Hacker News Reader

Great write-up. I have been tinkering with Immich over the last few months and go back and forth whether I want to just limit it to Tailscale for use away from home or if I want to go through the trouble of setting up a reverse proxy on a VPS. I think my biggest concern is finding a relatively user-friendly monitoring/security solution to alert me if anybody is trying some sort of attack against the VPS

View on HN

I've learned to live with having WireGuard/Tailscale on all the time on my own devices. But for giving (extended) family & friends access to shared albums with Immich, it's too impractical to configure and explain widely. I've been using a Cloudflare Tunnel for this situation with their "Zero Trust" email-based authentication. It probably won't work with the Immich mobile app though, since I doubt that client can handle Cloudflare's interstitial login screen.

You can setup Google oauth authentication on Cloudflare zero trust and pass that right through to Immich’s support for Oauth for a pretty seamless experience

that's a great concern as I'm in the same boat. What have you find with regards to the monitoring/security solution?

Reply on news.ycombinator.com