Let’s Encrypt Certificate
Let’s Encrypt certificates are a great choice due to their automated renewal process, wide support across web browsers, and zero-cost option for any personal or small-scale web applications. After completing this guide, you’ll have your Immich instance secured with HTTPS, improving both security and trust for you and your users.
Introduction
In this tutorial, we’ll guide you through the process of generating and configuring a Let’s Encrypt SSL certificate for your Immich server. By following the steps outlined here, you can enable SSL encryption, ensuring secure access for users and protecting sensitive information like login credentials and media content from being intercepted.
On my self-hosted Immich installation on Ubuntu 22.04 I use a Let’s Encrypt Certificate. This certificate needs to be renewed periodically.
Prerequisits
- Open port 80 from Internet to Immich server
- Open port 443 from Internet to Immich server
Generate a Let’s Encrypt certificate
To generate Let’s Encrypt certificate (enable HTTPS access) on Immich it is enough to execute the following command:
sudo immich-distribution.lets-encryptParameters for the certificate will be taken from the configuration. To check the configuration, you can execute the following:
snap get immich-distributionOutput of the command will show the information about the Immich installation:
acme-domain yourdomain.comThe certificate will be stored on the following location:
/var/snap/immich-distribution/common/acme/certificatesResearching Dual Domain Access for Immich
I am currently investigating the possibility of accessing my slef-hosted Immich installation through two different domains. This approach could make it easier to manage and better organize various aspects of the service. By using two domains, I can potentially provide more flexible user access while ensuring data security and privacy are maintained. So far, I have been extremely satisfied with Immich—the app offers excellent performance and a wide range of features. I use it to its full potential for storing and organizing photos and videos, and it has truly become an essential part of my daily routine.
About The Author
