mash-playbook VS immich

Sometimes the easiest and quickest way to try (or even deploy) a new service is by using the recommended docker-compose-setup that they often have as an example. But if you have an existing infrastructure, like we do with the great mother of all self-hosting ansible playbooks, this isn't always easy to integrate. In particular when that infrastructure is managed and started and stopped independently from the additional docker-compose you intend to add. Lucky, who is running their out-most proxy using traefik, because with just a few extra labels your docker-compose becomes available TLS-certs included.

Yes! And don't forget MASH [0], its a collection of Ansible roles that is compatible with the Matrix Docker Ansible Deploy playbook. In case you want to add more services to your Matrix server.

[0]: https://github.com/mother-of-all-self-hosting/mash-playbook

This is why I like https://github.com/mother-of-all-self-hosting/mash-playbook and its associated Ansible roles for configuring various services.

All the portability of Docker, plus (something close to) the ease of use of installing a distro package like an .rpm or .deb.

I use Authentik. Is speaks LADP, OICD, OAUTH and SAML so most use cases are already included. For everything else there is the option of using a proxy provider with an appropriate webserver that uses [Forward aut](https://doc.traefik.io/traefik/middlewares/http/forwardauth/). I never used Forward Auth but the general setup is discussed here: https://github.com/mother-of-all-self-hosting/mash-playbook/issues/50

more here

It really is hard to leave Gmail when all of your data has been conveniently stored therein. This is one of Google's retention strategies and it is indeed brilliant.

That said, there's a vast number of self-hosted alternatives like Stalwart Mail (email) [1], Immich (images) [2], NextCloud (Google Docs) [3], etc.

[1] https://stalwa.rt

[2] https://immich.app

[3] https://nextcloud.com/

Last year we added CLIP-based image search to https://immich.app/ and even though I have a pretty good understanding of how it works, it still blows my mind damn near every day. It's the closest thing to magic I've ever seen.

I’m a big fan of https://immich.app/ and I use it every day for thousands of assets

Real-world applications often require complex queries that go beyond simple Approximate Nearest Neighbor (ANN) search. To explore a practical example of such applications, let's take a closer look at immich, a self-hosted photo and video backup solution that highlights the importance of advanced vector and traditional relational queries.

I discovered these 3 amazing projects recently:

Cryptpad, essentially google docs/sheets/forms e2e encrypted. It does include collaboration. https://github.com/cryptpad/cryptpad

Immich, google photos self hostable, with share options https://github.com/immich-app/immich

Nginxproxymanager manages certificates and proxies to self hosted stuff through nginx https://github.com/NginxProxyManager/nginx-proxy-manager

Great self hosting stuff!

I realize it's very hard, but can we maybe reconsider opening the encryption-at-rest feature request? https://github.com/immich-app/immich/issues/450

Maybe we can give temporary access to processing steps in the pipeline, then have Immich forget the keys after it does the processing?