Hacker News Reader

Yeah. I actually love Google Photos as a product. I just want Immich as a safety net in case Google ever feels like locking me out of my account on a random Tuesday.

I haven't really found a guide or discussions on how best to use Immich in this mirroring way. Admittedly, I haven't looked very hard. Setting up Immich is something that's been on my todo list for years now.

View on HN

You can use https://www.photosync-app.com/home if all you want is a local backup. It has a killer feature Immich is still missing: encryption at rest of the photos.

Just use LUKS, eCryptfs, or ZFS encryption. It’s not the application’s job to do encryption at rest, it’s the filesystem’s.

I personally find it nicer to unlock my phone to decrypt (Face ID) then dealing with having to auth with my headless server. Is there a way to manage this without putting the keys for LUKS or similar somewhere risky? Main threat is someone stealing the NAS during a break in.

You can store the key in the TPM. If someone steals the NAS, they can only decrypt it if they continue running the exact same software, which you harden (e.g. disable password login from the TTY).

Or you can SSH in and type the key once per reboot.

Just run both Google Photos and Immich on your phone. Open Immich once a week to sync all your recently taken photos.

Reply on news.ycombinator.com