flake.nix

@@ -34,6 +34,11 @@
       inputs.nixpkgs.follows = "nixpkgs";
     };
 
+    goatcounter = {
+      url = "github:asmir-abdulahovic/goatcounter-flake";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+
     home-manager = {
       url = "github:nix-community/home-manager";
       inputs.nixpkgs.follows = "nixpkgs";
@@ -51,16 +56,17 @@
   };
 
   outputs = inputs @ {
+    goatcounter,
     home-manager,
     nixpkgs,
     nix-xilinx,
     nvim,
     peerix,
+    project-cloud,
     simple-nixos-mailserver,
     sops-nix,
     swaysw,
     zremap,
-    project-cloud,
     ...
   }: let
     pkgs = nixpkgs.legacyPackages.x86_64-linux.pkgs;
@@ -154,8 +160,9 @@
           {nix.registry.nixpkgs.flake = nixpkgs;}
           ./magpie/configuration.nix
           ./magpie/hardware-configuration.nix
-          sops-nix.nixosModules.sops
+	  goatcounter.nixosModule.goatcounter
           simple-nixos-mailserver.nixosModule
+          sops-nix.nixosModules.sops
           (builtins.toPath "${nixpkgs}/nixos/modules/profiles/qemu-guest.nix")
         ];
       };

magpie/configuration.nix

@@ -3,6 +3,7 @@
   pkgs,
   lib,
   project-cloud,
+  goatcounter,
   ...
 }: {
   imports = [];
@@ -44,6 +45,7 @@
     usbutils
     wget
     zip
+    goatcounter.packages.aarch64-linux.goatcounter
   ];
 
   programs.mosh.enable = true;
@@ -99,6 +101,18 @@
     virtualHost.listenPort = 4001;
   };
 
+  services.goatcounter = {
+    enable = true;
+    environmentFile = "/var/lib/goatcounter.env";
+    extraArgs = ["-listen='*:8002'" "-tls=proxy" ];
+    database = {
+      backend = "sqlite";
+      name = "goatcounter";
+      user = "goatcounter";
+      automigrate = true;
+    };
+  };
+
   services.nextcloud = {
     enable = true;
     package = pkgs.nextcloud27;
@@ -177,6 +191,15 @@
         proxyPass = "http://localhost:${toString config.services.restya-board.virtualHost.listenPort}";
       };
     };
+
+    virtualHosts."stats.project-cloud.net" = {
+      quic = true;
+      forceSSL = true;
+      enableACME = true;
+      locations."/" = {
+        proxyPass = "http://localhost:8002/";
+      };
+    };
   };
 
   services.gitea = {