From 05067413f5f52aaf7206f2affc133b3f8f831a25 Mon Sep 17 00:00:00 2001 From: JJGadgets Date: Wed, 15 May 2024 04:16:38 +0800 Subject: [PATCH] feat(external-proxy-x): Immich ACLs --- kube/deploy/core/ingress/external-proxy-x/app/hr.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/kube/deploy/core/ingress/external-proxy-x/app/hr.yaml b/kube/deploy/core/ingress/external-proxy-x/app/hr.yaml index c21e10d9..105dc5d4 100644 --- a/kube/deploy/core/ingress/external-proxy-x/app/hr.yaml +++ b/kube/deploy/core/ingress/external-proxy-x/app/hr.yaml @@ -106,6 +106,7 @@ spec: acl immich-share-ref req.hdr(Referer) -m beg https://${APP_DNS_IMMICH}/share/ # weak but better than nothing acl immich-api-asset path_beg /api/asset/ acl immich-api-asset path_beg /api/download/asset/ + acl immich-api-asset path_beg /api/timeline/buckets/ acl immich-share-cookie req.cook(immich_shared_link_token) -m found use_backend immich if immich-fqdn immich-path use_backend immich if immich-fqdn immich-api-share immich-key immich-share-ref