Immich

services:
  immich-server:
    image: ghcr.io/immich-app/immich-server:v1.119.0@sha256:24df1172544370826349159692d177ba22ca773c81857d36996a254c08422b95
    restart: unless-stopped
    depends_on:
      - immich-redis
      - immich-postgres
    environment:
      DB_HOSTNAME: immich-postgres
      DB_USERNAME: postgres
      DB_PASSWORD: ${DB_PASSWORD}
      DB_DATABASE_NAME: immich
      REDIS_HOSTNAME: immich-redis
    volumes:
      - ${UPLOAD_LOCATION}:/usr/src/app/upload
      - /etc/localtime:/etc/localtime:ro
    healthcheck:
      test:
        - CMD
        - /bin/sh
        - -c
        - curl -fSs http://127.0.0.1:2283/api/server-info/ping
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 20s
  immich-machine-learning:
    image: ghcr.io/immich-app/immich-machine-learning:v1.119.0@sha256:fa558ae8752eae335c5bfafeb5716dc60d0882f026350adb45e18ab28fbd36ae
    restart: unless-stopped
    volumes:
      - model-cache:/cache
  immich-redis:
    image: docker.io/redis:6.2-alpine@sha256:eaba718fecd1196d88533de7ba49bf903ad33664a92debb24660a922ecd9cac8
    restart: unless-stopped
    healthcheck:
      test: redis-cli ping || exit 1
      interval: 30s
      timeout: 5s
      retries: 3
  immich-postgres:
    image: docker.io/tensorchord/pgvecto-rs:pg14-v0.2.0@sha256:90724186f0a3517cf6914295b5ab410db9ce23190a2d9d0b9dd6463e3fa298f0
    restart: unless-stopped
    environment:
      POSTGRES_PASSWORD: ${DB_PASSWORD}
      POSTGRES_USER: postgres
      POSTGRES_DB: immich
      POSTGRES_INITDB_ARGS: --data-checksums
    volumes:
      - ${DB_DATA_LOCATION}:/var/lib/postgresql/data
    healthcheck:
      test:
        - CMD-SHELL
        - pg_isready --dbname="$${POSTGRES_DB}" --username="$${POSTGRES_USER}" || exit 1; Chksum="$$(psql --dbname="$${POSTGRES_DB}" --username="$${POSTGRES_USER}" --tuples-only --no-align --command='SELECT COALESCE(SUM(checksum_failures), 0) FROM pg_stat_database')"; echo "checksum failure count is $$Chksum"; [ "$$Chksum" = '0' ] || exit 1
      interval: 5m
      timeout: 10s
      retries: 5
      start_period: 5m
volumes:
  model-cache: {}

# Caddyfile for Immich
# Replace immich.example.com with your real domain. Caddy issues TLS automatically.

immich.example.com {
	encode zstd gzip
	reverse_proxy immich-server:2283
}

# Traefik labels for Immich
# Merge into the immich-server service in docker-compose.yml.
# Assumes an external Traefik network named "proxy" and a
# certresolver named "letsencrypt". Replace immich.example.com.

services:
  immich-server:
    labels:
      traefik.enable: "true"
      traefik.http.routers.immich-postgres.rule: Host(`immich.example.com`)
      traefik.http.routers.immich-postgres.entrypoints: websecure
      traefik.http.routers.immich-postgres.tls: "true"
      traefik.http.routers.immich-postgres.tls.certresolver: letsencrypt
      traefik.http.services.immich-postgres.loadbalancer.server.port: "2283"
    networks:
      - proxy
      - default
networks:
  proxy:
    external: true