[Feature] Immich does not have a way to specify OAuth secret in other file

[Guanran928]

I have searched the existing feature requests, both open and closed, to make sure this is not a duplicate request.

• Yes

The feature

I'm currently using NixOS, which provides a way to specify your services in a .nix file declaratively. The config of NixOS are usually uploaded to a git repository, but I don't want the secrets to be uploaded. But you can use sops-nix to encrypt and decrypt files on runtime.

I see https://immich.app/docs/install/environment-variables/#secrets showed that environment variable can be specified to let the secrets in the config be read from a file. But however I don't see a variable for the OAuth options (specifically, the OAuth secret).

I wish immich can provide a way to specify the secret through an environment file.

Platform

• Server
• Web
• Mobile

[danieldietzler]

You can already do this using the config file https://immich.app/docs/install/config-file.
(also, being honest in admitting that you haven't checked for dupes, but then getting the discussion closed and immediately ticking the check box isn't the nicest move)

[Guanran928]

In NixOS, the configuration is usually tracked with Git. Is there a way to use multiple config files? I don't want to encrypt the entire configuration.

(don't worry, the secret is revoked)

BTW, I honestly checked the box when I was trying to submit an issue, but I forgot to check it again when I realized that I need to submit an discussion post. (I checked discussion tho!)

[danieldietzler]

There's not a way to use multiple config files, but there are solutions like https://getsops.io that allow you to substitute secrets in. I personally have no experience with that though, so besides it existing I can't really say anything for that

[Guanran928]

I see, I can use it as a workaround. Thanks!

[bo0tzz]

#14815

[Guanran928]

My bad, I didn't check closed discussions at all 🤦