Correct but there are really only 2 parts (3 if you’re adding a front-facing proxy which it sounds like you know how to do). If you’re using something like truenas or proxmox there are prebuilt containers for both iCloudpd and immich/photoprosm/whatever and even if not both have generic Docker containers or can be run out of their own repo checkout. So you just need:

1. iCloud <—> local folder via icloudpd
2. local folder <—> local web front end with immich
3. local web <—> public web with your proxy or cloudflare setup

Good luck!

Right, this is for the “hard” part of getting your content out of iCloud in an automated fashion. You’d then put the content in storage locally and use photoprism or immich or a similar self hosted gallery to be able to access them

icloudpd can be run in a container or just your host machine. It’s a little finnicky to get logins set up (and honestly I haven’t done it in a few months), but once that is working you can automate a job to pull down a backup every day/week/month and delete files from icloud.