My son was just born, and while a few photos will go on the likes of Facebook and Instagram, overall my partner and I are wanting to keep our shared photos private from the EULA abuses that we all know and hate.
Does anyone here have any good suggestions? I would create my own front end, but I can’t swing hosting or a static IP to do it from my local box. Are there any companies out there who aren’t total shit bags who claim immediate irrevocable license to all of my photos to do with whatever the fuck they please?
If you and your partner both have iphones then iCloud should be sufficient for keeping the photos to yourselves if you turn on Advanced Data Protection. I think it requires you and your partner to have two yubikeys at a minimum though.
https://support.apple.com/guide/security/advanced-data-protection-for-icloud-sec973254c5f
Photos encrypted at rest, only you and your partner will have access to the keys. If you want the convenience of icloud backup then the government would be able to subpoena your decryption keys from your phone backups, but it’s not going to be available for casual employee access. Automated tagging/face matching is done by your iPhone when it’s plugged in so there’s some organization. Nothing close to Google’s AI organization.
I know Apple is a shit company. But they’ve learned a thing or two after the Fappening.
Advanced Data Protection should be the minimum setting for you to consider Apple as your photo storage. Your photos will auto upload from your phones, apple has partner sharing so photo libraries will automatically be shared between you and your partner, and they recently implemented a system similar to “signal key verification”, but again limited to ADP turned on.
Otherwise you’re looking at Proton or Tresorit.
Immich if you selfhost
This is the way, immich is insanely fast and performant
I know you said you can’t do your local box, but there’s no necessity for a static IP to do that. Dynamic DNS is relatively easy to set up, I suppose provided you have a domain name you own (which you can find for very reasonable prices).
Or setup Tailscale and enable the Funnel feature for whatever service you want to expose.
This way it’s a bit more secure, since the exposed endpoint is hosted by Tailscale and routed to your device via your Tailscale (encrypted) network.
Using Funnel, no one needs to have the Tailscale client.
Syncthing
It can become really messy if one family member deletes a picture by accident and everyone complains. I’d use Syncthing for machines I personally manage.
You can control which devices can make and propagate changes to shared folders.
I think this is very close to what you are looking for. Recently they have open sourced all their server side code also. Means currently they are completely open source.
Seems too expensive. Most people that owned a phone with a camera for the last few years would easily be in the $200/yr plan. I know I am.
That’s the cost of Amazon and Walmart subscriptions combined just to get one benefit of Amazon subscription.
I realize people here tend to shit on Amazon, but they never leaked anyone’s photos so unless you share them yourself, they are perfectly safe in AWS cloud with unlimited storage.
