diff --git a/infra/cloud/0003_nextcloud_playbook.yaml b/infra/cloud/0003_nextcloud_playbook.yaml
index 114f215..46842d1 100644
--- a/infra/cloud/0003_nextcloud_playbook.yaml
+++ b/infra/cloud/0003_nextcloud_playbook.yaml
@@ -13,7 +13,7 @@
       register: user
     - name: Copy project
       ansible.builtin.copy:
-        src: ./{{ app }}
+        src: "./{{ app }}"
         dest: "{{ user.home }}"
         mode: "0744"
     - name: Re-deploy
diff --git a/infra/cloud/0004_immich_playbook.yaml b/infra/cloud/0004_immich_playbook.yaml
index 2b38c4f..238c53c 100644
--- a/infra/cloud/0004_immich_playbook.yaml
+++ b/infra/cloud/0004_immich_playbook.yaml
@@ -18,7 +18,7 @@
       ignore_errors: true
     - name: Copy project
       ansible.builtin.copy:
-        src: ./{{ app }}
+        src: "./{{ app }}"
         dest: "{{ user.home }}"
         mode: "0744"
     - name: Docker compose up -d
diff --git a/infra/cloud/immich/.env b/infra/cloud/immich/.env
new file mode 100644
index 0000000..d943043
--- /dev/null
+++ b/infra/cloud/immich/.env
@@ -0,0 +1,19 @@
+# You can find documentation for all the supported env variables at https://immich.app/docs/install/environment-variables
+
+# The location where your uploaded files are stored
+UPLOAD_LOCATION=/mnt/media/immich
+
+# The Immich version to use. You can pin this to a specific version like "v1.71.0"
+IMMICH_VERSION=release
+
+# Connection secrets for postgres and typesense. You should change these to random passwords
+TYPESENSE_API_KEY=some-random-text
+DB_PASSWORD=postgres
+
+# The values below this line do not need to be changed
+###################################################################################
+DB_HOSTNAME=immich_postgres
+DB_USERNAME=immich
+DB_DATABASE_NAME=immich
+
+REDIS_HOSTNAME=immich_redis
diff --git a/infra/cloud/immich/.gitignore b/infra/cloud/immich/.gitignore
new file mode 100644
index 0000000..1e18f27
--- /dev/null
+++ b/infra/cloud/immich/.gitignore
@@ -0,0 +1 @@
+!.env
\ No newline at end of file