Would Plex be an option here? I don’t use it, but I know it has a photo library feature.

SSH key auth for terminal login, plus an nginx proxy and client cert auth on anything accessible by the outside world. I’ll expose any internal service I want because nobody is getting through the client cert auth.