diff options
Diffstat (limited to 'hosts/sachiel/configuration.nix')
| -rw-r--r-- | hosts/sachiel/configuration.nix | 28 |
1 files changed, 23 insertions, 5 deletions
diff --git a/hosts/sachiel/configuration.nix b/hosts/sachiel/configuration.nix index 5cd0298..7bb5aca 100644 --- a/hosts/sachiel/configuration.nix +++ b/hosts/sachiel/configuration.nix @@ -52,12 +52,12 @@ system.autoUpgrade = { enable = true; flake = "github:schererleander/nix#${host}"; - flags = [ - "--update-input" - "nixpkgs" - "--no-write-lock-file" + flags = [ + "--update-input" + "nixpkgs" + "--no-write-lock-file" "-L" # print build logs - ]; + ]; allowReboot = true; rebootWindow = { @@ -158,6 +158,16 @@ sslCertificate = "/etc/ssl/schererleander.de/fullchain.pem"; sslCertificateKey = "/etc/ssl/schererleander.de/privkey.key"; }; + + virtualHosts."analytics.schererleander.de" = { + forceSSL = true; + sslCertificate = "/etc/ssl/schererleander.de/fullchain.pem"; + sslCertificateKey = "/etc/ssl/schererleander.de/privkey.key"; + locations."/" = { + proxyPass = "http://127.0.0.1:${toString config.services.plausible.server.port}"; + proxyWebsockets = true; + }; + }; }; services.site = { @@ -259,6 +269,14 @@ ''; }; + services.plausible = { + enable = true; + server = { + baseUrl = "https://analytics.scherereleander.de"; + secretKeybaseFile = "/etc/plausible-secret-keybase"; + }; + }; + security.auditd.enable = true; security.audit = { enable = true; |