Immich Public Proxy provides a barrier of security between the public and Immich. This will accept /share/key paths and make the API call to the Immich instance without exposing the /auth/login or /api to the public. The WebUI should return "Ok" if configured correctly, then point incoming traffic to this proxy instance to serve shared albums.