Comment on Immich relies on a third-party service that seems shady to me
lemmyvore@feddit.nl 3 months agoYou could also start by denying any outside connection to anything except private IP ranges for any docker container, and only allow it on a need to have basis.
It’s not enough to rely on the the good will and savvy of whoever made the software, you have to make the restrictions stick.
pcouy@lemmy.pierre-couy.fr 3 months ago
It’s the clients (web/android app, probably iOS too) that are making these requests.
To the best of my knowledge, the Immich server inside the container is not making requests to the outside. It is merely sending a
style.jsonto the client displaying a map, which then fetches tiles from the Cofractal URL inside this JSON.