Skip to content

setting up Matomo

Solved General
48 2 7.8k 1
  • @phenomlab said in setting up Matomo:

    @jac Should be fine. It may bomb on the www request - let me know if that’s the case.

    Requesting a certificate for stats.stockportcounty.fans, www.stats.stockportcounty.fans from Let's Encrypt ..
    .. request failed : Web-based validation failed :
    
    Saving debug log to /var/log/letsencrypt/letsencrypt.log
    Plugins selected: Authenticator webroot, Installer None
    Obtaining a new certificate
    Performing the following challenges:
    http-01 challenge for stats.stockportcounty.fans
    http-01 challenge for www.stats.stockportcounty.fans
    Using the webroot path /home/stockportcounty/domains/stats.stockportcounty.fans/public_html for all unmatched domains.
    Waiting for verification...
    Challenge failed for domain www.stats.stockportcounty.fans
    http-01 challenge for www.stats.stockportcounty.fans
    Cleaning up challenges
    Some challenges have failed.
    IMPORTANT NOTES:
     - The following errors were reported by the server:
    
       Domain: www.stats.stockportcounty.fans
       Type:   dns
       Detail: DNS problem: NXDOMAIN looking up A for
       www.stats.stockportcounty.fans - check that a DNS record exists for
       this domain
    
       DNS-based validation failed :
    
    Saving debug log to /var/log/letsencrypt/letsencrypt.log
    Plugins selected: Authenticator manual, Installer None
    Obtaining a new certificate
    Performing the following challenges:
    dns-01 challenge for www.stats.stockportcounty.fans
    Running manual-auth-hook command: /etc/webmin/webmin/letsencrypt-dns.pl
    Waiting for verification...
    Challenge failed for domain www.stats.stockportcounty.fans
    dns-01 challenge for www.stats.stockportcounty.fans
    Cleaning up challenges
    Running manual-cleanup-hook command: /etc/webmin/webmin/letsencrypt-cleanup.pl
    Some challenges have failed.
    IMPORTANT NOTES:
     - The following errors were reported by the server:
    
       Domain: www.stats.stockportcounty.fans
       Type:   dns
       Detail: DNS problem: NXDOMAIN looking up TXT for
       _acme-challenge.www.stats.stockportcounty.fans - check that a DNS
       record exists for this domain
    

    @jac Unsurprising. There are two ways to do this

    • Create a CNAME record called WWW and have it point to the subdomain in DNS
    • Create a custom request for LE so that it ignores the www value, and only processes the actual domain you want

    VirtualMin -> Server Configuration -> SSL Certificate

    8ec0c6a1-fb68-4af8-a66e-b6dba7044a93-image.png

    Let’s Encrypt

    f0f6e0eb-de26-40bc-be66-7ebf708fa9fe-image.png

    Set as per the example, so you only request the domain you want. Ensure that “Automatically renew certificate” is selected, then “Request Certificate”

  • @jac Unsurprising. There are two ways to do this

    • Create a CNAME record called WWW and have it point to the subdomain in DNS
    • Create a custom request for LE so that it ignores the www value, and only processes the actual domain you want

    VirtualMin -> Server Configuration -> SSL Certificate

    8ec0c6a1-fb68-4af8-a66e-b6dba7044a93-image.png

    Let’s Encrypt

    f0f6e0eb-de26-40bc-be66-7ebf708fa9fe-image.png

    Set as per the example, so you only request the domain you want. Ensure that “Automatically renew certificate” is selected, then “Request Certificate”

    @phenomlab said in setting up Matomo:

    @jac Unsurprising. There are two ways to do this

    • Create a CNAME record called WWW and have it point to the subdomain in DNS
    • Create a custom request for LE so that it ignores the www value, and only processes the actual domain you want

    VirtualMin -> Server Configuration -> SSL Certificate

    8ec0c6a1-fb68-4af8-a66e-b6dba7044a93-image.png

    Let’s Encrypt

    f0f6e0eb-de26-40bc-be66-7ebf708fa9fe-image.png

    Set as per the example, so you only request the domain you want. Ensure that “Automatically renew certificate” is selected, then “Request Certificate”

    Thanks,

    which is the best solution?

  • @phenomlab said in setting up Matomo:

    @jac Unsurprising. There are two ways to do this

    • Create a CNAME record called WWW and have it point to the subdomain in DNS
    • Create a custom request for LE so that it ignores the www value, and only processes the actual domain you want

    VirtualMin -> Server Configuration -> SSL Certificate

    8ec0c6a1-fb68-4af8-a66e-b6dba7044a93-image.png

    Let’s Encrypt

    f0f6e0eb-de26-40bc-be66-7ebf708fa9fe-image.png

    Set as per the example, so you only request the domain you want. Ensure that “Automatically renew certificate” is selected, then “Request Certificate”

    Thanks,

    which is the best solution?

    @jac Well, depending on configuration, they are as simple as each other. If you choose the first, then you need to add DNS records, and ensure your server is capable of handling them on arrival (it should be by default).

    If you choose the second, it’s the easiest (and probably laziest 🙂 ), but it will work. We just then need to set a redirect so that all traffic lands up at https://site.domain.com even if we try with or without the www prefix.

  • @jac Well, depending on configuration, they are as simple as each other. If you choose the first, then you need to add DNS records, and ensure your server is capable of handling them on arrival (it should be by default).

    If you choose the second, it’s the easiest (and probably laziest 🙂 ), but it will work. We just then need to set a redirect so that all traffic lands up at https://site.domain.com even if we try with or without the www prefix.

    @phenomlab said in setting up Matomo:

    If you choose the second, it’s the easiest (and probably laziest ), but it will work. We just then need to set a redirect so that all traffic lands up at https://site.domain.com even if we try with or without the www prefix.

    Will try this now mate 🙂

  • @phenomlab said in setting up Matomo:

    If you choose the second, it’s the easiest (and probably laziest ), but it will work. We just then need to set a redirect so that all traffic lands up at https://site.domain.com even if we try with or without the www prefix.

    Will try this now mate 🙂

    @jac As per PM, this has been completed.

  • phenomlabundefined phenomlab marked this topic as a question on
  • phenomlabundefined phenomlab has marked this topic as solved on
  • @jac As per PM, this has been completed.

    @phenomlab said in setting up Matomo:

    @jac As per PM, this has been completed.

    Can’t thank you enough for that Mark! - Superb yet again! 🙂

  • @phenomlab said in setting up Matomo:

    @jac As per PM, this has been completed.

    Can’t thank you enough for that Mark! - Superb yet again! 🙂

    @jac I have a feeling the real-time map isn’t working correctly?

    Screenshot 2021-12-09 at 18-05-20 Stockport County Fans - Web Analytics Reports - Matomo.png

    “NO Data”.

  • @jac I have a feeling the real-time map isn’t working correctly?

    Screenshot 2021-12-09 at 18-05-20 Stockport County Fans - Web Analytics Reports - Matomo.png

    “NO Data”.

    @jac You need to wait for 24 hours ⏲

  • @jac You need to wait for 24 hours ⏲

    @phenomlab said in setting up Matomo:

    @jac You need to wait for 24 hours ⏲

    Thanks mate 🙂 was wondering if it should work real-time when someone visits. I do remember this being the case last time I used it.

  • @phenomlab said in setting up Matomo:

    @jac You need to wait for 24 hours ⏲

    Thanks mate 🙂 was wondering if it should work real-time when someone visits. I do remember this being the case last time I used it.

    @jac IMG_20211209_183230.jpg

    VPN connected to Holland… Stats site shows UK. Oh dear… 😳😑.

  • @jac IMG_20211209_183230.jpg

    VPN connected to Holland… Stats site shows UK. Oh dear… 😳😑.

    @jac said in setting up Matomo:

    @jac IMG_20211209_183230.jpg

    VPN connected to Holland… Stats site shows UK. Oh dear… 😳😑.

    This now makes me think, is the VPN really reliable or is the Matomo stats really good at showing the IP of where you really are 🤔

  • @jac said in setting up Matomo:

    @jac IMG_20211209_183230.jpg

    VPN connected to Holland… Stats site shows UK. Oh dear… 😳😑.

    This now makes me think, is the VPN really reliable or is the Matomo stats really good at showing the IP of where you really are 🤔

    @jac Matomo should only record what is being presented by the browser. Is the VPN actually enabled in the browser session ?

    Typically, this is via an add on or extension, or have you enabled it at system level via an application ?

  • @jac Matomo should only record what is being presented by the browser. Is the VPN actually enabled in the browser session ?

    Typically, this is via an add on or extension, or have you enabled it at system level via an application ?

    @phenomlab said in setting up Matomo:

    @jac Matomo should only record what is being presented by the browser. Is the VPN actually enabled in the browser session ?

    Typically, this is via an add on or extension, or have you enabled it at system level via an application ?

    This was connected to express VPN via mobile phone app. I also tried the same with Nord & repeated both on the Nvidia Shield yielding the same result (showing UK) despite being connected to Germany, France etc.

  • @phenomlab said in setting up Matomo:

    @jac Matomo should only record what is being presented by the browser. Is the VPN actually enabled in the browser session ?

    Typically, this is via an add on or extension, or have you enabled it at system level via an application ?

    This was connected to express VPN via mobile phone app. I also tried the same with Nord & repeated both on the Nvidia Shield yielding the same result (showing UK) despite being connected to Germany, France etc.

    @jac Another example…

    I’ve just connected to Finland and it shows I’m viewing the site from USA? I know this is an issue you can’t fix, I’m just bringing to your attention that possibly it’s not as reliable as we thought?

    I wonder if GA is any better? or am I getting too ahead of myself? 😛

  • @jac Another example…

    I’ve just connected to Finland and it shows I’m viewing the site from USA? I know this is an issue you can’t fix, I’m just bringing to your attention that possibly it’s not as reliable as we thought?

    I wonder if GA is any better? or am I getting too ahead of myself? 😛

    @jac said in setting up Matomo:

    I wonder if GA is any better? or am I getting too ahead of myself?

    You’re getting ahead of yourself. Don’t forget that Matomo is fully GDPR compliant, and will take into account the privacy side of things, and (possibly) anonymises information before it is presented to you. Another reason could be the IP GEO settings, which I’ll have a look at now.

  • @jac yep - as I suspected

    2572f7d6-871c-4f3e-b0b4-7fb26c878d39-image.png

    You’re using the default, so we need to change this. I’ll do this now

  • @jac yep - as I suspected

    2572f7d6-871c-4f3e-b0b4-7fb26c878d39-image.png

    You’re using the default, so we need to change this. I’ll do this now

    @phenomlab said in setting up Matomo:

    @jac yep - as I suspected

    2572f7d6-871c-4f3e-b0b4-7fb26c878d39-image.png

    You’re using the default, so we need to change this. I’ll do this now

    Understood 😉

    Thanks pal, many thanks for that 🙂

  • @jac yep - as I suspected

    2572f7d6-871c-4f3e-b0b4-7fb26c878d39-image.png

    You’re using the default, so we need to change this. I’ll do this now

    @phenomlab said in setting up Matomo:

    @jac yep - as I suspected

    2572f7d6-871c-4f3e-b0b4-7fb26c878d39-image.png

    You’re using the default, so we need to change this. I’ll do this now

    The aim is for this to portray accurate data? so going off the VPN location rather than just IP?

  • @phenomlab said in setting up Matomo:

    @jac yep - as I suspected

    2572f7d6-871c-4f3e-b0b4-7fb26c878d39-image.png

    You’re using the default, so we need to change this. I’ll do this now

    The aim is for this to portray accurate data? so going off the VPN location rather than just IP?

    @jac Essentially, yes - if a VPN is active, this will be the chosen address as it’s what you are connecting with. Also, browsers these days have the ability to opt out of tracking, so if it does work, then the results might not be what you expected either.

    Neither Matomo or GA is going to be the holy grail I’m afraid because of privacy constraints.

    Geo IP2 is now active

    663dc5d7-77e8-4a74-ba32-821d8b66c06a-image.png

  • @jac Essentially, yes - if a VPN is active, this will be the chosen address as it’s what you are connecting with. Also, browsers these days have the ability to opt out of tracking, so if it does work, then the results might not be what you expected either.

    Neither Matomo or GA is going to be the holy grail I’m afraid because of privacy constraints.

    Geo IP2 is now active

    663dc5d7-77e8-4a74-ba32-821d8b66c06a-image.png

    @phenomlab said in setting up Matomo:

    @jac Essentially, yes - if a VPN is active, this will be the chosen address as it’s what you are connecting with. Also, browsers these days have the ability to opt out of tracking, so if it does work, then the results might not be what you expected either.

    Neither Matomo or GA is going to be the holy grail I’m afraid because of privacy constraints.

    Geo IP2 is now active

    663dc5d7-77e8-4a74-ba32-821d8b66c06a-image.png

    Many thanks mate, makes perfect sense!

    Thanks for the explanation 😄


Did this solution help you?
Did you find the suggested solution useful? Support 💗 Sudonix with a coffee
If your organisation needs deeper expertise around infrastructure, security, or technology leadership, learn more about Phenomlab Ltd. Many of the deeper technical guides behind Sudonix are published there.

Related Topics
  • Nodebb vs Wordpress vs Other

    General wordpress nodebb woocomerce business
    4
    2 Votes
    4 Posts
    118 Views
    PrestaShop + modules IA https://www.prestashop.com Magento https://developer.adobe.com/open/magento
  • 7 Votes
    6 Posts
    146 Views
    I have an update regarding this. They both said that they are getting used to navigating Fedora and that it is working great for them so far. They said there is still a bit of a learning curve they are going through but overall happy.
  • Infrared the new WiFi?

    General wifi infrared
    4
    2 Votes
    4 Posts
    1k Views
    @JAC those speeds are indeed possible over light as a transport medium (if you consider the speed) but I can’t comprehend the distance quoted. If you happen to encounter a solid obstacle, the beam is either absorbed, or deflected meaning the data never arrives.
  • 3 Votes
    7 Posts
    1k Views
    @phenomlab I will have to test this out in my virtual environment. I have an Arch KDE Plasma install in virtualbox that I am testing a bunch of things out before I actually wipe the hard drive and install linux. I am currently in the process of copying my Arch test web server over to virtualbox on linux to make sure that it works. This is the virtual server that I test updates on before updating the production server. I can’t remember the error I was getting but I think it had to do with the network device. That was on the virtualbox side. So the cloud storage will be the next thing that I test.
  • Email Provider

    General email gmail proton
    9
    5 Votes
    9 Posts
    2k Views
    @phenomlab lol it is a great excuse and sometimes a combination of both haha
  • Windows 10 End of Life

    General windows linux arch end of life
    10
    2 Votes
    10 Posts
    1k Views
    @phenomlab this looks very nice as well. It is nice that they keep the KDE Neon a rolling release so you will get those updated apps even though Ubuntu isn’t a rolling release. Is it a rolling distro? KDE neon is rolling for KDE software. The Ubuntu base OS is not, but certain packages will be updated as needed to support KDE software requiring newer library versions than what is provided by Ubuntu. Apps from the main repositories are not rolling either, and therefore can be up to two years old. Users are encouraged not to use them, and to instead get apps from Snap or Flatpak using KDE’s Discover app store. In neon, Discover is set up to only show apps from these sources, filtering out apps from the repositories.
  • OKTA offering personal password manager

    General okta password manager
    31
    18 Votes
    31 Posts
    5k Views
    @Madchatthew yes, works well for us.
  • Best antivirus software? (Looking to switch)

    General
    35
    19 Votes
    35 Posts
    6k Views
    @phenomlab or Challenge Accepted haha