You could run it in LXC directly with [community-scripts] (community-scripts.org/scripts/immich). I have it running like this for close to a year and am really happy with it. It provides you with a update script that you would use instead of a docker pull