From e7bd3fde6ccf9e00e1a732f5d48225eb69025b49 Mon Sep 17 00:00:00 2001
From: Bendt <timothy.bendt@corteva.com>
Date: Mon, 9 Feb 2026 11:31:42 -0500
Subject: [PATCH] Fix Immich HTTPS routing - add Traefik labels and
 dokploy-network

---
 immich-stack.yml | 27 ++++++++++++++++++++++++++-
 1 file changed, 26 insertions(+), 1 deletion(-)

diff --git a/immich-stack.yml b/immich-stack.yml
index e4a8d96..c830a24 100644
--- a/immich-stack.yml
+++ b/immich-stack.yml
@@ -7,23 +7,32 @@ services:
       POSTGRES_USER: immich
     volumes:
      - immich-postgres:/var/lib/postgresql/data
+    networks:
+     - dokploy-network
     deploy:
       restart_policy:
         condition: on-failure
+
   immich-machine-learning:
     image: ghcr.io/immich-app/immich-machine-learning:v1.106.4
     volumes:
      - immich-model-cache:/cache
+    networks:
+     - dokploy-network
     deploy:
       restart_policy:
         condition: on-failure
+
   immich-redis:
     image: redis:6.2-alpine
     volumes:
      - immich-redis-data:/data
+    networks:
+     - dokploy-network
     deploy:
       restart_policy:
         condition: on-failure
+
   immich-server:
     image: ghcr.io/immich-app/immich-server:v2.3.0
     environment:
@@ -41,16 +50,32 @@ services:
      - /mnt/synology-data/immich:/usr/src/app/upload
      - /mnt/photos:/var/photos
      - /etc/localtime:/etc/localtime:ro
+    networks:
+     - dokploy-network
     deploy:
       restart_policy:
         condition: on-failure
       placement:
         constraints:
          - node.labels.type == nas
+      labels:
+        - traefik.enable=true
+        - traefik.http.routers.immich-web.rule=Host(`immich.bendtstudio.com`)
+        - traefik.http.routers.immich-web.entrypoints=web
+        - traefik.http.services.immich-web.loadbalancer.server.port=2283
+        - traefik.http.routers.immich-web.service=immich-web
+        - traefik.http.routers.immich-web.middlewares=redirect-to-https@file
+        - traefik.http.routers.immich-websecure.rule=Host(`immich.bendtstudio.com`)
+        - traefik.http.routers.immich-websecure.entrypoints=websecure
+        - traefik.http.services.immich-websecure.loadbalancer.server.port=2283
+        - traefik.http.routers.immich-websecure.service=immich-websecure
+        - traefik.http.routers.immich-websecure.tls.certresolver=letsencrypt
 
 volumes:
   immich-redis-data:
   immich-postgres:
   immich-model-cache:
 
-
+networks:
+  dokploy-network:
+    external: true