From 7528722942b6bd8f3425e71c5604e1f96d9cf7f5 Mon Sep 17 00:00:00 2001
From: Crony Akatsuki <crony@cronyakatsuki.xyz>
Date: Sat, 10 May 2025 20:14:39 +0200
Subject: [PATCH] feat(thor): add plausible, analytics.

---
 modules/servers/thor/default.nix   |   1 +
 modules/servers/thor/plausible.nix |  26 ++++++++++++++++++++++++++
 modules/servers/thor/secrets.nix   |   3 +++
 secrets/plausible.age              | Bin 0 -> 827 bytes
 secrets/secrets.nix                |   1 +
 5 files changed, 31 insertions(+)
 create mode 100644 modules/servers/thor/plausible.nix
 create mode 100644 secrets/plausible.age

diff --git a/modules/servers/thor/default.nix b/modules/servers/thor/default.nix
index abd108d..55a635f 100644
--- a/modules/servers/thor/default.nix
+++ b/modules/servers/thor/default.nix
@@ -3,5 +3,6 @@
     ./changedetection-io.nix
     ./forgejo.nix
     ./secrets.nix
+    ./plausible.nix
   ];
 }
diff --git a/modules/servers/thor/plausible.nix b/modules/servers/thor/plausible.nix
new file mode 100644
index 0000000..616a7ab
--- /dev/null
+++ b/modules/servers/thor/plausible.nix
@@ -0,0 +1,26 @@
+{config, ...}: {
+  services.plausible = {
+    enable = true;
+    server = {
+      baseUrl = "https://plausible.cronyakatsuki.xyz";
+      secretKeybaseFile = "${config.age.secrets.plausible.path}";
+    };
+  };
+
+  services.traefik.dynamicConfigOptions.http = {
+    services.plausible.loadBalancer.servers = [
+      {
+        url = "http://localhost:8000";
+      }
+    ];
+
+    routers.plausible = {
+      rule = "Host(`plausible.cronyakatsuki.xyz`)";
+      tls = {
+        certResolver = "porkbun";
+      };
+      service = "plausible";
+      entrypoints = "websecure";
+    };
+  };
+}
diff --git a/modules/servers/thor/secrets.nix b/modules/servers/thor/secrets.nix
index 60e4651..9db06d3 100644
--- a/modules/servers/thor/secrets.nix
+++ b/modules/servers/thor/secrets.nix
@@ -4,6 +4,9 @@
       forgejo-db = {
         file = ../../../secrets/forgejo-db.age;
       };
+      plausible = {
+        file = ../../../secrets/plausible.age;
+      };
     };
   };
 }
diff --git a/secrets/plausible.age b/secrets/plausible.age
new file mode 100644
index 0000000000000000000000000000000000000000..eee1c05e2779984a3131d6ee55d0079031cd59d5
GIT binary patch
literal 827
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCSP3NXp@E?4j{H!r9N
z4JmUg*Dm(-u5z!+swg(M$VkjDsSFPej0kl0P4x}PDljvuNaw2X_b_xacgid+)lTs?
zvM38lwX`g7P0PuyuypeX3=44#HF0(=tV;FG@<g}IOgkg6AW*?8$;&J&H_*7;%_A(N
zAVu59Cp61H%`B|kDOA5aC_N=C&)F^4x5zxA!k5cCqR7z1%+;wdCnBe`!qGL<DakLV
z!mr5OD=gJCBrM6>-NPWj%_%+8-4Wfk9DRS6a7TrZl(M|cT%S^}?Bd`MlSH2ge@mmt
zeC<fDOiynoLvOdpic;euON+9iuyQW<+<-#!{318sNbRUdb7K?j0xy4a508Rm{VWT=
zu;i4yyhKxjpfvZuh-`G*%(YFujRO_@JPLyIO3gx2vW)dB4GInP!!6zN(kdLia-32E
z1ARhM+^e$6D^e??jPkjHLIOj4lbk{WgDU(Y%>#3bJX0;rk}5*Ot2{$pBYlI7O2TsV
zt31<;f+Nvw^Dj3DaW7YhD2epfHt<QwNQ#V1D)jcttS~PRFiI+Q^(=Qy^Dwu_Ow=zd
zG7T@U%rxQhGcG7HayJey^71VUb<7TNc8N&!Of!ne%L^@tEUk3%5BG9OPYQ5!3oJ*s
zEiFYq$|q1E*h|~P$uTg(C)X)8qCBG_sUpWa$S^Xpq}<HJKh+@3!!b1~I5;^Z)5Vo5
z+p9P*#lj*jBildH$2FiR&ATWxARyV&zcQ=HI6vJzuQbu6sw}wBti+W|S65e|I4m^P
zr?Aw`-B`b@)IYK~zsND$Hzz0}wIV;vps>Wr(9t9-)6v_fDA9te#P`{`!*<p(#rnPR
z`+nN3slIsS3rouUSvz)UuF7Jvb&M+reNntVsh8>EnMu=^S><&H&D-};VyDo42L8vQ
qH#_4j+LM1R7L9evUo)$|^#7Ek#>(d||D_5aZ|=R+^5u6;mInYswi_$}

literal 0
HcmV?d00001

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 4b30ac4..51f4a65 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -20,4 +20,5 @@ in {
   "rclone.age".publicKeys = systems ++ users;
   "navidrome.age".publicKeys = systems ++ users;
   "forgejo-db.age".publicKeys = systems ++ users;
+  "plausible.age".publicKeys = systems ++ users;
 }