HN Debrief

Immich 3.0

  • Open Source
  • Self-Hosting
  • Privacy
  • Infrastructure

Immich 3.0 is a major update to a self-hosted photo and video service that aims to replace the consumer experience of Google Photos or Apple Photos while keeping your files on infrastructure you control. The comments treated that premise as largely settled. Plenty of people already use it as their main photo backup or as a second archive for large videos and local-first storage. The sharper discussion was about how to run it without painting yourself into a corner.

If you are evaluating a self-hosted photo stack, Immich now looks mature enough for many households, especially when paired with read-only external libraries and a VPN. The decision point is no longer "can it replace Google Photos" but whether you want to own migrations, backups, and iOS edge cases yourself or pick an encrypted managed option like Ente instead.

Discussion mood

Mostly enthusiastic. People see Immich as a genuinely viable self-hosted Google Photos replacement, especially for home labs and privacy-minded users. The hesitation is operational, not conceptual: iOS sync can still be flaky, upgrades have burned some users, and a few storage choices create avoidable pain if you do not set it up carefully.

Key insights

  1. 01

    External Libraries are the sane default

    Using External Libraries turns Immich into an indexer over files you already control on a NAS or mounted folder. That avoids the usual trap of letting a photo app become the canonical owner of your archive. It also makes imports more robust because Immich can rescan on its own schedule, and it preserves a clean exit if you later move away from Immich.

    If you are deploying Immich for a serious archive, start with read-only external storage unless you specifically need Immich-managed uploads. Keep your originals in a filesystem you understand and back up independently.

      Attribution:
    • cbrews #1
    • hamdingers #1
    • zyberzero #1
    • etnoy #1
  2. 02

    Google Photos migration is finally workable

    immich-go came up as the tool that makes a Google Photos exit realistic instead of miserable. The important detail is not just bulk import. It can parse Takeout metadata and recreate Google Photos albums, which is exactly the kind of organizational loss that keeps people stuck on Google.

    If album structure is the main thing blocking a switch, test immich-go against a subset of your Takeout first. Validate albums and metadata before you commit to a full migration.

      Attribution:
    • altran1502 #1
    • etnoy #1
    • exhilaration #1
  3. 03

    iOS sync is bottlenecked by background upload limits

    Large first-time syncs on iPhone still depend on keeping the app awake long enough to finish uploads, especially for big videos because uploads are not resumable. That makes reports of sync quality highly variable. The same library can feel fine for one person and unusable for another, depending on file mix and how much foreground time they can give the app.

    For large iPhone migrations, plan an attended first sync on local Wi-Fi and expect overnight foreground runs. Do not promise a hands-off migration experience to nontechnical users yet.

      Attribution:
    • eptcyka #1
    • Lukas_Skywalker #1
    • azuanrb #1
    • Larrikin #1
  4. 04

    Backup and repair workflows matter more than features

    People who stayed happy with Immich tended to emphasize operational mechanics, not face recognition or sharing. Automatic database backups and first-class maintenance tasks like thumbnail regeneration are what make a self-hosted photo archive survivable after an upgrade or storage mishap.

    Before you care about new product features, verify restore, reindex, and thumbnail rebuild procedures in your own environment. Treat those workflows as part of the product, because for self-hosted archives they are.

      Attribution:
    • drdexebtjl #1
    • stavros #1
  5. 05

    VPN and disk encryption solve different problems

    Several comments cleaned up a common confusion around encryption. A VPN or WireGuard protects the connection to your server. Pool or disk encryption protects data at rest if someone gets the hardware. Neither gives you end-to-end encryption in the Ente sense, where the server cannot read your photos at all.

    When comparing Immich with Ente or a managed photo service, separate transport security, server-side encryption, and end-to-end encryption in your requirements. They change who you trust, not just how data moves.

      Attribution:
    • NikxDa #1
    • jrm4 #1
    • tamimio #1 #2

Against the grain

  1. 01

    Ente is the better fit for managed privacy

    For people who do not actually want to run a photo service, Ente was presented as the stronger answer. The pitch was polished apps, end-to-end encryption, and self-hostability if you later want it, without forcing you into the operational burden that comes with Immich.

    If your real requirement is private photo sync without becoming the admin on call, compare Ente before you commit to self-hosting. The monthly fee may be cheaper than the time cost of operating Immich.

      Attribution:
    • Cider9986 #1
    • kristopolous #1
    • buster #1
  2. 02

    Upgrades still undermine trust in photo archives

    The sharpest skepticism was not about features. It was about durability. A few people had upgrades or migrations break badly enough that they no longer trust the stack with irreplaceable personal data. For a photo archive, that kind of memory sticks longer than any release note.

    If you are recommending Immich to family or customers, prove an upgrade and rollback path in staging first. Confidence in the archive is the product.

      Attribution:
    • nickthegreek #1
    • ravenstine #1
    • BeetleB #1
  3. 03

    Shared libraries can explode thumbnail storage

    One operator reported that giving multiple users separate facial recognition views over the same external photo set caused duplicate previews for each user. In that setup, thumbnail storage became a meaningful fraction of total disk use even though the source photos were shared.

    Model disk growth beyond originals if you expect multi-user households with shared libraries. Thumbnail and derivative duplication can become the real storage bill.

      Attribution:
    • kQq9oHeAz6wLLS #1

In plain english

end-to-end encryption
A security model where only the sender and intended recipient can read the data, and the server operator cannot decrypt it.
External Libraries
An Immich feature that indexes photos and videos from folders you manage yourself instead of storing them only inside Immich's own upload area.
Google Takeout
Google's export tool for downloading your data, including Google Photos libraries and metadata.
immich-go
A separate import tool for Immich that helps migrate media and metadata, especially from Google Photos exports.
iOS
Apple's operating system for iPhone.
NAS
Network Attached Storage, a dedicated storage device or server that provides shared file access over a network.
VPN
Virtual Private Network, a secure tunnel that encrypts traffic between your device and another network or server.
WireGuard
A modern VPN protocol and software used to create encrypted network tunnels.

Reference links

Immich migration and storage docs

  • Immich External Libraries documentation
    Recommended as the better way to index large existing photo collections from a NAS or read-only folder.
  • immich-go
    Suggested migration tool for Google Photos exports that can preserve metadata and recreate albums.

Immich project discussions and fixes

Alternative photo services

  • Ente repository
    Shared to show that Ente offers both a paid hosted service and a self-hostable open source codebase.
  • Ente
    Recommended as a polished end-to-end encrypted alternative to self-hosting Immich.
  • PixelUnion
    Mentioned as an option for someone specifically looking for end-to-end encrypted photo hosting.

Networking and extraction tools