app:
  id: immich
  name: Immich
  version: "2.7.4"
  description: Self-hosted photo and video backup with mobile apps and search.

  # app_id "immich" = the user-facing launcher (matches the catalog entry's title
  # + icon). The container is named "immich_server" so it matches the runtime's
  # existing per-app container references (lifecycle/health/crash-recovery/ports);
  # `container_name` is a top-level app key (captured by serde(flatten) into
  # extensions, read by compute_container_name). It reaches its backends by their
  # underscore aliases on archy-net (DB_HOSTNAME / REDIS_HOSTNAME below).
  container_name: immich_server

  container:
    image: 146.59.87.168:3000/lfg2025/immich-server:release
    pull_policy: if-not-present
    network: archy-net
    secret_env:
      - key: DB_PASSWORD
        secret_file: immich-db-password

  dependencies:
    - app_id: immich-postgres
    - app_id: immich-redis
    - storage: 200Gi

  resources:
    memory_limit: 2Gi
    disk_limit: 200Gi

  security:
    capabilities: []
    readonly_root: false
    network_policy: isolated

  ports:
    - host: 2283
      container: 2283
      protocol: tcp

  volumes:
    - type: bind
      source: /var/lib/archipelago/immich
      target: /usr/src/app/upload
      options: [rw]

  environment:
    - DB_HOSTNAME=immich_postgres
    - DB_USERNAME=postgres
    - DB_DATABASE_NAME=immich
    - REDIS_HOSTNAME=immich_redis
    - UPLOAD_LOCATION=/usr/src/app/upload

  health_check:
    type: http
    endpoint: http://localhost:2283
    path: /api/server/ping
    interval: 30s
    timeout: 5s
    retries: 20

  interfaces:
    main:
      name: Web UI
      description: Immich photo library
      type: ui
      port: 2283
      protocol: http
      path: /

  metadata:
    launch:
      open_in_new_tab: true