Add Umami

[SailReal]

No description provided.

[coderabbitai]

Actionable comments posted: 1

🧹 Nitpick comments (1)

hugo.toml (1)

119-119: Consider removing Plausible analytics when adding Umami

The CSP header now allows both Plausible and Umami analytics to run simultaneously. This raises several concerns:

1. Dual tracking may impact user privacy and GDPR compliance
2. Running two analytics services affects page load performance
3. Increased network requests and JavaScript execution overhead

Consider migrating completely from Plausible to Umami instead of running both services in parallel. If this is a transitional phase, please document the migration timeline.

- Content-Security-Policy = "default-src 'none'; script-src 'self' 'unsafe-eval' https://umami.skymatic.de/ https://plausible.skymatic.de/ https://community.cryptomator.org/ https://js.stripe.com/ https://*.paddle.com/ https://www.google.com/ https://www.gstatic.com/; style-src 'self' 'unsafe-inline' https://*.paddle.com/; img-src 'self' data: https://static.cryptomator.org/ https://*.paddle.com/ https://paddle.s3.amazonaws.com/; connect-src 'self' https://api.cryptomator.org/ https://store.cryptomator.org/ https://umami.skymatic.de/ https://plausible.skymatic.de/ http://localhost:8787/; font-src 'self'; media-src https://static.cryptomator.org/; frame-src https://community.cryptomator.org/ https://js.stripe.com/ https://*.paddle.com/ https://www.google.com/; base-uri 'self'; form-action 'self' https://www.paypal.com/ https://www.coinpayments.net/; frame-ancestors 'none'"
+ Content-Security-Policy = "default-src 'none'; script-src 'self' 'unsafe-eval' https://umami.skymatic.de/ https://community.cryptomator.org/ https://js.stripe.com/ https://*.paddle.com/ https://www.google.com/ https://www.gstatic.com/; style-src 'self' 'unsafe-inline' https://*.paddle.com/; img-src 'self' data: https://static.cryptomator.org/ https://*.paddle.com/ https://paddle.s3.amazonaws.com/; connect-src 'self' https://api.cryptomator.org/ https://store.cryptomator.org/ https://umami.skymatic.de/ http://localhost:8787/; font-src 'self'; media-src https://static.cryptomator.org/; frame-src https://community.cryptomator.org/ https://js.stripe.com/ https://*.paddle.com/ https://www.google.com/; base-uri 'self'; form-action 'self' https://www.paypal.com/ https://www.coinpayments.net/; frame-ancestors 'none'"

📜 Review details

Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 392b557 and a9f7cdd.

📒 Files selected for processing (2)

• hugo.toml (1 hunks)
• layouts/_default/baseof.html (1 hunks)

🔇 Additional comments (1)

layouts/_default/baseof.html (1)

81-81: Verify Umami script features parity with Plausible

The Plausible script includes additional features in its URL:

• file-downloads
• hash
• outbound-links
• tagged-events

Please ensure that Umami provides equivalent tracking capabilities for:

1. File download tracking
2. URL hash tracking
3. Outbound link tracking
4. Custom event tracking

If any features are missing, document the gaps and their impact on analytics data collection.

Also applies to: 86-86