「Immich」那年那天那些事

name: immich

services:
  immich-server:
    # ...
    networks:  # 接入 traefik 网络
      - traefik_proxy
      - default  # 保留默认网络
    # ...
    labels:  # 直接暴露，避免 `Forward Auth` ，建议走 `OIDC`
      - "traefik.enable=true"
      - "traefik.docker.network=traefik_proxy"
      - "traefik.http.routers.immich.rule=Host(`memo.aio.yirami.xyz`)"
      - "traefik.http.routers.immich.entrypoints=websecure"
      - "traefik.http.routers.immich.tls=true"
      - "traefik.http.routers.immich.tls.certresolver=le"
      - "traefik.http.services.immich.loadbalancer.server.port=2283"
    # ...
    # ports:  # 不对外暴露端口，仅用于调试
    # - '2283:2283'
    # ...
    restart: unless-stopped
    deploy:
      resources:
        limits:
          cpus: '1.5'
          memory: 1500M
    # ...

  redis:
    # ...
    image: docker.io/valkey/valkey:9  # 去除 hash
    # ...
    restart: unless-stopped
    deploy:
      resources:
        limits:
          cpus: '0.2'
          memory: 128M

  database:
    # ...
    image: ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0  # 去除 hash
    # ...
    restart: unless-stopped
    deploy:
      resources:
        limits:
          cpus: '1.5'
          memory: 1536M
    # ...

networks:  # 声明外部网络
  traefik_proxy:
    external: true