analytics: GoAccess reports from the Caddy logs, public and private tiers

Server-side only, per the privacy policy: no client-side analytics. Rotated
logs ingest exactly once into per-tier DBs; the public tier is anonymized
at ingest and never receives censored paths. Log retention raised to a year.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
Jorijn van der Graaf 2026-08-08 02:50:52 +02:00
commit 8cd4d55d00
6 changed files with 251 additions and 0 deletions

View file

@ -0,0 +1,11 @@
[Unit]
Description=Rebuild GoAccess analytics report for catcrafts.net
Documentation=https://goaccess.io/man
[Service]
Type=oneshot
# caddy owns the 0600 access logs; DB and output dirs are chowned to match.
User=caddy
Group=caddy
ExecStart=/usr/local/bin/catcrafts-analytics
Nice=10