diff --git a/modules/server/containers/apps/immich.nix b/modules/server/containers/apps/immich.nix
index dc34586..ec802ea 100644
--- a/modules/server/containers/apps/immich.nix
+++ b/modules/server/containers/apps/immich.nix
@@ -23,8 +23,13 @@ in {
       port = 2283;
       secret = name;
       extraEnv = {
-        IMMICH_MACHINE_LEARNING_URL = "http://immich-ml:3003";
+        DB_HOSTNAME = builder.host;
         REDIS_HOSTNAME = builder.host;
+        DB_USERNAME = "immich_user";
+        DB_DATABASE_NAME = "immich_db";
+        IMMICH_TRUSTED_PROXIES = "10.0.0.0/8";
+        # IMMICH_ALLOW_SETUP = "false";
+        IMMICH_MACHINE_LEARNING_URL = "http://immich-ml:3003";
         IMMICH_IGNORE_MOUNT_CHECK_ERRORS = "true";
       };
       overrides = {
diff --git a/modules/server/sops/server.yaml b/modules/server/sops/server.yaml
index 78a6a41..5e979b0 100644
--- a/modules/server/sops/server.yaml
+++ b/modules/server/sops/server.yaml
@@ -8,7 +8,7 @@ ETHERCALC: ENC[AES256_GCM,data:0ScnDsUNBt6wYJC4hTXn8huuTptBTDKZV4yFVQ4fuBWc6auWN
 GITEA: ENC[AES256_GCM,data:TGsye52g8DVOk51o1dWfF6x3m6BFPe0MtUbOayxYejaYSZ4cDCfx02EPAhiL3FJGLfidZt7+WpjhVqJvFeCvJ1OXdYMQyuL3akPBCmEjmBgBhJvEjVtVgV3aNMS21gy3o0RG/MXDXOLpjHeaXn3G/XWKsv5bw+gg94bDirOguLC5eaFxddn5/UGFvfwXzDmkoNmc9zufGvVpUkRy8rju/TjOz4Q5GZk1gXWtJWdkTGhuVYVBDDHIQq9DBS0qXi8tP3FvY8prOi/c5ZbyyZjTOgNpWB9uU4HkHz4aUTMFIrPFwUeWmNMIdyUmarSQ7tDDdhBfIiLhb94jaMATHq+PfwwpCcmiTfBEG3OS/3SXPMWg6jhfUxvxsKNT2HQca31B9IRqlitaio3r6KEPBTYh2nWtFO9d5Is7TUWkGsOaV+0JSiNPNh5uD7kNyBxsKUKcND7JXMxW/TZOqARY64x6IwDrbcypsyMW5i+4Er1/0HCvZ7FBH1XkTul8vBGF5ZGD/tYp/m6Ld26GKYkj967eYIwlNFcOMGNue5PyJfFCq0qWbLWO9dFA9c2e9r81DCD8y/0S3Ts7X7TkXVGShm7JoMqb8dzg9i6CoNlmbPAM5GwoNV3ftQugvqEGMk5UIvf05YsgSNvq4UJbhsT4bZqpV0plnxYD5TswCGF/XQ3nwwFTudmf1OLcgYwM2NckbVui128o1Rw=,iv:vo6l0QirLIUvwLN675LYkffkXejJecvBesLJvoW/bjY=,tag:zyLyiCskF84A3QVoq5X3iw==,type:str]
 SEARXNG: ENC[AES256_GCM,data:gtKhEmMemzLRl4c3cYhMAQ+5vUth1IhWQeLvW1YtaG5TbhQHBR4PDREQOlGt+tlfGQrft+FeNhMSN/SKOp8gmScVWa+9qmltzxRGRpLm3m/VuBZvOlGdeUcKAX8zEH6A,iv:B2UEtjTRIjT6W+tH2gtcl6XMvZNgbvZUXTiBePGOu24=,tag:SHIF6eaWBLwy9RrEy1N9kg==,type:str]
 UMAMI: ENC[AES256_GCM,data:onB/uXLajaRLmeQMGNHFsjREzPih9ha+cogGRw+nRomERSRrbBv+6gCqEr8F3Dcm818JB4jGRYKoIYG8Jl6gMDaz5QQiA4qAnbG19LuzVeVUgz4NGEgXBULoT/0sQacnyAPIfPEp+ESWRQH81nO6Qcs+rICpS2Xfeye5hb+8rSAxmLpY991AJ3+avGyMwPcpfNCkixWt68KuG5ZN/IGDksM/sSLGgyMisClbEdhigq4mwibOxpiWjcKk/17xYgY6Xz93h/yloHKZIZZpnyA+85YC6oNWgCPhkGIAVu3dGshp10a0nk1A2INm6vxNPbfUjYLkt3zDAPZtoBRCqUs+43Eh62hYgajgWCQJhjJkDgF4Y1ifGfDerIXs/cDpIKLt2+7VqM6/ouqIDPJ7khSAr+8bcHU4CKDtsDagob5PpCG4ABt44cg9cGw=,iv:HD450JZuWn2+V0pvOsDHy9oVAanFMf1el9LA1z0PULY=,tag:p7Vl7dtM8UdAUNgmdG+7cg==,type:str]
-IMMICH: ENC[AES256_GCM,data:3g0yGzzO0jtL+HapIkix5ExSVRQyebdXKh9fGU/7YXQfAUA/eDqz3a4DowVaJtTD9zKIxdI1SNSrhMWscHyoPaMfdlP/btAxOPmQR7i5OiBDm3C9Rmt1o09jOiS+6Ui5G0mD4D5xGvZHMJzlYu8+Dgcmzwz23IWxsSdgTpUVeUeoLolhrXexX12qnPkhh6ocvWd9XOJww1gLHVCdpmssAjJDmfpzF/6JeuMPld3kKWls8KSBHyMLyxF4LpF5RIBHGRHxTUQ9FgpGvLEqDef49fIxVccXOFmEMskmgEMTE3gBa4b97Q6aOOAT7sZCPITDTfYN83bVF9HxIQFZ5XI=,iv:3tuTZ+oi8KhV5aI4jCuZ+TbVIyn+iTdXZ+w/ywIu8aI=,tag:thfDKe2NCHEYoi2ga2ebBA==,type:str]
+IMMICH: ENC[AES256_GCM,data:wdco0KjuX7+YA2c691dZr/a6lLL8SZgJXraACNMSptOd376C5jBKmd06O5QOqjOam4IEAdg/enhO2W4AZQCmi78BIpKc8QRgzBGSYWSBeKJABfcu8ShMuzdNgPTQico+T0WnsGDel48WVIzhcHxMGioU65Ss8Kl37veP8QY1mhLfiCTOmF7y1ibMR2+P5vw7r8FVvJ1Wb9MxguG8rOHXVHDUd3kHSX98UiD54na8kkVK47xpvrVGBljtIyaAlyOJ3TRcacBQzj0C3e3xZ7onRhQtsdXpzpemjow3pIxjOEOtJgELwE64CsAgLN2cjZW4yJos4NkWV5chjbn2ff4CUFB0,iv:iwFetLUxxZuOkZ6CuGtQ0ZLu1CUx2ydAuTWcMRA8vgA=,tag:Bi68rYmsaSCie+olHPxi5A==,type:str]
 SERVARR: ENC[AES256_GCM,data:fukF7bejebMU7yp48fix,iv:CZkLyO8N8BqSk+0KDcMDrz1pbwaNH7Pg+NvNebdIdYM=,tag:AOMvnZOE0H6QDCmkPg3Kyw==,type:str]
 sops:
     age:
@@ -30,8 +30,8 @@ sops:
             S1NaTVFTL0FCdm1EQmRsUnlhclZNZlEKEgIe60qkvY8+UocjQU+WM2dTL/1y3Kqk
             d4RrlLP9NSozwVsPYI4ntygvMSApbT4v0YvoO7gV90lkGWEvW1YDfA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-05-14T21:34:26Z"
-    mac: ENC[AES256_GCM,data:xkJUoUOKBX9YDosgvXGOs/E+jg43CkiAzJXdrc+xiFwolNbrSfDjS0RGfuAf+Z0TGKG00TUUNlCAvpglQ9/RassgeaMIv/CFHwDJVON4EeAQIjHmwDk4m4kDo/Ja5oSHx/NisW9d9q+IsnQKtHt6q/nw99WYwX5Q1v8Kj71OXns=,iv:vCW1QSvnH/gB41sLEFgofr5h1sTxACHurJBPbT4UN00=,tag:TentqaNK2XOGGCrwU7yMUQ==,type:str]
+    lastmodified: "2026-05-14T22:43:50Z"
+    mac: ENC[AES256_GCM,data:K040mOkh3ZAW4WiTdbMqk1gtGGadirpzunPxfoRlAfglcJb4DTyaCwpPr2TFlYebYkI8ijNi2BG6w7vHQngtvPGkd15ETfG6waTk9XaAc4nVQZKa3xmmV6eEcT2OKOznP7aJfaJXE5oh30QsDrAMJkYIwKd+jWnzSrSvUKG2XzE=,iv:1q/naMcw/eUVmukTL9gIl0eIyHWkwMm4TY6pZAfixcQ=,tag:EK44ywbAAPM3lPui9q5L9A==,type:str]
     pgp:
         - created_at: "2026-05-05T23:46:27Z"
           enc: |-