diff --git a/flake.lock b/flake.lock
index 7753bde..5af9e5b 100644
--- a/flake.lock
+++ b/flake.lock
@@ -451,6 +451,22 @@
         "type": "github"
       }
     },
+    "nixpkgs-immich": {
+      "locked": {
+        "lastModified": 1783776592,
+        "narHash": "sha256-UgCQzxeWI75XM8G+hPrPh+MKzEPjG3SpAj7dtqSbksA=",
+        "owner": "nixos",
+        "repo": "nixpkgs",
+        "rev": "e7a3ca8092b61ff85b6a45bf863ea2b2d6a661b3",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nixos",
+        "repo": "nixpkgs",
+        "rev": "e7a3ca8092b61ff85b6a45bf863ea2b2d6a661b3",
+        "type": "github"
+      }
+    },
     "nixpkgs-lib": {
       "locked": {
         "lastModified": 1782614948,
@@ -668,6 +684,7 @@
         "nixflix": "nixflix",
         "nixpkgs": "nixpkgs_2",
         "nixpkgs-fork": "nixpkgs-fork",
+        "nixpkgs-immich": "nixpkgs-immich",
         "nixpkgs-unstable": "nixpkgs-unstable",
         "nixpkgs-unstable-droid": "nixpkgs-unstable-droid",
         "simple-nixos-mailserver": "simple-nixos-mailserver",
diff --git a/flake.nix b/flake.nix
index 810d7fa..6c92811 100644
--- a/flake.nix
+++ b/flake.nix
@@ -3,6 +3,9 @@
     nixpkgs.url = "github:nixos/nixpkgs/nixos-26.05";
     nixpkgs-unstable.url = "github:nixos/nixpkgs/nixos-unstable";
     nixpkgs-fork.url = "github:phonkd/nixpkgs/master";
+    # Pinned ahead of nixpkgs-unstable purely to get Immich 3.0.2 (not yet
+    # on nixpkgs-unstable's locked rev); used only for services.immich.package.
+    nixpkgs-immich.url = "github:nixos/nixpkgs/e7a3ca8092b61ff85b6a45bf863ea2b2d6a661b3";
 
     flake-parts.url = "github:hercules-ci/flake-parts";
     import-tree.url = "github:vic/import-tree";
diff --git a/modules/homelab/apps/immich.nix b/modules/homelab/apps/immich.nix
index 9675244..32a2fd8 100644
--- a/modules/homelab/apps/immich.nix
+++ b/modules/homelab/apps/immich.nix
@@ -43,6 +43,9 @@
 
         services.immich = {
           enable = true;
+          # nixpkgs-26.05/unstable are both still on Immich 2.7.5; pull just
+          # this package from a newer pin to get 3.0.2.
+          package = inputs.nixpkgs-immich.legacyPackages.${pkgs.system}.immich;
           host = "0.0.0.0";
           mediaLocation = "/mnt/solo-sata/immich";
         };