{
  services.immich = {
    enable = true;
    # NOTE: default port changes in a later version
    port = 3001;
    machine-learning.enable = true;
    host = "localhost";
  };

  services.nginx.virtualHosts."immich.lab.dgnum.eu" = {
    enableACME = true;
    forceSSL = true;
    serverAliases = [ ];
    locations."/".proxyPass = "http://localhost:3001/";
  };
}