Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by redrove | Hacker News Reader

Parent Full thread

redrove·

For me personally Immich is a non-starter because its not end-to-end encrypted.

View on HN

It runs on your own hardware. There is nobody else who has access to unencrypted data.

Storage vps are cheap. Why would I have to run it in my own house?

Why would you need it to be end to end encrypted anyway? You’re running it. Set it to only upload photos when you’re on your home network and you’re fine. Or fork it and make a PR and make it e2e encrypted.

You can’t just “fork it and make a PR and make it e2e encrypted”. All the features run serverside, e2ee is fundamentally impossible because of its design, of which you seem to know fuck all.

I’m being dismissed by I run a rather large homelab and I still want my photos iCloud like, where end devices decrypt and run ML. Immich is a Google Photos clone where you give it everything and some server does all the magic.

What are you talking about. It’s literally open source. Here’s the server code https://github.com/immich-app/immich/tree/main/server You run the server. You can make the entire thing e2e encrypted if you want.

You could even set it up so that it could only backup over tailscale or wireguard through a tunneled connection so ALL of your traffic is e2e.

Hm, you can just run it on an encrypted volume. And put an ngnix in front of it to handle https. There you go end to end encrypted.

Reply on news.ycombinator.com