[{"id":"cG9zdDo3Mzc=","slug":"matomo-vs-ublock-origin","title":"Matomo vs uBlock Origin","content":"\n

After Ackee got an update and stopped working I wanted to search for an alternative to get some stats on my statically rendered site. As no server is used, I need some 3rd party service.

\n\n\n\n

I don’t want to spy on people, nor set cookies and annoy people with consent banners if they only want to read a damn blog post. The goal is just get a feel for the traffic on the site.
This is important to mention as the next steps could sound a bit nefarious otherwise.
Data collected on this site is 100% anonymous and GDPR compliant.

\n\n\n\n

\"\" — Photo by Luke Chesser on Unsplash

\n\n\n\n

Since Matomo is the de facto way to go, I spun up the Matomo server with my trusted docker-traefik setup and was up and running in no time.
( I’ll share the config files if anyone is interested at the bottom. )

\n\n\n\n

Then I quickly copied the JS tracker code in my main html template and thought that was it. Wrong.

\n\n\n\n

The problem defaults.

\n\n\n\n

So turns out that Matomo, being widely used is of course included in many Ad-Blocker lists and therefore my stats did not work. Lets see why:
Basically all ad blockers work with lists. Those lists include pattern that if matched will be filtered out. Let’s take a look at the default Matomo tracking code:

\n\n\n\n

<script type=\"text/javascript\">\n  var _paq = window._paq = window._paq || [];\n  /* tracker methods like \"setCustomDimension\" should be called before \"trackPageView\" */\n  _paq.push(['trackPageView']);\n  _paq.push(['enableLinkTracking']);\n  (function() {\n    var u=\"//stats.nicco.io/\";\n    _paq.push(['setTrackerUrl', u+'matomo.php']);\n    _paq.push(['setSiteId', '1']);\n    var d=document, g=d.createElement('script'), s=d.getElementsByTagName('script')[0];\n    g.type='text/javascript'; g.async=true; g.src=u+'matomo.js'; s.parentNode.insertBefore(g,s);\n  })();\n</script>

\n\n\n\n

We can see that my stats server is stats.nicco.io. And we also can see that the tracking script is loaded by matomo.js, which then sends the details to matomo.php. Well that is of course incredibly easy to block, and it is as you can see below:

\n\n\n\n

\n\n\n\n

\n\n\n\n

That won’t work, and since most of the people that visit this site are probably developers which probably have some kind of ad blocker installed.

\n\n\n\n

Solution time

\n\n\n\n

So after a short Ecosia search I landed on the blog of Christian Mochow that wrote a blog post on this issue. I got the solution from his article.

\n\n\n\n

Luckily Apache has the famous Rewrite module, which will solve all our problems. I bet most of you already know where this is headed.

\n\n\n\n

We can create a .htaccess file in the root of our Matomo installation folder, to cloak our requests.

\n\n\n\n

# .htaccess\nRewriteEngine On\nRewriteRule ^unicorn matomo.js\nRewriteRule ^rainbow matomo.php

\n\n\n\n

Now if we request https://stats.nicco.io/unicorn we actually get the response for https://stats.nicco.io/matomo.js and the same for rainbow and matomo.php.

\n\n\n\n

// Replace in the client\n\n_paq.push(['setTrackerUrl', u+'matomo.php']); // Before\n_paq.push(['setTrackerUrl', u+'rainbow']); // After\n\ng.src = u + 'matomo.js' // Before\ng.src = u + 'unicorn' // After

\n\n\n\n

Awesome!

\n\n\n\n

I had to create a minuscule Dockerfile as the Rewrite module is not enabled per default in the standard Matomo docker image.

\n\n\n\n

# Dockerfile\nFROM matomo\nRUN a2enmod rewrite

\n\n\n\n

Responsible Usage

\n\n\n\n

Now as you can see it’s incredibly easy to mask tracking stuff, and I bet there are a lot of people doing this in the wild. It is important to respect the privacy of your users and you should never store more data than you need and in the best case don’t store data at all.

\n\n\n\n

Anonymize as much as possible! Matomo makes this easy. You can effortlessly delete 2 bytes of each ip address (half of the info), enforce strict no cookie tracking and automatically delete data after x days. Please do ❤️

\n\n\n\n

Config Files

\n\n\n\n

The Dockerfile and the .htaccess files are shown above.

\n\n\n\n

# docker-compose.yml\nversion: \"3.7\"\n\nnetworks:\n  traefik:\n    external: true\n\nservices:\n  db:\n    image: mariadb\n    command: --max-allowed-packet=64MB\n    restart: unless-stopped\n    volumes:\n      - ./data/db:/var/lib/mysql\n    env_file: .env\n\n  app:\n    build: .\n    restart: unless-stopped\n    links:\n      - db\n    volumes:\n      - ./data/matomo:/var/www/html\n      - ./.htaccess:/var/www/html/.htaccess\n    env_file: .env\n    labels:\n      - traefik.enable=true\n      - traefik.docker.network=traefik\n      - traefik.port=80\n      - traefik.backend=matomo\n      - \"traefik.frontend.rule=Host:stats.nicco.io;\"\n    networks:\n      - traefik\n      - default

\n\n\n\n

# .env\nMYSQL_DATABASE=matomo\nMYSQL_USER=matomo\nMYSQL_PASSWORD=<random bytes>\nMYSQL_RANDOM_ROOT_PASSWORD=yes\n\nMATOMO_DATABASE_HOST=db\nMATOMO_DATABASE_ADAPTER=mysql\n\nMATOMO_DATABASE_DBNAME=matomo\nMATOMO_DATABASE_USERNAME=matomo\nMATOMO_DATABASE_PASSWORD=<random bytes>

\n\n\n\n

See the code for this website.

\n","status":"publish","date":"2021-01-28T11:40:15","modified":"2021-03-23T09:13:58","tags":{"nodes":[{"id":"dGVybTo2NQ==","slug":"blocker","name":"blocker","count":1},{"id":"dGVybTo2NA==","slug":"matomo","name":"matomo","count":1},{"id":"dGVybTo2Ng==","slug":"stats","name":"stats","count":1},{"id":"dGVybTo2Nw==","slug":"tracking","name":"tracking","count":2}]},"post":{"featured":{"srcSet":"https://api.nicco.io/wp-content/uploads/2021/01/luke-chesser-JKUTrJ4vK00-unsplash-300x200.jpg 300w, https://api.nicco.io/wp-content/uploads/2021/01/luke-chesser-JKUTrJ4vK00-unsplash-1024x683.jpg 1024w, https://api.nicco.io/wp-content/uploads/2021/01/luke-chesser-JKUTrJ4vK00-unsplash-150x100.jpg 150w, https://api.nicco.io/wp-content/uploads/2021/01/luke-chesser-JKUTrJ4vK00-unsplash-768x512.jpg 768w, https://api.nicco.io/wp-content/uploads/2021/01/luke-chesser-JKUTrJ4vK00-unsplash-1536x1024.jpg 1536w, https://api.nicco.io/wp-content/uploads/2021/01/luke-chesser-JKUTrJ4vK00-unsplash-2048x1365.jpg 2048w, https://api.nicco.io/wp-content/uploads/2021/01/luke-chesser-JKUTrJ4vK00-unsplash-500x333.jpg 500w, https://api.nicco.io/wp-content/uploads/2021/01/luke-chesser-JKUTrJ4vK00-unsplash-800x533.jpg 800w, https://api.nicco.io/wp-content/uploads/2021/01/luke-chesser-JKUTrJ4vK00-unsplash-1200x800.jpg 1200w, https://api.nicco.io/wp-content/uploads/2021/01/luke-chesser-JKUTrJ4vK00-unsplash-1500x1000.jpg 1500w, https://api.nicco.io/wp-content/uploads/2021/01/luke-chesser-JKUTrJ4vK00-unsplash-2000x1333.jpg 2000w","altText":"","sourceUrl":"https://api.nicco.io/wp-content/uploads/2021/01/luke-chesser-JKUTrJ4vK00-unsplash-scaled.jpg"}}}]