Photoprism: Init

run/photoprism/workspace/defaults.yml

@@ -0,0 +1,28 @@
+ConfigPath: "/opt/photoprism/config"
+StoragePath: "/opt/photoprism/storage"
+OriginalsPath: "/opt/photoprism/originals"
+ImportPath: "/mnt"
+AdminUser: "admin"
+AdminPassword: "insecure"
+AuthMode: "password"
+DatabaseDriver: "mysql"
+DatabaseServer: "localhost"
+DatabaseName: "photoprism"
+DatabaseUser: "photoprism"
+HttpHost: "::"
+HttpPort: 2342
+HttpCompression: "gzip"
+DisableTLS: true
+DefaultTLS: false
+Experimental: false
+DisableWebDAV: false
+DisableSettings: false
+DisableTensorFlow: false
+DisableFaces: false
+DisableClassification: false
+DisableVectors: false
+DisableRaw: false
+RawPresets: false
+JpegQuality: 85
+DetectNSFW: false
+UploadNSFW: true

run/photoprism/workspace/photoprism.service

@@ -0,0 +1,16 @@
+[Unit]
+After=network.target network-online.target
+Description=Photoprism
+Documentation=https://docs.photoprism.app/
+Wants=network-online.target
+
+[Install]
+WantedBy=multi-user.target
+
+[Service]
+ExecStart=/usr/bin/photoprism start
+Type=simple
+Restart=always
+RestartSec=10
+WorkingDirectory=/opt/photoprism
+User=photoprism

run/photoprism/workspace/syncthing.service

@@ -0,0 +1,28 @@
+[Unit]
+Description=Syncthing - Open Source Continuous File Synchronization for photoprism
+Documentation=man:syncthing(1)
+After=network.target
+StartLimitIntervalSec=60
+StartLimitBurst=4
+
+[Service]
+User=photoprism
+ExecStart=/usr/bin/syncthing serve --no-browser --no-restart --logflags=0 --home /opt/photoprism/config/syncthing --no-default-folder --gui-address=":8384"
+Restart=on-failure
+RestartSec=1
+SuccessExitStatus=3 4
+RestartForceExitStatus=3 4
+
+# Hardening
+ProtectSystem=full
+PrivateTmp=true
+SystemCallArchitectures=native
+MemoryDenyWriteExecute=true
+NoNewPrivileges=true
+
+# Elevated permissions to sync ownership (disabled by default),
+# see https://docs.syncthing.net/advanced/folder-sync-ownership
+#AmbientCapabilities=CAP_CHOWN CAP_FOWNER
+
+[Install]
+WantedBy=multi-user.target