From 2da631dc81d71d7e9bcec44d7c39231e8f6895af Mon Sep 17 00:00:00 2001
From: Henry Winkel <henry-winkel@web.de>
Date: Sun, 26 Apr 2026 12:38:21 +0200
Subject: [PATCH] UPDATE: modify user and group IDs in Immich configuration;
 adjust NFS paths for persistent volumes

---
 k3s/apps/photo/immich/immich-configmap.yaml         | 4 ++--
 k3s/apps/photo/immich/immich-library-immich-pv.yaml | 2 +-
 k3s/apps/photo/immich/immich-library-pv.yaml        | 2 +-
 k3s/apps/photo/immich/immich-server-deployment.yaml | 6 ++++--
 4 files changed, 8 insertions(+), 6 deletions(-)

diff --git a/k3s/apps/photo/immich/immich-configmap.yaml b/k3s/apps/photo/immich/immich-configmap.yaml
index e122bbb..6ffcdac 100644
--- a/k3s/apps/photo/immich/immich-configmap.yaml
+++ b/k3s/apps/photo/immich/immich-configmap.yaml
@@ -18,6 +18,6 @@ data:
   DISABLE_REVERSE_GEOCODING: "false"
   REVERSE_GEOCODING_PRECISION: "2"
   PUBLIC_LOGIN_PAGE_MESSAGE: ""
-  PUID: "0"
-  PGID: "0"
+  PUID: "1001"
+  PGID: "100"
   DB_PASSWORD: "password"
diff --git a/k3s/apps/photo/immich/immich-library-immich-pv.yaml b/k3s/apps/photo/immich/immich-library-immich-pv.yaml
index 524cea8..1bdfa81 100644
--- a/k3s/apps/photo/immich/immich-library-immich-pv.yaml
+++ b/k3s/apps/photo/immich/immich-library-immich-pv.yaml
@@ -12,5 +12,5 @@ spec:
     - ReadWriteMany
   persistentVolumeReclaimPolicy: Retain
   nfs:
-    path: /export/fastData/immichLibrary
+    path: /export/immichLibrary
     server: 192.168.178.166
diff --git a/k3s/apps/photo/immich/immich-library-pv.yaml b/k3s/apps/photo/immich/immich-library-pv.yaml
index 5cd0ec1..b717545 100644
--- a/k3s/apps/photo/immich/immich-library-pv.yaml
+++ b/k3s/apps/photo/immich/immich-library-pv.yaml
@@ -11,5 +11,5 @@ spec:
   accessModes:
     - ReadWriteMany
   nfs:
-    path: /export/fastData/immichLibrary  # Static path on the NFS server
+    path: /export/immichLibrary  # Static path on the NFS server
     server: 192.168.178.166
diff --git a/k3s/apps/photo/immich/immich-server-deployment.yaml b/k3s/apps/photo/immich/immich-server-deployment.yaml
index 4c8bf2c..796c457 100644
--- a/k3s/apps/photo/immich/immich-server-deployment.yaml
+++ b/k3s/apps/photo/immich/immich-server-deployment.yaml
@@ -25,7 +25,8 @@ spec:
           }]
     spec:
       securityContext:
-        fsGroup: 0
+        fsGroup: 100
+        fsGroupChangePolicy: OnRootMismatch
       serviceAccountName: default
       dnsPolicy: ClusterFirst
       initContainers:
@@ -60,7 +61,8 @@ spec:
           image: "ghcr.io/immich-app/immich-server:release"
           imagePullPolicy: Always
           securityContext:
-            runAsUser: 0
+            runAsUser: 1001
+            runAsGroup: 100
           ports:
             - containerPort: 3001
           env: