@django-stack/cli 0.5.0 → 0.7.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@django-stack/cli",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "description": "The production-ready Django, batteries included stack. Create and manage DjangoStack projects: a Django backend, a frontend, Postgres and Docker Compose in one command.",
   "license": "MIT",
   "author": "Leon van der Grient",

package/templates/backend/config/studio.py

@@ -5,9 +5,11 @@ https://djangocontentstudio.org/docs/extensions for the hooks and extensions.
 """
 
 from content_studio.admin import ContentStudioSite
+from content_studio.analytics import AnalyticsExtension, AnalyticsLink, AnalyticsPage
 from content_studio.contrib.huey import HueyAdapter
 from content_studio.dashboard.tasks import TaskDashboard
 from content_studio.extensions import UserMenuLink
+from django_stack.analytics import UmamiProvider
 
 
 class SiteStudio(ContentStudioSite):
@@ -16,5 +18,12 @@ class SiteStudio(ContentStudioSite):
         UserMenuLink(url="/tasks/", label="Tasks", icon="ph-bold ph-queue"),
     ]
 
+    # Page analytics from the bundled Umami when UMAMI_URL is set (see
+    # .env): an Analytics page in the main menu. content/admin.py shows the
+    # numbers of each page and post. See
+    # https://djangocontentstudio.org/docs/analytics.
+    if UmamiProvider.is_configured():
+        extensions += [AnalyticsExtension(provider=UmamiProvider()), AnalyticsPage(), AnalyticsLink()]
+
 
 admin_site = SiteStudio()

package/templates/backend/content/admin.py

@@ -5,6 +5,7 @@ The studios of the content models: how they look in Content Studio at
 
 from content_studio import register
 from content_studio.admin import ModelStudio
+from content_studio.analytics import Analytics
 from content_studio.form import ActivityLog, Field, FormSet
 from django_stack.studio import PreviewButton
 
@@ -15,6 +16,10 @@ PAGE_PREVIEW = PreviewButton(component_id="8d0f6a52-3c51-4a8e-9a2b-6f1f0c8f2a01"
 POST_PREVIEW = PreviewButton(component_id="8d0f6a52-3c51-4a8e-9a2b-6f1f0c8f2a02")
 PAGE_ACTIVITY = ActivityLog(component_id="8d0f6a52-3c51-4a8e-9a2b-6f1f0c8f2a03")
 POST_ACTIVITY = ActivityLog(component_id="8d0f6a52-3c51-4a8e-9a2b-6f1f0c8f2a04")
+# The visitors of the page or post, from the analytics (see config/studio.py).
+# Hidden while analytics are off.
+PAGE_ANALYTICS = Analytics(path_field="path", component_id="8d0f6a52-3c51-4a8e-9a2b-6f1f0c8f2a05")
+POST_ANALYTICS = Analytics(path_field="slug", path_prefix="/blog/", component_id="8d0f6a52-3c51-4a8e-9a2b-6f1f0c8f2a06")
 SEO = FormSet(
     title="Search and sharing",
     description="Leave empty to use the title and the site settings.",
@@ -37,7 +42,7 @@ class PageStudio(ModelStudio):
         FormSet(title="Body", fields=["body"]),
         SEO,
     ]
-    edit_sidebar = ["status", "published_at", PAGE_PREVIEW, "order", PAGE_ACTIVITY]
+    edit_sidebar = ["status", "published_at", PAGE_PREVIEW, "order", PAGE_ANALYTICS, PAGE_ACTIVITY]
 
 
 @register(Post)
@@ -55,7 +60,16 @@ class PostStudio(ModelStudio):
         FormSet(title="Body", fields=["body"]),
         SEO,
     ]
-    edit_sidebar = ["status", "published_at", POST_PREVIEW, "author", "categories", "tags", POST_ACTIVITY]
+    edit_sidebar = [
+        "status",
+        "published_at",
+        POST_PREVIEW,
+        "author",
+        "categories",
+        "tags",
+        POST_ANALYTICS,
+        POST_ACTIVITY,
+    ]
 
 
 @register(Category, Tag)

package/templates/backend/entrypoint.sh

@@ -5,7 +5,8 @@
 # first admin user and, with SEED_DEMO_CONTENT=1, add demo content to an
 # empty site. DJANGO_CHECK_DEPLOY=1 (production): stop when Django's deploy
 # checks find an error. S3_CREATE_BUCKET=1 (the development S3 service):
-# create the media bucket.
+# create the media bucket. UMAMI_URL set (the analytics profile): set up
+# Umami; when that fails the site still starts, without analytics.
 set -eu
 
 python manage.py wait_for_db
@@ -22,6 +23,9 @@ if [ "${DJANGO_MIGRATE:-0}" = "1" ]; then
   if [ "${SEED_DEMO_CONTENT:-0}" = "1" ]; then
     python manage.py seed_content --if-empty
   fi
+  if [ -n "${UMAMI_URL:-}" ]; then
+    python manage.py setup_umami || echo "Umami is not set up, so the admin shows no analytics. See the error above." >&2
+  fi
 fi
 
 exec "$@"

package/templates/backend/pyproject.toml

@@ -5,9 +5,9 @@ description = "The Django backend of {{project_name}}."
 requires-python = ">=3.12"
 dependencies = [
     "Django>=6.1,<6.2",
-    "django-stack[server,s3]>=0.5.0",
+    "django-stack[server,s3]>=0.7.0",
     "django-headless[schema]>=1.1.1",
-    "django-content-studio[images,huey]>=1.8.0",
+    "django-content-studio[images,huey]>=1.11.0",
 ]
 
 [dependency-groups]

package/templates/base/AGENTS.md

@@ -41,7 +41,8 @@ Run them at the project root. They need Docker; Node is only needed for the `npm
 
 In production (`COMPOSE_PROFILES=prod,db`) the services are `backend-prod`,
 `worker-prod` (which also runs the daily backup), `frontend-prod` and
-`proxy`; their containers are
+`proxy`, with `umami` for page analytics when the `analytics` profile is on;
+their containers are
 read-only, so a change goes through the code and a new image, never an edit
 in a running container.
 

package/templates/base/Caddyfile

@@ -1,7 +1,8 @@
 # {{project_name}}: the reverse proxy of the prod profile.
 #
 # One domain: Django serves /admin, /api and /static; uploads on the server's
-# disk are served from /media; the frontend serves everything else. Caddy
+# disk are served from /media; Umami's tracker from /_a/; the frontend
+# serves everything else. Caddy
 # gets and renews the HTTPS certificate for SITE_URL by itself.
 #
 # Behind a platform's proxy (Coolify, Dokploy), CADDY_ADDRESS=:80 serves
@@ -35,6 +36,18 @@
 		file_server
 	}
 
+	# Page analytics: only Umami's tracker and its page views, never its
+	# interface or API. Without the analytics profile these answer 502.
+	handle_path /_a/* {
+		@tracker path /script.js /api/send
+		handle @tracker {
+			reverse_proxy umami:3000
+		}
+		handle {
+			respond 404
+		}
+	}
+
 	@django path /admin /admin/* /api /api/* /static/*
 	handle @django {
 		reverse_proxy backend:8000

package/templates/base/README.md

@@ -6,7 +6,9 @@ A website with a Django backend and a frontend built with {{frontend_label}}, cr
 - [Django Headless](https://djangoheadless.org) serves the content API.
 - [Django Content Studio](https://djangocontentstudio.org) is the admin.
 - [{{frontend_label}}]({{frontend_url}}) renders the site.
-- Postgres stores the content; Valkey is the cache and task queue.
+- Postgres stores the content, and by default also the cache and the task
+  queue (`CACHE_URL` and `TASKS_URL` in `.env`); Valkey can take those over
+  with the `valkey` profile.
 
 ## Start
 
@@ -16,9 +18,12 @@ You need Docker.
 docker compose up --build
 ```
 
-- Site: http://localhost:3000
-- Admin: http://localhost:3000/admin/ (user `admin`, password `ADMIN_PASSWORD` in `.env`)
-- Outgoing mail: http://localhost:8025
+- Site: http://localhost:{{site_port}}
+- Admin: http://localhost:{{site_port}}/admin/ (user `admin`, password `ADMIN_PASSWORD` in `.env`)
+- Outgoing mail: http://localhost:{{mail_port}}
+
+The ports are `SITE_PORT` and `MAIL_PORT` in `.env`. When you change
+`SITE_PORT`, change `SITE_URL` and `BACKEND_URL` with it.
 
 The first start migrates the database, creates the admin user and adds demo
 content. Edit a page in the admin, publish, and reload the site.
@@ -51,6 +56,15 @@ site with drafts shown, for an hour.
 When an editor saves, Django tells the frontend (`REVALIDATE_URL`), which
 empties its page cache, so the change shows on the next visit.
 
+## Analytics
+
+When `COMPOSE_PROFILES` in `.env` has `analytics`, the `umami` service
+counts page views without cookies, and the admin shows them under
+**Analytics**. Umami's own interface is not served: only its tracker and the
+page views pass through the site at `/_a/`. To turn it off, remove
+`analytics` from `COMPOSE_PROFILES` and empty `UMAMI_URL`. See
+[Page analytics](https://dwarsbit.github.io/django-stack/docs/analytics).
+
 ## Deploy
 
 On a server with Docker and a domain pointing at it:

package/templates/base/compose.yaml

@@ -2,11 +2,14 @@
 #
 # COMPOSE_PROFILES in .env picks the services:
 #   dev,db    `docker compose up` on a laptop: dev servers with hot reload,
-#             http://localhost:3000, Mailpit at http://localhost:8025.
+#             http://localhost:3000, Mailpit at http://localhost:8025 (the
+#             *_PORT variables in .env change the ports).
 #   prod,db   `docker compose up -d` on a server: production images behind
 #             Caddy on ports 80 and 443, with automatic HTTPS and daily backups.
 #   Leave out `db` to use an external Postgres through DATABASE_URL, and add
-#   `s3` in development for a local S3 service (see .env).
+#   `s3` in development for a local S3 service (see .env). `analytics` runs
+#   Umami for page analytics, `valkey` the Valkey service for CACHE_URL or
+#   TASKS_URL.
 #
 # The frontend only receives the variables it needs: never the full-access
 # API key or the database password.
@@ -31,6 +34,9 @@ x-frontend-env: &frontend-env
   PREVIEW_SECRET: ${PREVIEW_SECRET}
   REVALIDATE_SECRET: ${REVALIDATE_SECRET}
   MEDIA_ORIGINS: ${S3_PUBLIC_URL:-${S3_ENDPOINT_URL:-}}
+  # Page analytics: the tracker loads from /_a/ on the site when set.
+  UMAMI_WEBSITE_ID: ${UMAMI_WEBSITE_ID:-}
+  UMAMI_URL: ${UMAMI_URL:-}
 
 x-backend-depends: &backend-depends
   db:
@@ -38,9 +44,14 @@ x-backend-depends: &backend-depends
     required: false
   cache:
     condition: service_healthy
+    required: false
   s3:
     condition: service_started
     required: false
+  # The backend sets Umami up on start; it waits for it by itself.
+  umami:
+    condition: service_started
+    required: false
 
 x-backend-health: &backend-health
   test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:8000/readyz', timeout=4)"]
@@ -64,7 +75,7 @@ services:
       - ./backend:/app
       - media:/app/media
     ports:
-      - "127.0.0.1:8000:8000"
+      - "127.0.0.1:${BACKEND_PORT:-8000}:8000"
     depends_on: *backend-depends
     healthcheck: *backend-health
     restart: unless-stopped
@@ -79,6 +90,9 @@ services:
     volumes:
       - ./backend:/app
       - media:/app/media
+    # 0 with TASKS_URL=immediate://: tasks run in the request.
+    deploy:
+      replicas: ${TASK_WORKERS:-1}
     depends_on:
       backend:
         condition: service_healthy
@@ -94,7 +108,7 @@ services:
       - ./frontend:/app
       - frontend_node_modules:/app/node_modules
     ports:
-      - "127.0.0.1:3000:3000"
+      - "127.0.0.1:${SITE_PORT:-3000}:3000"
     depends_on:
       backend:
         condition: service_healthy
@@ -104,11 +118,12 @@ services:
     profiles: [dev]
     image: axllent/mailpit:v1.27
     ports:
-      - "127.0.0.1:8025:8025"
+      - "127.0.0.1:${MAIL_PORT:-8025}:8025"
     restart: unless-stopped
 
   # A local S3 service, so development runs the same storage code as
-  # production with S3. Files are public at http://localhost:8333/<bucket>/.
+  # production with S3. Files are public at http://localhost:8333/<bucket>/
+  # (S3_PORT).
   s3:
     profiles: [s3]
     image: chrislusf/seaweedfs:4.52
@@ -116,7 +131,7 @@ services:
     volumes:
       - s3data:/data
     ports:
-      - "127.0.0.1:8333:8333"
+      - "127.0.0.1:${S3_PORT:-8333}:8333"
     restart: unless-stopped
 
   # Production -------------------------------------------------------------
@@ -173,6 +188,7 @@ services:
     healthcheck:
       disable: true
     deploy:
+      replicas: ${TASK_WORKERS:-1}
       resources:
         limits:
           memory: 512M
@@ -232,6 +248,36 @@ services:
 
   # Shared -----------------------------------------------------------------
 
+  # Page analytics (the analytics profile). Umami's interface and API stay on
+  # the internal network: Caddy, and the frontend's dev server, pass on only
+  # the tracker and the page views at /_a/, and the admin reads the numbers
+  # with UMAMI_ADMIN_PASSWORD. Its tables are in the umami schema of the
+  # database.
+  umami:
+    profiles: [analytics]
+    image: umamisoftware/umami:3.4
+    <<: *hardened
+    environment:
+      DATABASE_URL: ${UMAMI_DATABASE_URL:-}
+      APP_SECRET: ${UMAMI_APP_SECRET:-}
+      DISABLE_TELEMETRY: "1"
+      DISABLE_UPDATES: "1"
+    depends_on:
+      db:
+        condition: service_healthy
+        required: false
+    healthcheck:
+      test: ["CMD", "node", "-e", "fetch('http://localhost:3000/api/heartbeat').then((r) => process.exit(r.ok ? 0 : 1), () => process.exit(1))"]
+      interval: 5s
+      timeout: 5s
+      start_period: 60s
+      retries: 30
+    deploy:
+      resources:
+        limits:
+          memory: 512M
+    restart: unless-stopped
+
   db:
     profiles: [db]
     image: postgres:17-alpine
@@ -254,9 +300,11 @@ services:
           memory: 1G
     restart: unless-stopped
 
-  # Cache, sessions and the task queue. Only keys with an expiry are
-  # evicted when memory runs out, so queued tasks are never dropped.
+  # Valkey (the valkey profile), for CACHE_URL or TASKS_URL redis://cache.
+  # Only keys with an expiry are evicted when memory runs out, so queued
+  # tasks are never dropped.
   cache:
+    profiles: [valkey]
     image: valkey/valkey:8-alpine
     user: valkey
     command: ["valkey-server", "--save", "", "--appendonly", "no", "--maxmemory", "200mb", "--maxmemory-policy", "volatile-lru"]

package/templates/base/env.example

@@ -8,7 +8,8 @@ PROJECT_NAME={{project_name}}
 #   dev,db   development on this machine
 #   prod,db  production on a server
 # Leave out `db` when DATABASE_URL points to an external Postgres; add `s3`
-# in development for the local S3 service.
+# in development for the local S3 service. `analytics` runs Umami, `valkey`
+# the Valkey service.
 COMPOSE_PROFILES=dev,db
 
 # The public URL of the site. In development the frontend's dev server also
@@ -17,6 +18,15 @@ COMPOSE_PROFILES=dev,db
 SITE_URL=http://localhost:3000
 BACKEND_URL=http://localhost:3000
 
+# The ports of the development services on this machine: the site with the
+# admin, the backend, Mailpit and the local S3 service. `init` and
+# `dstack dev` move to free ones when these are in use, and change the
+# URLs above with SITE_PORT.
+SITE_PORT=3000
+BACKEND_PORT=8000
+MAIL_PORT=8025
+S3_PORT=8333
+
 # Behind the proxy of a platform such as Coolify or Dokploy, which gets the
 # certificate, Caddy serves plain HTTP on port 80 to it instead:
 #   CADDY_ADDRESS=:80 TRUSTED_PROXIES=private_ranges NUM_PROXIES=2
@@ -33,9 +43,18 @@ POSTGRES_USER=app
 POSTGRES_PASSWORD={{secret:postgres}}
 DATABASE_URL=postgres://app:{{secret:postgres}}@db:5432/app
 
-# Cache, task queue and mail. In production, EMAIL_URL is your SMTP server,
-# such as smtp+tls://user:password@smtp.example.com:587.
-CACHE_URL=redis://cache:6379/0
+# Cache and task queue: db:// keeps them in tables in the database, so
+# nothing else runs. For the Valkey service add `valkey` to COMPOSE_PROFILES
+# and use redis://cache:6379/0 (the cache) or redis://cache:6379/1 (the
+# tasks). CACHE_URL=locmem:// is a cache per process. TASKS_URL=immediate://
+# runs tasks in the request, with TASK_WORKERS=0 to stop the worker; there
+# are no daily backups then.
+CACHE_URL=db://
+TASKS_URL=db://
+TASK_WORKERS=1
+
+# Mail. In production, EMAIL_URL is your SMTP server, such as
+# smtp+tls://user:password@smtp.example.com:587.
 EMAIL_URL=smtp://mailpit:1025
 DEFAULT_FROM_EMAIL={{project_name}} <noreply@localhost>
 
@@ -71,6 +90,20 @@ S3_ACCESS_KEY_ID=
 S3_SECRET_ACCESS_KEY=
 S3_PUBLIC_URL=
 
+# Page analytics: Umami, in the `analytics` profile. It runs on the internal
+# network only: its tracker and the page views pass through /_a/ on the
+# site, and the admin shows the numbers under Analytics. Umami keeps its
+# tables in the `umami` schema of the database (UMAMI_DATABASE_URL is
+# DATABASE_URL with ?schema=umami), so backups include them. The backend
+# replaces Umami's default admin password with UMAMI_ADMIN_PASSWORD and
+# creates the website UMAMI_WEBSITE_ID on start. To turn analytics off,
+# remove `analytics` from COMPOSE_PROFILES and empty UMAMI_URL.
+UMAMI_URL=
+UMAMI_WEBSITE_ID=
+UMAMI_ADMIN_PASSWORD=
+UMAMI_APP_SECRET=
+UMAMI_DATABASE_URL=
+
 # Backups (prod profile): a daily pg_dump at BACKUP_TIME (UTC) and, when
 # uploads are on disk (no S3_BUCKET) and BACKUP_MEDIA=1, an archive of the
 # media volume; the newest BACKUP_KEEP of each kept in the backups volume.

package/templates/frontend-astro/astro.config.mjs

@@ -4,6 +4,8 @@ import { defineConfig } from "astro/config";
 
 // The Django backend: the frontend container reaches it on the Compose network.
 const backend = process.env.BACKEND_INTERNAL_URL ?? "http://localhost:8000";
+// Umami, for page analytics: only its tracker and page views, under /_a/.
+const umami = process.env.UMAMI_URL || "http://umami:3000";
 
 export default defineConfig({
   site: process.env.SITE_URL ?? "http://localhost:3000",
@@ -17,6 +19,8 @@ export default defineConfig({
   security: {
     csp: {
       directives: ["default-src 'self'", "base-uri 'self'", "form-action 'self'", "object-src 'none'"],
+      // Scripts from this site, such as the analytics tracker at /_a/script.js.
+      scriptDirective: { resources: ["'self'"] },
       // Inline style attributes, such as the focal point of an image.
       styleDirective: { resources: ["'self'", { resource: "'unsafe-inline'", kind: "attribute" }] },
     },
@@ -27,12 +31,15 @@ export default defineConfig({
       allowedHosts: ["frontend"],
       // In development, serve Django's paths from the same origin as the site,
       // like the reverse proxy does in production.
-      proxy: Object.fromEntries(
-        ["/admin", "/api", "/media", "/static"].map((path) => [
-          path,
-          { target: backend, changeOrigin: false },
-        ]),
-      ),
+      proxy: {
+        ...Object.fromEntries(
+          ["/admin", "/api", "/media", "/static"].map((path) => [
+            path,
+            { target: backend, changeOrigin: false },
+          ]),
+        ),
+        "^/_a/(script\\.js|api/send)$": { target: umami, rewrite: (path) => path.slice("/_a".length) },
+      },
     },
   },
 });

package/templates/frontend-astro/package.json

@@ -16,7 +16,7 @@
     "@astrojs/node": "^11.1.9",
     "@astrojs/rss": "^4.0.19",
     "@django-headless/client": "^1.1.1",
-    "@django-stack/utils": "^0.5.0",
+    "@django-stack/utils": "^0.7.0",
     "astro": "^7.4.5"
   },
   "devDependencies": {

package/templates/frontend-astro/src/layouts/Base.astro

@@ -20,6 +20,8 @@ const [settings, mainMenu, footerMenu] = await Promise.all([
 ]);
 const preview = Astro.cookies.has(PREVIEW_COOKIE);
 const path = Astro.url.pathname;
+// Page analytics: Umami's tracker, served from this site at /_a/.
+const analytics = process.env.UMAMI_WEBSITE_ID;
 ---
 
 <!doctype html>
@@ -30,6 +32,7 @@ const path = Astro.url.pathname;
     <link rel="icon" href="/favicon.svg" type="image/svg+xml" />
     <link rel="alternate" type="application/rss+xml" title={settings?.site_name ?? "RSS"} href="/rss.xml" />
     <Seo page={page} settings={settings} type={type} />
+    {analytics && <script is:inline defer src="/_a/script.js" data-website-id={analytics} />}
   </head>
   <body>
     {

package/templates/frontend-next/package.json

@@ -13,9 +13,9 @@
   },
   "dependencies": {
     "@django-headless/client": "^1.1.1",
-    "@django-stack/next": "^0.5.0",
-    "@django-stack/react": "^0.5.0",
-    "@django-stack/utils": "^0.5.0",
+    "@django-stack/next": "^0.7.0",
+    "@django-stack/react": "^0.7.0",
+    "@django-stack/utils": "^0.7.0",
     "next": "^16.4.4",
     "react": "^19.3.1",
     "react-dom": "^19.3.1",

package/templates/frontend-next/src/app/layout.tsx

@@ -2,6 +2,7 @@ import "./globals.css";
 import { Image, RichText } from "@django-stack/react";
 import { linkHref } from "@django-stack/utils";
 import type { Metadata } from "next";
+import Script from "next/script";
 import { NavLink } from "@/components/NavLink";
 import { getContent, previewToken, SITE_URL } from "@/lib/api";
 
@@ -64,6 +65,14 @@ export default async function RootLayout({ children }: { children: React.ReactNo
             </nav>
           </div>
         </footer>
+        {/* Page analytics: Umami's tracker, served from this site at /_a/. */}
+        {process.env.UMAMI_WEBSITE_ID ? (
+          <Script
+            src="/_a/script.js"
+            data-website-id={process.env.UMAMI_WEBSITE_ID}
+            strategy="afterInteractive"
+          />
+        ) : null}
       </body>
     </html>
   );

package/templates/frontend-next/src/proxy.ts

@@ -7,6 +7,9 @@ const dev = process.env.NODE_ENV === "development";
 // development, this proxy does, so the site and the admin share an origin.
 const BACKEND_PATHS = /^\/(admin|api|media|static)(\/|$)/;
 const backend = process.env.BACKEND_INTERNAL_URL ?? "http://localhost:8000";
+// Umami's tracker and page views, for page analytics; Caddy passes them on in production.
+const TRACKER_PATHS = /^\/_a\/(script\.js|api\/send)$/;
+const umami = process.env.UMAMI_URL || "http://umami:3000";
 const media = mediaOrigins();
 
 export function proxy(request: NextRequest) {
@@ -14,6 +17,9 @@ export function proxy(request: NextRequest) {
   if (dev && BACKEND_PATHS.test(pathname)) {
     return NextResponse.rewrite(new URL(pathname + search, backend));
   }
+  if (dev && TRACKER_PATHS.test(pathname)) {
+    return NextResponse.rewrite(new URL(pathname.slice("/_a".length) + search, umami));
+  }
 
   // A fresh nonce for every page: Next adds it to the scripts it renders.
   const nonce = Buffer.from(crypto.randomUUID()).toString("base64");

package/templates/frontend-nuxt/nuxt.config.ts

@@ -1,5 +1,7 @@
 // The Django backend: the frontend container reaches it on the Compose network.
 const backend = process.env.BACKEND_INTERNAL_URL ?? "http://localhost:8000";
+// Umami, for page analytics: only its tracker and page views, under /_a/.
+const umami = process.env.UMAMI_URL || "http://umami:3000";
 
 export default defineNuxtConfig({
   compatibilityDate: "2026-11-01",
@@ -26,12 +28,16 @@ export default defineNuxtConfig({
   // In development, serve Django's paths from the same origin as the site,
   // like the reverse proxy does in production.
   $development: {
-    routeRules: Object.fromEntries(
-      ["/admin", "/api", "/media", "/static"].map((path) => [
-        `${path}/**`,
-        { proxy: `${backend}${path}/**` },
-      ]),
-    ),
+    routeRules: {
+      ...Object.fromEntries(
+        ["/admin", "/api", "/media", "/static"].map((path) => [
+          `${path}/**`,
+          { proxy: `${backend}${path}/**` },
+        ]),
+      ),
+      "/_a/script.js": { proxy: `${umami}/script.js` },
+      "/_a/api/send": { proxy: `${umami}/api/send` },
+    },
   },
   // Security headers, with a Content-Security-Policy on every page in
   // production: scripts and styles only from this site, with a nonce for

package/templates/frontend-nuxt/package.json

@@ -15,8 +15,8 @@
   },
   "dependencies": {
     "@django-headless/client": "^1.1.1",
-    "@django-stack/utils": "^0.5.0",
-    "@django-stack/vue": "^0.5.0",
+    "@django-stack/utils": "^0.7.0",
+    "@django-stack/vue": "^0.7.0",
     "nuxt": "^4.6.3",
     "nuxt-security": "^2.7.0",
     "vue": "^3.5.44",

package/templates/frontend-nuxt/server/routes/_content/layout.get.ts

@@ -9,5 +9,10 @@ export default defineEventHandler(async (event) => {
     ]);
     return { settings, mainMenu, footerMenu, siteUrl: SITE_URL };
   });
-  return { ...data, preview: previewToken(event) !== null };
+  return {
+    ...data,
+    preview: previewToken(event) !== null,
+    // Page analytics: Umami's tracker, served from this site at /_a/.
+    analytics: process.env.UMAMI_WEBSITE_ID || null,
+  };
 });

package/templates/frontend-nuxt/src/layouts/default.vue

@@ -10,6 +10,9 @@ useHead(() => ({
   link: [
     { rel: "alternate", type: "application/rss+xml", title: data.value?.settings?.site_name ?? "RSS", href: "/rss.xml" },
   ],
+  script: data.value?.analytics
+    ? [{ src: "/_a/script.js", defer: true, "data-website-id": data.value.analytics }]
+    : [],
 }));
 </script>
 

package/templates/frontend-sveltekit/package.json

@@ -19,8 +19,8 @@
   },
   "dependencies": {
     "@django-headless/client": "^1.1.1",
-    "@django-stack/svelte": "^0.5.0",
-    "@django-stack/utils": "^0.5.0"
+    "@django-stack/svelte": "^0.7.0",
+    "@django-stack/utils": "^0.7.0"
   },
   "devDependencies": {
     "@sveltejs/adapter-node": "^6.0.1",

package/templates/frontend-sveltekit/src/routes/+layout.server.ts

@@ -14,5 +14,7 @@ export const load: LayoutServerLoad = async ({ cookies }) => {
     footerMenu,
     preview: cookies.get(PREVIEW_COOKIE) !== undefined,
     siteUrl: SITE_URL,
+    // Page analytics: Umami's tracker, served from this site at /_a/.
+    analytics: process.env.UMAMI_WEBSITE_ID || null,
   };
 };

package/templates/frontend-sveltekit/src/routes/+layout.svelte

@@ -13,6 +13,9 @@
 
 <svelte:head>
   <link rel="alternate" type="application/rss+xml" title={data.settings?.site_name ?? "RSS"} href="/rss.xml" />
+  {#if data.analytics}
+    <script defer src="/_a/script.js" data-website-id={data.analytics}></script>
+  {/if}
 </svelte:head>
 
 <Seo