From 6bf0bcc0eff4b26698b51f43965d7f35262e2dbe Mon Sep 17 00:00:00 2001
From: Greg Hellings <greg.hellings@gmail.com>
Date: Thu, 6 Aug 2026 21:43:28 -0500
Subject: [PATCH] fix: restore immich access

---
 hosts/unstable/linode/default.nix | 15 +++++++++++++--
 1 file changed, 13 insertions(+), 2 deletions(-)

diff --git a/hosts/unstable/linode/default.nix b/hosts/unstable/linode/default.nix
index c1da1f0..3b67759 100644
--- a/hosts/unstable/linode/default.nix
+++ b/hosts/unstable/linode/default.nix
@@ -61,9 +61,10 @@ in
     };
     gitea-runner = {
       enable = true;
-      extraLabels = [
+      labels = [
         "vps:host"
         "blog:host"
+        "nixos-linode:host"
       ];
     };
     home = false;
@@ -182,6 +183,8 @@ in
           use_backend next if { req_ssl_sni -i next.thehellings.com }
           use_backend matrix if { hdr(host) -i matrix.thehellings.com }
           use_backend matrix if { req_ssl_sni -i matrix.thehellings.com }
+          use_backend immich if { hdr(host) -i immich.thehellings.com }
+          use_backend immich if { req_ssl_sni -i immich.thehellings.com }
           use_backend web if { hdr(host) -i thehellings.com }
           use_backend web if { req_ssl_sni -i thehellings.com }
 
@@ -196,6 +199,14 @@ in
           server git-jeremiah jeremiah.thehellings.lan:80
           server git-zeke zeke.thehellings.lan:80
 
+        backend immich
+          mode http
+          balance roundrobin
+          option accept-unsafe-violations-in-http-response
+          retries 3
+          option forwardfor
+          server immich-proxy 127.0.0.1:${builtins.toString config.services.immich-public-proxy.port}
+
         backend matrix
           mode http
           balance roundrobin
@@ -229,7 +240,7 @@ in
 
     immich-public-proxy = {
       enable = true;
-      immichUrl = "https://immich.shire-zebra.ts.net";
+      immichUrl = "http://immich.k3s.thehellings.lan";
     };
 
     logrotate = {