He mentions that he uses Hetzner’s volumes for storage and storage box for backups. Hetzner’s docs don’t mention anything about at-rest encryption and Immich does not encrypt data either, so anyone with access to the VPS or Hetzner account would be able to see them.
If you want end-to-end encryption I’d suggest self-hosting something like Ente
I followed Hetzner’s docs on how to mount it with a small twist.
The docs say to edit /etc/fstab to add some automount config using charset=utf8 but the VPS OS did not include the utf8 charset module by default (Ubuntu used to to bundle it but now it doesn’t). So had to run:
# Install additional packages
sudo apt install linux-modules-extra-$(uname -r)
# Make OS load nls_utf8 module on boot
sudo echo "nls_utf8" >> /etc/modules-load.d/cifs.conf
There was a way to load the module without reboot but can’t remember. Once I did that, I followed Hetzner’s docs and that was it.
Why did you choose a volume to store photos instead of the storage box? I have a similar set up but I mount the storage box with CIFS and use it as the main media storage. I have not noticed any latency issues so far.
and I just found out that running
sudo apt full-upgrademay update your kernel which means you have to do the module setup again for the new kernel