LetsEncrypt Support with docker-compose.yml?

Hi all, I am trying to setup Immich on my bare-metal server running Almalinix. I have got docker, docker compose et all setup and it has started the immich engines. What I am not able to figure out is: how to modify docker compose yaml to generate a new ssl cert and setup on mydomain.com I have currently used the standard docker-compose.yml and populated values in .env Any help please? thanks in advance
9 Replies
bo0tzz
bo0tzz2y ago
You should set up your own reverse proxy with certificates and point that at Immich
dwnewyork
dwnewyorkOP2y ago
oh i see. so by default, immich-web is not running nginx?
bo0tzz
bo0tzz2y ago
immich-proxy runs nginx, but you're not really meant to edit that
bo0tzz
bo0tzz2y ago
Reverse Proxy | Immich
When deploying Immich it is important to understand that a reverse proxy is required in front of the server and web container. The reverse proxy acts as an intermediary between the user and container, forwarding requests to the correct container based on the URL path.
dwnewyork
dwnewyorkOP2y ago
Gotcha. So, essentially I could setup caddy (as its able to handle ssl from LE natively) and proxy that info to immich-proxy, correct?
bo0tzz
bo0tzz2y ago
yes
dwnewyork
dwnewyorkOP2y ago
I am not very familiar with Docker-compose (still learning), but, would it make sense to deploy caddy via same or it should be separate?
bo0tzz
bo0tzz2y ago
Up to you, if you're running multiple different things behind caddy you might want it separate, running it in the same compose is a bit easier for the network setup
dwnewyork
dwnewyorkOP2y ago
as of this moment, I don't run anything else on this env... But, of course, it may change in future. I think Ill setup caddy separately then Ok... I am running into some other issues with caddy now... CaddyFile: immich-fr.mydomain.com { handle { reverse_proxy localhost:3000 } } Its returning 502 I think it should be port 2283 the admin page opens now on https

Did you find this page helpful?