add immich on genepi

hosts/genepi/default.nix

@@ -14,6 +14,7 @@
     ./disk.nix
     ./dns.nix
     ./hardware.nix
+    ./immich.nix
     ./monitoring.nix
     ./network.nix
     ./nginx.nix

hosts/genepi/dns.nix

@@ -14,8 +14,14 @@
         interface = [ "${config.services.tailscale.interfaceName}" ];
         access-control = [ "100.0.0.0/8 allow" ];
 
-        local-zone = [ ''"grafana.home.rpqt.fr." redirect'' ];
-        local-data = [ ''"grafana.home.rpqt.fr. IN A 100.83.123.79"'' ];
+        local-zone = [
+          ''"grafana.home.rpqt.fr." redirect''
+          ''"images.home.rpqt.fr" redirect''
+        ];
+        local-data = [
+          ''"grafana.home.rpqt.fr. IN A 100.83.123.79"''
+          ''"images.home.rpqt.fr. IN A 100.83.123.79"''
+        ];
       };
     };
   };

hosts/genepi/immich.nix

@@ -0,0 +1,28 @@
+{ config, ... }:
+let
+  domain = "home.rpqt.fr";
+  subdomain = "images.${domain}";
+in
+{
+  services.immich = {
+    enable = true;
+    settings = {
+      server.externalDomain = "https://${subdomain}";
+    };
+  };
+
+  services.nginx.virtualHosts.${subdomain} = {
+    forceSSL = true;
+    useACMEHost = "${domain}";
+    locations."/" = {
+      proxyPass = "http://${toString config.services.immich.host}:${toString config.services.immich.port}";
+      proxyWebsockets = true;
+      extraConfig = ''
+        client_max_body_size 50000M;
+        proxy_read_timeout 600s;
+        proxy_send_timeout 600s;
+        send_timeout 600s;
+      '';
+    };
+  };
+}

hosts/genepi/persistence.nix

@@ -6,6 +6,7 @@
       "/var/lib/nixos"
       "/var/lib/acme"
       "/var/lib/prometheus2"
+      "/var/lib/immich"
     ];
     files = [
       # so that systemd doesn't think each boot is the first