Ruben Hensen
60ff978b1b
immich: stop the server for the database migration
...
The database moves from PostgreSQL 14 with pgvecto.rs to a new PostgreSQL 17 cluster with VectorChord. Immich 3 no longer supports pgvecto.rs, and PostgreSQL 14 reaches end of life on 2026-11-12.
2026-10-24 00:18:28 +02:00
Ruben Hensen
1f04831a97
Replace the Ingresses with Certificate resources
...
ingress-nginx is gone and every app is served by the Envoy Gateway. The certificates were created by cert-manager's ingress-shim and are owned by the Ingresses, so each app now declares its Certificate itself, with the same name, secret and usages, so nothing gets reissued. gateway-shim can't take over because the certificates live in the app namespaces.
immich drops mbg.hensen.io, which has no route, so that one certificate is reissued through the Gateway's HTTP-01 solver.
Also removes the Longhorn test-port redirect URI and updates comments that still described nginx.
2026-10-23 21:20:25 +02:00
Ruben Hensen
69a0661d09
Add HTTPRoutes for the apps behind ingress-nginx
...
Each app gets an HTTPS listener on the Gateway with its existing certificate, an HTTPRoute, and a ReferenceGrant for that certificate. The routes drop Envoy's 15s request timeout, as nginx has no overall limit either. Argo CD and Longhorn follow separately; the Ingresses stay until the switch-over.
2026-10-23 17:39:04 +02:00
Ruben Hensen
7820b8e0bf
immich: use a CA bundle without the compromised eMudhra roots
...
Mount patched-ca-bundle (see ca-bundle/) over /etc/ssl/certs so it stops trusting the compromised eMudhra intermediates (https://emudhra.we-have-a-problem.com ). The server gets --use-openssl-ca for Node, machine-learning points requests at the bundle instead of certifi.
2026-10-22 09:13:02 +02:00
Ruben Hensen
faaf6b6729
Remove most hensen.io refs and move from stalwart.rubenhensen.nl to mail.rubenhensen.nl
2026-04-06 18:09:24 +02:00
Ruben Hensen
507c42cf7f
Immich: Remove mbg.hensen.io
2026-01-25 16:36:03 +01:00
Ruben Hensen
3e4c98842b
Add identifier svc to ingress
2026-01-21 18:20:09 +01:00
Ruben Hensen
24595a4338
Upgrade to chart 0.10.3
2026-01-21 18:16:25 +01:00
Ruben Hensen
5659c4883b
update to v2.4.1
2026-01-21 17:41:31 +01:00
Ruben Hensen
002b5da24c
Let mbg.hensen.io bypass sol_auth
2026-01-21 17:36:21 +01:00
Ruben Hensen
153534a3bc
Upgrade immich to 1.132.3
2026-01-21 17:28:40 +01:00
Ruben Hensen
0ad4f24b91
Upgrade immich to 1.132.2
2026-01-21 17:27:04 +01:00
Ruben Hensen
a55366a6c1
Change helm-immich
2026-01-21 17:20:18 +01:00
Ruben Hensen
20d1e31115
Reset to chart 0.8.5 with CNPG and pgvecto.rs 0.2.1
2026-01-21 16:55:03 +01:00
Ruben Hensen
5fbab618ab
Change to v1.132.3
2026-01-21 16:46:48 +01:00
Ruben Hensen
146ab7734d
Change path service
2026-01-21 16:42:54 +01:00
Ruben Hensen
9f63508c4e
Change values.yaml to v2.0.0
2026-01-21 16:39:08 +01:00
Ruben Hensen
7d7b90722f
Change values.yaml to v2.0.0
2026-01-21 16:31:42 +01:00
Ruben Hensen
0ebea7d328
Change values.yaml to 1.136.0
2026-01-21 16:28:07 +01:00
Ruben Hensen
3640cb2042
Change values.yaml to 1.136.0
2026-01-21 16:27:01 +01:00
Ruben Hensen
11e353df5c
Change values.yaml immich
2026-01-21 16:18:44 +01:00
Ruben Hensen
e0058c1415
Edit helm immich values
2026-01-21 16:05:18 +01:00
Ruben Hensen
aa2087ecd2
Go back to 125.7
2026-01-21 15:47:36 +01:00
Ruben Hensen
9d3c81de67
Fix duplicate PVC mount - disable data volume, use only library at /usr/src/app/upload
2026-01-21 15:44:04 +01:00
Ruben Hensen
de8af9f3b9
Add library persistence to server and ML components at /usr/src/app/upload
2026-01-21 02:12:55 +01:00
Ruben Hensen
c67dc4bb57
Mount library at /usr/src/app/upload for v1.125.7 compatibility
2026-01-21 02:09:06 +01:00
Ruben Hensen
e555135d68
Set IMMICH_MEDIA_LOCATION for new chart
2026-01-21 02:05:10 +01:00
Ruben Hensen
88c7cc919f
Go back to 125
2026-01-21 01:56:29 +01:00
Ruben Hensen
2c02e84dc7
Go back to 127
2026-01-21 01:55:24 +01:00
Ruben Hensen
960456df5f
Step 1: Upgrade to v1.132.3 for TypeORM migration
2026-01-21 01:29:31 +01:00
Ruben Hensen
247e4b3bdd
Use pgvecto.rs v0.3.0 for Immich compatibility
2026-01-21 01:19:58 +01:00
Ruben Hensen
d4257e0841
Update chart and add valkey, config new cnpg
2026-01-21 01:14:12 +01:00
Ruben Hensen
ba033480a7
Use pg 14 image
2026-01-21 00:22:00 +01:00
Ruben Hensen
7535bd2be2
Use CNPG-compatible pgvecto.rs image
2026-01-21 00:21:08 +01:00
Ruben Hensen
a94983f816
Add cnpg to immich
2026-01-21 00:16:07 +01:00
Ruben Hensen
70a83ed860
Revert "Update helm chart to 0.9.3"
...
This reverts commit f7ed49a408
2026-01-20 23:25:43 +01:00
Ruben Hensen
3dd10cb650
Revert "Set global.security.allowInsecureImages to true"
...
This reverts commit 8718575a2c
2026-01-20 23:23:52 +01:00
Ruben Hensen
8718575a2c
Set global.security.allowInsecureImages to true
2026-01-20 22:55:03 +01:00
Ruben Hensen
f7ed49a408
Update helm chart to 0.9.3
2026-01-20 22:52:59 +01:00
Ruben Hensen
35cfe984dc
Add 'longhorn' to all storage things for CSI snaps
2026-01-20 22:48:15 +01:00
Ruben Hensen
6f75c24b8c
Set Redis image repository in helm-immich.yaml
2025-10-21 10:16:02 +02:00
Ruben Hensen
92443bbae1
Add mbg.hensen.io back
2025-02-10 15:04:59 +01:00
Ruben Hensen
070f30769a
Update immich
2025-02-03 18:18:11 +01:00
Ruben Hensen
c270f405d1
Update helm-immich.yaml
2025-01-18 12:07:25 +01:00
Ruben Hensen
0c982e5fb6
Immich: update to v1.223.0
2024-12-18 15:54:10 +01:00
Ruben Hensen
893e9bfa9d
Immich: revert rewrite trash, archive, user-settings and utilities
2024-12-17 15:25:23 +01:00
Ruben Hensen
b2429ac5f4
Immich: rewrite trash, archive, user-settings and utilities
2024-12-17 15:18:21 +01:00
Ruben Hensen
036f17ed3c
Immich: rewrite /photos to /sharing 10
2024-12-17 15:16:00 +01:00
Ruben Hensen
16a051eb81
Immich: rewrite /photos to /sharing 9
2024-12-17 15:14:59 +01:00
Ruben Hensen
b3553fead4
Immich: rewrite /photos to /sharing 8
2024-12-17 15:12:43 +01:00
Ruben Hensen