From a089567e6937541eeebcfb1467e10b959d53eb00 Mon Sep 17 00:00:00 2001 From: Juhyung Park Date: Mon, 8 Apr 2024 16:24:32 +0900 Subject: [PATCH] Clarify port listening patch Signed-off-by: Juhyung Park --- README.md | 6 +++--- install.sh | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index 7829c7e..c7e1bc8 100644 --- a/README.md +++ b/README.md @@ -113,7 +113,7 @@ In summary, the `install.sh` script does the following: * Replaces `/usr/src` to `/var/lib/immich`. - * Limits listening host from 0.0.0.0 to 127.0.0.1 for microservices and machine-learning. + * Limits listening host from 0.0.0.0 to 127.0.0.1. If you do not want this to happen (make sure you fully understand the security risks!), comment out the `sed` command in `install.sh`'s "Use 127.0.0.1" part. ## 6. Install systemd services @@ -130,9 +130,9 @@ done ## Done! -Your Immich installation should be running at :3001 port. +Your Immich installation should be running at 3001 port, listening from localhost (127.0.0.1). -Immich will additionally use 3002 and 3003 ports, but those will only listen from localhost (127.0.0.1). +Immich will additionally use localhost's 3002 and 3003 ports. Please add firewall rules and apply https proxy and secure your Immich instance. diff --git a/install.sh b/install.sh index 0bf9f33..36ed8c0 100755 --- a/install.sh +++ b/install.sh @@ -99,7 +99,7 @@ mkdir -p $IMMICH_PATH/upload ln -s $IMMICH_PATH/upload $APP/ ln -s $IMMICH_PATH/upload $APP/machine-learning/ -# Use 127.0.0.1 for microservices +# Use 127.0.0.1 sed -i -e "s@app.listen(port)@app.listen(port, '127.0.0.1')@g" $APP/dist/main.js # Custom start.sh script