chore(Immich): OAuth attempt

apps/media/immich/app/helm-release.yaml

@@ -25,7 +25,6 @@ spec:
             envFrom:
               - secretRef:
                   name: immich-secrets
-
       machine-learning:
         containers:
           main:
@@ -59,11 +58,18 @@ spec:
         globalMounts:
           - path: /usr/src/app/upload
             subPath: Immich
+      config:
+        enabled: true
+        type: secret
+        name: immich-config
+        globalMounts:
+          - path: /config.json
+            subPath: config
     ingress:
       main:
         enabled: true
         hosts:
-          - host: "immich.${PUBLIC_HOSTNAME}"
+          - host: "img.${PUBLIC_HOSTNAME}"
             paths:
               - path: /
                 pathType: Prefix

apps/media/immich/app/immich-config.sops.yaml

@@ -0,0 +1,26 @@
+apiVersion: v1
+data:
+    config: ENC[AES256_GCM,data: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,iv:g5qxGf+9xwEDBMctXniYhbxkXVcsTCVQFKVyUMKm2kY=,tag:1UZJxsbqUhVWIe/PjDxCng==,type:str]
+kind: Secret
+metadata:
+    name: immich-config
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1mt3e0vdhgcxtcqfv0jhfdeejkk8f48elacyua387nekmnfufsd4qhtwmqn
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3bCs4QThvS1N1UFlSWmpp
+            UStxc1pNeU5ETmlIZ1l2Yy9xRkdoSlJmWmpRCkJJd3Jpb0Q4ZFVjblBuMzRNNHJP
+            ckMrSnJBRE92UTgreFVmRHB5b3NhTlUKLS0tIEoxM2hNVEd1TDJGajhva3EyV05s
+            eEhOdmhJMFJlbW4zRnJwbUVDdHErYmcKH1yCdGdtSqerlYQN8NCNHSHyph+Mehww
+            IcIoRV4dMx+r3i2DZ43qsUnodb+u/GNQeU8UjskWANgQAUEcK2bTuA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-01-05T12:24:02Z"
+    mac: ENC[AES256_GCM,data:FFhF83bC9PjsQ+mWnaLlJYoPpZ8hLlZb48gUnD74DluOGKfg1a7XuO5rzIsF42UHaZp+Dbf5xgmEjZiANCTz4z3zFDOXWfWrCdhDAXc8qP/yrBWL+YkgspIOIwucOhH20JTCKjo/zOQodCI0vyvbS+SyYxY4/R73yNYXG+NALEE=,iv:IehL9hHXKlTTG5TkhAQdp1kLcRkfCxOFtRrVhaacKpo=,tag:eEmtHMlsrkibGwsdqVoWzA==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.9.3

apps/media/immich/app/immich-secrets.sops.yaml

@@ -5,13 +5,10 @@ data:
     DB_PASSWORD: ENC[AES256_GCM,data:xDhXtNi0wvitZ/cVXebRRhnMwQk=,iv:yiWdN6S8+XpZQDPMdcR3xm7fL2fkurWYsl3Kjk1WY+E=,tag:ntO/wfa4TmlDrDsKTNlA4A==,type:str]
     DB_DATABASE_NAME: ENC[AES256_GCM,data:MjGvNDbrOkY=,iv:SNXp1LbgmAvtevY4NZddESpNxBm/v8FqCpDRPgxXEsQ=,tag:rIuWPJEdGWE4YIF7qyZCYA==,type:str]
     REDIS_HOSTNAME: ENC[AES256_GCM,data:zLBMNMrTlGeMYGFT4pp6JMnAHgp57vPhcpwXh3y7ANSqvDNqfdpWwFnCdAYuy7yitRwXlh8eAiw=,iv:O58Xdn8xG5zMurjIwLKtgmW4PDy7bJgC2hQyBhW3V4Q=,tag:GRCMw6RQ4lat6bjVXDmAag==,type:str]
-    REDIS_PASSWORD: ENC[AES256_GCM,data:KxUtZOkAbAsoxF5+U5ZkGQ==,iv:TPbkEM76W1RRbxsOVTtTmivYjK4hNNeIVokuKDeCEPI=,tag:UxEB4aBSLwrvei92xVZy1w==,type:str]
-    TYPESENSE_ENABLED: ENC[AES256_GCM,data:yAYR8YzsviA=,iv:49g8VSDmD2vYbY5x25dzJ+oExuBqxYRDgGz3dPWVTCw=,tag:6b0Kl7vZtt1NEljQmfhvUA==,type:str]
-    TYPESENSE_HOST: ENC[AES256_GCM,data:T6j7zCkmWKuUsBkjc5km2YImpkv9VKoejD0ff8VYJuIe8RAoZZtL1oCvZjc=,iv:pXkBvjC+IfvmOTqydFA5Z3pIbjf0cCl7N1HKpKncjq8=,tag:tewKnSmx7LSihGxfxmZuOQ==,type:str]
-    TYPESENSE_API_KEY: ENC[AES256_GCM,data:jxpLB+uG1Gg=,iv:BlmOBr8t0sVw4XvP1f5Mp66AEOQ+pRcg9AMe+0MaRzE=,tag:WjQXqrSqOoD5sltlihHsyA==,type:str]
+    REDIS_PASSWORD: ENC[AES256_GCM,data:kfngPt/8IvXI7mXOKziwlA==,iv:JVIMvYl+1TCS9QhETt2QnWF7/0trbg4IEV/rIVaKX+4=,tag:7flG0xEyKjYGyb7PhL+hUg==,type:str]
+    IMMICH_CONFIG_FILE: ENC[AES256_GCM,data:u/SYYnTF3EGAjiuD4uMohg==,iv:jaXsIjk4jI9hw/WydX1AGYXRDZfhcKlLEzolY1EyRn8=,tag:qqtkW3vLYkwPjGUHl/8bNw==,type:str]
 kind: Secret
 metadata:
-    creationTimestamp: null
     name: immich-secrets
 sops:
     kms: []
@@ -28,8 +25,8 @@ sops:
             eEhOdmhJMFJlbW4zRnJwbUVDdHErYmcKH1yCdGdtSqerlYQN8NCNHSHyph+Mehww
             IcIoRV4dMx+r3i2DZ43qsUnodb+u/GNQeU8UjskWANgQAUEcK2bTuA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-02-02T15:03:17Z"
-    mac: ENC[AES256_GCM,data:3p4TUDNGBuTVp10BxsuIgbgpuFixw+dmPFUxdb3Nr8njSFGM3Yw0/KTRYdq95lFyF8A27zkEnvF5DffSL4qjqh9FyuIREMsHXszKdPiVy1Hnbk9PmWSR6+piCVc+uscxqzN4Ewh5qfkqZAmja6B0afnBA4uziKWW5isch3R59vc=,iv:/IcV9GuY5oFJhFh4uEsKxLxGbh4zOF4o9v2s3sh2mxo=,tag:Vntm0VTkOI/+4QBF5Bg4vA==,type:str]
+    lastmodified: "2025-01-05T11:58:51Z"
+    mac: ENC[AES256_GCM,data:cD7JNwrVTGBesZ1mgBoObOZEmE2kfmAmVUVWh30gVFpgukmiRwYMrxlluPofiG4H4QLEdrP4T/qo4CRdFUVSghg5yFbEq9zWt5ypFcXsd7cAvqmoDi1E5KSWKX4Ij3ARc2BuvCRiFncEZXgh4DpvlcvtYiHQGvXam/vufrvAyoc=,iv:Bx+TgoOVyZssD+Zs7fXCnL0YndSOt0Xm1rMUxERehUk=,tag:fP9d47fEk6WKJHt0VBp24A==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
-    version: 3.7.3
+    version: 3.9.3

apps/media/immich/app/kustomization.yaml

@@ -4,3 +4,4 @@ kind: Kustomization
 resources:
 - helm-release.yaml
 - immich-secrets.sops.yaml
+- immich-config.sops.yaml