Or... install immich
Done.
No need to map internal & external ports, wrestle with permissions (or... good grief, run the container as root!), etc, etc.
It's just... less faff.
Plus I save all that additional disk space, not having to install docker! π
Don't get me wrong; Containers, chroot jails, Type-1 & Type-2 hypervisors all had their place in the history of my systems, I just don't see it as a necessity.
I replaced Nextcloud with syncthing (files) & radicale (calendar, contacts & todos)
No-one used the calendar on NC, they just used their phones, Outlook, etc
No-one used the photo gallery on NC - that's now Immich ... again, with syncthing.
During the early days, just doing an update would break things.
For a small home setup, NC is too big, too clunky and just not the right tool.