I need to add an extra CA bundle for Immich to make HTTPS requests to my OIDC provider which has a self-signed certificate.
I discovered that Node.js (and hence the Immich server) makes use of a bundled CA certificates bundle. In order to include a custom CA certificate, it is recommended to use the NODE_EXTRA_CA_CERTS environment variable.
However, after confirming in a Discord support thread, it was discovered that the extra environment variables which are set in the TrueNAS SCALE UI are not passed through to the main (immich-server) container.
To Reproduce
Initialize a new Immich app on TrueNAS SCALE
Realize your custom root CA certificate needs to be included in Immich's CA certificate bundle for the OIDC integration
Try adding the NODE_EXTRA_CA_CERTS environment variable pointing to an extra CA certificate bundle
Once the pods are all running, try finding the NODE_EXTRA_CA_CERTS environment variable in the main server pod
Expected Behavior
NODE_EXTRA_CA_CERTS environment variable is set in the main (immich-server) container to the value supplied in the app configuration
Screenshots
admin@truenas:~$ kubectl get -n ix-immich pod
NAME READY STATUS RESTARTS AGE
immich-cnpg-main-1 1/1 Running 0 44m
immich-redis-0 1/1 Running 0 44m
immich-6497b6c649-54lkx 1/1 Running 0 44m
immich-microservices-7cb8c5fdd5-pfxjf 1/1 Running 0 44m
admin@truenas:~$ kubectl exec -n ix-immich immich-6497b6c649-54lkx -- /bin/sh -c "env" | grep NODE_
Defaulted container "immich" out of: immich, immich-system-cnpg-wait (init), immich-system-redis-wait (init)
NODE_VERSION=20.13.1
NODE_ENV=production
admin@truenas:~$
Additional Context
@ksimm1 attempted to set an extra environment variable for a brand new app install and faced the same issue.
I've read and agree with the following
[X] I've checked all open and closed issues and my issue is not there.
[X] I've prefixed my issue title with [Chart-Name]
chart Name
immich
Operating System
TrueNAS SCALE 24.04.0
Deployment Method
TrueNAS SCALE charts
Chart Version
15.13.6
Kubernetes Events
chartlication Logs
Chart Configuration
Describe the bug
I need to add an extra CA bundle for Immich to make HTTPS requests to my OIDC provider which has a self-signed certificate.
I discovered that Node.js (and hence the Immich server) makes use of a bundled CA certificates bundle. In order to include a custom CA certificate, it is recommended to use the
NODE_EXTRA_CA_CERTS
environment variable.However, after confirming in a Discord support thread, it was discovered that the extra environment variables which are set in the TrueNAS SCALE UI are not passed through to the main (immich-server) container.
To Reproduce
NODE_EXTRA_CA_CERTS
environment variable pointing to an extra CA certificate bundleNODE_EXTRA_CA_CERTS
environment variable in the main server podExpected Behavior
NODE_EXTRA_CA_CERTS
environment variable is set in the main (immich-server) container to the value supplied in the app configurationScreenshots
Additional Context
@ksimm1 attempted to set an extra environment variable for a brand new app install and faced the same issue.
I've read and agree with the following
[Chart-Name]