danvics/selfhostblocks
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

#583 Immich: add authelia bypass for mobile app

Browse source 
Adds bypasses for /api and /.well-known/immich so that the mobile app
authentication works.
This commit is contained in:
sivert 2025-11-12 08:10:01 +01:00 committed by Pierre Penninckx
parent ceabadb6aa
commit 5287f42316
1 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
modules/services/immich.nix
View file

@ -544,6 +544,14 @@ in
inherit (cfg) subdomain domain ssl; inherit (cfg) subdomain domain ssl;
upstream = "http://127.0.0.1:${toString cfg.port}"; upstream = "http://127.0.0.1:${toString cfg.port}";
autheliaRules = lib.mkIf (cfg.sso.enable) [ autheliaRules = lib.mkIf (cfg.sso.enable) [
{
domain = fqdn;
policy = "bypass";
resources = [
"^/api.*"
"^/.well-known/immich"
];
}
{ {
domain = fqdn; domain = fqdn;
policy = cfg.sso.authorization_policy; policy = cfg.sso.authorization_policy;