

dude, there are two ways, TUNNELS or Reverse Proxies

Ninja_Steelblade•9/3/25, 1:57 AM

or VPN, but you dont want it

Ninja_Steelblade•9/3/25, 1:57 AM

without any of these its not possible

ZZeus Thelimit is only on uploads FYI

iRedMCOP•9/3/25, 1:57 AM

Sadly it would still be out because someone uses my server that never comes inside the local network, and that's far too hard a limit - wouldn't matter for me since I'm almost always inside, but y-

Ninja_Steelblade•9/3/25, 1:57 AM

I can help with the reverse proxy if you are new to it

IiRedMC Sadly it would still be out because someone uses my server that never comes insi...

Ninja_Steelblade•9/3/25, 1:58 AM

do the vpn then

HTTPS impossible on MacOS?

References

Checklist

Information

Similar Threads

Similar Threads

Similar Threads

References

Checklist

Information