feat(freyja): add immich.

modules/servers/freyja/default.nix

@@ -1,2 +1,5 @@
 {...}: {
+  imports = [
+    ./immich.nix
+  ];
 }

modules/servers/freyja/immich.nix

@@ -0,0 +1,27 @@
+{...}: {
+  services.immich = {
+    enable = true;
+    port = 2283;
+    host = "127.0.0.1";
+    accelerationDevices = ["/dev/dri/renderD128"];
+  };
+
+  users.users.immich.extraGroups = ["video" "render"];
+
+  services.traefik.dynamicConfigOptions.http = {
+    services.immich.loadBalancer.servers = [
+      {
+        url = "http://localhost:2283";
+      }
+    ];
+
+    routers.immich = {
+      rule = "Host(`immich.cronyakatsuki.xyz`)";
+      tls = {
+        certResolver = "porkbun";
+      };
+      service = "immich";
+      entrypoints = "websecure";
+    };
+  };
+}