Immich on Ubuntu 24.04 LTS

Why the cloudimg image

cloudimg ships Immich as the official Docker Compose stack as one complete appliance rather than a set of containers to wire together, and closes the trap that a fresh Immich carries: the first visitor to reach a new instance would otherwise register themselves as its administrator. Every cloudimg instance instead seeds its own administrator on first boot, before the app is reachable through the nginx front door, and proves that a second registration is refused, so a stranger can never seize a freshly launched machine. No secret of any kind is baked into the image: on first boot each instance rotates its database password and re initialises on a fresh database, which regenerates all of its session material, then writes the one unique administrator password to a root only file on the machine. The database and cache are kept off the public interface behind nginx. Machine learning, the one memory heavy extra, ships switched off so the appliance runs comfortably on a small machine, and the paired deploy guide shows how to turn it on for smart search and face recognition on a larger one. The base is fully patched with unattended security updates enabled, and every image comes with a step by step deploy guide tested against the exact build and 24/7 cloudimg support.