image: repository: tccr.io/truecharts/immich-server tag: 1.38.2_60@sha256:d1a67c3bd732f8b3fbf6f334b17d053f867ada27cbcbf2e55647dd782abf86e8 pullPolicy: IfNotPresent mlImage: repository: tccr.io/truecharts/immich-ml tag: 1.38.0_60@sha256:ec42d2184f35397d0eabbf2e19fa0de29787740f38946acc39217c4fc121ef30 pullPolicy: IfNotPresent webImage: repository: tccr.io/truecharts/immich-web tag: 1.38.2_60@sha256:469394e82b81c72a5804f85815f1255083c477dce732002812c99552946705d2 pullPolicy: IfNotPresent proxyImage: repository: tccr.io/truecharts/immich-proxy tag: 1.29.5_44@sha256:a4c24a70cc1e1bbbdecc3df371af08528430846709ef22ca16e2a923aa8da509 pullPolicy: IfNotPresent command: - /bin/sh - -c - chmod +x ./start-server.sh && ./start-server.sh securityContext: readOnlyRootFilesystem: false runAsNonRoot: false podSecurityContext: runAsUser: 0 runAsGroup: 0 immich: enable_ml: true public_login_page_message: Immich disable_reverse_geocoding: false reverse_geocoding_precision: 3 # simple | verbose log_level: simple mapbox_enable: false mapbox_key: "" envFrom: - configMapRef: name: '{{ include "tc.common.names.fullname" . }}-server-config' - configMapRef: name: '{{ include "tc.common.names.fullname" . }}-common-config' - secretRef: name: '{{ include "tc.common.names.fullname" . }}-immich-secret' probes: liveness: path: /server-info/ping type: HTTP port: 3001 readiness: path: /server-info/ping type: HTTP port: 3001 startup: path: /server-info/ping type: HTTP port: 3001 # Due to https://github.com/immich-app/immich/issues/726 hostAliases: - ip: 127.0.0.1 hostnames: - immich-web - immich-server - immich-machine-learning service: main: ports: main: port: 10323 protocol: HTTP persistence: uploads: enabled: true mountPath: /usr/src/app/upload proxy-conf: enabled: true noMount: true type: custom mountPath: /etc/nginx/ volumeSpec: configMap: name: '{{ include "tc.common.names.fullname" . }}-proxy-config' items: - key: nginx.conf path: nginx.conf postgresql: enabled: true existingSecret: dbcreds postgresqlUsername: immich postgresqlDatabase: immich redis: enabled: true existingSecret: rediscreds portal: enabled: true