Homelab · Návody NÁVOD 5. mája 2026 · 8 min čítania

Immich — inštalácia na Synology NAS, Linux a Windows

Kompletný návod na inštaláciu Immich cez Docker a Portainer. Vlastná náhrada Google Photos na tvojom NAS alebo serveri — bez cloudu, bez predplatného, so zálohou priamo z mobilu.

Immich je self-hosted správca fotiek a videí — rozhranie podobné Google Photos, automatická záloha z mobilu cez Android aj iOS appku, rozpoznávanie tvárí, mapa a časová os. Všetko beží na tvojom hardvéri, dáta zostávajú u teba. Tu je postup ako to celé rozbehnúť.

Čo potrebuješ

Predpoklady

Docker a Portainer nainštalované na tvojom zariadení — Synology NAS, Linux server alebo Windows PC s Docker Desktop. Na Synology: UID a GID tvojho DSM používateľa (zistíš v Portainer → Users, alebo cez SSH príkazom id [username]). Dostatok miesta na disku — samotné Docker obrazy zaberajú ~4 GB.

1. Vytvor priečinky

Synology NAS (File Station) — v /volume1/docker/ vytvor priečinok immich, v ňom šesť podpriečinkov: cache, db, matplotlib, micro, redis, upload.

Linux (SSH):

mkdir -p ~/docker/immich/{cache,db,matplotlib,micro,redis,upload}

Windows (Prieskumník) — vytvor C:\docker\immich\ a v ňom podpriečinky: cache, db, matplotlib, micro, redis, upload.

2. Docker Compose stack

V Portainer: Stacks → Add stack → Web editor. Vyber svoju platformu a skopíruj stack:

services:
  immich-redis:
    image: redis
    container_name: Immich-REDIS
    hostname: immich-redis
    security_opt:
      - no-new-privileges:true
    healthcheck:
      test: ["CMD-SHELL", "redis-cli ping || exit 1"]
    user: 1026:100
    environment:
      - TZ=Europe/Bratislava
    volumes:
      - /volume1/docker/immich/redis:/data:rw
    restart: on-failure:5

  immich-db:
    image: ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0
    container_name: Immich-DB
    hostname: immich-db
    security_opt:
      - no-new-privileges:true
    healthcheck:
      test: ["CMD", "pg_isready", "-q", "-d", "immich", "-U", "immichuser"]
      interval: 10s
      timeout: 5s
      retries: 5
    shm_size: 128mb
    volumes:
      - /volume1/docker/immich/db:/var/lib/postgresql/data:rw
    environment:
      - TZ=Europe/Bratislava
      - POSTGRES_DB=immich
      - POSTGRES_USER=immichuser
      - POSTGRES_PASSWORD=zmenHeslo123
    restart: on-failure:5

  immich-server:
    image: ghcr.io/immich-app/immich-server:release
    container_name: Immich-SERVER
    hostname: immich-server
    user: 1026:100
    security_opt:
      - no-new-privileges:true
    environment:
      - TZ=Europe/Bratislava
      - DB_HOSTNAME=immich-db
      - DB_USERNAME=immichuser
      - DB_PASSWORD=zmenHeslo123
      - DB_DATABASE_NAME=immich
      - REDIS_HOSTNAME=immich-redis
      - JWT_SECRET=zmenNaVlastnyToken
    ports:
      - 8212:2283
    volumes:
      - /volume1/docker/immich/upload:/usr/src/app/upload:rw
    restart: on-failure:5
    depends_on:
      immich-redis:
        condition: service_healthy
      immich-db:
        condition: service_started

  immich-machine-learning:
    image: ghcr.io/immich-app/immich-machine-learning:release
    container_name: Immich-LEARNING
    hostname: immich-machine-learning
    user: 1026:100
    security_opt:
      - no-new-privileges:true
    environment:
      - TZ=Europe/Bratislava
      - DB_HOSTNAME=immich-db
      - DB_USERNAME=immichuser
      - DB_PASSWORD=zmenHeslo123
      - DB_DATABASE_NAME=immich
      - REDIS_HOSTNAME=immich-redis
      - MPLCONFIGDIR=/matplotlib
    volumes:
      - /volume1/docker/immich/upload:/usr/src/app/upload:rw
      - /volume1/docker/immich/cache:/cache:rw
      - /volume1/docker/immich/matplotlib:/matplotlib:rw
    restart: on-failure:5
    depends_on:
      immich-db:
        condition: service_started

services:
  immich-redis:
    image: redis
    container_name: Immich-REDIS
    hostname: immich-redis
    security_opt:
      - no-new-privileges:true
    healthcheck:
      test: ["CMD-SHELL", "redis-cli ping || exit 1"]
    user: 1000:1000
    environment:
      - TZ=Europe/Bratislava
    volumes:
      - ~/docker/immich/redis:/data:rw
    restart: on-failure:5

  immich-db:
    image: ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0
    container_name: Immich-DB
    hostname: immich-db
    security_opt:
      - no-new-privileges:true
    healthcheck:
      test: ["CMD", "pg_isready", "-q", "-d", "immich", "-U", "immichuser"]
      interval: 10s
      timeout: 5s
      retries: 5
    shm_size: 128mb
    volumes:
      - ~/docker/immich/db:/var/lib/postgresql/data:rw
    environment:
      - TZ=Europe/Bratislava
      - POSTGRES_DB=immich
      - POSTGRES_USER=immichuser
      - POSTGRES_PASSWORD=zmenHeslo123
    restart: on-failure:5

  immich-server:
    image: ghcr.io/immich-app/immich-server:release
    container_name: Immich-SERVER
    hostname: immich-server
    user: 1000:1000
    security_opt:
      - no-new-privileges:true
    environment:
      - TZ=Europe/Bratislava
      - DB_HOSTNAME=immich-db
      - DB_USERNAME=immichuser
      - DB_PASSWORD=zmenHeslo123
      - DB_DATABASE_NAME=immich
      - REDIS_HOSTNAME=immich-redis
      - JWT_SECRET=zmenNaVlastnyToken
    ports:
      - 8212:2283
    volumes:
      - ~/docker/immich/upload:/usr/src/app/upload:rw
    restart: on-failure:5
    depends_on:
      immich-redis:
        condition: service_healthy
      immich-db:
        condition: service_started

  immich-machine-learning:
    image: ghcr.io/immich-app/immich-machine-learning:release
    container_name: Immich-LEARNING
    hostname: immich-machine-learning
    user: 1000:1000
    security_opt:
      - no-new-privileges:true
    environment:
      - TZ=Europe/Bratislava
      - DB_HOSTNAME=immich-db
      - DB_USERNAME=immichuser
      - DB_PASSWORD=zmenHeslo123
      - DB_DATABASE_NAME=immich
      - REDIS_HOSTNAME=immich-redis
      - MPLCONFIGDIR=/matplotlib
    volumes:
      - ~/docker/immich/upload:/usr/src/app/upload:rw
      - ~/docker/immich/cache:/cache:rw
      - ~/docker/immich/matplotlib:/matplotlib:rw
    restart: on-failure:5
    depends_on:
      immich-db:
        condition: service_started

services:
  immich-redis:
    image: redis
    container_name: Immich-REDIS
    hostname: immich-redis
    healthcheck:
      test: ["CMD-SHELL", "redis-cli ping || exit 1"]
    environment:
      - TZ=Europe/Bratislava
    volumes:
      - C:/docker/immich/redis:/data:rw
    restart: on-failure:5

  immich-db:
    image: ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0
    container_name: Immich-DB
    hostname: immich-db
    healthcheck:
      test: ["CMD", "pg_isready", "-q", "-d", "immich", "-U", "immichuser"]
      interval: 10s
      timeout: 5s
      retries: 5
    shm_size: 128mb
    volumes:
      - pgdata:/var/lib/postgresql/data:rw
    environment:
      - TZ=Europe/Bratislava
      - POSTGRES_DB=immich
      - POSTGRES_USER=immichuser
      - POSTGRES_PASSWORD=zmenHeslo123
    restart: on-failure:5

  immich-server:
    image: ghcr.io/immich-app/immich-server:release
    container_name: Immich-SERVER
    hostname: immich-server
    environment:
      - TZ=Europe/Bratislava
      - DB_HOSTNAME=immich-db
      - DB_USERNAME=immichuser
      - DB_PASSWORD=zmenHeslo123
      - DB_DATABASE_NAME=immich
      - REDIS_HOSTNAME=immich-redis
      - JWT_SECRET=zmenNaVlastnyToken
    ports:
      - 8212:2283
    volumes:
      - C:/docker/immich/upload:/usr/src/app/upload:rw
    restart: on-failure:5
    depends_on:
      immich-redis:
        condition: service_healthy
      immich-db:
        condition: service_started

  immich-machine-learning:
    image: ghcr.io/immich-app/immich-machine-learning:release
    container_name: Immich-LEARNING
    hostname: immich-machine-learning
    environment:
      - TZ=Europe/Bratislava
      - DB_HOSTNAME=immich-db
      - DB_USERNAME=immichuser
      - DB_PASSWORD=zmenHeslo123
      - DB_DATABASE_NAME=immich
      - REDIS_HOSTNAME=immich-redis
      - MPLCONFIGDIR=/matplotlib
    volumes:
      - C:/docker/immich/upload:/usr/src/app/upload:rw
      - C:/docker/immich/cache:/cache:rw
      - C:/docker/immich/matplotlib:/matplotlib:rw
    restart: on-failure:5
    depends_on:
      immich-db:
        condition: service_started

volumes:
  pgdata:

⚠️ UID a GID na Synology NAS

V stacku je nastavené user: 1026:100 — toto sú príklady. Zmeň ich na svoje skutočné hodnoty. UID a GID svojho DSM používateľa zistíš v Portainer → Users, alebo cez SSH príkazom id [meno_používateľa]. Na Windows a Linux variantoch nie je user: potrebný.

Windows — prečo pgdata volume

PostgreSQL databáza na Windows vyžaduje Docker named volume (pgdata) namiesto bind mount — bind mount na Windows spôsobuje problémy s oprávneniami súborového systému. Named volume je deklarovaný v sekcii volumes: na konci stacku.

Zmeň heslo v DB_PASSWORD a POSTGRES_PASSWORD na vlastné. Klikni Deploy the stack a počkaj na správu "Success Stack successfully deployed".

3. JWT Secret

Pred nasadením stacku nahraď hodnotu zmenNaVlastnyToken pri JWT_SECRET vlastným bezpečným tokenom. Použi náš Token Generator — nastav dĺžku na 128 znakov.

Prečo JWT Secret

JWT Secret slúži na podpisovanie prihlasovacích tokenov. Ak použiješ predvolený alebo slabý secret, útočník môže sfalšovať session. Vygeneruj unikátny náhodný reťazec — raz nastavený sa nemení (zmena odhlási všetkých používateľov).

4. Prvé spustenie

Po úspešnom deploy počkaj 2 minúty — Immich sa inicializuje a sťahuje ML modely. Potom otvor v prehliadači http://[IP-tvojho-servera]:8212 a klikni Getting Started.

Ak chceš mať Immich dostupný aj z internetu, nastav FQDN (plne kvalifikované doménové meno) v Administration → System Settings → Server → Server external domain — napr. https://photos.tvojadomena.sk. Odporúčaný spôsob ako doménu bezpečne sprístupniť bez otvárania portov na routeri je cez Cloudflare Tunnel.

⚠️ Prázdna stránka alebo chyba pripojenia

Immich sa ešte inicializuje — prvé spustenie trvá 1–3 minúty. Obnoví stránku po chvíli. Ak problém pretrváva, skontroluj logy kontajnera Immich-SERVER v Portainer.

5. Setup Wizard krok za krokom

Vytvor admin účet — zadaj email a heslo, klikni Sign Up. Potom sa prihlás a prejdi úvodným wizardom:

Wizard — odporúčané nastavenia

Theme — vyber farebnú tému rozhrania

Language — vyber jazyk rozhrania

Server Privacy — zapni Map (zobrazenie fotiek na mape podľa GPS) a Version Check (upozornenia na nové verzie)

User Privacy — nastav predvolené súkromie pre nových používateľov

Storage Template — definuje ako budú fotky ukladané na disk (voliteľné, predvolené nastavenie je funkčné)

Backups — nastav automatické zálohy databázy

Mobile App — zobrazia sa inštrukcie na prepojenie s mobilnou appkou

6. Mobilná appka

Stiahni Immich z Google Play alebo App Store. Po inštalácii zadaj adresu svojho servera — http://[IP]:8212 — a prihlasovacie údaje. V nastaveniach appky zapni automatickú zálohu (Backup) a vyber ktoré albumy zo zariadenia sa majú synchronizovať.

Tip — prístup z internetu

Ak chceš zálohovať fotky aj mimo domácej siete, spáruj Immich s Cloudflare Tunnel. Appka bude fungovať cez vlastnú doménu kdekoľvek — bez otvárania portov na routeri.

Troubleshooting

⚠️ Chyba oprávnení na Synology NAS

Fotky sa nevedia uložiť alebo kontajner padá — skontroluj user: UID:GID v stacku. Hodnoty musia zodpovedať skutočnému DSM používateľovi ktorý vlastní priečinok /volume1/docker/immich/.

⚠️ Machine learning kontajner sa nespúšťa

Immich-LEARNING vyžaduje viac RAM — odporúčané minimum je 4 GB voľnej pamäte. Na slabšom NAS môže byť pomalý alebo nestabilný. Logy skontroluj v Portainer → Containers → Immich-LEARNING → Logs.

Homelab · Anleitungen ANLEITUNG 5. Mai 2026 · 8 Min. Lesezeit

Immich — Installation auf Synology NAS, Linux und Windows

Vollständige Anleitung zur Immich-Installation via Docker und Portainer. Eigener Google Photos-Ersatz auf deinem NAS oder Server — ohne Cloud, ohne Abo, mit automatischer Sicherung vom Smartphone.

Immich ist eine selbst gehostete Foto- und Videoverwaltung — mit einer Oberfläche ähnlich Google Photos, automatischem Backup vom Smartphone via Android- und iOS-App, Gesichtserkennung, Karte und Zeitachse. Alle Daten bleiben auf deiner Hardware. Hier ist die Schritt-für-Schritt-Anleitung.

Was du brauchst

Voraussetzungen

Docker und Portainer installiert — ob Synology NAS, Linux-Server oder Windows-PC mit Docker Desktop. Auf Synology: UID und GID deines DSM-Benutzers (in Portainer → Users einsehbar, oder per SSH mit id [benutzername]). Ausreichend Speicherplatz — die Docker-Images benötigen ca. 4 GB.

1. Verzeichnisse erstellen

Synology NAS (File Station) — erstelle in /volume1/docker/ den Ordner immich mit sechs Unterordnern: cache, db, matplotlib, micro, redis, upload.

Linux (SSH):

mkdir -p ~/docker/immich/{cache,db,matplotlib,micro,redis,upload}

Windows (Explorer) — erstelle C:\docker\immich\ mit den Unterordnern: cache, db, matplotlib, micro, redis, upload.

2. Docker Compose Stack

In Portainer: Stacks → Add stack → Web editor. Plattform wählen und Stack einfügen:

services:
  immich-redis:
    image: redis
    container_name: Immich-REDIS
    hostname: immich-redis
    security_opt:
      - no-new-privileges:true
    healthcheck:
      test: ["CMD-SHELL", "redis-cli ping || exit 1"]
    user: 1026:100
    environment:
      - TZ=Europe/Berlin
    volumes:
      - /volume1/docker/immich/redis:/data:rw
    restart: on-failure:5

  immich-db:
    image: ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0
    container_name: Immich-DB
    hostname: immich-db
    security_opt:
      - no-new-privileges:true
    healthcheck:
      test: ["CMD", "pg_isready", "-q", "-d", "immich", "-U", "immichuser"]
      interval: 10s
      timeout: 5s
      retries: 5
    shm_size: 128mb
    volumes:
      - /volume1/docker/immich/db:/var/lib/postgresql/data:rw
    environment:
      - TZ=Europe/Berlin
      - POSTGRES_DB=immich
      - POSTGRES_USER=immichuser
      - POSTGRES_PASSWORD=aenderePasswort123
    restart: on-failure:5

  immich-server:
    image: ghcr.io/immich-app/immich-server:release
    container_name: Immich-SERVER
    hostname: immich-server
    user: 1026:100
    security_opt:
      - no-new-privileges:true
    environment:
      - TZ=Europe/Berlin
      - DB_HOSTNAME=immich-db
      - DB_USERNAME=immichuser
      - DB_PASSWORD=aenderePasswort123
      - DB_DATABASE_NAME=immich
      - REDIS_HOSTNAME=immich-redis
      - JWT_SECRET=aendereZuEigenemToken
    ports:
      - 8212:2283
    volumes:
      - /volume1/docker/immich/upload:/usr/src/app/upload:rw
    restart: on-failure:5
    depends_on:
      immich-redis:
        condition: service_healthy
      immich-db:
        condition: service_started

  immich-machine-learning:
    image: ghcr.io/immich-app/immich-machine-learning:release
    container_name: Immich-LEARNING
    hostname: immich-machine-learning
    user: 1026:100
    security_opt:
      - no-new-privileges:true
    environment:
      - TZ=Europe/Berlin
      - DB_HOSTNAME=immich-db
      - DB_USERNAME=immichuser
      - DB_PASSWORD=aenderePasswort123
      - DB_DATABASE_NAME=immich
      - REDIS_HOSTNAME=immich-redis
      - MPLCONFIGDIR=/matplotlib
    volumes:
      - /volume1/docker/immich/upload:/usr/src/app/upload:rw
      - /volume1/docker/immich/cache:/cache:rw
      - /volume1/docker/immich/matplotlib:/matplotlib:rw
    restart: on-failure:5
    depends_on:
      immich-db:
        condition: service_started

services:
  immich-redis:
    image: redis
    container_name: Immich-REDIS
    hostname: immich-redis
    security_opt:
      - no-new-privileges:true
    healthcheck:
      test: ["CMD-SHELL", "redis-cli ping || exit 1"]
    user: 1000:1000
    environment:
      - TZ=Europe/Berlin
    volumes:
      - ~/docker/immich/redis:/data:rw
    restart: on-failure:5

  immich-db:
    image: ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0
    container_name: Immich-DB
    hostname: immich-db
    security_opt:
      - no-new-privileges:true
    healthcheck:
      test: ["CMD", "pg_isready", "-q", "-d", "immich", "-U", "immichuser"]
      interval: 10s
      timeout: 5s
      retries: 5
    shm_size: 128mb
    volumes:
      - ~/docker/immich/db:/var/lib/postgresql/data:rw
    environment:
      - TZ=Europe/Berlin
      - POSTGRES_DB=immich
      - POSTGRES_USER=immichuser
      - POSTGRES_PASSWORD=aenderePasswort123
    restart: on-failure:5

  immich-server:
    image: ghcr.io/immich-app/immich-server:release
    container_name: Immich-SERVER
    hostname: immich-server
    user: 1000:1000
    security_opt:
      - no-new-privileges:true
    environment:
      - TZ=Europe/Berlin
      - DB_HOSTNAME=immich-db
      - DB_USERNAME=immichuser
      - DB_PASSWORD=aenderePasswort123
      - DB_DATABASE_NAME=immich
      - REDIS_HOSTNAME=immich-redis
      - JWT_SECRET=aendereZuEigenemToken
    ports:
      - 8212:2283
    volumes:
      - ~/docker/immich/upload:/usr/src/app/upload:rw
    restart: on-failure:5
    depends_on:
      immich-redis:
        condition: service_healthy
      immich-db:
        condition: service_started

  immich-machine-learning:
    image: ghcr.io/immich-app/immich-machine-learning:release
    container_name: Immich-LEARNING
    hostname: immich-machine-learning
    user: 1000:1000
    security_opt:
      - no-new-privileges:true
    environment:
      - TZ=Europe/Berlin
      - DB_HOSTNAME=immich-db
      - DB_USERNAME=immichuser
      - DB_PASSWORD=aenderePasswort123
      - DB_DATABASE_NAME=immich
      - REDIS_HOSTNAME=immich-redis
      - MPLCONFIGDIR=/matplotlib
    volumes:
      - ~/docker/immich/upload:/usr/src/app/upload:rw
      - ~/docker/immich/cache:/cache:rw
      - ~/docker/immich/matplotlib:/matplotlib:rw
    restart: on-failure:5
    depends_on:
      immich-db:
        condition: service_started

services:
  immich-redis:
    image: redis
    container_name: Immich-REDIS
    hostname: immich-redis
    healthcheck:
      test: ["CMD-SHELL", "redis-cli ping || exit 1"]
    environment:
      - TZ=Europe/Berlin
    volumes:
      - C:/docker/immich/redis:/data:rw
    restart: on-failure:5

  immich-db:
    image: ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0
    container_name: Immich-DB
    hostname: immich-db
    healthcheck:
      test: ["CMD", "pg_isready", "-q", "-d", "immich", "-U", "immichuser"]
      interval: 10s
      timeout: 5s
      retries: 5
    shm_size: 128mb
    volumes:
      - pgdata:/var/lib/postgresql/data:rw
    environment:
      - TZ=Europe/Berlin
      - POSTGRES_DB=immich
      - POSTGRES_USER=immichuser
      - POSTGRES_PASSWORD=aenderePasswort123
    restart: on-failure:5

  immich-server:
    image: ghcr.io/immich-app/immich-server:release
    container_name: Immich-SERVER
    hostname: immich-server
    environment:
      - TZ=Europe/Berlin
      - DB_HOSTNAME=immich-db
      - DB_USERNAME=immichuser
      - DB_PASSWORD=aenderePasswort123
      - DB_DATABASE_NAME=immich
      - REDIS_HOSTNAME=immich-redis
      - JWT_SECRET=aendereZuEigenemToken
    ports:
      - 8212:2283
    volumes:
      - C:/docker/immich/upload:/usr/src/app/upload:rw
    restart: on-failure:5
    depends_on:
      immich-redis:
        condition: service_healthy
      immich-db:
        condition: service_started

  immich-machine-learning:
    image: ghcr.io/immich-app/immich-machine-learning:release
    container_name: Immich-LEARNING
    hostname: immich-machine-learning
    environment:
      - TZ=Europe/Berlin
      - DB_HOSTNAME=immich-db
      - DB_USERNAME=immichuser
      - DB_PASSWORD=aenderePasswort123
      - DB_DATABASE_NAME=immich
      - REDIS_HOSTNAME=immich-redis
      - MPLCONFIGDIR=/matplotlib
    volumes:
      - C:/docker/immich/upload:/usr/src/app/upload:rw
      - C:/docker/immich/cache:/cache:rw
      - C:/docker/immich/matplotlib:/matplotlib:rw
    restart: on-failure:5
    depends_on:
      immich-db:
        condition: service_started

volumes:
  pgdata:

⚠️ UID und GID auf Synology NAS

Im Stack ist user: 1026:100 als Beispiel eingetragen. Ersetze diese Werte durch deine eigenen. UID und GID deines DSM-Benutzers findest du in Portainer → Users oder per SSH mit id [benutzername].

Windows — warum pgdata Volume

PostgreSQL benötigt unter Windows ein Docker named Volume (pgdata) statt eines Bind Mounts — Bind Mounts verursachen unter Windows Dateisystem-Berechtigungsprobleme. Das Named Volume wird am Ende des Stacks in der Sektion volumes: deklariert.

Ersetze das Passwort bei DB_PASSWORD und POSTGRES_PASSWORD durch ein eigenes. Klicke Deploy the stack und warte auf "Success Stack successfully deployed".

3. JWT Secret

Ersetze vor dem Deployment den Wert aendereZuEigenemToken bei JWT_SECRET durch einen eigenen sicheren Token. Nutze unseren Token Generator — Länge auf 128 Zeichen setzen.

Warum JWT Secret wichtig ist

Der JWT Secret signiert Anmelde-Tokens. Ein schwacher Secret ermöglicht es Angreifern, Sessions zu fälschen. Einmal gesetzt sollte er nicht mehr geändert werden — eine Änderung meldet alle Benutzer ab.

4. Erster Start

Nach erfolgreichem Deployment 2 Minuten warten — Immich initialisiert sich und lädt ML-Modelle. Dann im Browser http://[Server-IP]:8212 öffnen und Getting Started klicken.

Wenn du Immich auch von außerhalb erreichbar machen möchtest, trage dein FQDN unter Administration → System Settings → Server → Server external domain ein — z. B. https://photos.deinedomain.de. Der empfohlene Weg, die Domain sicher ohne Port-Freigabe am Router erreichbar zu machen, ist ein Cloudflare Tunnel.

⚠️ Leere Seite oder Verbindungsfehler

Immich initialisiert sich noch — der erste Start dauert 1–3 Minuten. Seite nach kurzer Zeit neu laden. Falls das Problem anhält, Logs des Containers Immich-SERVER in Portainer prüfen.

5. Setup-Wizard Schritt für Schritt

Admin-Konto erstellen — E-Mail und Passwort eingeben, Sign Up klicken. Anschließend einloggen und den Einrichtungsassistenten durchlaufen:

Wizard — empfohlene Einstellungen

Theme — Farbschema der Oberfläche wählen

Language — Sprache der Oberfläche festlegen

Server Privacy — Map aktivieren (Fotos auf Karte nach GPS-Daten) und Version Check (Hinweise auf neue Versionen)

User Privacy — Standard-Datenschutz für neue Benutzer festlegen

Storage Template — definiert die Ordnerstruktur beim Speichern (optional, Standard funktioniert)

Backups — automatische Datenbank-Backups einrichten

Mobile App — Anleitung zur Verknüpfung mit der mobilen App

6. Mobile App

Immich aus dem Google Play Store oder App Store herunterladen. Nach der Installation Server-Adresse eingeben — http://[IP]:8212 — und anmelden. In den App-Einstellungen automatisches Backup aktivieren und gewünschte Alben auswählen.

Tipp — Zugriff aus dem Internet

Für Backups unterwegs Immich mit Cloudflare Tunnel verbinden. Die App funktioniert dann über eine eigene Domain von überall — ohne Port-Freigabe am Router.

Troubleshooting

⚠️ Berechtigungsfehler auf Synology NAS

Fotos lassen sich nicht speichern oder Container stürzt ab — user: UID:GID im Stack prüfen. Die Werte müssen dem DSM-Benutzer entsprechen, der den Ordner /volume1/docker/immich/ besitzt.

⚠️ Machine-Learning-Container startet nicht

Immich-LEARNING benötigt mehr RAM — empfohlen sind mindestens 4 GB freier Arbeitsspeicher. Auf schwächeren NAS-Geräten kann er langsam oder instabil sein. Logs in Portainer → Containers → Immich-LEARNING → Logs prüfen.

Homelab · Guides GUIDE May 5, 2026 · 8 min read

Immich — installation on Synology NAS, Linux and Windows

Complete guide to installing Immich via Docker and Portainer. Your own Google Photos replacement on your NAS or server — no cloud, no subscription, with automatic backup directly from your phone.

Immich is a self-hosted photo and video manager — with an interface similar to Google Photos, automatic backup from your phone via Android and iOS apps, facial recognition, map and timeline views. All data stays on your hardware. Here is the step-by-step setup.

What you need

Prerequisites

Docker and Portainer installed on your device — Synology NAS, Linux server or Windows PC with Docker Desktop. On Synology: UID and GID of your DSM user (check in Portainer → Users or via SSH with id [username]). Enough disk space — Docker images take approximately 4 GB.

1. Create folders

Synology NAS (File Station) — in /volume1/docker/ create the folder immich with six subfolders: cache, db, matplotlib, micro, redis, upload.

Linux (SSH):

mkdir -p ~/docker/immich/{cache,db,matplotlib,micro,redis,upload}

Windows (Explorer) — create C:\docker\immich\ with subfolders: cache, db, matplotlib, micro, redis, upload.

2. Docker Compose stack

In Portainer: Stacks → Add stack → Web editor. Select your platform and paste the stack:

services:
  immich-redis:
    image: redis
    container_name: Immich-REDIS
    hostname: immich-redis
    security_opt:
      - no-new-privileges:true
    healthcheck:
      test: ["CMD-SHELL", "redis-cli ping || exit 1"]
    user: 1026:100
    environment:
      - TZ=Europe/London
    volumes:
      - /volume1/docker/immich/redis:/data:rw
    restart: on-failure:5

  immich-db:
    image: ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0
    container_name: Immich-DB
    hostname: immich-db
    security_opt:
      - no-new-privileges:true
    healthcheck:
      test: ["CMD", "pg_isready", "-q", "-d", "immich", "-U", "immichuser"]
      interval: 10s
      timeout: 5s
      retries: 5
    shm_size: 128mb
    volumes:
      - /volume1/docker/immich/db:/var/lib/postgresql/data:rw
    environment:
      - TZ=Europe/London
      - POSTGRES_DB=immich
      - POSTGRES_USER=immichuser
      - POSTGRES_PASSWORD=changePassword123
    restart: on-failure:5

  immich-server:
    image: ghcr.io/immich-app/immich-server:release
    container_name: Immich-SERVER
    hostname: immich-server
    user: 1026:100
    security_opt:
      - no-new-privileges:true
    environment:
      - TZ=Europe/London
      - DB_HOSTNAME=immich-db
      - DB_USERNAME=immichuser
      - DB_PASSWORD=changePassword123
      - DB_DATABASE_NAME=immich
      - REDIS_HOSTNAME=immich-redis
      - JWT_SECRET=changeToYourOwnToken
    ports:
      - 8212:2283
    volumes:
      - /volume1/docker/immich/upload:/usr/src/app/upload:rw
    restart: on-failure:5
    depends_on:
      immich-redis:
        condition: service_healthy
      immich-db:
        condition: service_started

  immich-machine-learning:
    image: ghcr.io/immich-app/immich-machine-learning:release
    container_name: Immich-LEARNING
    hostname: immich-machine-learning
    user: 1026:100
    security_opt:
      - no-new-privileges:true
    environment:
      - TZ=Europe/London
      - DB_HOSTNAME=immich-db
      - DB_USERNAME=immichuser
      - DB_PASSWORD=changePassword123
      - DB_DATABASE_NAME=immich
      - REDIS_HOSTNAME=immich-redis
      - MPLCONFIGDIR=/matplotlib
    volumes:
      - /volume1/docker/immich/upload:/usr/src/app/upload:rw
      - /volume1/docker/immich/cache:/cache:rw
      - /volume1/docker/immich/matplotlib:/matplotlib:rw
    restart: on-failure:5
    depends_on:
      immich-db:
        condition: service_started

services:
  immich-redis:
    image: redis
    container_name: Immich-REDIS
    hostname: immich-redis
    security_opt:
      - no-new-privileges:true
    healthcheck:
      test: ["CMD-SHELL", "redis-cli ping || exit 1"]
    user: 1000:1000
    environment:
      - TZ=Europe/London
    volumes:
      - ~/docker/immich/redis:/data:rw
    restart: on-failure:5

  immich-db:
    image: ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0
    container_name: Immich-DB
    hostname: immich-db
    security_opt:
      - no-new-privileges:true
    healthcheck:
      test: ["CMD", "pg_isready", "-q", "-d", "immich", "-U", "immichuser"]
      interval: 10s
      timeout: 5s
      retries: 5
    shm_size: 128mb
    volumes:
      - ~/docker/immich/db:/var/lib/postgresql/data:rw
    environment:
      - TZ=Europe/London
      - POSTGRES_DB=immich
      - POSTGRES_USER=immichuser
      - POSTGRES_PASSWORD=changePassword123
    restart: on-failure:5

  immich-server:
    image: ghcr.io/immich-app/immich-server:release
    container_name: Immich-SERVER
    hostname: immich-server
    user: 1000:1000
    security_opt:
      - no-new-privileges:true
    environment:
      - TZ=Europe/London
      - DB_HOSTNAME=immich-db
      - DB_USERNAME=immichuser
      - DB_PASSWORD=changePassword123
      - DB_DATABASE_NAME=immich
      - REDIS_HOSTNAME=immich-redis
      - JWT_SECRET=changeToYourOwnToken
    ports:
      - 8212:2283
    volumes:
      - ~/docker/immich/upload:/usr/src/app/upload:rw
    restart: on-failure:5
    depends_on:
      immich-redis:
        condition: service_healthy
      immich-db:
        condition: service_started

  immich-machine-learning:
    image: ghcr.io/immich-app/immich-machine-learning:release
    container_name: Immich-LEARNING
    hostname: immich-machine-learning
    user: 1000:1000
    security_opt:
      - no-new-privileges:true
    environment:
      - TZ=Europe/London
      - DB_HOSTNAME=immich-db
      - DB_USERNAME=immichuser
      - DB_PASSWORD=changePassword123
      - DB_DATABASE_NAME=immich
      - REDIS_HOSTNAME=immich-redis
      - MPLCONFIGDIR=/matplotlib
    volumes:
      - ~/docker/immich/upload:/usr/src/app/upload:rw
      - ~/docker/immich/cache:/cache:rw
      - ~/docker/immich/matplotlib:/matplotlib:rw
    restart: on-failure:5
    depends_on:
      immich-db:
        condition: service_started

services:
  immich-redis:
    image: redis
    container_name: Immich-REDIS
    hostname: immich-redis
    healthcheck:
      test: ["CMD-SHELL", "redis-cli ping || exit 1"]
    environment:
      - TZ=Europe/London
    volumes:
      - C:/docker/immich/redis:/data:rw
    restart: on-failure:5

  immich-db:
    image: ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0
    container_name: Immich-DB
    hostname: immich-db
    healthcheck:
      test: ["CMD", "pg_isready", "-q", "-d", "immich", "-U", "immichuser"]
      interval: 10s
      timeout: 5s
      retries: 5
    shm_size: 128mb
    volumes:
      - pgdata:/var/lib/postgresql/data:rw
    environment:
      - TZ=Europe/London
      - POSTGRES_DB=immich
      - POSTGRES_USER=immichuser
      - POSTGRES_PASSWORD=changePassword123
    restart: on-failure:5

  immich-server:
    image: ghcr.io/immich-app/immich-server:release
    container_name: Immich-SERVER
    hostname: immich-server
    environment:
      - TZ=Europe/London
      - DB_HOSTNAME=immich-db
      - DB_USERNAME=immichuser
      - DB_PASSWORD=changePassword123
      - DB_DATABASE_NAME=immich
      - REDIS_HOSTNAME=immich-redis
      - JWT_SECRET=changeToYourOwnToken
    ports:
      - 8212:2283
    volumes:
      - C:/docker/immich/upload:/usr/src/app/upload:rw
    restart: on-failure:5
    depends_on:
      immich-redis:
        condition: service_healthy
      immich-db:
        condition: service_started

  immich-machine-learning:
    image: ghcr.io/immich-app/immich-machine-learning:release
    container_name: Immich-LEARNING
    hostname: immich-machine-learning
    environment:
      - TZ=Europe/London
      - DB_HOSTNAME=immich-db
      - DB_USERNAME=immichuser
      - DB_PASSWORD=changePassword123
      - DB_DATABASE_NAME=immich
      - REDIS_HOSTNAME=immich-redis
      - MPLCONFIGDIR=/matplotlib
    volumes:
      - C:/docker/immich/upload:/usr/src/app/upload:rw
      - C:/docker/immich/cache:/cache:rw
      - C:/docker/immich/matplotlib:/matplotlib:rw
    restart: on-failure:5
    depends_on:
      immich-db:
        condition: service_started

volumes:
  pgdata:

⚠️ UID and GID on Synology NAS

The stack uses user: 1026:100 as an example. Replace these with your actual values. Find your DSM user's UID and GID in Portainer → Users or via SSH with id [username]. The user: directive is not needed on Windows or Linux.

Windows — why pgdata volume

PostgreSQL on Windows requires a Docker named volume (pgdata) instead of a bind mount — bind mounts on Windows cause file system permission issues. The named volume is declared in the volumes: section at the bottom of the stack.

Change the password in DB_PASSWORD and POSTGRES_PASSWORD to your own. Click Deploy the stack and wait for "Success Stack successfully deployed".

3. JWT Secret

Before deploying, replace changeToYourOwnToken in JWT_SECRET with a secure token of your own. Use our Token Generator — set the length to 128 characters.

Why JWT Secret matters

The JWT Secret signs authentication tokens. A weak secret allows attackers to forge sessions. Generate a unique random string — once set, avoid changing it as doing so will log out all users.

4. First run

After a successful deployment, wait 2 minutes — Immich initialises and downloads ML models. Then open http://[your-server-ip]:8212 in your browser and click Getting Started.

If you want Immich accessible from outside your home network, set your FQDN under Administration → System Settings → Server → Server external domain — for example https://photos.yourdomain.com. The recommended way to expose it securely without opening ports on your router is via a Cloudflare Tunnel.

⚠️ Blank page or connection error

Immich is still initialising — first startup takes 1–3 minutes. Reload the page after a moment. If the problem persists, check the logs of the Immich-SERVER container in Portainer.

5. Setup Wizard step by step

Create an admin account — enter your email and password, click Sign Up. Then log in and go through the setup wizard:

Wizard — recommended settings

Theme — choose the interface colour theme

Language — select the interface language

Server Privacy — enable Map (photos on a map based on GPS data) and Version Check (notifications about new releases)

User Privacy — set default privacy for new users

Storage Template — defines how photos are stored on disk (optional, defaults work fine)

Backups — configure automatic database backups

Mobile App — instructions for linking the mobile app

6. Mobile app

Download Immich from Google Play or the App Store. After installing, enter your server address — http://[IP]:8212 — and log in. In the app settings, enable automatic backup and select which albums from your device to sync.

Tip — access from outside your network

For backups on the go, pair Immich with Cloudflare Tunnel. The app will then work via your own domain from anywhere — without opening ports on your router.

Troubleshooting

⚠️ Permission error on Synology NAS

Photos cannot be saved or the container crashes — check user: UID:GID in the stack. The values must match the DSM user who owns the /volume1/docker/immich/ folder.

⚠️ Machine learning container fails to start

Immich-LEARNING requires more RAM — at least 4 GB free is recommended. On weaker NAS devices it may be slow or unstable. Check logs in Portainer → Containers → Immich-LEARNING → Logs.