From 4a1122a7c915942ed14b7e066b1aebb5b3c2a38f Mon Sep 17 00:00:00 2001
From: Leon Serfaty <80597822+silkoserfo@users.noreply.github.com>
Date: Tue, 21 Jul 2026 02:50:26 -0400
Subject: [PATCH] Integrate Umami analytics (privacy-friendly, cookieless)
- Add the Umami tracking snippet to index.html (rides into prerendered pages too).
- Allow https://fickanalytics.phluit.net in the prod CSP script-src and connect-src
so the script loads and can send events.
---
apps/api/src/server.ts | 4 ++--
apps/web/index.html | 2 ++
2 files changed, 4 insertions(+), 2 deletions(-)
diff --git a/apps/api/src/server.ts b/apps/api/src/server.ts
index 97dd69e..c8c2efe 100644
--- a/apps/api/src/server.ts
+++ b/apps/api/src/server.ts
@@ -71,11 +71,11 @@ export async function buildServer() {
? {
directives: {
defaultSrc: ["'self'"],
- scriptSrc: ["'self'", 'https://challenges.cloudflare.com'],
+ scriptSrc: ["'self'", 'https://challenges.cloudflare.com', 'https://fickanalytics.phluit.net'],
styleSrc: ["'self'", "'unsafe-inline'", 'https://fonts.googleapis.com'],
fontSrc: ["'self'", 'https://fonts.gstatic.com', 'data:'],
imgSrc: ["'self'", 'data:', 'blob:', 'https://*.digitaloceanspaces.com', 'https://*.cdn.digitaloceanspaces.com'],
- connectSrc: ["'self'"],
+ connectSrc: ["'self'", 'https://fickanalytics.phluit.net'],
frameSrc: ['https://challenges.cloudflare.com'],
frameAncestors: ["'none'"],
formAction: ["'self'"],
diff --git a/apps/web/index.html b/apps/web/index.html
index 20d86df..eebb0bc 100644
--- a/apps/web/index.html
+++ b/apps/web/index.html
@@ -28,6 +28,8 @@
href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&family=Poppins:wght@600;700&display=swap"
rel="stylesheet"
/>
+
+