Really, I’d run immich locally,

There ya go. Encrypted of course. That way OP can still learn to stand up a proper server and defenses before it almost instantaneously attracts the attention of literally any or all of the 1.5 billion known, active, automated bot accounts at this moment +/- show up at your port 22 doorstep and helping themselves to your resources.

The very first linux server I stood up on a vps, was taken over quite quickly. So, that spurred me on to read tutorials, scour chans and forums, just looking for guidance and knowledge. Now, I understand a lot more that I did way back when so it's gotten easier. Not that I house a vast trove of wisdom or knowledge....pffffttt....that does not exist. I learn something new all the time. That's one of the aspects I really love about self hosting.