feat: analytics infrastructure

umami/Caddyfile

@@ -0,0 +1,17 @@
+analytics.teknologiumum.com {
+ reverse_proxy 127.0.0.1:23120
+
+ header {
+ server "Teknologi Umum"
+ ?Permissions-Policy interest-cohort=()
+ ?strict-transport-security "max-age=604800; includeSubDomains"
+ ?x-content-type-options nosniff
+ ?x-frame-options DENY
+ ?referrer-policy no-referrer-when-downgrade
+ ?content-security-policy "default-src 'none'; font-src 'self'; script-src 'self' blob:; manifest-src 'self'; media-src 'self' data: blob: about:; style-src 'self' 'unsafe-inline'; base-uri 'none'; img-src 'self' data:; form-action 'self'; frame-ancestors 'none'; connect-src 'self'; worker-src blob:;"
+ ?vary Origin
+ ?x-xss-protection "1; mode=block"
+ }
+
+ tls [email protected]
+}

umami/docker-compose.yml

@@ -0,0 +1,60 @@
+services:
+ umami:
+ image: ghcr.io/umami-software/umami:postgresql-latest
+ labels:
+ - "com.centurylinklabs.watchtower.enable=true"
+ ports:
+ - "23120:3000"
+ environment:
+ DATABASE_URL:
+ DATABASE_TYPE: postgresql
+ APP_SECRET:
+ DISABLE_BOT_CHECK: 1
+ DISABLE_UPDATES: 1
+ DISABLE_TELEMETRY: 1
+ REMOVE_TRAILING_SLASH: 1
+ depends_on:
+ db:
+ condition: service_healthy
+ deploy:
+ restart_policy:
+ condition: unless-stopped
+ delay: 30s
+ window: 120s
+ healthcheck:
+ test: ["CMD-SHELL", "curl http://localhost:3000/api/heartbeat"]
+ interval: 30s
+ timeout: 20s
+ retries: 5
+ logging:
+ driver: local
+ options:
+ max-size: 10M
+ max-file: 3
+ db:
+ image: postgres:16-alpine
+ environment:
+ POSTGRES_DB:
+ POSTGRES_USER:
+ POSTGRES_PASSWORD:
+ volumes:
+ - umami-db-data:/var/lib/postgresql/data
+ deploy:
+ restart_policy:
+ condition: unless-stopped
+ delay: 30s
+ window: 120s
+ healthcheck:
+ test: ["CMD-SHELL", "pg_isready -U $${POSTGRES_USER} -d $${POSTGRES_DB}"]
+ interval: 30s
+ timeout: 20s
+ retries: 5
+ logging:
+ driver: local
+ options:
+ max-size: 10M
+ max-file: 3
+
+volumes:
+ umami-db-data:
+ external: true

umami/setup.sh

@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+
+docker volume create umami-db-data