

This was my thought as well. Anything by that requires VPN is added to that stack and if I can bind it to the “tun” device I do - but the container requires gluten to be up.


This was my thought as well. Anything by that requires VPN is added to that stack and if I can bind it to the “tun” device I do - but the container requires gluten to be up.
I picked one up on eBay earlier this year.
I thought HA stopped selling Yellows awhile back.
What distro is the toaster running?


Trash is a great place to start. There was another guy I found helpful, too. Dr Frankenstein, I think? Also, I can’t remember where I found the swag write-up I used for my current setup, but swag/dockerproxy are awesome. No open ports on the router, and automatic subdomain/SSL setup w/ Cloudlfare by adding 1 label to the compose file.
Only 2 notes I have about Trash guides are:
One thing I need to figure out is identifying shows that have hearing disabled tracks as their default/only. I’ve been watching Taskmaster, and lots of the episodes in more recent seasons have the descriptive voice-over that’s annoying to me since I don’t need it.


I want to say Dreams of Code (or his other channel Dreams of Autonomy?) did a video on VOS setup where he secured the connection between VPS and home. I think he used Tailscale. I’ll see if I can find the video.


It’s a throwaway address I use for online vendors. Most of those get an addy.io address nowadays, but Reddit still goes to the original address.
TL;DR: I’m aware, thanks.


AFAIK, it actually doesn’t require modification of the original file at all. It can be done with a metadata change in a sidecar file.


Yes you can do all of that, but it’s saved as a separate asset that is not related in any way to the original. That’s the issue. Also, it would be nice to be able to do these things in the web app as well.
As for syncing, if all your phones are logged into Immich as the same user, you wouldn’t have any issues syncing photos. I don’t thing Immich currently allows sharing assets between users. That can be troublesome for family albums.


I don’t think so. I think for any kind of editing, they’d need to implement some kind of asset versioning.


I think this highlights the difficulty with “basic” image editing. For example, with G Photos or Mac Photos, or others, you can edit, and the edited version is what you’ll see by default going forward, but the original is still there. This is why I highlighted rotation. That’s strictly a metadata change, AFAIK. Last thing I read on their site was they were hung up getting it to work properly with HEIF.


I believe Piwigo had the first feature you mention. Actually, there are quite a few things from Piwigo I’d love to see implemented in Immich. One that was pretty unique was designating an image as the back of another one, for scanned files. Niche, but really useful in those cases.


Very cool post. I didn’t mean to denigrate the dev team at all. They’ve done incredible work, and I’ve read some of the threads about rotation. They’re definitely aware of the issue, and they want to make sure it’s done right, which I appreciate. Also, it’s FOSS, so I don’t want to be negative about the outlook when its users already get so much more than they pay for!
Still, it’s such a thorn in my side!


From my testing today, you can only rotate a photo using the mobile app, and even then you have to save it locally and re-upload the rotated photo. Thus creating a separate, mostly duplicate photo! This is essentially a metadata orientation update, or it could be more. Immich seems to incorrectly orient a lot of photos that other applications have no problem with. The devs are aware of it and have been discussing this since at least 2022, possibly longer. There are also a number of feature/pull requests on the github page covering rotation, photo editing, cropping, etc. Personally, I don’t care about editing/cropping. I consider those edits which should result in a separate asset, possibly linked back to the original.
For me, this is probably the biggest missing feature for Immich. They’ve done some really amazing things in the past couple years, but this seemingly basic feature remains missing.


This was my immediate thought. An M1 Mac laptop is still a very useable laptop, and the battery life on them is fantastic.


T480s is my backup work laptop. Runs Linux fine (have had Ubuntu, currently Fedora 42). Runs windows 11 like shit, but then my primary P1 gen 4 also doesn’t run 11 much better, so…


While you’re generally right, the T-series is a solid business laptop. Only thing I would add is steer clear of anything with “Yoga” in the name. They can be sleek, but very few of those ever impressed me.


Thinkpad T, P, W, & X (Carbon) are generally pretty solid, though T & X probably better fit OP’s preference for portability. The T series is/was also user upgradable (memory and SSD), usually pretty easily. I think some of the carbon models were also upgradable, but can’t remember. Cruicial’s website is very helpful with this. If the laptop has “Idea” or “Yoga” in the name, it’s more than likely trash. There were some “higher end” Yoga models, but AFAIR none were upgradable.


This is the beauty of open source. If you wrote an app called “eeznuts” and mad it something everyone needed, eventually a sysadmin somewhere would get to explain that joke to a stiff EVP, and they’d both have a good chuckle about it.
So I got back to my server, and here’s what I do:
gluetun settings:
services: gluetun: *snip* ports: *snip* - 8090:8090 # port for qbittorrent *snip*qbittorrent (in the same compose.yml):
qbittorrent: image: linuxserver/qbittorrent:latest container_name: qbittorrent environment: *snip* - WEBUI_PORT=8090 *snip* network_mode: service:gluetun # run on the vpn network depends_on: gluetun: condition: service_healthy *snip*Also, in qbittorrent settings you can bind it to a network device. In my case it’s “tun0.” This same thing can probably be done w/ a docker network in a gluetun container and separate containers that rely on that network being up, but I haven’t looked into it. Right now, I have 2 other services that require VPN, and I’m looking at possibly 1 or 2 more. That’s pretty manageable as a single stack, I think.