I have my Immich instance setup with an nginx proxy for security and ssl, and that’s exposed to the internet. I have a domain for my personal website, so I just put up my Immich instance at a subdomain of that. I can now make public share links I can just copy and paste into a group chat. I haven’t added any other users yet but I’d I wanted to all they’d need to do is login via email/password.
I don’t have all of my homelab services exposed publicly though; I VPN in for those.
General tips for exposing a server to the internet:
only expose the ports you need for services you intend to be accessible. Use a firewall and/or your router’s port forwarding settings to enable only what you need, with blocking as a default.
update all software regularly
only expose programs that are built to be exposed. For example, if you make a Flask website, they will warn you several times not to expose it directly, but to proxy it through something like nginx
We should pass a law that all knives have to know what purpose they are being used for and should refuse to be used for stabbing or otherwise hurting people.
A few years ago they made some changes to how extensions work (iirc it was supposedly aimed at improving privacy by restricting what extensions can access).
These days I use a paid iOS/macOS specific ad block app. It was like $3 one time purchase and it works great.
AlphaFold uses a combination of machine learning and physics simulations to predict the shape of a protein given its chemical formula.
Gemini is a Large Language Model which uses machine learning to predict text completion.
They both use “machine learning” but the machine learning models are wildly different. Machine learning is a technique that’s basically a fancy curve fitting approach. The curve AlphaFold is trained to mimic maps chemical formulas to shapes, while the curve Gemini mimics maps a text input to probabilities for predictions of the next letter(s).
When I go visit family I inevitably get the “an unknown AirPods has been traveling with you” notification. It’s my brothers in his pocket, we’ve just been on vacation together the past few days.
I have my Immich instance setup with an nginx proxy for security and ssl, and that’s exposed to the internet. I have a domain for my personal website, so I just put up my Immich instance at a subdomain of that. I can now make public share links I can just copy and paste into a group chat. I haven’t added any other users yet but I’d I wanted to all they’d need to do is login via email/password.
This is an officially supported kind of setup for Immich, so I would consider it secure: https://docs.immich.app/administration/reverse-proxy/
I don’t have all of my homelab services exposed publicly though; I VPN in for those.
General tips for exposing a server to the internet: