docs: collapse security and advanced docker sections in README

This commit is contained in:
ralksta
2026-03-08 18:27:01 +01:00
parent 297e63fb49
commit 695609cd96

View File

@@ -33,6 +33,11 @@ Immich Folio acts as a **secure reverse proxy** between your visitors and your p
### Security ### Security
<details>
<summary><strong>View security architecture & protections</strong></summary>
<br>
| Concern | Protection | | Concern | Protection |
| ----------------------- | ------------------------------------------------------------------------------------------------------- | | ----------------------- | ------------------------------------------------------------------------------------------------------- |
| **Server exposure** | Immich URL and port are never sent to the browser — all requests are proxied server-side | | **Server exposure** | Immich URL and port are never sent to the browser — all requests are proxied server-side |
@@ -45,6 +50,8 @@ Immich Folio acts as a **secure reverse proxy** between your visitors and your p
**Production Ready:** The codebase has been fully audited for production. It uses strict Content Security Policy (No `unsafe-eval`), strong cryptographic patterns (SHA-256 for IV generation instead of MD5), lengths-capped inputs for OG dynamic generation to prevent DoS, and is completely free of N+1 database queries since the API isolates Immich. **Production Ready:** The codebase has been fully audited for production. It uses strict Content Security Policy (No `unsafe-eval`), strong cryptographic patterns (SHA-256 for IV generation instead of MD5), lengths-capped inputs for OG dynamic generation to prevent DoS, and is completely free of N+1 database queries since the API isolates Immich.
</details>
### Infrastructure ### Infrastructure
- **Health check endpoint** — `GET /api/health` for uptime monitoring and container orchestration - **Health check endpoint** — `GET /api/health` for uptime monitoring and container orchestration
@@ -128,6 +135,9 @@ docker compose up -d
The gallery will be available at `http://localhost:7211`. The gallery will be available at `http://localhost:7211`.
<details>
<summary><strong>Advanced Docker (Standalone, Health Check, Proxy)</strong></summary>
### Standalone Docker ### Standalone Docker
```bash ```bash
@@ -164,6 +174,8 @@ photos.example.com {
} }
``` ```
</details>
## Tech Stack ## Tech Stack
- **Next.js 16** (App Router, standalone output) - **Next.js 16** (App Router, standalone output)