开源相册 immich 如何改为 https 访问

共计 2228 个字符，预计需要花费 6 分钟才能阅读完成。

cd /usr/local/nginx/conf/vhost
nano photo.youdomain.com.conf

复制以下代码
# HTTP 自动跳转 HTTPS
server {
    listen 80;
    server_name photo.youdomain.com;
    return 301 https://$host$request_uri;
}

# HTTPS 主服务 - 反向代理到 Immich
server {
    listen 443 ssl;
    http2 on;
    server_name photo.youdomain.com;  # 仅保留一个域名定义
    
    ssl_certificate /usr/local/nginx/conf/ssl/photo.youdomain.com/fullchain.cer;
    ssl_certificate_key /usr/local/nginx/conf/ssl/photo.youdomain.com/photo.youdomain.com.key;
    
    ssl_session_timeout 5m;
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers "TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-128-CCM-8-SHA256:TLS13-AES-128-CCM-SHA256:EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:!MD5";
    ssl_prefer_server_ciphers on;
    ssl_session_cache builtin:1000 shared:SSL:10m;
    ssl_dhparam /usr/local/nginx/conf/ssl/dhparam.pem;

    # 反向代理核心配置
    location / {
        proxy_pass http://127.0.0.1:2283;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_read_timeout 86400;
    }

    # 安全规则
    location ~ /\.(env|git) {
        deny all;
    }
    
    location ~ /.well-known {
        allow all;
    }
    
    access_log /home/wwwlogs/photo.youdomain.com.log;
}
（代码完）

创建文件夹与加入 www 权限
mkdir -p /home/wwwroot/photo.youdomain.com
chown www:www /home/wwwroot/photo.youdomain.com

6、lnmp restart 无报错代表完成配置