Skip to main content

13: Matomo - Web Analytics

Matomo (formerly Piwik) is a full‑featured, self‑hosted web analytics platform. This guide covers installation and runtime specifics when deploying via Infinity Tools. For comprehensive configuration and administration, see the official Matomo documentation.

Architecture Overview

  • ✅ Services: Matomo (PHP/Apache) + MariaDB 10.11
  • ✅ Reverse Proxy: Traefik with Let's Encrypt (recommended) or standalone
  • ✅ Networking: Traefik proxy network + borgmatic-db for DB backups
  • ✅ Data: App config/logs + database volume

Prerequisites

  • ✅ Traefik installed (Chapter 4)
  • ✅ Docker installed (Chapter 3)
  • ✅ Apprise installed (Chapter 5) for notifications
  • ✅ Borgmatic installed (Chapter 6) for automated backups
  • ✅ Domain configured (Chapter 4.5) for HTTPS

Interdependencies: MariaDB joins borgmatic-db for backup discovery. Borgmatic relies on Apprise for notifications.

Installation Methods

Via Infinity Tools Menu

📱 APPLICATIONS → Matomo → Install

Command Line

# Status (no changes)
sudo bash /opt/InfinityTools/Solutions/setup-matomo.sh --status

# Interactive installation
sudo bash /opt/InfinityTools/Solutions/setup-matomo.sh --install

Key Configuration

  • SSL Mode: Traefik (HTTPS) or standalone (HTTP or self‑signed HTTPS)
  • Domain: Required for Traefik (e.g., analytics.example.com)
  • Standalone Port: Required if not using Traefik
  • Database: MariaDB 10.11 with tuned params

Generated Files & Directories

  • /opt/speedbits/matomo/.env — Installation parameters and DB creds
  • /opt/speedbits/matomo/docker-compose.yml — Service definition
  • /opt/speedbits/matomo/config — Matomo config
  • /opt/speedbits/matomo/logs — Matomo logs
  • /opt/speedbits/matomo/db — MariaDB data
  • /opt/speedbits/matomo/db_password.txt — DB password (root‑only)

Compose (Traefik Mode - Highlights)

services:
  db:
    image: mariadb:${DB_VERSION}
    networks: [ ${NETWORK}, borgmatic-db ]
    command: >
      --max-allowed-packet=64M
      --innodb-buffer-pool-size=512M

  matomo:
    image: matomo:${MATOMO_VERSION}
    environment:
      MATOMO_DATABASE_HOST: matomo-db
      MATOMO_DATABASE_ADAPTER: mysql
      MATOMO_DATABASE_TABLES_PREFIX: matomo_
      MATOMO_DATABASE_USERNAME: ${MYSQL_USER}
      MATOMO_DATABASE_PASSWORD: ${MYSQL_PASSWORD}
      MATOMO_DATABASE_DBNAME: ${MYSQL_DATABASE}
      PHP_MEMORY_LIMIT: 512M
    volumes:
      - ./config:/var/www/html/config
      - ./logs:/var/www/html/logs
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.matomo.rule=Host(`${DOMAIN}`)"
      - "traefik.http.routers.matomo.entrypoints=websecure"
      - "traefik.http.routers.matomo.tls.certresolver=myresolver"
      - "traefik.http.services.matomo.loadbalancer.server.port=80"

Post‑Install Tasks

  • Complete the Matomo setup wizard in the browser (system check → DB → admin user → first website)
  • Add the JavaScript tracking code to your site(s) (before </head>)
  • Set up cron archiving (see below)

Cron Archiving

*/5 * * * * docker exec matomo /usr/local/bin/php /var/www/html/console core:archive >/dev/null 2>&1

Backup Integration (Borgmatic)

  • Database container is auto‑registered with Borgmatic (if available)
  • Include in backups:
    • /opt/speedbits/matomo/db — MariaDB data
    • /opt/speedbits/matomo/config — App configuration
    • /opt/speedbits/matomo/logs — Optional
  • Ensure Apprise notifications are configured

Operations

# Logs
docker logs matomo
docker logs matomo-db

# Restart
cd /opt/speedbits/matomo && docker compose restart

# Update
cd /opt/speedbits/matomo && docker compose pull && docker compose up -d

Troubleshooting

  • DB connectivity: verify db_password.txt, check matomo-db logs
  • SSL/ACME: check Traefik logs, DNS, ports 80/443 open
  • Performance: tune archiving frequency; ensure DB buffer pool sizing matches workload

Security Best Practices

  • Restrict admin access; use strong credentials
  • Regular updates; monitor logs
  • Consider IP anonymization and consent tools for compliance

Verification Checklist

  • ✅ Matomo and database containers running
  • ✅ HTTPS reachable via Traefik with valid certificate
  • ✅ Setup wizard completed; admin login working
  • ✅ Cron archiving running
  • ✅ Backups configured and tested

References

No comments to display

Back to top