Can website visits still be tracked from Umami if its admin page is
behind an Authelia login screen?
reddit / selfhosted

----------------------------------------------------------------------
Idiots-R-Invincible · 2023-10-25 18:36

I am planning to use Umami to do some simple visit tracking on a
website.

I understand that a script is added to the website's header that pings
Umami the details of a new website visit.

I want to be able to access Umami's admin page from outside my network
and I am using NginX Proxy Manager for that, but for security purposes
I want to put it behind Authelia.

Will the visit tracking functionality still work if I do it this way?
I mean, there is no way for the website to override Authelia's login
screen and 2FA, so how will the visit even be recorded by Umami?

----------------------------------------------------------------------
arcadianarcadian · 2023-10-25 19:23

You can add specific bypass rules to your Authelia config. I had to
add those rules for many things;

Example;

        - domain: "docs.example.com"
      policy: bypass
      resources:
        - '^/api/statistics'

----------------------------------------------------------------------
Idiots-R-Invincible · 2023-10-25 19:54

Wow, didn’t know that existed, thank you @arcadianarcadian, very
helpful

----------------------------------------------------------------------
Idiots-R-Invincible · 2023-11-04 19:59

Sorry to ask again u/arcadianarcadian but I can't figure out how to
make this work.

Here's what I have so far:

`access_control:`
  `default_policy: deny`
  `rules:`
`- domain:`
`- 'authelia.mydomain.com' #This should be your authentication URL`
`policy: bypass`
`- domain: 'mydomain.com'`
`policy: one_factor`
`- domain: 'nextcloud.mydomain.com'`
`policy: two_factor`
`- domain: 'umami.mydomain.com'`
`policy: two_factor`
`resources:`
`- '^/api/statistics'`

Is this correct for Authelia?

----------------------------------------------------------------------
arcadianarcadian · 2023-11-04 20:21

access_control:
  default_policy: deny
  rules:
    - domain:
        - "auth.mydomain.com"
      policy: bypass
    - domain: "read.mydomain.com"
      policy: bypass
      resources:
        - '^/oauth/v2/token'
    - domain: "books.mydomain.com"
      policy: bypass
      resources:
        - '^/opds/stats'
    - domain: "password.mydomain.com"
      resources:
        - ^/api.*$
        - ^/identity.*$
      policy: bypass
    - domain: "uptime.mydomain.com"
      policy: bypass
      resources:
        - '^/api/status-page/'
        - '^/metrics'
    - domain: "docs.mydomain.com"
      policy: bypass
      resources:
        - '^/api/statistics'
    - domain: "grafana.mydomain.com"
      policy: bypass
      resources:
        - '^/api/admin/stats'
        - '^/api/alerts'
    - domain: "*.mydomain.com"
      policy: bypass
      networks:
        - 10.99.97.0/24
        - 172.18.0.1/32
# Proxies needing 2 factor below
    - domain:
        - "auto.mydomain.com"
        - "book.mydomain.com"
        - "camera.mydomain.com"
        - "cloud.mydomain.com"
        - "connection.mydomain.com"
        - "dashb.mydomain.com"
        - "docs.mydomain.com"
        - "docker.mydomain.com"
        - "dockerstats.mydomain.com"
      policy: two_factor

----------------------------------------------------------------------
Idiots-R-Invincible · 2023-11-04 20:31

You, sir, are a LEGEND!

Thank you!