shastaxc

Can confirm. Fuck around for a scheduled 2 hrs per day (30 mins at the start, 1 hr lunch, 30 mins at the end), and put the pedal to the metal for the other 6 hours. You’ll be amazed how you don’t feel burnt out but still got the same amount of work done.

So how did it go?

Yeah Maine is so well known for it’s urban housing

That’s the point…

Where did the I go?

In that case though, the person helping you doesn’t have the ability to solve the problem by changing code. They have to work around the bug to try to make it work for you in its broken state and report the problem to developers to fix in the next release. It’s a more difficult problem to solve

Depends on the operation. There are some things, especially interacting with remote servers, that can be done with a GUI tool. For example, exploring a kubernetws cluster. Sure, you could enter 5 different commands to get the info you want, or you can use a GUI app like OpenLens that is constantly sending dozens of commands in a polling loop to display all kinds of info on one view.

Project it onto the glass

Having dealt with this drama before, and as team lead currently, as soon as this project began, the first thing I did was set up a linter with very specific rules. If a dev doesn’t agree with the rules defined there, too bad. They’re there to prevent this kind of drama, and to make peer reviews more focused and productive. I don’t wanna see PRs about syntax. They’re nearly always just a difference of opinion.

What?

It’s not too late

And you need a central online API to validate the token, like oauth, which means any system using it needs to be connected to the Internet, and that API needs to be very reliable, kept up-to-date, and DDOS resistant.

Or require the user to enter a PIN like with x509 certs, but then you also need a way for people to reset their PIN when it gets forgotten or compromised which means a huge bureaucratic burden and expense. And between the time of needing a reset and getting it, you’ll be unable to access any services requiring your ID token which will almost definitely cause some people from making payments (if banks change to requiring a digital ID token) and who knows what else.

There will also be a requirement for hooking this death records in order to disable people’s tokens when they die to prevent identity theft. That’s going to require cooperation from private corporations (hospitals) and the government. I get that this is already done to an extent, but there are likely other processes like this that need to be established for this system to work and it’s not trivial.

You think they’re going to raise the drinking age too? This is not inevitable.

I’ve been using it for a couple weeks now. I am happy with it, but also annoyed by some obvious bugs. For example, I cannot find the Faces/People page on browser but is easy on the app. I have also only been able to merge faces once, even though this feature supposedly exists. Maybe there is some limitation to merging that is not clearly disclosed to the user. And I was disappointed that there’s no way to manually tag a person to their Face profile in an image.

I also think the sharing capabilities could be improved. Even if I share an album and make another user an editor, they still don’t have full permissions to it. For example, they cannot change the name of the album, or set a cover photo, and there is some weird unspecified limitation with creating a shared link of a photo that you didn’t upload yourself.

I also wish it had multi-part uploading because I have it routed through cloudflare tunnel for security and convenience, but that puts a 100MB limit on file transfers which multi-part uploads could work around.

Error messages could be more verbose. When an upload fails it just says Error. It took me digging through network messages to figure out that I was hitting that Cloudflare rate limiting error (the error message from CF was perfectly clear).

And I also have Keycloak set up with it for user accounts. That wasn’t too difficult (I am very familiar with Keycloak from work) but Immich doesn’t appear to have any settings available to utilize roles over oauth to customize user permissions in their app. For example, I would like to default new users to be only able to view but not upload photos until they get a certain role that can enable uploads. Because of this, I have to more closely guard the user registration page which is just extra work for me.

I got a notification recently that there was a new version available, so I tried updating. I’m using the image with the “latest” tag so I assumed just restarting the container would put it on the new version but it didn’t. So now I assume some version flag os saved in the mounted volume and I assume there is somewhere in the admin UI to tell it to update, but I haven’t been able to find it. This one is probably user error but I’m surprised and frustrated that I was unable to find help with this from a Google search.

Like I said, I’m happy with its capabilities but there is still a lot of polish missing. I understand what one of the other commenters meant when they said it’s still in early development. I am hoping these types of issues I’ve experienced will be ironed out in the future. I also understand that I could make a PR to fix these things myself, and I like the fact that that’s an option. I will probably contribute to the project when I have more free time. They’ve done great work so far.

Immich selects a frame usong some algorithm. I assume it prioritizes clear faces or something considering its facial recognition emphasis

Generally true, but if the professor in this context was not a moron, he probably mentioned at the start of the class that he would be forcing a change to requirements part way through the course. Ideally, he would’ve specified what kind of changes this would be, in order for the students to account for that in their design. I think it’s likely this happened, but the student was lacking so much experience he didn’t understand that hint or what he needed to do in the design in order to later swap parameters more easily. I’m going to withhold judgement on this professor having only heard a biased account. It could’ve been a very good assignment, now being told from the perspective of a mediocre student.

So many suggestions here but I thought I’d chime in because I have a setup very similar to what you suggested and I found a very easy way of hosting it securely. I am using Unraid on a system in my house. I have my web service running in a docker container. I exposed it using a cloudflare tunnel. There is an Unraid plugin for cloudflare tunnels that takes out a lot of the configuration work involved in getting it running locally. You just have to also set up a corresponding endpoint on Cloudflare’s website and have a domain name registered with them for you to link to it.

The way it works then is when someone requests your domain (or subdomain) in their browser, Cloudflare gets the request and redirects the traffic to the cloudflare tunnel client app that you set up in your computer. That app on your machine then redirects the traffic to your other container that is hosting your web service and established bidirectional communication that way.

The benefits to this system are:

• Relatively easy setup, especially if you want to expose more services in the future (you’ll need to run a separate cloudflare container for each service exposed though)
• No need to open ports in your router or firewall on your home network. Cloudflare just knows how to communicate between its server and its client app on your computer (I think you have to set up an access token so it is secure).
• None of your users ever learn your home IP address because once they connect at Cloudflare’s server, they don’t get any more knowledge than that about what’s on the other side.
• It’s free (not including the cost of registering your domain)
• You don’t have to worry about changing anything if your ISP randomly changes your IP address. Hell, you could even move to a new house and take your computer with you and you wouldn’t have to reconfigure anything.

Downsides:

• You have to trust that Cloudflare is not scraping all the traffic going through the tunnel.
• Some people have a moral issue with giving Cloudflare more responsibility for hosting “the Internet”. We already rely on their infrastructure heavily for large sections of the Internet. If they ever become malicious or compromised, there is a lot to lose as a society.

I believe you can use Wireguard and a rented VPS to recreate this setup without Cloudflare but it will require a lot more knowledge in order to set it up with more points of failure. And it would cost more because even though Wireguard is FOSS, a VPS will cost you a monthly fee of at least a few bucks per month.

I currently have 2 services exposed using Cloudflare tunnels on my Unraid system at home. They’ve been running for over a year now with 0 interruption.

Gotta get a 4k monitor

I love going into a PR with 3 approvals already and shitting all over it

No Rway!