Install Umami Analytics on a VPS

ssh ubuntu@YOUR_SERVER_IP

getent ahostsv4 analytics.example.com

sudo apt update
sudo apt install -y ca-certificates curl openssl
sudo install -m 0755 -d /etc/apt/keyrings
sudo curl -fsSL https://download.docker.com/linux/ubuntu/gpg \
  -o /etc/apt/keyrings/docker.asc
sudo chmod a+r /etc/apt/keyrings/docker.asc

sudo tee /etc/apt/sources.list.d/docker.sources >/dev/null <<EOF
Types: deb
URIs: https://download.docker.com/linux/ubuntu
Suites: $(. /etc/os-release && echo "${UBUNTU_CODENAME:-$VERSION_CODENAME}")
Components: stable
Architectures: $(dpkg --print-architecture)
Signed-By: /etc/apt/keyrings/docker.asc
EOF

sudo apt update
sudo apt install -y docker-ce docker-ce-cli containerd.io \
  docker-buildx-plugin docker-compose-plugin
sudo systemctl enable --now docker
sudo docker run --rm hello-world

sudo install -d -m 750 -o "$USER" -g "$USER" /opt/umami
cd /opt/umami
umask 077
printf 'POSTGRES_PASSWORD=%s\nAPP_SECRET=%s\n' \
  "$(openssl rand -hex 24)" \
  "$(openssl rand -hex 32)" > .env
chmod 600 .env

cd /opt/umami

tee compose.yaml >/dev/null <<'EOF'
services:
  umami:
    image: ghcr.io/umami-software/umami:latest
    restart: always
    init: true
    ports:
      - "127.0.0.1:3000:3000"
    environment:
      DATABASE_URL: postgresql://umami:${POSTGRES_PASSWORD}@db:5432/umami
      APP_SECRET: ${APP_SECRET}
    depends_on:
      db:
        condition: service_healthy
    healthcheck:
      test: ["CMD-SHELL", "curl http://localhost:3000/api/heartbeat"]
      interval: 5s
      timeout: 5s
      retries: 5

  db:
    image: postgres:15-alpine
    restart: always
    environment:
      POSTGRES_DB: umami
      POSTGRES_USER: umami
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
    volumes:
      - umami-db-data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U $${POSTGRES_USER} -d $${POSTGRES_DB}"]
      interval: 5s
      timeout: 5s
      retries: 5

volumes:
  umami-db-data:
EOF

sudo docker compose config --quiet

cd /opt/umami
sudo docker compose up -d

ssh -N -L 3000:127.0.0.1:3000 ubuntu@YOUR_SERVER_IP

sudo apt install -y nginx certbot python3-certbot-nginx

sudo tee /etc/nginx/sites-available/umami >/dev/null <<'EOF'
server {
    listen 80;
    listen [::]:80;
    server_name analytics.example.com;

    location / {
        proxy_pass http://127.0.0.1:3000;
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}
EOF

sudo ln -s /etc/nginx/sites-available/umami \
  /etc/nginx/sites-enabled/umami
sudo nginx -t
sudo systemctl reload nginx
sudo certbot --nginx -d analytics.example.com

sudo ufw allow OpenSSH
sudo ufw allow 'Nginx Full'
sudo ufw enable

cd /opt/umami
sudo docker compose ps
curl -fsS http://127.0.0.1:3000/api/heartbeat
curl -I https://analytics.example.com
sudo docker compose logs --tail 50 umami db