My son was just born, and while a few photos will go on the likes of Facebook and Instagram, overall my partner and I are wanting to keep our shared photos private from the EULA abuses that we all know and hate.
Does anyone here have any good suggestions? I would create my own front end, but I can’t swing hosting or a static IP to do it from my local box. Are there any companies out there who aren’t total shit bags who claim immediate irrevocable license to all of my photos to do with whatever the fuck they please?
Immich if you selfhost
Does it support SSO with OIDC?
This is the way, immich is insanely fast and performant
Proton offers a cloud photo storage similar to Googles but its all E2EE. A bit clunky compared to google but much more privacy friendly.
it’s small though.
I self-host Photoprism, and use it to share albums privately with people.
The flow goes:
- I take pictures with my phone
- Those get synced via Syncthing to my photos folder.
- Photoprism is set up via docker, with my photos folder added.
This has potential in many ways. I will have to set it up and see how it feels.
Syncthing
It can become really messy if one family member deletes a picture by accident and everyone complains. I’d use Syncthing for machines I personally manage.
You can control which devices can make and propagate changes to shared folders.
Seafile?
This could be a good option. I will have to look into it. I know some of our family is not the most savvy (lucky to be able to use FB) so I may have to look into building a front end on top of it for them, but this is a solid start.
Good luck mate…
Best guess would be a privacy focused chat app like Signal or Matrix.
Otherwise you may want to look at crypto bases file storage ala Filecoin or potentially even Pixelfed
I know you said you can’t do your local box, but there’s no necessity for a static IP to do that. Dynamic DNS is relatively easy to set up, I suppose provided you have a domain name you own (which you can find for very reasonable prices).
Or setup Tailscale and enable the Funnel feature for whatever service you want to expose.
This way it’s a bit more secure, since the exposed endpoint is hosted by Tailscale and routed to your device via your Tailscale (encrypted) network.
Using Funnel, no one needs to have the Tailscale client.
Dynamic DNS only works if your IP is publicly routable. My ISP (not sure about OP) puts us behind NAT, so the only way to expose services on my network is through a tunnel, like a VPN.
But many ISPs do provide a routable IP. My last ISP did, so it’s not uncommon.
And you don’t necessarily need to own an IP, services like FreeDNS let you use a subdomain from someone else, but a domain can be as little as $1/year (for TLDs like .site and .store), so it’s probably better to just get one. I have like 10 domains, and they only cost $10/year each or so. But if you just want to try out hosting something, using someone else’s isn’t a bad way to go.
I use DokuWiki for this type of thing. With a few add-ons it is nicely configurable (galleries, discussions etc), could be run from any webspace, and doesn’t need a database. You can have ACLs that make sure that only registered users get access. But it is a bit of a DIY solution, and takes a bit of work to set up.
I’m not above getting my hands dirty and this sounds like it could have promise. Thank you.
I do:
- own domain with cloudflare
- ddns with their API
- NextCloud in docker
- caddy reverse proxy takes care of SSL cert
Or:
- Plex can do photos too and they have a docker container
- invite family to your server
Or:
- Immich with same setup as NextCloud
Xmpp server with account for family members? Personally, I host one, and keep favourites pics on a minigal nano, a php app to share pictures on my webserver
I mean, you can just use some simple hard drives if you just want something that works. You can get a terabyte for like 40 bucks nowadays.
So every time you have a couple new pics that you would upload to an online, album and share with your family/friends, you instead put them on a bunch of hard drives that cost 40 bucks each and post one to every contact?
Why can’t you self host? I have a wordpress site, and everything is fine, I use noIP for a domain name and IP tracking. Everything is running on a raspberry pi 4, with 7TB of USB storage. Loading up the photos can be a little slow when we post a big adventure day out, but if you’re patient, or have the means to put a more powerful machine on the job, it is the best way to share your lives with family. Wordpress has an option to ask the search engine crawler to not index the website, and it seems to work. When I post to the blog, I have an email subscription list for all my family, who want to be notified of a new post.
Synology has QuickConnect which makes external access easy without dyndns/static ip. I haven’t used it myself.
https://kb.synology.com/en-global/DSM/tutorial/share_File_Station_files_without_DSM_accountAnother option is to create a Microsoft 365 Business tenant, with a single Business Basic license you get 1TB OneDrive storage and 1TB Sharepoint storage - their ToS says not to use customer data in AI training.
Unless you already know how to manage it this is probably as cumbersome as selfhosting though.
I have no idea about their ToS against non business licenses, so this assumes spending for a business basic license.If you aren’t behind CGNAT you can use dyndns to get around not having a static ip if you want to get into selfhosting with proper external access. I doubt you’ll have the time with a newborn though. :)
I will look at QuickConnect as that sounds potentially ideal.
I honestly don’t trust MS as far as I could throw them. The amount of ads they are forcing into the OS level is evidence enough for me to believe that they are willing to abuse customers. And if DropBox is any indication of how ToS and EULAs can change in the blink of an eye to include all files, past and present, to be used for AI training with no recourse to opt-out, then MS’s current ToS doesn’t really give any fuzzy feelings.
I will definitely have to look at dyndns as I need to find a way to provide a static endpoint to gain access to ethically sourced AI training materials for my own works and that sounds like it might work.
And yes, I do work in AI, which is why I am so focused on not allowing the megacorps to ignore even the most basic regimes of ethics or customer respect.
I would pair a Synology NAS with at least one, preferably two, usb disks to make local backups to with the built in Hyper Backup - losing the whole family picture archive hurts and usb disks are cheap. It doesn’t seem possible to make a read only QuickConnect connection so beware of that if there’s to be non techie users connecting.
Personally I use dyndns and openvpn (if I rebuilt today I would look at Wireguard instead of openvpn as a vpn solution) as I prefer not relaying my traffic through services outside my self hosting. That would require you to aid your non techie family members with the initial configuration on their end though.
Maybe don’t share online?
We have a printing center in my area that prints high quality full color photos for 75 cents a page.
Photo development booths, printing centres and later phone repair shops (before phones regularly got encrypted) used to be the number one avenue for getting photos leaked.
As true as that is, we’re talking about photos of a newborn infant. Like for real, who would intentionally leak photos of a newborn?
Oh yeah, that’s right, artificial intelligence!
Don’t feed the online machine, take the photos into a print shop via USB flash drive, and I’m pretty sure anyone with a soul will have respect for family privacy.
Not so with online cloud services though ☹️
Have pictures printed and mail them. Use a family text thread.
If you aren’t gonna host your own digital files and you don’t want someone else to get their hands on em those are the options.
I don’t mind self-hosting, I just need something that can host from a dynamic IP since static is too expensive right now.
there’s vps providers in the $10 per year range that come with fifteen or so gigabytes of storage and a static ip if you can swing that.
here’s cloudserver with ten bucks for a year of static IP and 20GB
i can’t imagine baby pictures would push the bounds of that storage…