Looking for an alternative to synology photos. I moved over to synology about 3 years ago and am now considering moving out of the synology ecosystem. I’m looking for something that has a decent android app, wifi syncing, shareable albums, all the standard stuff.

Edit: thanks for the many replies, I’ll likely move to nextcloud as I was planning on deploying that anyway as a synology drive replacement. I’ll look into immich as well.

  • Melco@lemmy.world
    link
    fedilink
    English
    arrow-up
    5
    arrow-down
    2
    ·
    1 year ago

    The Immich app does not support self signed ssl certs which is unfortunate for a self hosted app since many home users have ISP imposed restrictions which makes getting a cert from a commercial provider difficult or impossible.

    Most other selfhosted apps do not have this problem.

    • fraksken@infosec.pub
      link
      fedilink
      English
      arrow-up
      5
      ·
      1 year ago

      Like the peer comment mentioned. just drop nginx in front and let it so the TLS handoff. always recommend to put nginx in front of any open source docker project as you can finetune many of the security controls there.

      • Melco@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        2
        ·
        1 year ago

        This only works of you have open ports to obtain and renew the cert from the commercial provider, many self hosters do not have this option.

      • 486@kbin.social
        link
        fedilink
        arrow-up
        5
        ·
        1 year ago

        Getting certs from Let’s Encrypt should work fine with any provider, even if you can’t open any ports, since they do support DNS challenge.

      • Melco@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        2
        ·
        1 year ago

        To use lets encrypt or any other acme client you either need port 80 or 443 open. As I mentioned, this is not an option for many self hosters who have these poets closed by their ISPs.

        • limit@lemmy.worldOP
          link
          fedilink
          English
          arrow-up
          7
          ·
          1 year ago

          If you own a domain name you can use DNS challenge for obtaining the ssl cert, no need to open ports to get a cert issued. Nginx proxy manager has this feature built in and has support for many DNS name registrars.