d00phy

I have a handful of photos that were taken with my iPhone and are raw DNG files. Immich refuses to display them rotated properly. Unfortunately, unless I'm missing something, the "rotate" function in the app is really just creating a new JPG (with new, separate, metadata) to be reuploaded. Thing is, everywhere else view these images they come up rotated correctly. Photos, Synology Photos, Lightroom all display them right side up. Immich refuses to. Anyone have a workaround? Some are upside down, others should be landscape orientation, but Immich thinks they're portrait.

I've had 6 LiFX BR30 lights on the front of my house since 2019. At first, they were pretty decent. One would fall off the network every other month, or so, but that wasn't much of a pain. Lately, multiple lights will drop off the Wi-Fi every week. I'm at the point where I will either replace them, or install smart switches to just turn them off/on like normal lights. Looking around, I don't see much in this size that are rated for outdoor use and support multiple colors. The current ones are set to Ukraine colors since the invasion, and I also change them for holidays. Ideally, I'd like to find something supporting zigbee, thread, or z-wave - pretty much in that order.

Basketball giving the family something to smile about!

I want to start by saying I recognize that everyone's needs & priorities are different.

My wife and I both have iPhones, and i have a Pixel 7 Pro I use for work (and sometimes to compare the camera to the iPhones). All of our photos are currently backed up to iCloud (Apple One Premier - 2TB storage) and via Synology Photos. The Pixel has "unlimited" storage for photo backup w/ Google, and also backs up to the Synology. In general, I would like to get off of Google, but it's 99% work stuff that I wouldn't miss if it was lost.

There's a lot that I really like about Immich, but there are also some real pain points for me. I'm not going to comment on the discrepancies between the mobile vs. web interfaces as I expect them to be addressed as the product matures.

• The rapid development is both a blessing and a curse. I love that the team are really working through the roadmap. But sometimes it feels like new features arrive somewhat half-baked. The most common example being something is released working on just the web or mobile app. But the pace also creates extra work for me in that every release requires me to look for breaking changes and make appropriate fixes. I get it, it's beta software, and heavy development often requires this.
• If it mis-identifies a face, the mechanism for correcting that is pretty clunky. I have to first, say it's a different person, and then, if I don't care about tagging that face, I have to go to People to hide it. I don't really care about faces that it completely misses because I don't consider facial recognition as a "archive-grade" feature. We have tags/keywords for that.
• The tagging is both cool and clunky. I love the nested tags and the drill-down tags interface. I hate that I can only add a new tag from the tags admin page. Would also like to see auto-tagging, or suggested tags implemented.
• Image rotation is half-addressed at best. For one, I'm not sure why it only works on the mobile interface since the web interface has direct access to ImageMagick. I mainly see image orientation issues w/ raw files. To fix this, I have to edit it on mobile, save it to my phone's library and upload the newly created JPG, which shows up as a separate file w/ metadata that doesn't align w/ the original (like creation date). It's just a mess.

I started playing with PhotoPrism a little bit, and while it addresses many of my complaints w/ Immich, it also raises some of its own pain points.

• Probably the biggest issue I have with PhotoPrism is the lack of mobile apps. There are some out there, but the recommended app is a third-party WebDav app called PhotoSync. I tried it and wasn't overly impressed. At least, not enough to pay for it. This would be a dealbreaker except that I can simply use the Synology Photo backup, and have PhotoPrism mount those directories as its library ( can also do this with Immich's "External Library" feature).
• The metadata editing is comprehensive. In this one regard it is streets ahead of Immich. Seriously, you have so much more access to the photo metadata. Unfortunately, it's hampered by the limited batch capabilities.
• Batch editing isn't really batch editing. It's just editing a smaller subset of individual files one at a time. So when go to to the next or previous file, it the next or previous one in the selected subset.
• Keywords are supports, and new ones can be created on the fly. That said, nested keywords don't appear to work.
• There's also labels. Both are auto-suggested, and both can be manually edited. Labels are also accessible from the sidebar. No nested labels, either, but it does auto sort labels into broad categories. For example, "dog" and "cat" are placed into an "animals" category. You can switch between showing/hiding the broad categories. You can also have favorite labels.
• Image orientation/rotation is done right in the photo editing dialog. One more area where PP beats Immich.

I currently haven't decided which one I will keep. I could use either with the Synology Photo app to back up my phones. PhotoPrism's lack of mobile app is really bad, but the mobile web interface is fine for navigating the library. Immich is a more wholistic solution, but it's handling of some key organizational and editing functions is pretty glaring as well. I know Immich is the overwhelming favorite of most self-hosting communities, but I found PhotoPrism to be pretty compelling in its own right - especially the metadata editing capabilities.

ETA: I see lots of people talking about Immich’s facial detection. Out of curiosity, what are your detection settings? I’ve found it to be pretty good compared to Photo Prism’s, but not exactly game changing. My settings are:

• Model: antelopeV2
• Min Score: 0.2
• Max distance: 0.5 Min recognized faces: 1

Currently, I use dockerproxy + swag and Cloudflare for externally-facing services. I really like that I don't have to open any ports on my router for this to work, and I don't need to create any routes for new services. When a new service is started, I simply include a label to call swag and the subdomain & TLS cert are registered with Cloudflare. About the only complaint I have is Cloudflare's 100MG upload limit, but I can easily work around that, and it's not a limit I see myself hitting too often.

What's not clear to me is what I'm missing by not using Traefik or Caddy. Currently, the only thing I don't have in my setup is central authentication. I'm leaning towards Authentik for that, and I might look at putting it on a VPS, but that's the only thing I have planned. Other than that, almost everything's running on a single Beelink S12. If I had to, I could probably stand up a failover pretty quickly, though.

I was thinking about this the other day. Nothing against Thorne, I don't think he's proven himself to be demonstrably better or worse than Brown; but his college career is over after the Alabama game. It's unlikely that he will go pro in the NFL, XFL, or CFL. At this point, I doubt 3 more games are going to have that much of an effect on his chances at the next level. It seems like the best thing for him, and Auburn, is to decide what's next, and start working towards that goal. Given his experience, what I've heard others say about his football knowledge, and what I've seen of his demeanor, coaching might be a good path for him.

Unless Freeze picks up an absolute stud in the 2025 class or the portal (neither of which are crazy assumptions), next year's starting QB is currently riding the bench. Given that I don't think the UL-Monroe game is a gimme at this point, winning out would take a miracle that surpasses the end of the 2013 season! Barring that, this season is effectively over in terms of making a bowl game. That's not to say it can't happen, I just don't think Thorne starting makes it any more or less likely than Brown. It makes sense to let those underclassmen start/continue getting in-game experience to learn and prepare for next year. More so considering that it will be Freeze's first real "make-or-break" season. I don't think he should be fired if next year is a bust, but that's a much bigger discussion.

I've been banging my head on this for a few days now, and I can't figure this out. When I start up immich container, I see in docker ps:

CONTAINER ID   IMAGE                                                        COMMAND                  CREATED              STATUS                        PORTS                                                                                                             NAMES
1c496e061c5c   ghcr.io/immich-app/immich-server:release                     "tini -- /bin/bash s…"   About a minute ago   Up About a minute (healthy)   2283/tcp, 0.0.0.0:2284->3001/tcp, [::]:2283->3001/tcp                                                             immich

netstat shows that port 2283 is listening, but I cannot access http://IP_ADDRESS:2283 from Windows, Linux, or Mac host. If I SSH in and run a browser back through that, I can't access it via localhost. I even tried changing the port to 2284. I can see the change in netstat and docker ps outputs, but still no luck accessing it. I also can't telnet to either port on the host. I know Immich is up because it's accessible via the swag reverse proxy (I've also tried bringing it up w/ that disabled). I don't see anything in the logs of any of the immich containers or any of the host system logs when I try to access.

All of this came about because I ran into the Cloudflare upload size limit and it seems I can't get around it for the strangest reason!

A long long time ago, I bought a domain or two, and a shared hosting plan from Dreamhost w/ unlimited bandwidth/storage. I don't have root access, and can't do containers on this. It's been useful for a Piwigo instance to share scanned family photos. The problem I have is the limited resources really limit Piwigo's ability to handle the large TIF files involved in the archival scans. There are ways around this, but they all add time to the workflow that already eats into my free time enough. I'm looking at moving Piwigo to my local server that has plenty of available resources. That leaves me with little reason to keep the Dreamhost space. So what's a decent use case for cheap, shared hosting space anymore?

To be clear, I'm not looking for suggestions to move to a cheap VPS. I've looked into them, and might use one in the future, but don't need it right now. The shared hosting costs about $10.99/month at the moment. If there was a way I could leverage the unlimited bandwidth/storage as an offsite backup, that would be amazing, but I'm not sure it would be a great idea backing up stuff to a webserver where there best security I can add it via an .htaccess file.

Was in DC at the end of September staying at the Waldorf (Trump’s old hotel), and saw a bunch of black SUVs with this flag in the windshield parked on the curb by an entrance not open to regular traffic. Also saw press there and some folks walking around in military uniforms. An image search suggested it might be Gabon, but that flag didn’t include the seal in the middle.

Given the state of the GOP, and who would be beating the "liberal" candidate, this makes a lot of sense. Probably some decent reading for anyone still thinking they just won't vote because Harris isn't progressive enough. She might not be your cup of tea, but I'm betting the other guy is way less so.

I currently have my home services set up in a way I like, and think I understand. I have an S12 pro w/ *arr, Overseerr, Immich, paperless, etc running. The only things exposed are immich, paperless, and overseerr. This is via swag/dockerproxy over a cloudflare tunnel. This makes it so I don't have to do anything on the cloudflare end or my router to add a new service. DockerProxy picks up a new container, swag configures a reverse proxy automatically (assuming it recognizes the container, but it also supports custom configs) using the container_id as the subdomain.

I'm looking at setting up a VPS to host authentik and uptima kuma (to start - maybe ntfy in the future). What I'd like to do is have the public interface on these containers use the same cloudflare tunnel I'm currently using... or a second one, if necessary. For the interface back to my home server, I'd like to use Tailscale. I already have it running on my home server, and I expect I'll install it on my VPS. The goal here is the "public" connection uses the cloudflare tunnel, and the backend connection is over tailscale.

I've tested that I can spin up swag/dockerproxy on a second box in my lab and it will connect to cloudflare. I have not yet tested standing up a container on that box to see if the proxy works as expected.

So, questions:

• Tailscale on VPS: container or no? Obviously, if I can't install it locally, I'll put it in a container
• How to I configure a container to use these 2 networks? I'm fairily good on getting the cloudflare part working. The TS part is new to me, and all the documentation I've seen doesn't really cover other containers using the tailnet.
• Am I overthinking this? If I put these services on tailnet alone, will the cloudflare tunnel... tunnel back and forth to/from clients not on tailnet?

The last half of the Mizzou game reminded me so much of the most frustrating aspects of the Tubberville years. Auburn would establish a lead, and then play "not to lose." Sometimes, they would squeak out a win against an overmatched team. Far too many times, that overmatched team would come back and tie it up or take the lead!

For sure, there were plenty of player mistakes on Saturday, but those are always going to happen. There are plenty of underclassmen on this team, and they're going to make mistakes. Going to the "Run-Run-(Incomplete)Pass" offense just because it was a 2-score game is plain old shitty play-calling. I know there was a general call to focus more on the run game going into Saturday, but that doesn't mean the pass game should be forsaken! Thorne dropped a perfect dime for a TD earlier in the game. Yes, that was blown coverage along with a well-run route, but Auburn is not bereft of passers and receivers! Looking at Auburn's possessions in the 4th quarter reflect play calling that was blindly sticking to a predetermined plan while the game slipped away from the team. Auburn's play calling in the 4th quarter was so predictable, it was painful. Seeing Freeze watch Mizzou win the game looked like a man who realized how much he had screwed that win.

Back in the Tubberville years, a much younger me realized an important thing: if you're not playing to win (or playing to "protect" a win), you're playing to lose. If you were able to score twice in a quarter, you must assume your opponent can do the same. The only time you take your foot off the gas is when the game's end is a foregone conclusion. That's rarely the case at the start of the 4th quarter, and it's never the case in the third quarter. A big reason over matched teams can beat their opponents is because they play like they have nothing to lose. They don't play recklessly, but they take risks early and often. Put simply, they never stop playing to win.