From d08ec4f7942c6c76a4784a389affb3a926dadfa5 Mon Sep 17 00:00:00 2001
From: Annika Merris <annika@adhdgirl.dev>
Date: Tue, 3 Feb 2026 14:00:42 +0000
Subject: [PATCH] Added Immich

---
 .../roles/caddy/templates/Caddyfile.j2        |  3 +
 .../roles/immich/files/docker-compose.yaml    | 77 +++++++++++++++++++
 .../minilab/roles/immich/tasks/main.yaml      | 46 +++++++++++
 .../roles/immich/templates/immich.env.j2      | 22 ++++++
 .../minilab/roles/immich/vars/main.yaml       | 10 +++
 minilab.yaml                                  |  1 +
 6 files changed, 159 insertions(+)
 create mode 100644 collections/ansible_collections/adhdgirl/minilab/roles/immich/files/docker-compose.yaml
 create mode 100644 collections/ansible_collections/adhdgirl/minilab/roles/immich/tasks/main.yaml
 create mode 100644 collections/ansible_collections/adhdgirl/minilab/roles/immich/templates/immich.env.j2
 create mode 100644 collections/ansible_collections/adhdgirl/minilab/roles/immich/vars/main.yaml

diff --git a/collections/ansible_collections/adhdgirl/minilab/roles/caddy/templates/Caddyfile.j2 b/collections/ansible_collections/adhdgirl/minilab/roles/caddy/templates/Caddyfile.j2
index 098387a..cf6e220 100644
--- a/collections/ansible_collections/adhdgirl/minilab/roles/caddy/templates/Caddyfile.j2
+++ b/collections/ansible_collections/adhdgirl/minilab/roles/caddy/templates/Caddyfile.j2
@@ -73,3 +73,6 @@ frigate.local.cobb.lgbt {
         }
     }
 }
+immich.local.cobb.lgbt {
+    reverse_proxy 10.69.2.52:2283
+}
diff --git a/collections/ansible_collections/adhdgirl/minilab/roles/immich/files/docker-compose.yaml b/collections/ansible_collections/adhdgirl/minilab/roles/immich/files/docker-compose.yaml
new file mode 100644
index 0000000..8215d22
--- /dev/null
+++ b/collections/ansible_collections/adhdgirl/minilab/roles/immich/files/docker-compose.yaml
@@ -0,0 +1,77 @@
+---
+#
+# WARNING: To install Immich, follow our guide: https://docs.immich.app/install/docker-compose
+#
+# Make sure to use the docker-compose.yml of the current release:
+#
+# https://github.com/immich-app/immich/releases/latest/download/docker-compose.yml
+#
+# The compose file on main may not be compatible with the latest release.
+
+name: immich
+
+services:
+  immich-server:
+    container_name: immich_server
+    image: ghcr.io/immich-app/immich-server:${IMMICH_VERSION:-release}
+    # extends:
+    #   file: hwaccel.transcoding.yml
+    #   service: cpu # set to one of [nvenc, quicksync, rkmpp, vaapi, vaapi-wsl] for accelerated transcoding
+    volumes:
+      # Do not edit the next line. If you want to change the media storage location on your system, edit the value of UPLOAD_LOCATION in the .env file
+      - ${UPLOAD_LOCATION}:/data
+      - /etc/localtime:/etc/localtime:ro
+    env_file:
+      - .env
+    ports:
+      - "2283:2283"
+    depends_on:
+      - redis
+      - database
+    restart: always
+    healthcheck:
+      disable: false
+
+  immich-machine-learning:
+    container_name: immich_machine_learning
+    # For hardware acceleration, add one of -[armnn, cuda, rocm, openvino, rknn] to the image tag.
+    # Example tag: ${IMMICH_VERSION:-release}-cuda
+    image: ghcr.io/immich-app/immich-machine-learning:${IMMICH_VERSION:-release}
+    # extends: # uncomment this section for hardware acceleration - see https://docs.immich.app/features/ml-hardware-acceleration
+    #   file: hwaccel.ml.yml
+    #   service: cpu # set to one of [armnn, cuda, rocm, openvino, openvino-wsl, rknn] for accelerated inference - use the `-wsl` version for WSL2 where applicable
+    volumes:
+      - model-cache:/cache
+    env_file:
+      - .env
+    restart: always
+    healthcheck:
+      disable: false
+
+  redis:
+    container_name: immich_redis
+    image: docker.io/valkey/valkey:9@sha256:546304417feac0874c3dd576e0952c6bb8f06bb4093ea0c9ca303c73cf458f63
+    healthcheck:
+      test: redis-cli ping || exit 1
+    restart: always
+
+  database:
+    container_name: immich_postgres
+    image: ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0@sha256:bcf63357191b76a916ae5eb93464d65c07511da41e3bf7a8416db519b40b1c23
+    environment:
+      POSTGRES_PASSWORD: ${DB_PASSWORD}
+      POSTGRES_USER: ${DB_USERNAME}
+      POSTGRES_DB: ${DB_DATABASE_NAME}
+      POSTGRES_INITDB_ARGS: "--data-checksums"
+      # Uncomment the DB_STORAGE_TYPE: 'HDD' var if your database isn't stored on SSDs
+      # DB_STORAGE_TYPE: 'HDD'
+    volumes:
+      # Do not edit the next line. If you want to change the database storage location on your system, edit the value of DB_DATA_LOCATION in the .env file
+      - ${DB_DATA_LOCATION}:/var/lib/postgresql/data
+    shm_size: 128mb
+    restart: always
+    healthcheck:
+      disable: false
+
+volumes:
+  model-cache:
diff --git a/collections/ansible_collections/adhdgirl/minilab/roles/immich/tasks/main.yaml b/collections/ansible_collections/adhdgirl/minilab/roles/immich/tasks/main.yaml
new file mode 100644
index 0000000..bbe59cd
--- /dev/null
+++ b/collections/ansible_collections/adhdgirl/minilab/roles/immich/tasks/main.yaml
@@ -0,0 +1,46 @@
+---
+- name: Load distro-specific variables
+  ansible.builtin.include_vars: '{{ item }}'
+  tags: always
+  with_first_found:
+    - files:
+        - "{{ ansible_facts['distribution'] }}.yaml"
+      skip: true
+
+- name: Ensure immich is running on this device
+  block:
+    - name: Ensure presense of folders for immich
+      tags: packages,docker,immich
+      ansible.builtin.file:
+        path: /opt/immich/postgres
+        state: directory
+        recurse: true
+        owner: 1000
+        group: 1000
+        mode: "0755"
+    - name: Ensure compose files are properly loaded on the server
+      tags: packages,docker,immich
+      ansible.builtin.copy:
+        src: docker-compose.yaml
+        dest: /opt/immich/docker-compose.yaml
+        owner: 1000
+        group: 1000
+        mode: "0644"
+    - name: Ensure environment files are properly loaded on the server
+      tags: docker,immich
+      ansible.builtin.template:
+        src: immich.env.j2
+        dest: /opt/immich/.env
+        owner: 1000
+        group: 1000
+        mode: "0644"
+    - name: Ensure docker containers are pulled and running
+      tags: packages,docker,immich
+      community.docker.docker_compose_v2:
+        project_src: /opt/immich
+        pull: policy
+
+  rescue:
+    - name: Set that this task failed
+      ansible.builtin.set_fact:
+        task_failed: true
diff --git a/collections/ansible_collections/adhdgirl/minilab/roles/immich/templates/immich.env.j2 b/collections/ansible_collections/adhdgirl/minilab/roles/immich/templates/immich.env.j2
new file mode 100644
index 0000000..94796ea
--- /dev/null
+++ b/collections/ansible_collections/adhdgirl/minilab/roles/immich/templates/immich.env.j2
@@ -0,0 +1,22 @@
+# You can find documentation for all the supported env variables at https://docs.immich.app/install/environment-variables
+
+# The location where your uploaded files are stored
+UPLOAD_LOCATION=/mnt/storage/immich/data
+
+# The location where your database files are stored. Network shares are not supported for the database
+DB_DATA_LOCATION=./postgres
+
+# To set a timezone, uncomment the next line and change Etc/UTC to a TZ identifier from this list: https://en.wikipedia.org/wiki/List_of_tz_database_time_zones#List
+# TZ=America/New_York
+
+# The Immich version to use. You can pin this to a specific version like "v2.1.0"
+IMMICH_VERSION={{ immich_image_tag }}
+
+# Connection secret for postgres. You should change it to a random password
+# Please use only the characters `A-Za-z0-9`, without special characters or spaces
+DB_PASSWORD={{ immich_db_password }}
+
+# The values below this line do not need to be changed
+###################################################################################
+DB_USERNAME=postgres
+DB_DATABASE_NAME=immich
diff --git a/collections/ansible_collections/adhdgirl/minilab/roles/immich/vars/main.yaml b/collections/ansible_collections/adhdgirl/minilab/roles/immich/vars/main.yaml
new file mode 100644
index 0000000..8ea96dc
--- /dev/null
+++ b/collections/ansible_collections/adhdgirl/minilab/roles/immich/vars/main.yaml
@@ -0,0 +1,10 @@
+---
+immich_image_tag: v2.5.2
+immich_db_password: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          66303731303239323038303735393633353366613266663832373666626335366539636235626630
+          6465623539303363646339626338346364343038656632300a353862663739633139663465383534
+          35333762316163376363316630666237393536616364366631666664633438663736373363383630
+          3436363532646438630a636137643030303236366435306330376434613965356433643434376630
+          37393733303164383534643261326662313661613363303361373865633661386639303966306139
+          6232616434626662323031306466343437623635363664666134
diff --git a/minilab.yaml b/minilab.yaml
index 943b565..fb2c33a 100644
--- a/minilab.yaml
+++ b/minilab.yaml
@@ -58,6 +58,7 @@
     - adhdgirl.minilab.ntfy
     - adhdgirl.minilab.cloudflared
     - adhdgirl.minilab.termix
+    - adhdgirl.minilab.immich
 - name: Configure frigate
   hosts: curren
   tags: docker,frigate