immich-public-proxy: init at 1.5.4, nixos/immich-public-proxy: init module

[Jaculabilis]

immich-public-proxy is a proxy for sharing Immich albums without exposing the Immich API surface.

Things done

• Built on platform(s)
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)
  • sandbox = relaxed
  • sandbox = true
• Tested, as applicable:
  • NixOS test(s) (look inside nixos/tests)
  • and/or package tests
  • or, for functions and "core" functionality, tests in lib/tests or pkgs/test
  • made sure NixOS tests are linked to the relevant packages
• Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
• Tested basic functionality of all binary files (usually in ./result/bin/)
• 25.05 Release Notes (or backporting 24.11 and 25.05 Release notes)
  • (Package updates) Added a release notes entry if the change is major or breaking
  • (Module updates) Added a release notes entry if the change is significant
  • (Module addition) Added a release notes entry if adding a new NixOS module
• Fits CONTRIBUTING.md.

---

Add a 👍 reaction to pull requests you find important.

[Jaculabilis]

ping @jvanbruegge as immich maintainer

[dotlambda]

We should give people the option to configure IPP as in https://github.com/alangrainger/immich-public-proxy/tree/main?tab=readme-ov-file#additional-configuration.

[Jaculabilis]

We should give people the option to configure IPP as in https://github.com/alangrainger/immich-public-proxy/tree/main?tab=readme-ov-file#additional-configuration.

IPP's config path seems to be hardcoded as ../config.json. I'll see if upstream will take one more patch to allow setting that via IPP_CONFIG, then we can dump a freeform settings json and just pass that to the service envvar.

I'll push some changes to support a settings and include it in the module test in the next few days.

[Jaculabilis]

@dotlambda Upstream is willing to cut a release with the upstreamed patches, so if the package and module look good (so we won't need any more patches), I can let upstream know to cut a 1.5.4 and then I can configure the package with an updateScript.

[Jaculabilis]

Hm, immich build seems to have been broken by #361878 (fc9c333). The module test passed on the updated version before I rebased, at least.

[Jaculabilis]

Filed #368968 to track the immich build failure. Is this PR blocked until that is fixed?

[Jaculabilis]

immich build is fixed, branch is rebased to have the fix, nixos module test passes

[dotlambda]

Sorry for my absence! Anyway, thanks for the contribution :)