diff --git a/README.md b/README.md index d2a92d4..3f2cdef 100644 --- a/README.md +++ b/README.md @@ -9,7 +9,7 @@ Share your Immich photos and albums in a safe way without exposing your Immich i Immich is a wonderful bit of software, but since it holds all your private photos it's best to keep it fully locked down. This presents a problem when you want to share a photo or a gallery with someone. -**Immich Public Proxy** provides a barrier of security between the public and Immich, and _only_ allows through requests +**Immich Public Proxy** provides a barrier of security between the public and Immich, and _only_ allows through requests which you have publicly shared. When it receives a valid request, it talks to Immich locally via API and returns only those shared images. @@ -17,9 +17,9 @@ It exposes no ports, allows no incoming data, and has no API to exploit. The ideal setup is to have Immich secured privately behind VPN or mTLS, and only allow public access to Immich Public Proxy. -[Live demo](https://immich-demo.note.sx/share/UiOulNielojwHbS0IJi5blwBOFzYC18CuPVtU23Bl3XK5YNVkbRONRT-HOTMQSMgdNs) +[Live demo](https://immich-demo.note.sx/share/ffSw63qnIYMtpmg0RNvOui0Dpio7BbxsObjvH8YZaobIjIAzl5n7zTX5d6EDHdOYEvo) -## How to install +## How to install with Docker 1. Clone the repo: @@ -37,8 +37,8 @@ CACHE_AGE=2592000 ``` - `IMMICH_URL` is the URL to access Immich in your local network. This is not your public URL. -- `API_KEY` get this from the Account Settings page of your Immich user account -- `CACHE_AGE` by default, assets will be cached for 30 days. Set this to 0 to disable caching. +- `API_KEY` get this from the Account Settings page of your Immich user account. +- `CACHE_AGE` this is setting the `cache-control` header, to tell the browser to cache the assets. Set to 0 to disable caching. 3. Start the docker container: @@ -50,7 +50,7 @@ docker-compose up -d -Now whenever you share an image or gallery through Immich, it will automatically create the +Now whenever you share an image or gallery through Immich, it will automatically create the correct public path for you. ## Configuration