add plausible

hosts/chmura/services/default.nix

@@ -11,6 +11,7 @@ _: {
         #./minecraft.nix
         ./ntfy-sh.nix
         ./owncast.nix
+        ./plausible.nix
         #./stalwart.nix
         ./sudo-parental-control.nix
         #./qbittorrent.nix

hosts/chmura/services/plausible.nix

@@ -0,0 +1,35 @@
+{
+    config,
+    ...
+}: let
+    domain = "plausible.jacekpoz.pl";
+in {
+    age.secrets = {
+        plausible-admin-password.file = ../../../secrets/plausible-admin-password.age;
+        plausible-secret-keybase.file = ../../../secrets/plausible-secret-keybase.age;
+    };
+
+    services.plausible = {
+        enable = true;
+
+        adminUser = {
+            activate = true;
+            name = "afsdjh";
+            email = "jacekpoz@proton.me";
+            passwordFile = config.age.secrets.plausible-admin-password.path;
+        };
+
+        server = {
+            baseUrl = "https://${domain}";
+            port = 3987;
+            secretKeybaseFile = config.age.secrets.plausible-secret-keybase.path;
+        };
+    };
+
+    services.caddy = {
+        enable = true;
+        virtualHosts.${domain}.extraConfig = ''
+            reverse_proxy * localhost:${toString config.services.plausible.server.port}
+        '';
+    };
+}

secrets/secrets.nix

@@ -17,4 +17,6 @@ in {
     "eturnal-turn-secret.age".publicKeys = niks ++ chmura ++ del;
     "firefox-syncserver-secrets.age".publicKeys = niks ++ chmura ++ del;
     "forgejo-runner-token.age".publicKeys = niks ++ chmura ++ del;
+    "plausible-secret-keybase.age".publicKeys = niks ++ chmura ++ del;
+    "plausible-admin-password.age".publicKeys = niks ++ chmura ++ del;
 }