diff --git a/modules/system/homelab/gallery.nix b/modules/system/homelab/gallery.nix
index 49afe3d..968e397 100644
--- a/modules/system/homelab/gallery.nix
+++ b/modules/system/homelab/gallery.nix
@@ -1,3 +1,19 @@
 { ... }: {
-  
+  users.users.immich.extraGroups = [ "video" "render" ];
+
+  services = {
+    immich = {
+      enable = true;
+      port = 2283;
+      host = "127.0.0.1";
+      mediaLocation = "/var/lib/immich";
+      accelerationDevices = null;
+      machine-learning.enable = true;
+    };
+    immich-public-proxy = {
+      enable = true;
+      port = 2284;
+      immichUrl = "http://localhost:2283";
+    };
+  };
 }
\ No newline at end of file
diff --git a/modules/system/homelab/proxy.nix b/modules/system/homelab/proxy.nix
index 095f535..ad9c200 100644
--- a/modules/system/homelab/proxy.nix
+++ b/modules/system/homelab/proxy.nix
@@ -44,10 +44,14 @@ in {
           proxyWebsockets = true;
           basicAuthFile = if cfg.auth then "/var/lib/nginx/.htpasswd" else null;
           extraConfig = ''
+            proxy_set_header X-Auth-User $remote_user;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
-            proxy_set_header X-Auth-User $remote_user;
+            client_max_body_size 50000M;
+            proxy_read_timeout   600s;
+            proxy_send_timeout   600s;
+            send_timeout         600s;
           '';
         };
       }) proxy-mappings;