Hacker News Reader

Out of curiosity, is your Immich instance published as https://immich.example.com ?

Yes, it's on the "immich" subdomain. This has crossed my mind as a potential triggering cause, as has the default login page.