Holy cow, that could have been a disaster. Immich 3.1.0 changed that oauth now sync admin status.
They also check that at least 1 admin exists with, otherwise they show the setup page.
As a result for almost a day, there was a public setup page for my #immich instance online, where anyone could have created an admin account!
TIL: IMMICH_ALLOW_SETUP=false
If you haven't set it yet, do it today!
fix(immich): Explicitly block setup mode · 828b002cc9
infrastructure-gitops - Collection of the Shivering-Isles infrastructure.SI-Forge: Building tools with smite