Docker - Immich startet nicht, DB-Auth-Fehler

Krik · 10. Dezember 2025

Moin zusammen,

ich will auf meinem NAS (Ugreen DXP2800) Immich laufen lassen.

Diese drei Dateien habe ich von hier heruntergeladen und etwas modifiziert:

docker-compose.xaml

Code:

name: immich
services:
  immich-server:
    container_name: immich_server
    image: ghcr.io/immich-app/immich-server:${IMMICH_VERSION:-release}
    extends:
      file: hwaccel.transcoding.yml
      service: quicksync
    volumes:
      - ${UPLOAD_LOCATION}:/data
      - /etc/localtime:/etc/localtime:ro
    env_file:
      - .env
    ports:
      - '2283:2283'
    depends_on:
      - redis
      - database
    #restart: always # zum Testen
    healthcheck:
      disable: false
    networks:
      macvlan:
        ipv4_address: 10.0.6.1
  immich-machine-learning:
    container_name: immich_machine_learning
    image: ghcr.io/immich-app/immich-machine-learning:${IMMICH_VERSION:-release}
    volumes:
      - model-cache:/cache
    env_file:
      - .env
    restart: always
    healthcheck:
      disable: false
    networks:
      macvlan:
        ipv4_address: 10.0.6.2
  redis:
    container_name: immich_redis
    image: docker.io/valkey/valkey:8@sha256:81db6d39e1bba3b3ff32bd3a1b19a6d69690f94a3954ec131277b9a26b95b3aa
    healthcheck:
      test: redis-cli ping || exit 1
    restart: always
    networks:
      macvlan:
        ipv4_address: 10.0.6.3
  database:
    container_name: immich_postgres
    image: ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0@sha256:bcf63357191b76a916ae5eb93464d65c07511da41e3bf7a8416db519b40b1c23
    environment:
      POSTGRES_PASSWORD: ${DB_PASSWORD}
      POSTGRES_USER: ${DB_USERNAME}
      POSTGRES_DB: ${DB_DATABASE_NAME}
      POSTGRES_INITDB_ARGS: '--data-checksums'
    volumes:
      - ${DB_DATA_LOCATION}:/var/lib/postgresql/data
    shm_size: 128mb
    restart: always
    networks:
      macvlan:
        ipv4_address: 10.0.6.4
volumes:
  model-cache:
networks:
  macvlan:
    external: true
    name: macvlan

hwaccel.transcoding.yml

Code:

# Configurations for hardware-accelerated transcoding

# If using Unraid or another platform that doesn't allow multiple Compose files,
# you can inline the config for a backend by copying its contents
# into the immich-microservices service in the docker-compose.yml file.

# See https://docs.immich.app/features/hardware-transcoding for more info on using hardware transcoding.

services:
  cpu: {}

  quicksync:
    devices:
      - /dev/dri:/dev/dri

  # später ausprobieren, falls quicksync nicht funktioniert
  #vaapi:
  #  devices:
  #    - /dev/dri:/dev/dri

.env

Code:

# You can find documentation for all the supported env variables at https://docs.immich.app/install/environment-variables

# The location where your uploaded files are stored
UPLOAD_LOCATION=/volume1/docker/immich/uploads

# The location where your database files are stored. Network shares are not supported for the database
DB_DATA_LOCATION=/volume1/docker/immich/db

# To set a timezone, uncomment the next line and change Etc/UTC to a TZ identifier from this list: https://en.wikipedia.org/wiki/List_of_tz_database_time_zones#List
TZ=Europe/Berlin

# The Immich version to use. You can pin this to a specific version like "v2.1.0"
IMMICH_VERSION=v2

# Connection secret for postgres. You should change it to a random password
# Please use only the characters `A-Za-z0-9`, without special characters or spaces
DB_PASSWORD=25ibhJZvdPND0nLw

# The values below this line do not need to be changed
###################################################################################
DB_USERNAME=postgres
DB_DATABASE_NAME=immich

Alle Container starten bis auf immich_server. Das meldet:

Code:

Initializing Immich v2.3.1
Detected CPU Cores: 4
Missing history for endpoint: Retrieve auth status
(node:7) ExperimentalWarning: WASI is an experimental feature and might change at any time
(Use `node --trace-warnings ...` to show where the warning was created)
/usr/src/app/server/node_modules/.pnpm/postgres@3.4.7/node_modules/postgres/cjs/src/connection.js:794
    const error = Errors.postgres(parseError(x))
                         ^
PostgresError: password authentication failed for user "postgres"
    at ErrorResponse (/usr/src/app/server/node_modules/.pnpm/postgres@3.4.7/node_modules/postgres/cjs/src/connection.js:794:26)
    at handle (/usr/src/app/server/node_modules/.pnpm/postgres@3.4.7/node_modules/postgres/cjs/src/connection.js:480:6)
    at Socket.data (/usr/src/app/server/node_modules/.pnpm/postgres@3.4.7/node_modules/postgres/cjs/src/connection.js:315:9)
    at Socket.emit (node:events:518:28)
    at addChunk (node:internal/streams/readable:561:12)
    at readableAddChunkPushByteMode (node:internal/streams/readable:512:3)
    at Readable.push (node:internal/streams/readable:392:5)
    at TCP.onStreamRead (node:internal/stream_base_commons:189:23) {
  severity_local: 'FATAL',
  severity: 'FATAL',
  code: '28P01',
  file: 'auth.c',
  line: '331',
  routine: 'auth_failed'
}
Node.js v22.18.0

Okaaay....

Code:

PostgreSQL init process complete; ready for start up.
2025-12-10 13:04:49.815 GMT [1] LOG:  skipping missing configuration file "/var/lib/postgresql/data/postgresql.override.conf"
2025-12-10 13:04:49.816 GMT [1] LOG:  skipping missing configuration file "/var/lib/postgresql/data/postgresql.override.conf"
2025-12-10 13:04:49.846 UTC [1] LOG:  starting PostgreSQL 14.19 (Debian 14.19-1.pgdg12+1) on x86_64-pc-linux-gnu, compiled by gcc (Debian 12.2.0-14+deb12u1) 12.2.0, 64-bit
2025-12-10 13:04:49.846 UTC [1] LOG:  listening on IPv4 address "0.0.0.0", port 5432
2025-12-10 13:04:49.846 UTC [1] LOG:  listening on IPv6 address "::", port 5432
2025-12-10 13:04:49.853 UTC [1] LOG:  listening on Unix socket "/var/run/postgresql/.s.PGSQL.5432"
2025-12-10 13:04:49.860 UTC [72] LOG:  database system was shut down at 2025-12-10 13:04:49 UTC
2025-12-10 13:04:49.876 UTC [1] LOG:  database system is ready to accept connections
2025-12-10 13:04:55.802 UTC [96] FATAL:  password authentication failed for user "postgres"
2025-12-10 13:04:55.802 UTC [96] DETAIL:  Connection matched pg_hba.conf line 100: "host all all all scram-sha-256"

Hä? Ich verstehe nicht, warum er in einen Authentifizierungsfehler läuft.

Gemäß https://github.com/immich-app/immich/issues/18162 habe ich zum immich_server-Container auch mal diese Zeilen hinzugefügt:

Code:

    environment:
      DB_DATABASE_NAME: ${DB_DATABASE_NAME}
      DB_USERNAME: ${DB_USERNAME}
      DB_PASSWORD: ${DB_PASSWORD}

Das hatte keinen Effekt.
Mehr habe ich zu diesem Fehler nicht gefunden.

Ich habe den Teil mit dem macvlan selber drangehängt. Das war in den ursprünglichen Konfiguration nicht vorhanden. Aber genau der Kram funktioniert bei anderen Containern auf diesem NAS einwandfrei. Sollte das aber doch der Fehlerursprung sein? Das kann ich mir irgendwie nicht vorstellen, zumal da was von auth_failed statt not found steht.

Mir ist nicht klar, warum der Fehler passiert. Weiß jemand, wie das zustande kommt und wie ich den lösen kann?

Gruß
Krik

AAS · 10. Dezember 2025

Die .env liegt im selben Verzeichnis wie dein Compose File?
Und es liegt auch keine andere .env im gleichen Verzeichnis?

Krik · 10. Dezember 2025

2x Jepp.

JumpingCat · 10. Dezember 2025

Obwolhl es eigentlich überflüssig sein sollte als enc File .env anzugeben: Wieso machst du das nicht konsequent bei allen Services?

Krik · 10. Dezember 2025

Die Konfiguration da oben ist das vorgegebene Default mit ein paar kleinen Anpassungen. Bevor ich Experimente mache, will ich das erst mal zum Laufen bekommen.

Azghul0815 · 10. Dezember 2025

Ich hab Immich auf auf der DH4300 installiert und meine Dateien sehen so aus:
.env

Code:

# You can find documentation for all the supported env variables at https://docs.immich.app/install/environment-variables

# The location where your uploaded files are stored
UPLOAD_LOCATION= /volume1/docker/immich/uploads

# The location where your database files are stored. Network shares are not supported for the database
DB_DATA_LOCATION= /volume1/docker/immich/db

# To set a timezone, uncomment the next line and change Etc/UTC to a TZ identifier from this list: https://en.wikipedia.org/wiki/List_of_tz_database_time_zones#List
# TZ=Etc/UTC

# The Immich version to use. You can pin this to a specific version like "v2.1.0"
IMMICH_VERSION=v2

# Connection secret for postgres. You should change it to a random password
# Please use only the characters `A-Za-z0-9`, without special characters or spaces
DB_PASSWORD=Katze123

# The values below this line do not need to be changed
###################################################################################
DB_USERNAME=postgres
DB_DATABASE_NAME=immich

und die Compose File:

Code:

# WARNING: To install Immich, follow our guide: https://docs.immich.app/install/docker-compose
#
# Make sure to use the docker-compose.yml of the current release:
#
# https://github.com/immich-app/immich/releases/latest/download/docker-compose.yml
#
# The compose file on main may not be compatible with the latest release.

name: immich

services:
  immich-server:
    container_name: immich_server
    image: ghcr.io/immich-app/immich-server:${IMMICH_VERSION:-release}
    # extends:
    #   file: hwaccel.transcoding.yml
    #   service: cpu # set to one of [nvenc, quicksync, rkmpp, vaapi, vaapi-wsl] for accelerated transcoding
    volumes:
      # Do not edit the next line. If you want to change the media storage location on your system, edit the value of UPLOAD_LOCATION in the .env file
      - ${UPLOAD_LOCATION}:/data
      - /volume1/Photos:/external
      - /etc/localtime:/etc/localtime:ro
    env_file:
      - .env
    ports:
      - '2283:2283'
    depends_on:
      - redis
      - database
    restart: always
    healthcheck:
      disable: false

  immich-machine-learning:
    container_name: immich_machine_learning
    # For hardware acceleration, add one of -[armnn, cuda, rocm, openvino, rknn] to the image tag.
    # Example tag: ${IMMICH_VERSION:-release}-cuda
    image: ghcr.io/immich-app/immich-machine-learning:${IMMICH_VERSION:-release}
    # extends: # uncomment this section for hardware acceleration - see https://docs.immich.app/features/ml-hardware-acceleration
    #   file: hwaccel.ml.yml
    #   service: cpu # set to one of [armnn, cuda, rocm, openvino, openvino-wsl, rknn] for accelerated inference - use the `-wsl` version for WSL2 where applicable
    volumes:
      - model-cache:/cache
    env_file:
      - .env
    restart: always
    healthcheck:
      disable: false

  redis:
    container_name: immich_redis
    image: docker.io/valkey/valkey:8@sha256:81db6d39e1bba3b3ff32bd3a1b19a6d69690f94a3954ec131277b9a26b95b3aa
    healthcheck:
      test: redis-cli ping || exit 1
    restart: always

  database:
    container_name: immich_postgres
    image: ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0@sha256:bcf63357191b76a916ae5eb93464d65c07511da41e3bf7a8416db519b40b1c23
    environment:
      POSTGRES_PASSWORD: ${DB_PASSWORD}
      POSTGRES_USER: ${DB_USERNAME}
      POSTGRES_DB: ${DB_DATABASE_NAME}
      POSTGRES_INITDB_ARGS: '--data-checksums'
      # Uncomment the DB_STORAGE_TYPE: 'HDD' var if your database isn't stored on SSDs
      # DB_STORAGE_TYPE: 'HDD'
    volumes:
      # Do not edit the next line. If you want to change the database storage location on your system, edit the value of DB_DATA_LOCATION in the .env file
      - ${DB_DATA_LOCATION}:/var/lib/postgresql/data
    shm_size: 128mb
    restart: always

volumes:
  model-cache:

Mit Standard Yaml schon mal versucht? Ohne HW Beschleunigung usw?

Ich seh bei dir auf den ersten Blick eben auch keinen Fehler.

Krik · 10. Dezember 2025

Ok, es liegt wirklich am macvlan. Ohne das geht es. Ich raffs nicht. Ich hatte damit noch nie Probleme.

Schon mal vielen Dank an alle. Ich muss mal schauen, woran er sich da genau stört. Verlangt er vielleicht, dass die DB lokal bzw. auf dem gleichen "host" liegt? 🤔

Blackeye33 · 10. Dezember 2025

Ich verstehe jetzt nicht den direkten Nutzen von macvlan (va. ggü der Komplexität), aber generell braucht man ner DB garkein externes Netz geben.

Bei mir hat nur der "immich_server" diese Netzwerke:

Code:

    networks:
      - proxy
      - default

Die restlichen Container haben nur "default".

Suche

Docker - Immich startet nicht, DB-Auth-Fehler

Krik

Fleet Admiral Pro

docker-compose.xaml

hwaccel.transcoding.yml

.env

AAS

Lt. Commander

Krik

Fleet Admiral Pro

JumpingCat

Rear Admiral

Krik

Fleet Admiral Pro

Azghul0815

Fleet Admiral Pro

Krik

Fleet Admiral Pro

Blackeye33

Lieutenant Pro

Docker - Immich startet nicht, DB-Auth-Fehler

Fleet Admiral Pro

docker-compose.xaml​

hwaccel.transcoding.yml​

.env​

Lt. Commander

Fleet Admiral Pro

Rear Admiral

Fleet Admiral Pro

Fleet Admiral Pro

Fleet Admiral Pro

Lieutenant Pro

docker-compose.xaml

hwaccel.transcoding.yml

.env