lpares12 Posts - Answer Overflow

lpares12

Explore posts from servers

•Created by lpares12 on 12/25/2024 in #help-desk-support

Display device photos and choose which ones to back up in Android app

Hey! Wanted to ask if it's possible to do something similar as in google photos with the Android app. In google photos, you see your whole gallery and can select a few and press on "back up" so they are saved into google photos cloud. Now, I'd like to do something similar with Immich, but as far as I can see, only way to back up stuff is by going to the top right and selecting an album from the phone to back up. And as I understand, Immich would create a new album with that name and put all the pictures in there. The thing is on my phone I don't really separate in albums. I just have an all photos "album" that I don't really want to completely back up, since half of the photos there are shitty pictures and gifs I receive on whatsapp and so on. What's the proper way to back up just a few selected photos, without enabling auto-backup on the app? In the web it's easy, I just go to "Upload" and it's done.

16 replies

IImmich

•Created by lpares12 on 12/5/2024 in #help-desk-support

Exposing locally and remotely

I'm sure this has been asked before. But I was planning to expose my immich instance through either an nginx reverse proxy on a VPS or a cloudflared tunnel. So for both these services I'd be using https and setting the HTTPS termination on the cloudflared tunnel/VPS. Then I'd rely on wiregard/tailscale/whatever cloudflare uses to route it to my HTTP immich server on my local network. I don't really mind anyone sniffing my local network (but I wouldn't be against setting https on it either). The problem is that the APP only allows for 1 server URL, so it would be either immich.mydomain.com or 192.168.1.100:2283. This means that the APP wouldn't be useful once I'm on my local network, since the local address would be http://192.168.1.100:2283 instead of httpS://immich.mydomain.com, unless I set the address to immich.mydomain.com, but then that would require Internet connection on my local network, and all the traffic would get routed through the VPS/Cloudflare instead of going directly through my local network. I know for example, Home Assistant app allows to set a local SSID and IP so the app will use that instead of the remote address when it detects that wifi SSID. Anyways, I'd just want to discuss how to avoid this issue with the app. My router does not allow split-horizon, and I can't even change the DNS settings on my router to point to my machines. I can only disable a thing called "Safe DNS" that I don't even know what it does. The router I have is the Sercomm FG824CD.

18 replies

CDCloudflare Developers

•Created by lpares12 on 10/3/2024 in #general-help

PUT object with presigned URL sets the incorrect Type in R2 object

Hey! I'm trying to put an object to a bucket using presigned URL. But for some reason in the R2 I can always see the file type: application/x-www-form-urlencoded even when the file is a jpg, png,... This is the code I'm using in nodejs:

  const config = {
    header: {
        'Content-Type': 'image/jpeg'
    }
  };

  axios.put(url, photo.value, config)
  .catch(error => {
    console.log("Error");
  });

  const config = {
    header: {
        'Content-Type': 'image/jpeg'
    }
  };

  axios.put(url, photo.value, config)
  .catch(error => {
    console.log("Error");
  });

The image is correctly uploaded, but the type in the R2 bucket is wrong as explained before. If I download the image, I can open it correctly and windows shows it as a .jpg as expected. To generate the presigned URL I use python's boto3 package:

        url = s3.generate_presigned_url('put_object',
                                             Params={'Bucket': bucket_name, 'Key': object_name},
                                            ExpiresIn=expiration,
                                            HttpMethod='PUT')

        url = s3.generate_presigned_url('put_object',
                                             Params={'Bucket': bucket_name, 'Key': object_name},
                                            ExpiresIn=expiration,
                                            HttpMethod='PUT')

I saw this post of a user having a similar problem on your forums, but with no response: https://community.cloudflare.com/t/jpg-on-r2-served-with-wrong-content-type/484955/1

3 replies

CDCloudflare Developers

•Created by lpares12 on 7/9/2024 in #general-help

R2: Create a presigned URL with Temporary access credentials

Hi! I'd like to know what's the proper way to create a presigned URL for an object with temporary access credentials. Is that even possible? This is my try with typescript:

export function generatePresignedURL(object: string, bucket: string, region: string, accessKeyId: string, secretAccessKey: string, sessionToken: string = ''): string {
  const amzDate = new Date().toISOString().replace(/[:-]/g, '').replace(/\.\d{3}/, '');
  const dateStamp = amzDate.slice(0, 8);
  const algorithm: string = "AWS4-HMAC-SHA256";
  const credentialScope: string = `${dateStamp}/${region}/s3/aws4_request`; // %2F is /
  const expires = 3600; // 1 hour
  const url: URL = new URL(`https://${import.meta.env.VITE_APP_R2_ACCOUNT_ID}.eu.r2.cloudflarestorage.com/${bucket}/${object}?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=${accessKeyId}%2F${encodeURIComponent(credentialScope)}&X-Amz-Date=${amzDate}&X-Amz-Expires=${expires}&X-Amz-SignedHeaders=host`);
  if(sessionToken != '') {
    url.searchParams.append('X-Amz-Security-Token', encodeURIComponent(sessionToken));
  }
  const host = url.hostname;
  const canonicalUri = new URL(url).pathname;
  const canonicalQueryString = new URL(url).searchParams.toString();
  var signedHeaders = 'host';
  var canonicalHeaders = `host:${host}\n`;
  if(sessionToken != '') {
    signedHeaders += ';x-amz-security-token';
    canonicalHeaders += `x-amz-security-token:${encodeURIComponent(sessionToken)}\n`;
  }
  const canonicalRequest = `GET\n${canonicalUri}\n${canonicalQueryString}\n${canonicalHeaders}\n${signedHeaders}\nUNSIGNED-PAYLOAD`
  const stringToSign = `AWS4-HMAC-SHA256\n${amzDate}\n${credentialScope}\n${CryptoJS.SHA256(canonicalRequest).toString()}`;
  const signingKey = getSignatureKey(secretAccessKey, dateStamp, region, 's3');
  const signature = CryptoJS.HmacSHA256(stringToSign, signingKey).toString();
  const presignedUrl = url.toString() + `&X-Amz-Signature=${signature}`;

  return presignedUrl;
}

export function generatePresignedURL(object: string, bucket: string, region: string, accessKeyId: string, secretAccessKey: string, sessionToken: string = ''): string {
  const amzDate = new Date().toISOString().replace(/[:-]/g, '').replace(/\.\d{3}/, '');
  const dateStamp = amzDate.slice(0, 8);
  const algorithm: string = "AWS4-HMAC-SHA256";
  const credentialScope: string = `${dateStamp}/${region}/s3/aws4_request`; // %2F is /
  const expires = 3600; // 1 hour
  const url: URL = new URL(`https://${import.meta.env.VITE_APP_R2_ACCOUNT_ID}.eu.r2.cloudflarestorage.com/${bucket}/${object}?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=${accessKeyId}%2F${encodeURIComponent(credentialScope)}&X-Amz-Date=${amzDate}&X-Amz-Expires=${expires}&X-Amz-SignedHeaders=host`);
  if(sessionToken != '') {
    url.searchParams.append('X-Amz-Security-Token', encodeURIComponent(sessionToken));
  }
  const host = url.hostname;
  const canonicalUri = new URL(url).pathname;
  const canonicalQueryString = new URL(url).searchParams.toString();
  var signedHeaders = 'host';
  var canonicalHeaders = `host:${host}\n`;
  if(sessionToken != '') {
    signedHeaders += ';x-amz-security-token';
    canonicalHeaders += `x-amz-security-token:${encodeURIComponent(sessionToken)}\n`;
  }
  const canonicalRequest = `GET\n${canonicalUri}\n${canonicalQueryString}\n${canonicalHeaders}\n${signedHeaders}\nUNSIGNED-PAYLOAD`
  const stringToSign = `AWS4-HMAC-SHA256\n${amzDate}\n${credentialScope}\n${CryptoJS.SHA256(canonicalRequest).toString()}`;
  const signingKey = getSignatureKey(secretAccessKey, dateStamp, region, 's3');
  const signature = CryptoJS.HmacSHA256(stringToSign, signingKey).toString();
  const presignedUrl = url.toString() + `&X-Amz-Signature=${signature}`;

  return presignedUrl;
}

22 replies

Gaming

Programming