Docker-Immich/docker-compose.yml

name: immich

services:
  server:
    image: ghcr.io/immich-app/immich-server:v1.133.1
    container_name: immich_server
    # extends:
    #   file: hwaccel.transcoding.yml
    #   service: cpu # set to one of [nvenc, quicksync, rkmpp, vaapi, vaapi-wsl] for accelerated transcoding
    user: 10002:10002
    depends_on:
      - redis
      - db_pg17
    restart: unless-stopped
    healthcheck:
      disable: false
    volumes:
      - photos:/usr/src/app/upload
      - /etc/localtime:/etc/localtime:ro
    #ports:
      #- 2283:2283
    networks:
      - internal
      - proxy
    environment:
      DB_HOSTNAME: db_pg17
      DB_DATABASE_NAME_FILE: /run/secrets/db_name
      DB_USERNAME_FILE: /run/secrets/db_user
      DB_PASSWORD_FILE: /run/secrets/db_pass
    secrets:
      - db_name
      - db_user
      - db_pass
    

  machine-learning:
    # For hardware acceleration, add one of -[armnn, cuda, openvino] to the image tag.
    # Example tag: ${IMMICH_VERSION:-release}-cuda
    image: ghcr.io/immich-app/immich-machine-learning:v1.133.1
    container_name: immich_machine_learning
    # extends: # uncomment this section for hardware acceleration - see https://immich.app/docs/features/ml-hardware-acceleration
    #   file: hwaccel.ml.yml
    #   service: cpu # set to one of [armnn, cuda, openvino, openvino-wsl] for accelerated inference - use the `-wsl` version for WSL2 where applicable
    restart: unless-stopped
    healthcheck:
      disable: false
    volumes:
      - model-cache:/cache
    networks:
      - internal

  redis:
    container_name: immich_redis
    image: docker.io/valkey/valkey:8-bookworm@sha256:ff21bc0f8194dc9c105b769aeabf9585fea6a8ed649c0781caeac5cb3c247884
    restart: unless-stopped
    healthcheck:
      test: redis-cli ping || exit 1
    networks:
      - internal

  db:
    image: ghcr.io/immich-app/postgres:14-vectorchord0.3.0-pgvector0.8.0
    container_name: immich_db_pg14
    restart: unless-stopped
    healthcheck:
      test: [ CMD-SHELL,
        "pg_isready -d `cat $$POSTGRES_DB_FILE` -U `cat $$POSTGRES_USER_FILE` || exit 1;",
        "Chksum=$$(psql -d `cat $$POSTGRES_DB_FILE` -U `cat $$POSTGRES_USER_FILE` --tuples-only --no-align --command='SELECT COALESCE(SUM(checksum_failures), 0) FROM pg_stat_database');",
        "echo 'checksum failure count is $$Chksum';",
        "[[ $$Chksum = '0' ]] || exit 1"
      ]
      interval: 5m
      start_interval: 30s
      start_period: 5m
    volumes:
      - db:/var/lib/postgresql/data    
      - db_dump:/dbdump
    networks:
      - internal
    environment:
      POSTGRES_DB_FILE: /run/secrets/db_name
      POSTGRES_USER_FILE: /run/secrets/db_user
      POSTGRES_PASSWORD_FILE: /run/secrets/db_pass
      POSTGRES_INITDB_ARGS: '--data-checksums'
      # Uncomment the DB_STORAGE_TYPE: 'HDD' var if your database isn't stored on SSDs
      # DB_STORAGE_TYPE: 'HDD'
    secrets:
      - db_name
      - db_user
      - db_pass

  db_pg17:
    image: ghcr.io/immich-app/postgres:17-vectorchord0.3.0-pgvector0.8.0
    container_name: immich_db_pg17
    restart: unless-stopped
    healthcheck:
      test: [ CMD-SHELL,
        "pg_isready -d `cat $$POSTGRES_DB_FILE` -U `cat $$POSTGRES_USER_FILE` || exit 1;",
        "Chksum=$$(psql -d `cat $$POSTGRES_DB_FILE` -U `cat $$POSTGRES_USER_FILE` --tuples-only --no-align --command='SELECT COALESCE(SUM(checksum_failures), 0) FROM pg_stat_database');",
        "echo 'checksum failure count is $$Chksum';",
        "[[ $$Chksum = '0' ]] || exit 1"
      ]
      interval: 5m
      start_interval: 30s
      start_period: 5m
    volumes:
      - db_pg17:/var/lib/postgresql/data
      - db_dump:/dbdump
    networks:
      - internal
    environment:
      POSTGRES_DB_FILE: /run/secrets/db_name
      POSTGRES_USER_FILE: /run/secrets/db_user
      POSTGRES_PASSWORD_FILE: /run/secrets/db_pass
      POSTGRES_INITDB_ARGS: '--data-checksums'
      # Uncomment the DB_STORAGE_TYPE: 'HDD' var if your database isn't stored on SSDs
      # DB_STORAGE_TYPE: 'HDD'
    secrets:
      - db_name
      - db_user
      - db_pass

volumes:
  model-cache:
    name: immich_model_cache
  db:
    name: immich_db
  db_pg17:
    name: immich_db_pg17
  db_dump:
    name: immich_db_dump
  photos:
    name: immich_photos
    driver_opts:
      type: "nfs"
      o: "addr=data.akumatic.eu,nfsvers=4"
      device: ":/mnt/data/services/photos"

networks:
  internal:
    name: immich-internal
  proxy:
    name: proxy-immich
    external: true

secrets:
  db_name:
    file: /srv/docker/secrets/immich/db/name.txt
  db_user:
    file: /srv/docker/secrets/immich/db/user.txt
  db_pass:
    file: /srv/docker/secrets/immich/db/pass.key