Index: src/config/database.js =================================================================== --- src/config/database.js (revision 3f893bfab81545e5be5601a5365322bab12d21a7) +++ src/config/database.js (revision d5495493691e5642bb7df668ba1fd87506fdd369) @@ -71,4 +71,8 @@ ensureColumn('posts', 'type', "TEXT DEFAULT 'post'"); // post | foto | video | audio + // Statistieken (premium-module) — kale tellers, cookievrij. + ensureColumn('posts', 'view_count', 'INTEGER DEFAULT 0'); // weergaven per post + ensureColumn('audio_tracks', 'play_count', 'INTEGER DEFAULT 0'); // plays per track + // Playlists (v9 feature) — first-class entity. CREATE IF NOT EXISTS is // idempotent so it's safe to run on every boot regardless of DB age. @@ -108,4 +112,25 @@ `); db.prepare("INSERT OR IGNORE INTO app_settings (key, value) VALUES ('tenancy', 'solo')").run(); + + // ── Statistieken (premium) — cookievrij ───────────────────── + // stat_daily: per dag per site het aantal pageviews (kale teller). + // stat_visitor_day: per dag per site een rij per UNIEKE bezoeker-hash + // (sha256 van IP+UA+dag-salt; de salt roteert dagelijks en wordt nooit + // bewaard → geen persistente identifier, geen cookie, geen toestemming nodig). + db.exec(` + CREATE TABLE IF NOT EXISTS stat_daily ( + site_id TEXT NOT NULL, + day TEXT NOT NULL, + pageviews INTEGER NOT NULL DEFAULT 0, + PRIMARY KEY (site_id, day) + ); + CREATE TABLE IF NOT EXISTS stat_visitor_day ( + site_id TEXT NOT NULL, + day TEXT NOT NULL, + visitor_hash TEXT NOT NULL, + PRIMARY KEY (site_id, day, visitor_hash) + ); + CREATE INDEX IF NOT EXISTS idx_stat_visitor_day ON stat_visitor_day(site_id, day); + `); // ── Cirkels (federatie) ───────────────────────────────────── Index: src/routes/admin-stats.js =================================================================== --- src/routes/admin-stats.js (revision d5495493691e5642bb7df668ba1fd87506fdd369) +++ src/routes/admin-stats.js (revision d5495493691e5642bb7df668ba1fd87506fdd369) @@ -0,0 +1,30 @@ +/** + * Admin: Statistieken (premium-module, god-only). + * + * GET /admin/stats -> cookievrije statistieken: bezoekers/weergaven per dag, + * plays, en de populairste posts/tracks. + * + * Premium-gated via premiumUnlocked() (premium-laag uit = gewoon beschikbaar; + * aan = Patreon vereist). Tracking zit in StatsService (geen cookies). + */ + +import express from 'express'; +import { renderPage } from '../middleware/render.js'; +import { requireGod } from '../middleware/auth.js'; +import { premiumUnlocked } from '../services/PatreonService.js'; +import { getStats } from '../services/StatsService.js'; + +const router = express.Router(); + +router.get('/', requireGod, (req, res) => { + if (!premiumUnlocked()) { + return res.status(403).send('Statistieken is een premium-functie — koppel Patreon in Beheer → Instellingen.'); + } + renderPage(req, res, 'pages/admin-stats', { + pageTitle: 'Statistieken', + bodyClass: 'on-admin', + stats: getStats(14), + }); +}); + +export default router; Index: src/routes/audio.js =================================================================== --- src/routes/audio.js (revision 3f893bfab81545e5be5601a5365322bab12d21a7) +++ src/routes/audio.js (revision d5495493691e5642bb7df668ba1fd87506fdd369) @@ -28,4 +28,6 @@ import path from 'path'; import { fileURLToPath } from 'url'; +import db from '../config/database.js'; +import { recordPlay } from '../services/StatsService.js'; const __dirname = path.dirname(fileURLToPath(import.meta.url)); @@ -90,4 +92,17 @@ const range = req.headers.range; + // Statistieken: tel één play bij de initiële player-fetch (niet bij scrub/ + // range-continuaties; replays binnen 24u komen uit de browsercache → geen + // dubbeltelling). Best-effort, mag nooit de stream breken. + if (req.get('X-Audio-Player') === '1' && (!range || /^bytes=0-/.test(range))) { + try { + const tr = db.prepare(` + SELECT t.id FROM audio_tracks t JOIN media m ON t.media_id = m.id + WHERE m.storage_path = ? OR m.storage_path LIKE ? LIMIT 1 + `).get(filename, '%' + filename); + if (tr) recordPlay(tr.id); + } catch {} + } + // Common headers res.setHeader('Content-Type', mime); Index: src/routes/posts.js =================================================================== --- src/routes/posts.js (revision 3f893bfab81545e5be5601a5365322bab12d21a7) +++ src/routes/posts.js (revision d5495493691e5642bb7df668ba1fd87506fdd369) @@ -8,4 +8,5 @@ import { requireAuth } from '../middleware/auth.js'; import { renderPage } from '../middleware/render.js'; +import { recordPageview, recordPostView } from '../services/StatsService.js'; import PermissionsService from '../services/PermissionsService.js'; import MarkdownService from '../services/MarkdownService.js'; @@ -113,4 +114,6 @@ `).all(site.id); + recordPageview(site.id, req); + renderPage(req, res, 'pages/home', { pinnedPosts, @@ -391,4 +394,7 @@ if (!canEdit) return res.status(403).send('Not published'); } + + // Statistieken: tel de weergave (skipt beheerders + niet-gepubliceerd-eigen-preview). + if (post.status === 'published') recordPostView(post, req); // Render content. Content is now user-authored HTML (already sanitized on Index: src/server.js =================================================================== --- src/server.js (revision 3f893bfab81545e5be5601a5365322bab12d21a7) +++ src/server.js (revision d5495493691e5642bb7df668ba1fd87506fdd369) @@ -49,4 +49,5 @@ import adminUpdatesRoutes from './routes/admin-updates.js'; import adminPatreonRoutes from './routes/admin-patreon.js'; +import adminStatsRoutes from './routes/admin-stats.js'; import circleRoutes from './routes/circle.js'; @@ -241,4 +242,5 @@ app.use('/admin/updates', adminUpdatesRoutes); app.use('/admin/patreon', adminPatreonRoutes); +app.use('/admin/stats', adminStatsRoutes); app.use('/admin', adminRoutes); app.use('/prutter', prutterRoutes); Index: src/services/StatsService.js =================================================================== --- src/services/StatsService.js (revision d5495493691e5642bb7df668ba1fd87506fdd369) +++ src/services/StatsService.js (revision d5495493691e5642bb7df668ba1fd87506fdd369) @@ -0,0 +1,116 @@ +// StatsService — cookievrije statistieken (premium-module). +// +// Tellers: posts.view_count, audio_tracks.play_count, en per dag/site het aantal +// pageviews (stat_daily) + unieke bezoekers (stat_visitor_day). +// +// Unieke bezoekers ZONDER cookie: een sha256 van IP+UA+dag-salt. De salt roteert +// elke dag en wordt nooit langer bewaard → je kunt iemand niet over dagen heen +// volgen, het ruwe IP wordt niet opgeslagen. Geen persistente identifier, geen +// toestemmingsbanner nodig (Plausible/Fathom-aanpak). + +import crypto from 'node:crypto'; +import db from '../config/database.js'; +import { getSetting, setSetting } from './SettingsService.js'; + +function today() { + return new Date().toISOString().slice(0, 10); // YYYY-MM-DD (UTC) +} + +// Dagelijks roterende salt (gecachet in proces, persistent in app_settings zodat +// een herstart binnen dezelfde dag dezelfde salt houdt). +let _salt = null, _saltDay = null; +function dailySalt() { + const d = today(); + if (_salt && _saltDay === d) return _salt; + let stored = getSetting('stat_salt', null); + if (!stored || getSetting('stat_salt_day', null) !== d) { + stored = crypto.randomBytes(16).toString('hex'); + setSetting('stat_salt', stored); + setSetting('stat_salt_day', d); + } + _salt = stored; _saltDay = d; + return stored; +} + +function visitorHash(req) { + const ip = (req && (req.ip || (req.socket && req.socket.remoteAddress))) || ''; + const ua = (req && req.headers && req.headers['user-agent']) || ''; + return crypto.createHash('sha256').update(dailySalt() + '|' + ip + '|' + ua).digest('hex').slice(0, 32); +} + +// De eigenaar/beheerder niet meetellen — anders inflate je je eigen cijfers. +function isOperator(req) { + const u = req && req.session && req.session.user; + return !!(u && (u.role === 'god' || u.role === 'admin')); +} + +// Lazy prepares — tabellen bestaan pas ná initializeDatabase(); dit module wordt +// geïmporteerd vóór die call. +let _s = null; +function stmts() { + if (_s) return _s; + _s = { + bumpDaily: db.prepare(` + INSERT INTO stat_daily (site_id, day, pageviews) VALUES (?, ?, 1) + ON CONFLICT(site_id, day) DO UPDATE SET pageviews = pageviews + 1 + `), + addVisitor: db.prepare('INSERT OR IGNORE INTO stat_visitor_day (site_id, day, visitor_hash) VALUES (?, ?, ?)'), + bumpPost: db.prepare('UPDATE posts SET view_count = COALESCE(view_count, 0) + 1 WHERE id = ?'), + bumpTrack: db.prepare('UPDATE audio_tracks SET play_count = COALESCE(play_count, 0) + 1 WHERE id = ?'), + }; + return _s; +} + +export function recordPageview(siteId, req) { + if (!siteId || isOperator(req)) return; + try { + const d = today(); + stmts().bumpDaily.run(siteId, d); + stmts().addVisitor.run(siteId, d, visitorHash(req)); + } catch { /* statistieken mogen nooit een request breken */ } +} + +export function recordPostView(post, req) { + if (!post || !post.id || isOperator(req)) return; + try { + stmts().bumpPost.run(post.id); + recordPageview(post.site_id, req); + } catch {} +} + +export function recordPlay(trackId) { + if (!trackId) return; + try { stmts().bumpTrack.run(trackId); } catch {} +} + +// Instance-brede statistieken (solo = de site, hub = alle sites samen). +export function getStats(days = 14) { + const pvMap = Object.fromEntries( + db.prepare('SELECT day, SUM(pageviews) AS pv FROM stat_daily GROUP BY day').all().map((r) => [r.day, r.pv]), + ); + const visMap = Object.fromEntries( + db.prepare('SELECT day, COUNT(*) AS v FROM stat_visitor_day GROUP BY day').all().map((r) => [r.day, r.v]), + ); + const series = []; + for (let i = days - 1; i >= 0; i--) { + const dt = new Date(); + dt.setUTCDate(dt.getUTCDate() - i); + const d = dt.toISOString().slice(0, 10); + series.push({ day: d, pageviews: pvMap[d] || 0, visitors: visMap[d] || 0 }); + } + const totals = { + pageviews: series.reduce((s, r) => s + r.pageviews, 0), // laatste N dagen + visitors: series.reduce((s, r) => s + r.visitors, 0), // som van dag-uniques (cookieless kan niet anders) + plays: db.prepare('SELECT COALESCE(SUM(play_count), 0) AS n FROM audio_tracks').get().n, + postViews: db.prepare('SELECT COALESCE(SUM(view_count), 0) AS n FROM posts').get().n, + }; + const topPosts = db.prepare(` + SELECT title, slug, COALESCE(view_count, 0) AS views FROM posts + WHERE status = 'published' ORDER BY view_count DESC, published_at DESC LIMIT 5 + `).all(); + const topTracks = db.prepare(` + SELECT title, COALESCE(play_count, 0) AS plays FROM audio_tracks + ORDER BY play_count DESC LIMIT 5 + `).all(); + return { totals, series, topPosts, topTracks, days }; +} Index: src/views/pages/admin-stats.ejs =================================================================== --- src/views/pages/admin-stats.ejs (revision d5495493691e5642bb7df668ba1fd87506fdd369) +++ src/views/pages/admin-stats.ejs (revision d5495493691e5642bb7df668ba1fd87506fdd369) @@ -0,0 +1,103 @@ +
+

← Beheer

+

Statistieken

+

Cookievrij gemeten — geen tracking-cookies, geen toestemmingsbanner. + Unieke bezoekers via een dagelijks roterende, anonieme hash (IP/browser worden niet bewaard). + Je eigen beheerder-bezoeken tellen niet mee.

+ + <% var s = stats; var _max = Math.max(1, ...s.series.map(function(d){ return d.pageviews; })); %> + +
+
<%= s.totals.visitors %>
Bezoekers (14d)
+
<%= s.totals.pageviews %>
Weergaven (14d)
+
<%= s.totals.plays %>
Plays (totaal)
+
<%= s.totals.postViews %>
Post-weergaven (totaal)
+
+ +
+
+

Laatste 14 dagen

+
+ Bezoekers + Weergaven +
+
+
+ <% s.series.forEach(function(d){ + var pvPct = Math.round(d.pageviews / _max * 100); + var visPct = Math.round(d.visitors / _max * 100); + %> +
+
+ + +
+ <%= d.day.slice(8) %> +
+ <% }); %> +
+
+ +
+
+

Populairste posts

+ <% if (!s.topPosts.length || s.topPosts[0].views === 0) { %> +

Nog geen weergaven.

+ <% } else { %> +
    + <% s.topPosts.forEach(function(p){ %> +
  1. <%= p.title %><%= p.views %>
    2. + <% }); %> +
+ <% } %> +
+
+

Meest geluisterd

+ <% if (!s.topTracks.length || s.topTracks[0].plays === 0) { %> +

Nog geen plays.

+ <% } else { %> +
    + <% s.topTracks.forEach(function(t){ %> +
  1. <%= t.title %><%= t.plays %>
    2. + <% }); %> +
+ <% } %> +
+
+
+ + Index: src/views/pages/admin.ejs =================================================================== --- src/views/pages/admin.ejs (revision 3f893bfab81545e5be5601a5365322bab12d21a7) +++ src/views/pages/admin.ejs (revision d5495493691e5642bb7df668ba1fd87506fdd369) @@ -29,4 +29,7 @@ ⚙️ Instellingen <% } %> + <% if (typeof premiumUnlocked === 'undefined' || premiumUnlocked) { %> + 📊 Statistieken + <% } %> 🔄 Updates