immich

playbooks/immich/immich-db.container.j2

@@ -7,7 +7,7 @@ Image=ghcr.io/immich-app/postgres:14-vectorchord0.4.3
 Network=immich.network
 Volume=immich-pgdata.volume:/var/lib/postgresql/data
 Environment=POSTGRES_USER=immich
-Environment=POSTGRES_PASSWORD={{ pico_db_password }}
+Environment=POSTGRES_PASSWORD={{ immich_db_password }}
 Environment=POSTGRES_DB=immich
 
 [Service]

playbooks/immich/immich-server.container.j2

@@ -11,9 +11,10 @@ PublishPort=127.0.0.1:2283:2283
 Volume=immich-upload.volume:/usr/src/app/upload
 Environment=DB_HOSTNAME=immich-db
 Environment=DB_USERNAME=immich
-Environment=DB_PASSWORD={{ pico_db_password }}
+Environment=DB_PASSWORD={{ immich_db_password }}
 Environment=DB_DATABASE_NAME=immich
 Environment=REDIS_HOSTNAME=immich-redis
+Environment=IMMICH_MACHINE_LEARNING_ENABLED=false
 
 [Service]
 Restart=on-failure

playbooks/immich/immich.yml

@@ -1,11 +1,8 @@
 - name: Immich
-  hosts: pi
+  hosts: beepi
   become: true
   vars:
-    immich_user: immich
-    immich_home: /home/immich
-    quadlet_dir: "{{ immich_home }}/.config/containers/systemd"
-    pico_db_password: !vault |
+    immich_db_password: !vault |
               $ANSIBLE_VAULT;1.1;AES256
               64666332336435616365303563636634373333346537643336626235316432643336303665646463
               3735653065653561643635376237393666313137303661370a336664623937623061313663303835
@@ -14,46 +11,50 @@
               30633861353033656264663439623264383536376664613665613138623262623261
 
   tasks:
-    - name: Install podman
+    - name: Install dependencies
       ansible.builtin.apt:
-        name: podman
+        name: "{{ item }}"
         state: present
+      loop:
+        - podman
+        - systemd-container
+        - passt
 
     - name: Create immich user
       ansible.builtin.user:
-        name: "{{ immich_user }}"
-        home: "{{ immich_home }}"
+        name: immich
+        home: /home/immich
         shell: /usr/sbin/nologin
         create_home: true
       register: immich_user_info
 
     - name: Enable linger
       ansible.builtin.command:
-        cmd: "loginctl enable-linger {{ immich_user }}"
-        creates: "/var/lib/systemd/linger/{{ immich_user }}"
+        cmd: "loginctl enable-linger immich"
+        creates: "/var/lib/systemd/linger/immich"
 
     - name: Create quadlet directory
       ansible.builtin.file:
-        path: "{{ quadlet_dir }}"
+        path: "/home/immich/.config/containers/systemd"
         state: directory
-        owner: "{{ immich_user }}"
-        group: "{{ immich_user }}"
+        owner: "immich"
+        group: "immich"
         mode: '0755'
 
-    - name: Deploy network
+    - name: Copy network
       ansible.builtin.copy:
-        dest: "{{ quadlet_dir }}/immich.network"
+        dest: "/home/immich/.config/containers/systemd/immich.network"
         content: "[Network]\n"
-        owner: "{{ immich_user }}"
-        group: "{{ immich_user }}"
+        owner: immich
+        group: immich
         mode: '0644'
 
-    - name: Deploy volumes
+    - name: Copy volumes
       ansible.builtin.copy:
-        dest: "{{ quadlet_dir }}/{{ item }}.volume"
+        dest: "/home/immich/.config/containers/systemd/{{ item }}.volume"
         content: "[Volume]\n"
-        owner: "{{ immich_user }}"
-        group: "{{ immich_user }}"
+        owner: immich
+        group: immich
         mode: '0644'
       loop:
         - immich-pgdata
@@ -62,29 +63,30 @@
     - name: Deploy db quadlet
       ansible.builtin.template:
         src: immich-db.container.j2
-        dest: "{{ quadlet_dir }}/immich-db.container"
-        owner: "{{ immich_user }}"
-        group: "{{ immich_user }}"
-        mode: '0644'
+        dest: "/home/immich/.config/containers/systemd/immich-db.container"
+        owner: immich
+        group: immich
+        mode: '0600'
 
     - name: Deploy redis quadlet
       ansible.builtin.copy:
         src: immich-redis.container
-        dest: "{{ quadlet_dir }}/immich-redis.container"
-        owner: "{{ immich_user }}"
-        group: "{{ immich_user }}"
+        dest: "/home/immich/.config/containers/systemd/immich-redis.container"
+        owner: immich
+        group: immich
         mode: '0644'
 
     - name: Deploy server quadlet
       ansible.builtin.template:
         src: immich-server.container.j2
-        dest: "{{ quadlet_dir }}/immich-server.container"
-        owner: "{{ immich_user }}"
-        group: "{{ immich_user }}"
-        mode: '0644'
+        dest: "/home/immich/.config/containers/systemd/immich-server.container"
+        owner: immich
+        group: immich
+        mode: '0600'
 
     - name: Reload user systemd
-      become_user: "{{ immich_user }}"
+      become: true
+      become_user: immich
       environment:
         XDG_RUNTIME_DIR: "/run/user/{{ immich_user_info.uid }}"
         DBUS_SESSION_BUS_ADDRESS: "unix:path=/run/user/{{ immich_user_info.uid }}/bus"
@@ -92,8 +94,14 @@
         daemon_reload: true
         scope: user
 
+    - name: Start user manager for immich
+      ansible.builtin.systemd:
+        name: "user@{{ immich_user_info.uid }}.service"
+        state: started
+
     - name: Start immich-server
-      become_user: "{{ immich_user }}"
+      become: true
+      become_user: immich
       environment:
         XDG_RUNTIME_DIR: "/run/user/{{ immich_user_info.uid }}"
         DBUS_SESSION_BUS_ADDRESS: "unix:path=/run/user/{{ immich_user_info.uid }}/bus"
@@ -101,3 +109,10 @@
         name: immich-server.service
         state: started
         scope: user
+
+    - name: Debug
+      ansible.builtin.debug:
+        msg:
+          - "Service status: systemctl --user --machine {{ immich_user_info.name }}@.host status immich-server"
+          - "Read logs: sudo journalctl _UID={{ immich_user_info.uid }} -n 200 --no-pager"
+          - "Shell: machinectl shell {{ immich_user_info.name }}@.host /bin/bash"