alangrainger/immich-public-proxy-upload repository overview

⁠Immich Public Proxy - upload service

An optional companion to Immich Public Proxy⁠. Visitors to a share send their own photos and videos into it, and they land in the album in Immich.

• Uploads use the visitor's share key. Immich refuses them unless the share has "Allow public user to upload" on.
• No API key, no database, no volume. Files stream straight to Immich and are never stored.
• The IPP container stays read-only: this is the only part of IPP that can write to Immich, and you run it only if you want uploads.

Setup guide: https://docs.ipp.nz/visitor-uploads⁠ Settings: https://docs.ipp.nz/config/upload-service⁠ Source: https://github.com/alangrainger/immich-public-proxy⁠

⁠Quick start

Add it to the docker-compose.yml that runs IPP:

  ipp-upload:
    image: alangrainger/immich-public-proxy-upload:latest
    container_name: ipp-upload
    restart: always
    ports:
      - "3001:3000"
    read_only: true
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges
    environment:
      IMMICH_URL: http://your-internal-immich-server:2283
      PUBLIC_BASE_URL: https://your-proxy-url.com
    healthcheck:
      test: curl -sf -m 4 http://localhost:3000/healthcheck -o /dev/null || exit 1
      start_period: 10s
      timeout: 5s

Then route /upload on IPP's hostname to it in your reverse proxy, and turn on "Allow public user to upload" on a share in Immich. Requires Immich 3.0.0 or newer and IPP 4.0.0 or newer.

⁠Tags

The same version tags as IPP: latest, 4.0.0, 4.0, 4, for linux/amd64 and linux/arm64. Also on GHCR as ghcr.io/alangrainger/immich-public-proxy-upload.