From c3cae6ecc76ec80c0e53c6e40e7d7e163a827be7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Motiejus=20Jak=C5=A1tys?= <motiejus@jakstys.lt>
Date: Sat, 19 Oct 2024 21:50:21 +0300
Subject: [PATCH] immich: fix redis

---
 modules/services/immich/default.nix | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/modules/services/immich/default.nix b/modules/services/immich/default.nix
index a1b3c17..17c4773 100644
--- a/modules/services/immich/default.nix
+++ b/modules/services/immich/default.nix
@@ -46,6 +46,15 @@ in
       package = immich-package;
       enable = true;
       port = myData.ports.immich-server;
+
+      # TODO: remove the whole block 24.11: redis should listen on the unix socket
+      # if immich can't find/connect to redis, it will fail on boot, so it's
+      # safe to experiment.
+      redis = {
+        enable = true;
+        host = "127.0.0.1";
+        port = 6379;
+      };
     };
 
     services.caddy.virtualHosts."photos.jakstys.lt:80".extraConfig = ''
@@ -65,8 +74,6 @@ in
         CapabilityBoundingSet = lib.mkForce "~";
         ExecStart = lib.mkForce ("!" + (lib.getExe startScript));
         PrivateUsers = lib.mkForce false; # bindfs fails otherwise
-
-        SupplementaryGroups = lib.mkForce [ "immich" ]; # TODO remove on 24.11
       };
     };