immich sharing outside VPN

[DdHms]

The Question

Hi
Overview:
My immich is behind a firewall and wish to share images with family members without enforcing them to be part of the VPN network
Setup
I have immich running on a linux server with tailscale VPN installed
Using tailscale funnel I funneled port 80 to the outside the VPN network
In my NginX reverse proxy configuration I added the following:
server { listen 80; server_name ###Tailscale-funnel-URL###.ts.net; location /shared_images{ proxy_pass http://localhost:2283/share; ... }}
to forward /shared_images to the immich sharing route.
I then share an images and copy the part of the link trailing /share
When accessing the URL: ###Tailscale-funnel-URL###.ts.net/shared_images/@@specific-image-link-id@@
I get an endless spinning immich logo.
Can anyone explain to me what I am missing or maybe suggest another approach?

The OS that Immich Server is running on

Ububtu 24.02

Version of Immich Server

v1.124.2

Version of Immich Mobile App

v1.124.0

Platform with the issue

• Server
• Web
• Mobile

Your docker-compose.yml content

Irrelevant

Your .env content

Irrelevant

Reproduction steps

.

Relevant log output

Additional information

No response

[mmomjian]

Immich does not support subpath (/shared_images), you must use a sub domain

[DdHms]

I found this that both explains the problem and gives a solution:
https://github.com/alangrainger/immich-public-proxy