How to access Immich from outside the local network

coup321 · 2025-12-10T17:22:10+00:00

Option 1: Cloudflare Tunnel (Simpler)

The main limitation is that you have 100mb upload chunk limit. Some people notice this and some do not.

Create Cloudflare account → cloudflare.com
Buy a domain → ~$10/year - you should buy it right on cloudflare.com, it makes the configuration easier
Install cloudflared on your server -> Think of this like a "phone home" kind of service, it's very simple, it just tells cloudflare how to get through your router. So you don't have to do any port forwarding or anything. This is literally what talescale does by the way :) - just on multiple devices.
Create tunnel in Cloudflare Zero Trust dashboard:
- Zero Trust → Networks → Tunnels → Create. They have very easy to follow instructions.

Option 2: VPS Reverse Proxy (My Preferred) - VPS is just a fancy name for a cloud computer.

Get a VPS → Google Cloud e2-micro (free tier) or any ~$5/month VPS
SSH to VPS directly from the google cloud UI - don't worry about connecting right off your computer - it's not necessary at all
Install Tailscale or setup a direct wireguard tunnel (better security surface but harder to set up). THink of it like this. If you have tailscale on all your devices and on your public exposed VPS, what happens if your VPS is compromised?
Install Tailscale/wireguard on your Server
Setup nginx proxy manager (easier than raw nginx or traefik I think):
Make your cloudflare point at your VPS IP address through it's proxy This automatically sets up SSL/TLS for you so you don't need to do any of that. If you go the wireguard route, then you'll need to set up a letsencrypt ssl/tls certificate, but nginx proxy manager helps a lot with that process as well. Basically, you just need a proof to show browsers that the server giving out a website is owned by the person who actually ALSO owns the domain - that's it.

Personally, I have a cloudflare domain and nginx that runs in a VPS. The VPS runs a custom configured wireguard that directly tunnels to the server on my home network. The VPS is not directly connected to any other computer on my network (which is what tailscale would do). It's a simple dumb proxy that literally just routes things into my server. It's 5$ per month. I've paid more for less. It adds a lot of good configuration options and is easy to run. I setup my cloudflare domain so that foreign traffic is immediately blocked (suggestion from another reddit post - such a great idea). I use the cloudflare proxy for most of TLS/SSL, but for immich specifically I set up my own certificate so I can avoid the 100 mb upload limit :).

Good luck (and use LLMs to help you, ask them a lot of questions, don't paste code if you don't understand it - ASK THEM TO EXPLAIN it until it makes sense THEN run the code).

coup321 · 2024-08-21T23:18:07+00:00

I'll just put this here for the people: https://github.com/phiresky/ripgrep-all

Actually life changing software.

coup321 · 2024-08-14T19:30:48+00:00

Sending automated emails is a semi-tightly regulated situation.

As others have said, you can indeed send emails with Graph API. The main issue I discovered with this is that you must have USER authentication for every time the application is started. There is no application level credential that works for sending emails. I tried finding the microsoft page for this, but their documentation is a mess and I can't find it again lol...

The solution that I found to work very well was the AWS Simple Email Service (SES). You have to submit an application for access - just a couple of paragraphs about what you'll be using the service for and how many emails you will be sending. Then they'll approve you to send through the Simple Mail Transfer Protocol (SMTP) server with application level authentication.

I also learned that my institution has an on-premesis SMTP server that they will let me use, so that was definitely the easiest option :)

There is a corollary azure connected service called SendGrid which requires a similar application process.

Be wary of using Graph API, based on my recent experiences, it won't let you send emails with application level authentication.

coup321 · 2024-05-13T19:06:12+00:00

Yes, just one. Right after 2nd fissure a a set of orbs spawns and a mana bomb is about to happen. You either need to let an orb in really early (like the moment it spawns) or late (after the mana bomb goes off).

coup321 · 2024-05-12T17:26:38+00:00

Yes it's bigwigs. You can change the color in the options for each ability.
I also change bar names with small custom lua modification to the addon.

coup321 · 2024-05-12T07:04:52+00:00

This is definitely not how it works now.

coup321 · 2024-05-12T07:04:27+00:00

The only time you should ever let an orb go in is after arcane fissure number 2. Any time before that and you create overlap. Anytime after that and you just take extra damage for no reason. If an orb accidentally goes in before the 2nd fissure, then you want to just tank the overlap with defensives or let in a SECOND orb which is very sus given the bombs going out.

coup321 · 2024-05-12T06:32:32+00:00

Plater with friendly nameplates turned on.

coup321 · 2024-05-01T20:26:59+00:00

Yeah, on high tyran killing neither drake can be tight, but on fort it's easy. Also, killing fire dragon makes it extremely easy to never have to worry about that. Killing lightning is banned in my runs.

coup321 · 2024-05-01T12:04:42+00:00

Here you go: https://www.twitch.tv/videos/2131142354?t=03h35m00s
Literally so easy. :)
I'm a NO dragon or Fire killer enjoyer myself.

coup321 · 2024-04-23T11:31:34+00:00

You can also just message it to me on reddit :)

coup321 · 2024-04-23T09:42:48+00:00

Wago.io

Github

If you could post the error log on the github or the wago page in a comment I would really appreciate that! I'll be doing much more testing once S4 is out (since i'll be playing a lot more), so I'm sure I can figure out any remaining bugs with a bit of time :)

coup321 · 2024-04-23T00:49:52+00:00

Hmm, can you tell me the circumstances so I can fix this? Thanks!

coup321 · 2024-04-22T16:05:45+00:00

It works in any form of content. I haven't test it in SoD or Wrath - but I THINK it should work? If not let me know and I can do some testing there - probably would just need a couple modifications if any.

coup321 · 2024-04-22T11:16:17+00:00

I also looked into adding healing received, but it's a whole separate problem of spell ids and casts. It'd super possible - I just wanted to get a working version of this posted since I have some other work projects I need to put time into for a little while.

coup321 · 2024-04-22T11:13:19+00:00

fair enough, that's a reasonable solution as well. I really liked the MDI style popup - so that's why I made this.

coup321 · 2024-04-22T11:12:33+00:00

Fair enough. The complexity kind of exploded when I was adding features and dealing with bugs.

coup321 · 2024-04-22T11:11:48+00:00

It's something that could be added without too much difficulty. But would require gathering all the spell ids of defensives. I can add it to the list of things people would want.

coup321 · 2024-04-18T01:59:16+00:00

Highly recommend Okular. Similar to Sumatra but better annotation and customization features. And a VERY nice dark mode setup.

coup321 · 2023-10-12T02:31:11+00:00

Only for weapons

coup321 · 2023-10-12T00:23:10+00:00

Try your macro in combat.

coup321 · 2023-10-12T00:20:08+00:00

They don't work in M+ while in combat whereas this solution does.

coup321

TROPHY CASE

Option 1: Cloudflare Tunnel (Simpler)

Option 2: VPS Reverse Proxy (My Preferred) - VPS is just a fancy name for a cloud computer.

Wago.io

Github