I don't want yet another self hosted service to manage (update, backups, possible hardware failures, energy costs, ups, etc.).

Unfortunately Immich is not end-to-end encrypted. If that would have be the case i'd use https://pixelunion.eu/

Seems like a great app though. So... i'm still pondering what to do :-)

Okay? So don't use it, use a managed service like Google Photos, Apple Photos, Dropbox, etc where your photos and files might be arbitrarily removed or your access to them limited while they are scanned for disavowed content.

You can also just use a secure transport layer (like WireGuard or a VPN) instead of relying on every project to implement end-to-end encryption.

What do you mean Immich is not end-to-end encrypted? You control both ends, you can encrypt it any way you want…

If you don’t want self-hosted and you want E2EE, Ente Photos is the best solution on the market that I have found.

So if you don't want a self hosted service there are tons of cloud providers. Google photos, iCloud, etc. Some people don't want to pay a monthly fee to store their photos or don't want to risk losing something with sentimental value just because a company decides to ban you

it's really not much to manage assuming you are already doing backups. you ~ pay the energy cost either way.

You can use https://ente.com/ (it's open-source). It also makes the seemingly much better decision of storing photos in S3.

> I don't want yet another self hosted service to manage

Isn't system administration a solved problem now with LLMs? At least for these simple problem domains?

You can have immich on truenas that has the whole pool encrypted, same goes with opencloud for other docs/files. Plus all nas backup features, I think it’s a better approach than dealing with each app encryption.

Edit: regarding cloud based backup, besides the usual privacy and security concerns, you can’t guarantee the fixed price, you might subscribe now and pay for a year, next year you have the typical “oops, operation cost are high we have to raise the prices or shutdown” blog post and now you’re stuck again, download, find another, upload, etc.

VPN (or other) Tunnel.

That's the objective answer. There's no mystery here. That's exactly how you get what you want and it's not too hard. Not trying to dunk on you or anyone one but this is an easily solved problem, and I think I want to highlight it like this to make sure everyone understands.

Anything web/internet/network service thing, you can add this on. This composability is important to remember in software, this even goes back to "The Unix Way" type stuff.

[dead]