Using wireguard to expose Immich to internet?

🚧Setup💻Web❓Question

Usage🗄️Server

Hi, so I've got a box at home that I've installed wireguard on, and I've distributed keys to clients (ie, I can successfully connect to the VPN via my phone)

I've set up DDNS to point

my-domain.net

my-domain.net

to this box, and that works successfully. I've also set up port forwarding of 2283 on my router

Now, I'd like to set Immich up so that it's acessible via

my-domain.net:2283

my-domain.net:2283

, but only if the client is logged on to the VPN. At least, this is what I think I want based on https://docs.immich.app/guides/remote-access/, but the linked pihole documentation isn't really clear on how exactly to set this up :/

Anyways, I can successfully start the immich server on my box via docker

...
services:
  immich-server:
    container_name: immich_server
...
    env_file:
      - .env
    ports:
      - '2283:2283'

...
services:
  immich-server:
    container_name: immich_server
...
    env_file:
      - .env
    ports:
      - '2283:2283'

But naturally, this just exposes

my-domain.net:2283

my-domain.net:2283

for the world to see. So I'm wondering, what am I missing here?

My wireguard configuration

[Interface]
Address = 10.100.0.1/24, fd08:4711::1/64
ListenPort = 47111
PrivateKey = ---

# lg-phone
[Peer]
PublicKey = ---
PresharedKey = ---
AllowedIPs = 10.100.0.2/32, fd08:4711::2/128

[Interface]
Address = 10.100.0.1/24, fd08:4711::1/64
ListenPort = 47111
PrivateKey = ---

# lg-phone
[Peer]
PublicKey = ---
PresharedKey = ---
AllowedIPs = 10.100.0.2/32, fd08:4711::2/128

Immich•3mo ago•

7 replies

anlsh

Using wireguard to expose Immich to internet?

🚧Setup💻Web❓Question

Usage🗄️Server

Hi, so I've got a box at home that I've installed wireguard on, and I've distributed keys to clients (ie, I can successfully connect to the VPN via my phone)

I've set up DDNS to point

my-domain.net

my-domain.net

to this box, and that works successfully. I've also set up port forwarding of 2283 on my router

Now, I'd like to set Immich up so that it's acessible via

my-domain.net:2283

my-domain.net:2283

...
services:
  immich-server:
    container_name: immich_server
...
    env_file:
      - .env
    ports:
      - '2283:2283'

...
services:
  immich-server:
    container_name: immich_server
...
    env_file:
      - .env
    ports:
      - '2283:2283'

But naturally, this just exposes

my-domain.net:2283

my-domain.net:2283

for the world to see. So I'm wondering, what am I missing here?

My wireguard configuration

[Interface]
Address = 10.100.0.1/24, fd08:4711::1/64
ListenPort = 47111
PrivateKey = ---

# lg-phone
[Peer]
PublicKey = ---
PresharedKey = ---
AllowedIPs = 10.100.0.2/32, fd08:4711::2/128

[Interface]
Address = 10.100.0.1/24, fd08:4711::1/64
ListenPort = 47111
PrivateKey = ---

# lg-phone
[Peer]
PublicKey = ---
PresharedKey = ---
AllowedIPs = 10.100.0.2/32, fd08:4711::2/128

Using wireguard to expose Immich to internet?

Similar Threads

Using wireguard to expose Immich to internet?

Similar Threads

Similar Threads

Similar Threads