Cloudflare tunnels to access Immich from anywhere on TrueNAS Scale

This tutorial assumes you have Immich running on your TrueNAS Scale server, a Cloudflare account, and at least one domain registered to your Cloudflare account.

Steps

1. Go to your Cloudflare account dashboard Account Home | Cloudflare

2. Cloudflare dashboard sidebar → Zero Trust Cloudflare One

   1. 

3. Zero Trust sidebar → Networks → Tunnels Tunnels - Cloudflare One

   1. 

4. Create a tunnel

   1. select tunnel type Cloudflared
   2. name the tunnel
   3. save your tunnel

5. Get the token for your tunnel

   1. For TrueNAS scale you just need the token, not the whole command. So it doesn’t matter what operating system or whatever you select, but you have to copy the whole command and then paste it somewhere and get just the token.

6. Install Cloudflared app on your TrueNAS

   1. put the token from the previous step in for “Tunnel Token”
   2. It should work to leave everything else at the default.
   3. Click install. Once Cloudflared is installed and running on your TrueNAS Scale server, it should appear in the tunnel dashboard under “Connectors”.

7. Add a public hostname

   1. Click next in the Cloudflare tunnel configuration page
   2. As far as I know you need a domain that is using Cloudflare DNS and registered to your Cloudflare account for this part. Select the domain you want to use and optionally add a subdomain or a path. Since this is for Immich I used “photos.mydomain.com” with no path.
   3. For the service type, by default Immich is http only, which should be fine since Cloudflare tunnels gives you https. Anyway, assuming this is the case for you as well, select http for the type.
   4. For the Service URL, use the local IP address of the server with the port Immich is using, such as 192.168.0.2:30041 (30041 is the default port for Immich)
      1. OLD - DON’T DO THIS IF POSSIBLE: For the Service URL, unfortunately the Immich app does not run on localhost on TrueNAS Scale, so you have to find the IP that is is running at. In my case Immich was running at 172.16.0.5:30041. (30041 is the default port for the Immich app on TrueNAS Scale)
         1. I had to go to the TrueNAS shell, run netstat and find the IP address that was using the port :30041. netstat does not show infinite network activity, so it might be helpful to refresh or open the local Immich web portal right before you run netstat.
         2. Alternatively, you can stop and start Immich, or update it, and check the “Related Kubernetes Events” under the “History” section in the right sidebar. The internal IP address should appear there somewhere.
         3. IMPORTANT: You will almost certainly have to update the IP address in Cloudflare after updating Immich or changing app settings in TrueNAS.

8. Save the tunnel.

9. It should work now. Try navigating to the public hostname you set.

usefulNAS