how can i get immich to work over http remotely?
My phone and my desktop are Tailscaled together and can talk to each other securely. When I try to contact Immich via http://localhost:2283 on my desktop, it works. When I try to contact Immich via http://desktop:2283 on my phone, it fails.
I can contact http://desktop:8000 when running
python -m http.server, so I think this is Immich restricting itself and dropping non-localhost connections over http for security. How can I tell it to not do that?11 Replies
:wave: Hey @apropos,
Thanks for reaching out to us. Please carefully read this message and follow the recommended actions. This will help us be more effective in our support effort and leave more time for building Immich :immich:.
References
- Container Logs:
docker compose logs docs
- Container Status: docker ps -a docs
- Reverse Proxy: https://immich.app/docs/administration/reverse-proxy
- Code Formatting https://support.discord.com/hc/en-us/articles/210298617-Markdown-Text-101-Chat-Formatting-Bold-Italic-Underline#h_01GY0DAKGXDEHE263BCAYEGFJA
Checklist
I have...
1. :ballot_box_with_check: verified I'm on the latest release(note that mobile app releases may take some time).
2. :ballot_box_with_check: read applicable release notes.
3. :ballot_box_with_check: reviewed the FAQs for known issues.
4. :ballot_box_with_check: reviewed Github for known issues.
5. :ballot_box_with_check: tried accessing Immich via local ip (without a custom reverse proxy).
6. :ballot_box_with_check: uploaded the relevant information (see below).
7. :ballot_box_with_check: tried an incognito window, disabled extensions, cleared mobile app cache, logged out and back in, different browsers, etc. as applicable
(an item can be marked as "complete" by reacting with the appropriate number)
Information
In order to be able to effectively help you, we need you to provide clear information to show what the problem is. The exact details needed vary per case, but here is a list of things to consider:
- Your docker-compose.yml and .env files.
- Logs from all the containers and their status (see above).
- All the troubleshooting steps you've tried so far.
- Any recent changes you've made to Immich or your system.
- Details about your system (both software/OS and hardware).
- Details about your storage (filesystems, type of disks, output of commands like fdisk -l and df -h).
- The version of the Immich server, mobile app, and other relevant pieces.
- Any other information that you think might be relevant.
Please paste files and logs with proper code formatting, and especially avoid blurry screenshots.
Without the right information we can't work out what the problem is. Help us help you ;)
If this ticket can be closed you can use the /close command, and re-open it later if needed.
Successfully submitted, a tag has been added to inform contributors. :white_check_mark:Idk where you got that idea but that seems like some AI stuff haha. We don’t drop connections
wot
no dude?? i described exactly the behaviour i'm seeing??
ignoring whatever you meant, this is not a firewall issue. i can curl http://desktop:2283 too when running an http server on that port
Have you tried without tailscale on the same network? I tried on mine and realized it doesn’t work with or without tailscale 😂 (other things work fine)
I always go via reverse proxy so I never noticed
I still don’t think Immich intentionally drops/blocks any connections, might be a bug
or a config issue, tho i don't have any firewall enabled on the machine and it definitely used to work
I did mess around with routing tables recently so in my case it could be that
hmm, unfortunately i can't really test without tailscale on the same network. tailscale's the only way i can have a network, my network isolates devices otherwise (public wifi)
are you sure immich doesn't drop connections? the behaviour i'm seeing looks rly similar to what happens with cockpit, this linux system manager (i have to provide a specific url it gets accessed from + also tell it non-localhost connections are ok)
in particular it's like... other stuff on that tcp port works totally fine
Immich does not care where the request is coming from. Must be something else that drops connections. You should really test on your local network if that even works. The network isolation is your part.
again can't test on my local network b/c of the isolation
i'll try and get more debug info, thx for the confirmations immich shouldn't care abt origins tho
Again, that makes it a you problem
dude that is less than helpful lmao
What do you expect when we need more info and the only thing we have „my network is isolated and even I have no way in“. Happy to help when other stuff works lol
yeah, sorry. i'm still a little bit annoyed from the first guy in this convo but shouldn't be letting it get to me. i'll mess with it more and see abt more info
(sorry for being snappy)