The Local HTTPS guide you NEED to know! | Immich | Nginx | TailScale

In this video, we are going to set up a self hosted app, Immich (Google Photos replacement), in a linux server behind Nginx Proxy Manager (NPM). We are going to set up two custom domains to reach our Immich application

https://immich.local.mydomain.com
https://immich.tailscale.mydomain.com

These are TRUSTED certs that NPM will fetch using our DNS Provider's (CloudFlare) Api token.

We'll also easily configure GoAccess, which is a log visualizer we'll use to monitor each of the connections that are made to our Immich application. Lastly, we'll also use Portainer to monitor each of these docker applications we set up.

Congratulations! Now you know how to set up a reverse proxy on your server and route custom domains to your applications, without even exposing your server to connections from the internet!

Links in the Video
Nginx Proxy Manager with GoAccess (docker-compose.yml)
📄https://thomaswildetech.com/blog/2025...

‼️Protect Immich NOW! What to do when a drive FAILS | Restoration
   • Comprehensive RAID tutorial with Cockpit &...  

☁️Connect to Immich with Cloudflare Tunnel AND Tailscale
   • The BEST way to access Immich from anywher...  

🔐Immich with Google Authentication OAuth
   • Immich OAuth tutorial with Google Sign-in....  

🆕Updating Immich Safely
   • Watch this before you update Immich!  

Nginx Edition
   • The Local HTTPS guide you NEED to know! | ...  

#selfhosted #nginx

----- Time --------
00:00 Prequel
00:27 Intro
01:26 Understanding the Network
03:08 Installing Docker & Portainer
05:07 Installing Immich
06:55 Understanding the ports
07:40 Installing Nginx Proxy Manager
11:28 Creating a Proxy Host
12:34 Getting your CloudFlare api token
13:27 Creating your DNS Record
14:19 Rescinding Port Access to Network
15:58 Reconfigure Proxy to LocalHost
16:20 Run Reverse Proxy in Host Mode
17:27 Visualize Access Logs with GoAccess
18:11 Installing Tailscale
19:55 Creating Proxy Host for Tailscale Domain
20:40 Creating DNS Record for Tailscale IP
22:42 View both connected IPs in GoAccess
23:20 Conclusions