diff --git a/hive/thebe/default.nix b/hive/thebe/default.nix index 681d6d5..b98a77c 100644 --- a/hive/thebe/default.nix +++ b/hive/thebe/default.nix @@ -5,7 +5,6 @@ ../../digital-ocean/configuration.nix ../../services/boardwise ../../services/forgejo.nix - ../../services/plausible ]; deployment.targetHost = "64.23.168.148"; @@ -23,7 +22,6 @@ services = { nginx.enable = true; openssh.enable = true; - plausible.enable = true; postgresql.enable = true; }; diff --git a/services/plausible/default.nix b/services/plausible/default.nix deleted file mode 100644 index 6af0055..0000000 --- a/services/plausible/default.nix +++ /dev/null @@ -1,37 +0,0 @@ -{ config, ... }: -{ - services = { - plausible = { - adminUser = { - # activate is used to skip the email verification of the admin-user - # that's automatically created by plausible. This is only supported if - # postgresql is configured by the module. This is done by default, but - # can be turned off with services.plausible.database.postgres.setup. - activate = true; - email = "jrpotter2112@gmail.com"; - passwordFile = "/run/secrets/PLAUSIBLE_ADMIN_PWD"; - }; - server = { - baseUrl = "https://analytics.jrpotter.com"; - secretKeybaseFile = "/run/secrets/PLAUSIBLE_SECRET_KEY_BASE"; - }; - }; - nginx.virtualHosts."analytics.jrpotter.com" = { - forceSSL = true; - enableACME = true; - locations."/" = { - recommendedProxySettings = true; - proxyPass = "http://127.0.0.1:${toString config.services.plausible.server.port}"; - }; - }; - }; - - sops = { - secrets.PLAUSIBLE_ADMIN_PWD = { - sopsFile = ./secrets.yaml; - }; - secrets.PLAUSIBLE_SECRET_KEY_BASE = { - sopsFile = ./secrets.yaml; - }; - }; -} diff --git a/services/plausible/secrets.yaml b/services/plausible/secrets.yaml deleted file mode 100644 index bb4f18c..0000000 --- a/services/plausible/secrets.yaml +++ /dev/null @@ -1,31 +0,0 @@ -PLAUSIBLE_ADMIN_PWD: ENC[AES256_GCM,data:bnSVaGHJG/VzWuiks8wYGdWu,iv:Xhhvqk1ThBJXz1XNYx40YfIpqcADL9SPwrLf/rje57I=,tag:fw1RujBToGTo1qFhbYEcaQ==,type:str] -PLAUSIBLE_SECRET_KEY_BASE: ENC[AES256_GCM,data:gyncr/BiekwFFQww9aJXkiU3nTUtwpUxb3E3RYw89zInV/e6v4gGJHXG1T1SPvOsl8QRyMq6rYvHSpCGCXx0iwx/9jBUyyTw16fTTsANA6vrVrufpe3vrg==,iv:r6OSjNskgXpBqMOIPYjYziGyfiS0enFRJFI87PGwl1I=,tag:Dl/InBqKF2XTmMlKfYZk1w==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1huyyxsy4g0e5svmcejxvvdjnnk6qkulgd3qfpue59exnfrnqzudspxnn62 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDN1ZjUWpHak9sL2hPVzk3 - RXR1NkFuMmpXUXpQTUc1TU1CZHp5ZTFrRlZJCnpLWmRTWGN5bzFLOFd3RVFHbU5H - dkc1UzdWcEViNEh6bGRJYTY2V2RBWXcKLS0tIExsb0FvajE2amE1YU9TbjZXTTJo - NzkrMlVjMkp3a1BxL01LZUhpTWZ6Y0EKOEDeya5JhwXWcj+7tloeGSKHLaFqqjQl - 7U66quW6QX9k/DjixhNzVYlOTlkHKWguoS8OHk9qsTExGupM7HkNAw== - -----END AGE ENCRYPTED FILE----- - - recipient: age1pjgqvdyzxz30rxvu3zysjpmxrjjsvklggfepswhmwdaunx0kg3vsfept24 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4bXh0dWlLRE9mTDV1akNv - bExpSmZhODJnc0h6SkZ1OHR0NkQrZXNPeHhnCndPTUdjS0Q4VXRxUEZQOUJSa3ZD - OWJtSXkvNmZrWWJ5ZTBiZnFmV2VlMzgKLS0tIEpBZng4VktnaG9aZDZJaXYzamcr - UHZrdXBWZ0I2SnArQkJ6UkhRa2xpdEEKHBNMEcQQNs3mLQE5UI21Ue52dnZlIOqZ - 91HSVBgFP4dfrsW4+ZyxrhqADZziHSn5AfpbuhJ7QLSsjNRLHyrbgw== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-01-10T18:27:35Z" - mac: ENC[AES256_GCM,data:7rsYMbTTmOPHVqoaQu78Glf4EvXRbDVvkbZYQd9fSy7JOWyKzvVC9ZD2yr0WbHoe0Gq8mpdfmcc5Q/3JIuNanqQxbvvLDqYSBQNoifeuQ9dLRhxzI2Up1mhLTHDIV3CB+7TfIMkaJ7gYkQXX9sg2P2EL9R4o0TJ8Uuee3Iq2H/s=,iv:ym9btl+HL/dX++fXTyPl0Aze6b5dyuO+gM+CuBWvagE=,tag:PBy4EvtnivzXpCdviDEaSw==,type:str] - pgp: [] - unencrypted_suffix: _unencrypted - version: 3.7.3