Immich•2mo ago

Listen on Unix socket

I'm hosting Immich behind a reverse proxy and I would like to know if it's possible to have Immich listen on a unix socket instead of a tcp port?

Immich•10/27/25, 4:06 PM

:wave: Hey @Corsac,

Thanks for reaching out to us. Please carefully read this message and follow the recommended actions. This will help us be more effective in our support effort and leave more time for building Immich :immich:.

References

Container Logs:
```
docker compose logs
```
```
docker compose logs
```
docs
Container Status:
```
docker ps -a
```
```
docker ps -a
```
docs
Reverse Proxy: https://immich.app/docs/administration/reverse-proxy
Code Formatting https://support.discord.com/hc/en-us/articles/210298617-Markdown-Text-101-Chat-Formatting-Bold-Italic-Underline#h_01GY0DAKGXDEHE263BCAYEGFJA

Immich•10/27/25, 4:06 PM

Checklist

I have...

:blue_square: verified I'm on the latest release(note that mobile app releases may take some time).
:blue_square: read applicable release notes.
:blue_square: reviewed the FAQs for known issues.
:blue_square: reviewed Github for known issues.
:blue_square: tried accessing Immich via local ip (without a custom reverse proxy).
:blue_square: uploaded the relevant information (see below).
:blue_square: tried an incognito window, disabled extensions, cleared mobile app cache, logged out and back in, different browsers, etc. as applicable

(an item can be marked as "complete" by reacting with the appropriate number)

Information

In order to be able to effectively help you, we need you to provide clear information to show what the problem is. The exact details needed vary per case, but here is a list of things to consider:

Your docker-compose.yml and .env files.
Logs from all the containers and their status (see above).
All the troubleshooting steps you've tried so far.
Any recent changes you've made to Immich or your system.
Details about your system (both software/OS and hardware).
Details about your storage (filesystems, type of disks, output of commands like
```
fdisk -l
```
```
fdisk -l
```
and
```
df -h
```
```
df -h
```
).
The version of the Immich server, mobile app, and other relevant pieces.
Any other information that you think might be relevant.

Please paste files and logs with proper code formatting, and especially avoid blurry screenshots.
Without the right information we can't work out what the problem is. Help us help you ;)

If this ticket can be closed you can use the

/close

/close

command, and re-open it later if needed.

Zeus•10/27/25, 4:28 PM

If it’s possible it’s some weird docker config. Immich has no specific config this

CorsacOP•10/27/25, 6:08 PM

And would it be possible to do it? I’m not sure what is actually listening (what process) and how to configure it

Zeus•10/27/25, 6:08 PM

No idea. It’s probably possible if you make your own immich docker image but idk where to start

Zeus•10/27/25, 6:09 PM

What are you trying to accomplish that you can’t do with docker..?

CorsacOP•10/27/25, 8:09 PM

I already have a setup where most of my existing web apps are called from the reverse proxy using a unix socket. Some of them (like Nextcloud) run in containers without any network interface and no internet access

CorsacOP•10/27/25, 8:09 PM

I dont think that’s possible with immich but if I can stick with something near my existing setup it’d be nice

Zeus•10/27/25, 8:25 PM

Sorry, never heard of it

goose•10/27/25, 11:28 PM

Just lurking, and correct me if I'm wrong, but I think here is where the server starts listening. It seems like it would be straightforward to add a config option to listen on a socket (see this—and a new option is only needed because the required type would be 'string'. Assuming it's truly that simple, might a PR be accepted to support this?

Ggoose Just lurking, and correct me if I'm wrong, but I think [here](https://github.com...

Immich•10/27/25, 11:29 PM

  const server = await (host ? app.listen(port, host) : app.listen(port));

  const server = await (host ? app.listen(port, host) : app.listen(port));

[Issue] unix socket support (expressjs/express#3107)

Zeus•10/27/25, 11:30 PM

You can ask in #contributing if you want. I think it is somewhat unlikely we would accept this as it is a super niche case and adds config/testing burden to the code

Zeus•10/27/25, 11:30 PM

not up to me though

CorsacOP•10/28/25, 8:15 AM

Thanks, I’ll take a look

CorsacOP•10/28/25, 8:15 AM

I kind of understand doing a totally manual setup isn’t exactly encouraged

Mraedis•10/28/25, 8:33 AM

What would the actual benefit or this be @Corsac ?

Mraedis•10/28/25, 8:33 AM

Never heard of this type of set up so I'm curious

CorsacOP•10/28/25, 9:37 AM

Drastic simplification of firewall rules for a start. Improved security etc.

Mraedis•10/28/25, 9:40 AM

Firewall rules for what? Because in my case everything goes through the one proxy so there's nothing hard about it

CorsacOP•10/28/25, 3:49 PM

you still have to set them. no need if you don't actually have a network interface

CorsacOP•10/28/25, 3:49 PM

and in any case if everything is running on the same machine you don't actually need an ip socket and the routing tables etc. One can just use an unix socket

Listen on Unix socket

References

Checklist

Information

Similar Threads

Similar Threads

References

Checklist

Information

Similar Threads