nixos.server/modules/containers/immich/container.nix

{moduleWithSystem, ...}: {
  flake.nixosModules.containerImmich = moduleWithSystem ({pkgs, ...}: {config, ...}: {
    virtualisation.oci-containers.containers."immich_machine_learning" = {
      image = "ghcr.io/immich-app/immich-machine-learning:release";
      environment = {
        "DB_DATABASE_NAME" = "immich";
        "DB_DATA_LOCATION" = "./postgres";
        "DB_HOST" = "immich_postgres";
        "DB_PORT" = "5432";
        "DB_USERNAME" = "postgres";
        "EXTERNAL_IMMICH_URL" = "https://immich.voidarc.co.uk";
        "IMMICH_URL" = "http://192.168.1.180:2283";
        "IMMICH_VERSION" = "release";
        "UPLOAD_LOCATION" = "/mnt/storage/streaming/images";
      };
			environmentFiles = [config.sops.templates."immich.env".path];
      volumes = [
        "immich_model-cache:/cache:rw"
      ];
      log-driver = "journald";
      extraOptions = [
        "--network-alias=immich-machine-learning"
        "--network=immich_default"
      ];
    };
    systemd.services."podman-immich_machine_learning" = {
      serviceConfig = {
        Restart = pkgs.lib.mkOverride 90 "always";
      };
      after = [
        "podman-network-immich_default.service"
        "podman-volume-immich_model-cache.service"
      ];
      requires = [
        "podman-network-immich_default.service"
        "podman-volume-immich_model-cache.service"
      ];
      partOf = [
        "podman-compose-immich-root.target"
      ];
      wantedBy = [
        "podman-compose-immich-root.target"
      ];
    };
    virtualisation.oci-containers.containers."immich_postgres" = {
      image = "ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0@sha256:32324a2f41df5de9efe1af166b7008c3f55646f8d0e00d9550c16c9822366b4a";
      environment = {
        "POSTGRES_DB" = "immich";
        "POSTGRES_INITDB_ARGS" = "--data-checksums";
        "POSTGRES_USER" = "postgres";
      };
			environmentFiles = [config.sops.templates."immich.env".path];
      volumes = [
        "/containers/immich/postgres:/var/lib/postgresql/data:rw"
      ];
      log-driver = "journald";
      extraOptions = [
        "--network-alias=database"
        "--network=immich_default"
        "--shm-size=134217728"
      ];
    };
    systemd.services."podman-immich_postgres" = {
      serviceConfig = {
        Restart = pkgs.lib.mkOverride 90 "always";
      };
      after = [
        "podman-network-immich_default.service"
      ];
      requires = [
        "podman-network-immich_default.service"
      ];
      partOf = [
        "podman-compose-immich-root.target"
      ];
      wantedBy = [
        "podman-compose-immich-root.target"
      ];
    };
    virtualisation.oci-containers.containers."immich_redis" = {
      image = "docker.io/valkey/valkey:8-bookworm@sha256:a137a2b60aca1a75130022d6bb96af423fefae4eb55faf395732db3544803280";
      log-driver = "journald";
      extraOptions = [
        "--health-cmd=redis-cli ping || exit 1"
        "--network-alias=redis"
        "--network=immich_default"
      ];
    };
    systemd.services."podman-immich_redis" = {
      serviceConfig = {
        Restart = pkgs.lib.mkOverride 90 "always";
      };
      after = [
        "podman-network-immich_default.service"
      ];
      requires = [
        "podman-network-immich_default.service"
      ];
      partOf = [
        "podman-compose-immich-root.target"
      ];
      wantedBy = [
        "podman-compose-immich-root.target"
      ];
    };
    virtualisation.oci-containers.containers."immich_server" = {
      image = "ghcr.io/immich-app/immich-server:release";
      environment = {
        "DB_DATABASE_NAME" = "immich";
        "DB_DATA_LOCATION" = "./postgres";
        "DB_HOST" = "immich_postgres";
        "DB_PORT" = "5432";
        "DB_USERNAME" = "postgres";
        "EXTERNAL_IMMICH_URL" = "https://immich.voidarc.co.uk";
        "IMMICH_URL" = "http://192.168.1.180:2283";
        "IMMICH_VERSION" = "release";
        "UPLOAD_LOCATION" = "/mnt/storage/streaming/images";
      };
			environmentFiles = [config.sops.templates."immich.env".path];
      volumes = [
        "/etc/localtime:/etc/localtime:ro"
        "/mnt/storage/streaming/images/:/data:rw"
      ];
      ports = [
        "2283:2283/tcp"
      ];
      dependsOn = [
        "immich_postgres"
        "immich_redis"
      ];
      log-driver = "journald";
      extraOptions = [
        "--network-alias=immich-server"
        "--network=immich_default"
      ];
    };
    systemd.services."podman-immich_server" = {
      serviceConfig = {
        Restart = pkgs.lib.mkOverride 90 "always";
      };
      after = [
        "podman-network-immich_default.service"
      ];
      requires = [
        "podman-network-immich_default.service"
      ];
      partOf = [
        "podman-compose-immich-root.target"
      ];
      wantedBy = [
        "podman-compose-immich-root.target"
      ];
    };

    # Networks
    systemd.services."podman-network-immich_default" = {
      path = [pkgs.podman];
      serviceConfig = {
        Type = "oneshot";
        RemainAfterExit = true;
        ExecStop = "podman network rm -f immich_default";
      };
      script = ''
        podman network inspect immich_default || podman network create immich_default
      '';
      partOf = ["podman-compose-immich-root.target"];
      wantedBy = ["podman-compose-immich-root.target"];
    };

    # Volumes
    systemd.services."podman-volume-immich_model-cache" = {
      path = [pkgs.podman];
      serviceConfig = {
        Type = "oneshot";
        RemainAfterExit = true;
      };
      script = ''
        podman volume inspect immich_model-cache || podman volume create immich_model-cache
      '';
      partOf = ["podman-compose-immich-root.target"];
      wantedBy = ["podman-compose-immich-root.target"];
    };

    # Root service
    # When started, this will automatically create all resources and start
    # the containers. When stopped, this will teardown all resources.
    systemd.targets."podman-compose-immich-root" = {
      unitConfig = {
        Description = "Root target generated by compose2nix.";
      };
      wantedBy = ["multi-user.target"];
    };
  });
}