feat(thor): add plausible, analytics.

modules/servers/thor/default.nix

@@ -3,5 +3,6 @@
     ./changedetection-io.nix
     ./forgejo.nix
     ./secrets.nix
+    ./plausible.nix
   ];
 }

modules/servers/thor/plausible.nix

@@ -0,0 +1,26 @@
+{config, ...}: {
+  services.plausible = {
+    enable = true;
+    server = {
+      baseUrl = "https://plausible.cronyakatsuki.xyz";
+      secretKeybaseFile = "${config.age.secrets.plausible.path}";
+    };
+  };
+
+  services.traefik.dynamicConfigOptions.http = {
+    services.plausible.loadBalancer.servers = [
+      {
+        url = "http://localhost:8000";
+      }
+    ];
+
+    routers.plausible = {
+      rule = "Host(`plausible.cronyakatsuki.xyz`)";
+      tls = {
+        certResolver = "porkbun";
+      };
+      service = "plausible";
+      entrypoints = "websecure";
+    };
+  };
+}

modules/servers/thor/secrets.nix

@@ -4,6 +4,9 @@
       forgejo-db = {
         file = ../../../secrets/forgejo-db.age;
       };
+      plausible = {
+        file = ../../../secrets/plausible.age;
+      };
     };
   };
 }

secrets/secrets.nix

@@ -20,4 +20,5 @@ in {
   "rclone.age".publicKeys = systems ++ users;
   "navidrome.age".publicKeys = systems ++ users;
   "forgejo-db.age".publicKeys = systems ++ users;
+  "plausible.age".publicKeys = systems ++ users;
 }