{
  services.immich = {
    enable = true;
    # port = 2283;
    accelerationDevices = [ "/dev/dri/renderD128" ];
    mediaLocation = "/mnt/photos";
  };

  users.users.immich.extraGroups = [ "media" ];
}