configure labwc

1 files changed, 23 insertions, 5 deletions

diff --git a/hosts/sachiel/configuration.nix b/hosts/sachiel/configuration.nix
index 5cd0298..7bb5aca 100644
--- a/hosts/sachiel/configuration.nix
+++ b/hosts/sachiel/configuration.nix
@@ -52,12 +52,12 @@
   system.autoUpgrade = {
     enable = true;
     flake = "github:schererleander/nix#${host}";
-		flags = [
-			"--update-input"
-			"nixpkgs"
-			"--no-write-lock-file"
+    flags = [
+      "--update-input"
+      "nixpkgs"
+      "--no-write-lock-file"
       "-L" # print build logs
-		];
+    ];
     allowReboot = true;
 
     rebootWindow = {
@@ -158,6 +158,16 @@
       sslCertificate = "/etc/ssl/schererleander.de/fullchain.pem";
       sslCertificateKey = "/etc/ssl/schererleander.de/privkey.key";
     };
+
+    virtualHosts."analytics.schererleander.de" = {
+      forceSSL = true;
+      sslCertificate = "/etc/ssl/schererleander.de/fullchain.pem";
+      sslCertificateKey = "/etc/ssl/schererleander.de/privkey.key";
+      locations."/" = {
+        proxyPass = "http://127.0.0.1:${toString config.services.plausible.server.port}";
+				proxyWebsockets = true;
+      };
+    };
   };
 
   services.site = {
@@ -259,6 +269,14 @@
     '';
   };
 
+  services.plausible = {
+    enable = true;
+    server = {
+      baseUrl = "https://analytics.scherereleander.de";
+      secretKeybaseFile = "/etc/plausible-secret-keybase";
+    };
+  };
+
   security.auditd.enable = true;
   security.audit = {
     enable = true;