Jck
IImmich
•Created by Kael on 1/26/2025 in #help-desk-support
Public Album Sharing with Upload Access in Immich: Is It Possible?
the other options are:
1) continue using proxy, and have people send their photos to me via Google Drive (haha) or something else (I don't have a great option for this...), and I add them to Immich manually.
2) Expose Immich publicly, get rid of the public proxy
3) create "public proxy with upload" - not something I have the skills or necessarily the desire, to do. But that was OPs question
10 replies
IImmich
•Created by Kael on 1/26/2025 in #help-desk-support
Public Album Sharing with Upload Access in Immich: Is It Possible?
well, that's the point I guess! I (and presumably the OP of this thread) don't ideally want to expose the whole instance, which is why we choose to use the public proxy. BUT we do then want to find a way to allow uploads (in certain scenarios). This then raises a question/discussion of how best to do this.
I don't allow it to be access publicly at all - I put cloudflare access in front of one URL ( https://photos-with-upload-ability.domain.com) and that points internally to the full immich instance, and each person who wants to access it has to get a one-time pin sent to their email address, which I have added to cloudflare policy. I also expose the public proxy via cloudflare without Access controls, so when someone visits https://public-proxy-view-only.domain.com they can reach it without obstruction.
This setup isn't too bad - except that there's 2 URLs for "last weekend's event", one to view only (easier for end users) and one for upload (direct to Immich, and as a result requires access control at cloudflare/network level).
I think this is an ok solution, but I was wondering whether there's any other ideas out there!
10 replies
IImmich
•Created by Kael on 1/26/2025 in #help-desk-support
Public Album Sharing with Upload Access in Immich: Is It Possible?
I was very happy when I found the Immich public proxy; it put me much more at ease not having to expose the entire application publicly, or adding further authentication just for people to browse a agree link.
I also completely understood (and still understand) why there is a limitation regarding uploading, and I was happy with that.
However, now that I have shared a few albums with various groups, and it works well, people have asked if they can add their photos of an event to the album so they can all be in the same place, rather than scattered all over whichever messaging platform people are using.
It would be preferable for them to be able to view the album AND upload on the same link, but there lies the issue!
So now I’m back to thinking about the optimal setup for my new use case…
I think I’ll have to go back to putting the whole Immich instance behind Cloudflare Access and creating email-based accounts for everyone who needs access. This would be absolutely fine for the people who want to upload, but it’s a bit annoying for people who just want to view (hence why the proxy is good!).
Of course I can have both solutions running simultaneously at the Cloudflare level (public-proxy.domain.com and immich.domain.com) and then instruct the users who want to upload that they have to use a different subdomain for uploading.
Would love to hear if anyone has any ideas?
10 replies