vps-arm-2024-07-10-12-27-30

2024-07-10 12:27:30 +02:00
parent 1ce3dc6971
commit bfe63888a6
7 changed files with 140 additions and 28 deletions
--- a/services/goaccess.nix
+++ b/services/goaccess.nix
@@ -0,0 +1,49 @@
+{ config, lib, pkgs, ... }:
+let
+  secrets = import ../configs/secrets.nix;
+in
+{
+  services = {
+    nginx = {
+      virtualHosts = {
+        "goaccess.szczepan.ski" = {
+          forceSSL = true;
+          enableACME = true;
+          basicAuth = { alex = secrets.goaccess-password; };
+          locations = {
+            "/" = { root = "/var/www/goaccess"; };
+            "/ws" = {
+              proxyPass = "http://127.0.0.1:7890/";
+              proxyWebsockets = true;
+            };
+          };
+        };
+      };
+    };
+  };
+
+  systemd = {
+    tmpfiles.settings = {
+      "goaccess" = {
+        "/var/www/goaccess" = { d.mode = "0755"; };
+      };
+    };
+
+    services = {
+      # Limit stack size to reduce memory usage
+      fail2ban.serviceConfig.LimitSTACK = 256 * 1024;
+
+      goaccess = {
+        description = "GoAccess real-time web log analysis";
+        after = [ "network.target" ];
+        wantedBy = [ "multi-user.target" ];
+        script = "${pkgs.gzip}/bin/zcat -f /var/log/nginx/access.* | ${pkgs.goaccess}/bin/goaccess - -o /var/www/goaccess/index.html --log-format='%v %h %^[%d:%t %^]%^\"%r\" %s %b \"%R\" \"%u\"' --real-time-html --ws-url=wss://goaccess.szczepan.ski:443/ws --port 7890 --time-format \"%H:%M:%S\" --date-format \"%d/%b/%Y\"";
+        # serviceConfig = {
+        #   StateDirectory = "/var/www/goaccess";
+        #   # ExecStart = "${pkgs.bash}/bin/bash -c "${pkgs.gzip}/bin/zcat -f /var/log/nginx/access.* | ${pkgs.goaccess}/bin/goaccess -o /var/www/goaccess/index.html --log-format='%v %h %^[%d:%t %^]%^\"%r\" %s %b \"%R\" \"%u\"' --real-time-html --ws-url=wss://goaccess.szczepan.ski:443/ws --port 7890 --time-format \"%H:%M:%S\" --date-format \"%d/%b/%Y\"'";
+        #   # ExecStop = "/bin/kill -9 ${MAINPID}";
+        # };
+      };
+    };
+  };
+}