initial docker setup

project/media/immich/immich.yml

@@ -0,0 +1,62 @@
+services:
+  immich-server:
+    extends:
+      file: ${TEMPLATES_PATH}
+      service: default
+    container_name: immich_server
+    image: ghcr.io/immich-app/immich-server:release
+    command: [ "start.sh", "immich" ]
+    environment:
+      DB_PASSWORD: ${IMMICH_DB_PASSWORD}
+      DB_HOSTNAME: postgres-with-pg-vector
+      DB_USERNAME: immich
+      DB_DATABASE_NAME: immich
+      REDIS_HOSTNAME: redis
+    volumes:
+      - ${MEDIA_PATH}/immich/data/library:/usr/src/app/upload
+      - /etc/localtime:/etc/localtime:ro
+    ports:
+      - 2283:3001
+    labels:
+      # Watchtower
+      - "com.centurylinklabs.watchtower.enable=true"
+      # Traefik
+      - "traefik.enable=true"
+      - "traefik.http.routers.immich-server.rule=Host(`immich.${PUBLIC_DOMAIN}`)"
+      - "traefik.http.routers.immich-server.entrypoints=https"
+      - "traefik.http.routers.immich-server.tls.certresolver=myresolver"
+      - 'traefik.http.routers.immich-server.tls=true'
+      # Middlewares
+      - "traefik.http.routers.immich-server.middlewares=authelia@file,crowdsec-bouncer@file"
+
+  immich-microservices:
+    extends:
+      file: ${TEMPLATES_PATH}
+      service: default
+    container_name: immich_microservices
+    image: ghcr.io/immich-app/immich-server:release
+    command: [ "start.sh", "microservices" ]
+    environment:
+      DB_PASSWORD: ${IMMICH_DB_PASSWORD}
+      DB_HOSTNAME: postgres-with-pg-vector
+      DB_USERNAME: immich
+      DB_DATABASE_NAME: immich
+      REDIS_HOSTNAME: redis
+    volumes:
+      - ${MEDIA_PATH}/immich/data/library:/usr/src/app/upload
+      - /etc/localtime:/etc/localtime:ro
+    labels:
+      # Watchtower
+      - "com.centurylinklabs.watchtower.enable=true"
+
+  immich-machine-learning:
+    extends:
+      file: ${TEMPLATES_PATH}
+      service: default
+    container_name: immich_machine_learning
+    image: ghcr.io/immich-app/immich-machine-learning:release
+    volumes:
+      - ${MEDIA_PATH}/immich/data/model-cache:/cache
+    labels:
+      # Watchtower
+      - "com.centurylinklabs.watchtower.enable=true"