Tracearr: install only the server's production dependencies

pnpm 12.10 refuses a frozen install when the lockfile names apps/web but
that directory has no package.json, which is how the runtime tree is
built, so the update to 2.8.0 failed. Filter to @tracearr/server... the
way the upstream Dockerfile does, and copy assets/logo.png, which the
e-mail and newsletter code reads.

ct/tracearr.sh

@@ -125,7 +125,7 @@ EOF
     $STD ./scripts/fetch-basemap.sh || msg_warn "Basemap download failed, keeping the existing map"
     [[ -d /opt/tracearr/data ]] && mv /opt/tracearr/data /opt/tracearr.data
     rm -rf /opt/tracearr
-    mkdir -p /opt/tracearr/{packages/shared,packages/emails,apps/server,apps/web,apps/server/src/db}
+    mkdir -p /opt/tracearr/{packages/shared,packages/emails,apps/server,apps/web,apps/server/src/db,assets}
     cp -rf package.json /opt/tracearr/
     cp -rf pnpm-workspace.yaml /opt/tracearr/
     cp -rf pnpm-lock.yaml /opt/tracearr/
@@ -138,13 +138,14 @@ EOF
     cp -rf packages/emails/package.json /opt/tracearr/packages/emails/
     cp -rf packages/emails/dist /opt/tracearr/packages/emails/dist
     cp -rf apps/server/src/db/migrations /opt/tracearr/apps/server/src/db/migrations
+    cp -f assets/logo.png /opt/tracearr/assets/
     [[ -d /opt/tracearr.data ]] && mv /opt/tracearr.data /opt/tracearr/data
     mkdir -p /opt/tracearr/data
     cp -rf data/. /opt/tracearr/data/
     mkdir -p /opt/tracearr/data/image-cache
     rm -rf /opt/tracearr.build
     cd /opt/tracearr
-    $STD pnpm install --prod --frozen-lockfile --ignore-scripts
+    $STD pnpm install --prod --frozen-lockfile --ignore-scripts --filter @tracearr/server...
     $STD chown -R tracearr:tracearr /opt/tracearr
     msg_ok "Built Tracearr"
 

install/tracearr-install.sh

@@ -68,7 +68,7 @@ $STD pnpm install --frozen-lockfile --force
 $STD pnpm turbo telemetry disable
 $STD pnpm turbo run build --no-daemon --filter=@tracearr/shared --filter=@tracearr/server --filter=@tracearr/web
 $STD ./scripts/fetch-basemap.sh || msg_warn "Basemap download failed, the map will show without base tiles"
-mkdir -p /opt/tracearr/{packages/shared,packages/emails,apps/server,apps/web,apps/server/src/db}
+mkdir -p /opt/tracearr/{packages/shared,packages/emails,apps/server,apps/web,apps/server/src/db,assets}
 cp -rf package.json /opt/tracearr/
 cp -rf pnpm-workspace.yaml /opt/tracearr/
 cp -rf pnpm-lock.yaml /opt/tracearr/
@@ -81,11 +81,12 @@ cp -rf packages/shared/dist /opt/tracearr/packages/shared/dist
 cp -rf packages/emails/package.json /opt/tracearr/packages/emails/
 cp -rf packages/emails/dist /opt/tracearr/packages/emails/dist
 cp -rf apps/server/src/db/migrations /opt/tracearr/apps/server/src/db/migrations
+cp -f assets/logo.png /opt/tracearr/assets/
 cp -rf data /opt/tracearr/data
 mkdir -p /opt/tracearr/data/image-cache
 rm -rf /opt/tracearr.build
 cd /opt/tracearr
-$STD pnpm install --prod --frozen-lockfile --ignore-scripts
+$STD pnpm install --prod --frozen-lockfile --ignore-scripts --filter @tracearr/server...
 msg_ok "Built Tracearr"
 
 msg_info "Configuring Tracearr"

tools/addon/immich-public-proxy.sh

@@ -33,9 +33,7 @@ APP_TYPE="addon"
 INSTALL_PATH="/opt/immich-proxy"
 CONFIG_PATH="/opt/immich-proxy/app"
 SERVICE_PATH="/etc/systemd/system/immich-proxy.service"
-UPLOAD_SERVICE_PATH="/etc/systemd/system/immich-proxy-upload.service"
 DEFAULT_PORT=3000
-UPLOAD_PORT=3001
 
 # Initialize all core functions (colors, formatting, icons, $STD mode)
 load_functions
@@ -46,8 +44,8 @@ require_debian_like
 # ==============================================================================
 function uninstall() {
   msg_info "Uninstalling ${APP}"
-  systemctl disable --now immich-proxy.service immich-proxy-upload.service &>/dev/null || true
-  rm -f "$SERVICE_PATH" "$UPLOAD_SERVICE_PATH"
+  systemctl disable --now immich-proxy.service &>/dev/null || true
+  rm -f "$SERVICE_PATH"
   rm -rf "$INSTALL_PATH"
   rm -f "/usr/local/bin/update_immich-public-proxy"
   rm -f "$HOME/.immichpublicproxy"
@@ -60,33 +58,32 @@ function uninstall() {
 function update() {
   if check_for_gh_release "Immich Public Proxy" "alangrainger/immich-public-proxy"; then
     msg_info "Stopping service"
-    systemctl stop immich-proxy.service immich-proxy-upload.service &>/dev/null || true
+    systemctl stop immich-proxy.service &>/dev/null || true
     msg_ok "Stopped service"
 
     BACKUP_DIR="/opt/immich-public-proxy_backup"
     create_backup "$CONFIG_PATH"/.env "$CONFIG_PATH"/config.json
-    if [[ -f "$UPLOAD_SERVICE_PATH" ]]; then
-      create_backup "$INSTALL_PATH"/upload-app/config.json
-    fi
 
     NODE_VERSION="24" setup_nodejs
     CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Immich Public Proxy" "alangrainger/immich-public-proxy" "tarball" "latest" "$INSTALL_PATH"
 
     restore_backup
-    build_app
+
+    msg_info "Installing dependencies"
+    cd "$CONFIG_PATH"
+    $STD npm ci
+    msg_ok "Installed dependencies"
+
+    msg_info "Building ${APP}"
+    $STD npm run build
+    msg_ok "Built ${APP}"
 
     msg_info "Updating service"
     create_service
-    if [[ -f "$UPLOAD_SERVICE_PATH" ]]; then
-      create_upload_service
-    fi
     msg_ok "Updated service"
 
     msg_info "Starting service"
     systemctl start immich-proxy
-    if [[ -f "$UPLOAD_SERVICE_PATH" ]]; then
-      systemctl start immich-proxy-upload
-    fi
     msg_ok "Started service"
     msg_ok "Updated successfully"
     exit
@@ -114,55 +111,6 @@ EOF
   systemctl daemon-reload
 }
 
-# The workspace root builds shared, app and upload-app together
-function build_app() {
-  msg_info "Installing dependencies"
-  cd "$INSTALL_PATH"
-  $STD npm ci
-  msg_ok "Installed dependencies"
-
-  msg_info "Building ${APP}"
-  $STD npm run build
-  msg_ok "Built ${APP}"
-}
-
-# env sets the port after EnvironmentFile, so an IPP_PORT in .env cannot clash with IPP
-function create_upload_service() {
-  cat <<EOF >"$UPLOAD_SERVICE_PATH"
-[Unit]
-Description=Immich Public Proxy visitor uploads
-After=network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=${INSTALL_PATH}/upload-app
-EnvironmentFile=${CONFIG_PATH}/.env
-ExecStart=/usr/bin/env IPP_PORT=${UPLOAD_PORT} /usr/bin/node ${INSTALL_PATH}/upload-app/dist/index.js
-Restart=always
-RestartSec=10
-
-[Install]
-WantedBy=multi-user.target
-EOF
-  systemctl daemon-reload
-}
-
-function enable_uploads() {
-  if [[ ! -d "$INSTALL_PATH"/upload-app ]]; then
-    msg_error "Visitor uploads need ${APP} 4.0 or newer. Update first."
-    exit 1
-  fi
-  if [[ ! -f "$INSTALL_PATH"/upload-app/dist/index.js ]]; then
-    build_app
-  fi
-  msg_info "Enabling visitor uploads"
-  create_upload_service
-  systemctl enable -q --now immich-proxy-upload
-  msg_ok "Enabled visitor uploads on port ${UPLOAD_PORT}"
-  msg_warn "Route /upload/* on your reverse proxy to http://${LOCAL_IP}:${UPLOAD_PORT} and turn on 'Allow public user to upload' for the share in Immich"
-}
-
 # ==============================================================================
 # INSTALL
 # ==============================================================================
@@ -172,7 +120,15 @@ function install() {
   # Force fresh download by removing version cache
   rm -f "$HOME/.immichpublicproxy"
   fetch_and_deploy_gh_release "Immich Public Proxy" "alangrainger/immich-public-proxy" "tarball" "latest" "$INSTALL_PATH"
-  build_app
+
+  msg_info "Installing dependencies"
+  cd "$CONFIG_PATH"
+  $STD npm ci
+  msg_ok "Installed dependencies"
+
+  msg_info "Building ${APP}"
+  $STD npm run build
+  msg_ok "Built ${APP}"
 
   MAX_ATTEMPTS=3
   attempt=0
@@ -220,12 +176,6 @@ EOF
   systemctl enable -q --now immich-proxy
   msg_ok "Created and started service"
 
-  prompt="${var_ipp_uploads:-}"
-  [[ -n "$prompt" ]] || read -r -p "${TAB3}Enable visitor uploads (second service on port ${UPLOAD_PORT})? <y/N> " prompt
-  if [[ "${prompt,,}" =~ ^(y|yes|true)$ ]]; then
-    enable_uploads
-  fi
-
   # Create update script (simple wrapper that calls this addon with type=update)
   msg_info "Creating update script"
   cat <<'UPDATEEOF' >/usr/local/bin/update_immich-public-proxy
@@ -280,15 +230,6 @@ if [[ -d "$INSTALL_PATH" && -f "$SERVICE_PATH" ]]; then
     exit 0
   fi
 
-  if [[ ! -f "$UPLOAD_SERVICE_PATH" ]]; then
-    echo -n "${TAB}Enable visitor uploads (second service on port ${UPLOAD_PORT})? (y/N): "
-    read -r upload_prompt
-    if [[ "${upload_prompt,,}" =~ ^(y|yes)$ ]]; then
-      enable_uploads
-      exit 0
-    fi
-  fi
-
   msg_warn "No action selected. Exiting."
   exit 0
 fi