Immich indeed has that option, I use it frequently. Password protection and upload option

This is purely anecdotally and pretty worthless as a guide or anything, but i got it working perfectly on my framework laptop running kde neon (basically Ubuntu with kde as de in rolling release mode) But its basically archeotech, past me followed a bunch of hints in the framework forum, did some unknown configuration and now it works reliable through all other updates since at least 20 month, battery holds around a week or so sleeping i think