diecknet

While Netbird is generally just one of the many alternatives to Tailscale, they also do have a Reverse Proxy feature that allows access without a Netbird client. Haven’t tested it yet, seems to be in beta.

https://docs.netbird.io/manage/reverse-proxy

https://nja.la/

You mentioned that you can’t ping the remote VM. Have you checked if the remote VMs IP is reachable? Is it in the ARP table? Check with arp -a

You could run an individual Immich instance per user. Not sure if it’s feasible or smart

I haven’t tried it yet, but I think you want something like n8n. Yeah, I know they claim to be very AI nowadays, but I had them on my radar before that. It’s essentially an automation platform you can use to glue services together that weren’t intended for each other. https://github.com/n8n-io/n8n