Rybbit, an open source, privacy friendly web and product analytics platform, ready to track your sites the moment it boots.
Rybbit is an open source, privacy friendly analytics platform for websites and products, and a self hostable alternative to Google Analytics and Plausible. A single lightweight script added to your pages starts tracking page visits, unique visitors, referrers, countries, devices and real time users, and you can send your own custom events with structured properties to measure exactly the actions that matter, such as a sign up, a purchase or a feature being used. Because it is cookie free it tracks visitors without cookie banners and without profiling individuals.
Everything is presented through a clean, fast dashboard where you create one or more sites, each with its own site id and tracking snippet, and watch traffic and events as they arrive. Events are stored in ClickHouse for fast analytical queries while accounts, organizations and sites live in PostgreSQL. It suits site owners, product teams and agencies who want a modern analytics tool they run themselves, keeping every pageview and event on infrastructure they control rather than sending it to a third party.
cloudimg delivers the whole Rybbit stack, the dashboard, the ingestion and stats backend and its ClickHouse and PostgreSQL datastores, installed and wired together behind a single web port so the dashboard answers the moment the instance boots, with no compose files to assemble by hand. The image is secure by default: the upstream project ships fixed default datastore passwords and session secret and, in its stock compose, exposes its database to the network, and cloudimg bakes none of that. On the first boot of every instance a unique database password, ClickHouse password, cache password and authentication secret are generated fresh, a single administrator account is created with its own random password and public sign up is then disabled, and the credentials are written to a root only file, so no two instances share a login and the upstream default never governs a running dashboard. The dashboard is served over HTTPS with a per-VM certificate, the datastores are bound to the instance only and never exposed, telemetry is turned off, the base is fully patched with unattended security upgrades enabled, and every deployment is paired with a step by step deploy guide and backed by 24/7 cloudimg support.
Real screenshots taken while testing this image against its deployment guide.