this post was submitted on 10 Jul 2025
30 points (100.0% liked)
Selfhosted
59939 readers
444 users here now
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
-
No spam.
-
Posts here are to be centered around self-hosting. Please ensure it is clear in your post how it relates to self-hosting.
-
Don't duplicate the full text of your blog or git here. Just post the link for folks to click.
-
Submission headline should match the article title.
-
No trolling.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Love immich, you can make seperate accounts and do quite fine grained access controll and the search feature is da bomb
Thats nice but I wish it had E2E encryption.
I don't like that I can see everyone's photos that use my immich server.
Not that I'd look, but I can if I wanted to, and that's why I only use my server for family
I commented elsewhere here, but E2E encryption is just between the server and the end user (ie a VPN)
You're thinking about encryption at rest, on the storage.
Immich would have to setup a whole new design to be able to store all the metadata on a per-user basis... but... you could have multiple Immich instances if you were to host it for your friends, but I think we're drifting into "why bother" now...
Encryption at rest just means the data itself is encrypted when stored on disk and the key is somewhere. It doesn't dictate that the key is not visible to the server.
Encryption in transit refers to an encrypted channel from client to server.
E2E encryption usually refers to encryption from one entity to another where any intermediary servers do not have the ability to decrypt
Source: too many years doing application security at my job
Pretty much using for your family and not for a photo sharing app for everybody is how Immich was built....