feat: Add Matomo Chart for analytics

Also adds the Digitalist Chart as Backup in case the bitnami one stops working.
2025-09-11 10:25:17 +02:00
parent e427af50ce
commit 8f46e45cfb
40 changed files with 3733 additions and 16 deletions
@@ -0,0 +1,179 @@
+---
+{{- if .Values.matomo.tracker.enabled }}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: matomo-tracker
+  namespace: {{.Values.namespace}}
+  labels:
+    app: matomo-tracker
+{{- if .Values.matomo.extralabels }}
+{{ toYaml .Values.matomo.extralabels | indent 4 }}
+{{- end }}
+spec:
+  replicas: {{.Values.matomo.tracker.replicas}}
+  selector:
+    matchLabels:
+      app: matomo-tracker
+  template:
+    metadata:
+      labels:
+        app: matomo-tracker
+{{- if .Values.matomo.extralabels }}
+{{ toYaml .Values.matomo.extralabels | indent 8 }}
+{{- end }}
+      annotations:
+        checksum/config: {{ include (print $.Template.BasePath "/configmap-matomo.yaml") . | sha256sum }}
+    spec:
+{{ include "matomo.init" . | nindent 6 }}
+      containers:
+      - name: fpm-metrics
+        securityContext:
+          runAsUser: {{.Values.matomo.runAsUser}}
+          privileged: false
+          allowPrivilegeEscalation: false
+        image: hipages/php-fpm_exporter:2.2.0
+        imagePullPolicy: Always
+        resources:
+          limits:
+            cpu: 40m
+            memory: 32Mi
+          requests:
+            cpu: 40m
+            memory: 32Mi
+      - name: nginx
+        image: {{.Values.nginx.image}}
+        {{- if .Values.matomo.tracker.nginx.resources }}
+        resources:
+{{ toYaml .Values.matomo.tracker.nginx.resources | indent 10 }}
+        {{- end }}
+        # readinessProbe:
+        #   httpGet:
+        #     scheme: HTTP
+        #     path: /matomo.js
+        #     port: 8080
+        #  initialDelaySeconds: 10
+        #  periodSeconds: 5
+        livenessProbe:
+          exec:
+            command:
+            - /bin/sh
+            - -c
+            - "[ -f /tmp/nginx.pid ] && ps -A | grep nginx"
+          initialDelaySeconds: 10
+          periodSeconds: 5
+        securityContext:
+          runAsUser: {{.Values.nginx.runAsUser}}
+          privileged: false
+          allowPrivilegeEscalation: false
+        volumeMounts:
+          - name: nginx-conf
+            mountPath: /etc/nginx/nginx.conf
+            subPath: nginx.conf
+            readOnly: true
+          - name: fastcgi-params
+            mountPath: /etc/nginx/fastcgi_params
+            subPath: fastcgi_params
+            readOnly: true
+          - name: mime-types
+            mountPath: /etc/nginx/mime.types
+            subPath: mime.types
+            readOnly: true
+          - name: static-data
+            mountPath: /var/www/html
+            readOnly: true
+        ports:
+        - containerPort: 8080
+      - name: matomo
+        image: {{.Values.matomo.image}}
+        {{- if .Values.matomo.tracker.resources }}
+        resources:
+{{ toYaml .Values.matomo.tracker.resources | indent 10 }}
+        {{- end }}
+        securityContext:
+          runAsUser: {{.Values.matomo.runAsUser}}
+          privileged: false
+          allowPrivilegeEscalation: false
+        imagePullPolicy: Always
+        env:
+        - name: MATOMO_DB_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: {{ .Values.db.password.secretKeyRef.name }}
+              key: {{ .Values.db.password.secretKeyRef.key }}
+        command: [ 'sh' , '-c' , 'supervisord -n' ]
+        volumeMounts:
+          - name: static-data
+            mountPath: /var/www/html
+          - name: matomo-supervisor-tracker
+            mountPath: /etc/supervisor.d
+            readOnly: true
+          - name: matomo-phpfpm-tracker
+            mountPath: /usr/local/etc/php-fpm.d/zz-global.conf
+            subPath: zz-global.conf
+        {{- if .Values.matomo.livenessProbe }}
+        livenessProbe:
+          {{- if .Values.matomo.livenessProbe.exec }}
+          exec:
+            command:
+            - sh
+            - -c
+            - {{ .Values.matomo.livenessProbe.exec.command }}
+          initialDelaySeconds: {{ .Values.matomo.livenessProbe.initialDelaySeconds | default 10 }}
+          periodSeconds: {{ .Values.matomo.livenessProbe.periodSeconds | default 20 }}
+          timeoutSeconds: {{ .Values.matomo.livenessProbe.timeoutSeconds | default 10 }}
+          {{- end }}
+        {{- end }}
+        {{- if .Values.matomo.readinessProbe }}
+        readinessProbe:
+          httpGet:
+            path: {{ .Values.matomo.readinessProbe.httpGet.path }}
+            port: {{ .Values.matomo.readinessProbe.httpGet.port | default 80 }}
+          initialDelaySeconds: {{ .Values.matomo.livenessProbe.initialDelaySeconds | default 5 }}
+          periodSeconds:  {{ .Values.matomo.livenessProbe.periodSeconds | default 5 }}
+        {{- end }}
+{{ include "matomo.images.pullSecrets" ( dict "images" (list .Values.matomo) "global" .Values.global) | nindent 6 }}
+      volumes:
+      - name: nginx-conf
+        configMap:
+          name: nginx-matomo-tracker
+          items:
+          - key: nginx.conf
+            path: nginx.conf
+      - name: fastcgi-params
+        configMap:
+          name: nginx-matomo-tracker
+          items:
+          - key: fastcgi_params
+            path: fastcgi_params
+      - name: mime-types
+        configMap:
+          name: nginx-matomo-tracker
+          items:
+          - key: mime.types
+            path: mime.types
+      - name: matomo-configuration
+        configMap:
+          name: matomo-configuration
+      - name: static-data
+        emptyDir: {}
+      - name: matomo-supervisor-tracker
+        configMap:
+          name: matomo-supervisor-tracker
+      - name: matomo-phpfpm-tracker
+        configMap:
+          name: matomo-phpfpm-tracker
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: matomo-tracker
+  labels:
+    app: matomo-tracker
+spec:
+  ports:
+    - port: 8080
+      protocol: TCP
+  selector:
+    app: matomo-tracker
+{{- end -}}