immich-app/immich
1
0
Fork 0
mirror of https://github.com/immich-app/immich.git synced 2026-07-25 14:00:45 +03:00
Code Issues 783 Packages Projects Releases 22 Wiki Activity

iOS "server is not reachable" #8091

New Issue
Closed
opened 2026-02-05 13:31:42 +03:00 by OVERLORD · 2 comments
OVERLORD commented 2026-02-05 13:31:42 +03:00
Owner
Copy Link

Originally created by @jalet on GitHub (Dec 19, 2025).

I have searched the existing issues, both open and closed, to make sure this is not a duplicate report.

  • Yes

The bug

Seems like this issue has been up before, but I can't figure out what's going on.

The OS that Immich Server is running on

Talos (Kubernetes)

Version of Immich Server

v2.4.0

Version of Immich Mobile App

v2.4.0

Platform with the issue

  • Server
  • Web
  • Mobile

Device make and model

iPhone 15

Your docker-compose.yml content

---
controllers:
  main:
    containers:
      main:
        image:
          tag: v2.4.0
        env:
          DB_VECTOR_EXTENSION: pgvector
          IMMICH_MACHINE_LEARNING_URL: '{{ printf "http://%s-machine-learning:3003" .Release.Name }}'

valkey:
  enabled: false

immich:
  metrics:
    enabled: true
  persistence:
    library:
      existingClaim: ${pvc}
  configuration:
    server:
      externalDomain: https://immich.homelab.lan
      publicUsers: false
    trash:
      enabled: false
      days: 30
    storageTemplate:
      enabled: true
      template: "{{y}}/{{MM}}/{{dd}}/{{filename}}"
  configurationKind: ConfigMap

server:
  enabled: true
  controllers:
    main:
      containers:
        main:
          image:
            repository: ghcr.io/immich-app/immich-server
            pullPolicy: IfNotPresent
          env:
            DB_HOSTNAME:
              valueFrom:
                secretKeyRef:
                  name: ext-immich-db
                  key: hostname
            DB_USERNAME:
              valueFrom:
                secretKeyRef:
                  name: ext-immich-db
                  key: username
            DB_PASSWORD:
              valueFrom:
                secretKeyRef:
                  name: ext-immich-db
                  key: password
            DB_DATABASE_NAME:
              valueFrom:
                secretKeyRef:
                  name: ext-immich-db
                  key: dbname
            REDIS_HOSTNAME:
              valueFrom:
                secretKeyRef:
                  name: ext-immich-redis
                  key: hostname
            REDIS_USERNAME:
              valueFrom:
                secretKeyRef:
                  name: ext-immich-redis
                  key: username
            REDIS_PASSWORD:
              valueFrom:
                secretKeyRef:
                  name: ext-immich-redis
                  key: password
  ingress:
    main:
      enabled: true

machine-learning:
  enabled: true
  controllers:
    main:
      containers:
        main:
          image:
            repository: ghcr.io/immich-app/immich-machine-learning
            pullPolicy: IfNotPresent
          env:
            TRANSFORMERS_CACHE: /cache
            HF_XET_CACHE: /cache/huggingface-xet
            MPLCONFIGDIR: /cache/matplotlib-config
  persistence:
    cache:
      enabled: true
      size: 10Gi
      type: emptyDir
      accessMode: ReadWriteMany

Your .env content

.

Reproduction steps

Login from iOS appp

Relevant log output

Dec 19 11:59:19.863: 10.10.99.179:50127 (ingress) -> immich/immich-server-68bc9648b6-5rs64:2283 (ID:5913) http-request FORWARDED (HTTP/1.1 GET https://immich.homelab.lan/.well-known/immich)
Dec 19 11:59:19.864: 10.10.99.179:50127 (ingress) <- immich/immich-server-68bc9648b6-5rs64:2283 (ID:5913) http-response FORWARDED (HTTP/1.1 200 2ms (GET https://immich.homelab.lan/.well-known/immich))
Dec 19 11:59:26.370: 10.10.99.179:50128 (ingress) -> immich/immich-server-68bc9648b6-5rs64:2283 (ID:5913) http-request FORWARDED (HTTP/1.1 GET https://immich.homelab.lan/api/server/ping)
Dec 19 11:59:26.372: 10.10.99.179:50128 (ingress) <- immich/immich-server-68bc9648b6-5rs64:2283 (ID:5913) http-response FORWARDED (HTTP/1.1 200 2ms (GET https://immich.homelab.lan/api/server/ping




[Nest] 23  - 12/19/2025, 12:06:07 PM   DEBUG [Api:LoggingInterceptor] GET /.well-known/immich 200 0.26ms 10.10.99.179
[Nest] 23  - 12/19/2025, 12:06:12 PM   DEBUG [Api:LoggingInterceptor~z2n2m08h] GET /api/server/ping 200 0.47ms 10.10.99.179

Additional information

I can see from my network logs that the requests reaches the server but the app just errors out with "server could not be reached".

I'm using a self-singed certificate and have installed the CA on my device so I can reach the web version without any issues.

Originally created by @jalet on GitHub (Dec 19, 2025). ### I have searched the existing issues, both open and closed, to make sure this is not a duplicate report. - [x] Yes ### The bug Seems like this issue has been up before, but I can't figure out what's going on. ### The OS that Immich Server is running on Talos (Kubernetes) ### Version of Immich Server v2.4.0 ### Version of Immich Mobile App v2.4.0 ### Platform with the issue - [ ] Server - [ ] Web - [x] Mobile ### Device make and model iPhone 15 ### Your docker-compose.yml content ```YAML --- controllers: main: containers: main: image: tag: v2.4.0 env: DB_VECTOR_EXTENSION: pgvector IMMICH_MACHINE_LEARNING_URL: '{{ printf "http://%s-machine-learning:3003" .Release.Name }}' valkey: enabled: false immich: metrics: enabled: true persistence: library: existingClaim: ${pvc} configuration: server: externalDomain: https://immich.homelab.lan publicUsers: false trash: enabled: false days: 30 storageTemplate: enabled: true template: "{{y}}/{{MM}}/{{dd}}/{{filename}}" configurationKind: ConfigMap server: enabled: true controllers: main: containers: main: image: repository: ghcr.io/immich-app/immich-server pullPolicy: IfNotPresent env: DB_HOSTNAME: valueFrom: secretKeyRef: name: ext-immich-db key: hostname DB_USERNAME: valueFrom: secretKeyRef: name: ext-immich-db key: username DB_PASSWORD: valueFrom: secretKeyRef: name: ext-immich-db key: password DB_DATABASE_NAME: valueFrom: secretKeyRef: name: ext-immich-db key: dbname REDIS_HOSTNAME: valueFrom: secretKeyRef: name: ext-immich-redis key: hostname REDIS_USERNAME: valueFrom: secretKeyRef: name: ext-immich-redis key: username REDIS_PASSWORD: valueFrom: secretKeyRef: name: ext-immich-redis key: password ingress: main: enabled: true machine-learning: enabled: true controllers: main: containers: main: image: repository: ghcr.io/immich-app/immich-machine-learning pullPolicy: IfNotPresent env: TRANSFORMERS_CACHE: /cache HF_XET_CACHE: /cache/huggingface-xet MPLCONFIGDIR: /cache/matplotlib-config persistence: cache: enabled: true size: 10Gi type: emptyDir accessMode: ReadWriteMany ``` ### Your .env content ```Shell . ``` ### Reproduction steps Login from iOS appp ### Relevant log output ```shell Dec 19 11:59:19.863: 10.10.99.179:50127 (ingress) -> immich/immich-server-68bc9648b6-5rs64:2283 (ID:5913) http-request FORWARDED (HTTP/1.1 GET https://immich.homelab.lan/.well-known/immich) Dec 19 11:59:19.864: 10.10.99.179:50127 (ingress) <- immich/immich-server-68bc9648b6-5rs64:2283 (ID:5913) http-response FORWARDED (HTTP/1.1 200 2ms (GET https://immich.homelab.lan/.well-known/immich)) Dec 19 11:59:26.370: 10.10.99.179:50128 (ingress) -> immich/immich-server-68bc9648b6-5rs64:2283 (ID:5913) http-request FORWARDED (HTTP/1.1 GET https://immich.homelab.lan/api/server/ping) Dec 19 11:59:26.372: 10.10.99.179:50128 (ingress) <- immich/immich-server-68bc9648b6-5rs64:2283 (ID:5913) http-response FORWARDED (HTTP/1.1 200 2ms (GET https://immich.homelab.lan/api/server/ping [Nest] 23 - 12/19/2025, 12:06:07 PM DEBUG [Api:LoggingInterceptor] GET /.well-known/immich 200 0.26ms 10.10.99.179 [Nest] 23 - 12/19/2025, 12:06:12 PM DEBUG [Api:LoggingInterceptor~z2n2m08h] GET /api/server/ping 200 0.47ms 10.10.99.179 ``` ### Additional information I can see from my network logs that the requests reaches the server but the app just errors out with "server could not be reached". I'm using a self-singed certificate and have installed the CA on my device so I can reach the web version without any issues.
OVERLORD commented 2026-02-05 13:31:44 +03:00
Author
Owner
Copy Link

@mmomjian commented on GitHub (Dec 19, 2025):

You’ll need to enable self signed certificates - we do not use the system cert store.

@mmomjian commented on GitHub (Dec 19, 2025): You’ll need to enable self signed certificates - we do not use the system cert store.
OVERLORD commented 2026-02-05 13:31:46 +03:00
Author
Owner
Copy Link

@jalet commented on GitHub (Dec 19, 2025):

That's enabled already, and it works when I'm on cellular (over tailscale) but not on wifi. Which if even more confusing tbh. I'm gonna have to tap some pcap and check the network traffic more closely when I get back home after the holidays.

But since I can see the HTTPS traffic in Kubernetes I wonder if I've missed something in my setup.

Dec 19 11:59:19.863: 10.10.99.179:50127 (ingress) -> immich/immich-server-68bc9648b6-5rs64:2283 (ID:5913) http-request FORWARDED (HTTP/1.1 GET https://immich.homelab.lan/.well-known/immich)
Dec 19 11:59:19.864: 10.10.99.179:50127 (ingress) <- immich/immich-server-68bc9648b6-5rs64:2283 (ID:5913) http-response FORWARDED (HTTP/1.1 200 2ms (GET https://immich.homelab.lan/.well-known/immich))
Dec 19 11:59:26.370: 10.10.99.179:50128 (ingress) -> immich/immich-server-68bc9648b6-5rs64:2283 (ID:5913) http-request FORWARDED (HTTP/1.1 GET https://immich.homelab.lan/api/server/ping)
Dec 19 11:59:26.372: 10.10.99.179:50128 (ingress) <- immich/immich-server-68bc9648b6-5rs64:2283 (ID:5913) http-response FORWARDED (HTTP/1.1 200 2ms (GET https://immich.homelab.lan/api/server/ping




[Nest] 23  - 12/19/2025, 12:06:07 PM   DEBUG [Api:LoggingInterceptor] GET /.well-known/immich 200 0.26ms 10.10.99.179
[Nest] 23  - 12/19/2025, 12:06:12 PM   DEBUG [Api:LoggingInterceptor~z2n2m08h] GET /api/server/ping 200 0.47ms 10.10.99.179
@jalet commented on GitHub (Dec 19, 2025): That's enabled already, and it works when I'm on cellular (over tailscale) but not on wifi. Which if even more confusing tbh. I'm gonna have to tap some pcap and check the network traffic more closely when I get back home after the holidays. But since I can see the HTTPS traffic in Kubernetes I wonder if I've missed something in my setup. ```console Dec 19 11:59:19.863: 10.10.99.179:50127 (ingress) -> immich/immich-server-68bc9648b6-5rs64:2283 (ID:5913) http-request FORWARDED (HTTP/1.1 GET https://immich.homelab.lan/.well-known/immich) Dec 19 11:59:19.864: 10.10.99.179:50127 (ingress) <- immich/immich-server-68bc9648b6-5rs64:2283 (ID:5913) http-response FORWARDED (HTTP/1.1 200 2ms (GET https://immich.homelab.lan/.well-known/immich)) Dec 19 11:59:26.370: 10.10.99.179:50128 (ingress) -> immich/immich-server-68bc9648b6-5rs64:2283 (ID:5913) http-request FORWARDED (HTTP/1.1 GET https://immich.homelab.lan/api/server/ping) Dec 19 11:59:26.372: 10.10.99.179:50128 (ingress) <- immich/immich-server-68bc9648b6-5rs64:2283 (ID:5913) http-response FORWARDED (HTTP/1.1 200 2ms (GET https://immich.homelab.lan/api/server/ping [Nest] 23 - 12/19/2025, 12:06:07 PM DEBUG [Api:LoggingInterceptor] GET /.well-known/immich 200 0.26ms 10.10.99.179 [Nest] 23 - 12/19/2025, 12:06:12 PM DEBUG [Api:LoggingInterceptor~z2n2m08h] GET /api/server/ping 200 0.47ms 10.10.99.179 ```
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
accessibility
changelog:enhancement
changelog:security
changelog:skip
changelog:translation
cli
date-time
dependencies
documentation
external-library
format
good first issue
mobile-beta
mobile-beta
mobile-beta
needs-answer
nice to have
pull-request
Mirrored from GitHub Pull Request
 sharing
tech-debt
📱mobile
🖥️web
🗄️server
🧠machine-learning
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
OVERLORD
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: immich-app/immich#8091
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?