feat: run immich

hosts/profiles/immich/default.nix

@@ -1,4 +1,4 @@
-{ ... }:
+{ pkgs, config, ... }:
 {
   services.immich = {
     enable = true;
@@ -7,16 +7,23 @@
     };
     host = "0.0.0.0";
     port = 8567;
-    mediaLocation = "/data/photos";
-    externalDomain = "https://photos.sealight.xyz";
+    mediaLocation = "/mnt/two/photos";
+    openFirewall = true;
+    settings.server.externalDomain = "https://photos.sealight.xyz";
   };
   services.nginx.virtualHosts."photos.mossnet.lan" = {
     enableACME = false;
     forceSSL = false;
 
     locations."/" = {
+      proxyPass = "http://127.0.0.1:${toString config.services.immich.port}";
+      proxyWebsockets = true;
+      recommendedProxySettings = true;
       extraConfig = ''
-        proxy_pass http://127.0.0.1:8567/;
+        client_max_body_size 50000M;
+        proxy_read_timeout   600s;
+        proxy_send_timeout   600s;
+        send_timeout         600s;
       '';
     };
   };