docs: collapse security and advanced docker sections in README
This commit is contained in:
12
README.md
12
README.md
@@ -33,6 +33,11 @@ Immich Folio acts as a **secure reverse proxy** between your visitors and your p
|
|||||||
|
|
||||||
### Security
|
### Security
|
||||||
|
|
||||||
|
<details>
|
||||||
|
<summary><strong>View security architecture & protections</strong></summary>
|
||||||
|
|
||||||
|
<br>
|
||||||
|
|
||||||
| Concern | Protection |
|
| Concern | Protection |
|
||||||
| ----------------------- | ------------------------------------------------------------------------------------------------------- |
|
| ----------------------- | ------------------------------------------------------------------------------------------------------- |
|
||||||
| **Server exposure** | Immich URL and port are never sent to the browser — all requests are proxied server-side |
|
| **Server exposure** | Immich URL and port are never sent to the browser — all requests are proxied server-side |
|
||||||
@@ -45,6 +50,8 @@ Immich Folio acts as a **secure reverse proxy** between your visitors and your p
|
|||||||
|
|
||||||
**Production Ready:** The codebase has been fully audited for production. It uses strict Content Security Policy (No `unsafe-eval`), strong cryptographic patterns (SHA-256 for IV generation instead of MD5), lengths-capped inputs for OG dynamic generation to prevent DoS, and is completely free of N+1 database queries since the API isolates Immich.
|
**Production Ready:** The codebase has been fully audited for production. It uses strict Content Security Policy (No `unsafe-eval`), strong cryptographic patterns (SHA-256 for IV generation instead of MD5), lengths-capped inputs for OG dynamic generation to prevent DoS, and is completely free of N+1 database queries since the API isolates Immich.
|
||||||
|
|
||||||
|
</details>
|
||||||
|
|
||||||
### Infrastructure
|
### Infrastructure
|
||||||
|
|
||||||
- **Health check endpoint** — `GET /api/health` for uptime monitoring and container orchestration
|
- **Health check endpoint** — `GET /api/health` for uptime monitoring and container orchestration
|
||||||
@@ -128,6 +135,9 @@ docker compose up -d
|
|||||||
|
|
||||||
The gallery will be available at `http://localhost:7211`.
|
The gallery will be available at `http://localhost:7211`.
|
||||||
|
|
||||||
|
<details>
|
||||||
|
<summary><strong>Advanced Docker (Standalone, Health Check, Proxy)</strong></summary>
|
||||||
|
|
||||||
### Standalone Docker
|
### Standalone Docker
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
@@ -164,6 +174,8 @@ photos.example.com {
|
|||||||
}
|
}
|
||||||
```
|
```
|
||||||
|
|
||||||
|
</details>
|
||||||
|
|
||||||
## Tech Stack
|
## Tech Stack
|
||||||
|
|
||||||
- **Next.js 16** (App Router, standalone output)
|
- **Next.js 16** (App Router, standalone output)
|
||||||
|
|||||||
Reference in New Issue
Block a user