HackerReposA FIELD GUIDE TO OPEN SOURCE
ProSponsor the shelf♧ 0
← Back to top all-time
umami-software
umami
TypeScript2020–2026
umami-software / umami

umami

Umami is a privacy-first web and product analytics platform. Traffic, campaigns, behavior, conversions, and revenue in one place. No cookies, no surveillance, self-hosted or in the cloud.

Web DevelopmentData & DatabasesSecurity & PrivacySelf-hostedScience & EngineeringDevOps & Cloud
Explore on GitHubRead Hacker News discussions
24Distinct people
28Mentions
0Explicit recommenders
40.1KGitHub stars
REPOSITORY AT A GLANCE

What to know before exploring

What it is

Umami is a privacy-first web and product analytics platform. Traffic, campaigns, behavior, conversions, and revenue in one place. No cookies, no surveillance, self-hosted or in the cloud.

GitHub

Where it is used

No documented product use was verified in the last source check.

What people are saying

No recommendation phrase was found in the indexed comments.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

No other repository is repeatedly linked in the same discussions.

This week on Hacker News

Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 3:03:16 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by year28 dated mentions

Observed mentions: 2020-08-18 15:16:08 UTC to 2026-10-08 23:27:36 UTC.

02468102020-01-01 00:00:00 UTC to 2021-01-01 00:00:00 UTC (exclusive): 9 mentions; 3 submissions, 6 comments20202021-01-01 00:00:00 UTC to 2022-01-01 00:00:00 UTC (exclusive): 3 mentions; 1 submissions, 2 comments2022-01-01 00:00:00 UTC to 2023-01-01 00:00:00 UTC (exclusive): 3 mentions; 0 submissions, 3 comments2023-01-01 00:00:00 UTC to 2024-01-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments20232024-01-01 00:00:00 UTC to 2025-01-01 00:00:00 UTC (exclusive): 2 mentions; 2 submissions, 0 comments2025-01-01 00:00:00 UTC to 2026-01-01 00:00:00 UTC (exclusive): 7 mentions; 3 submissions, 4 comments2026-01-01 00:00:00 UTC to 2027-01-01 00:00:00 UTC (exclusive): 3 mentions; 1 submissions, 2 comments. Incomplete calendar period.2026*

* An incomplete calendar period is marked with an outlined bar. Its count is not directly comparable with a full period.

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges
UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
PeriodStart (UTC)End (exclusive, UTC)MentionsSubmissionsComments
20202020-01-01 00:00:00 UTC2021-01-01 00:00:00 UTC936
20212021-01-01 00:00:00 UTC2022-01-01 00:00:00 UTC312
20222022-01-01 00:00:00 UTC2023-01-01 00:00:00 UTC303
20232023-01-01 00:00:00 UTC2024-01-01 00:00:00 UTC101
20242024-01-01 00:00:00 UTC2025-01-01 00:00:00 UTC220
20252025-01-01 00:00:00 UTC2026-01-01 00:00:00 UTC734
2026 (partial)2026-01-01 00:00:00 UTC2027-01-01 00:00:00 UTC312

What Hacker News says

28 sources
justsomehuman·Oct 8, 2026
Not quite as cheap as $5 but I've been running at Hetzner CAX31 for a couple of years now and I run the following services / apps. Actual Budget - https://github.com/actualbudget/actual AirTrail - https://github.com/johanohly/AirTrail Beszel - https://github.com/henrygd/beszel Coder - https://github.com/coder/coder Crowdsec - https://github.com/crowdsecurity/crowdsec Dawarich - https://github.com/Freika/dawarich Dozzle - https://github.com/amir20/dozzle Forgejo - https://codeberg.org/forgejo/forgejo Forgejo runner - https://code.forgejo.org/forgejo/runner Grafana - https://github.com/grafana/grafana Immich - https://github.com/immich-app/immich Karakeeo - https://github.com/karakeep-app/karakeep KitchenOwl - https://github.com/tombursch/kitchen owl Loki - https://github.com/grafana/loki Matrix - Tuwunel (https://github.com/matrix-construc
Read the rest
t/tuwunel) and cinny (https://github.com/cinnyapp/cinny) memos - https://github.com/usememos/memos Nourish - https://github.com/norish-recipes/norish ntfy - https://github.com/binwiederhier/ntfy oauth2-proxy - https://github.com/oauth2-proxy/oauth2-proxy Outline - https://github.com/outline/outline Paperless-ngx - https://github.com/paperless-ngx/paperless-ngx Pingvin Share- https://github.com/stonith404/pingvin-share Pixelfed - https://github.com/pixelfed/pixelfed Pocket ID - https://github.com/pocket-id/pocket-id Reitti - https://github.com/dedicatedcode/reitti Signal CLI rest API - https://github.com/bbernhard/signal-cli-rest-api Slink - https://github.com/andrii-kryvoviaz/slink Ghost - personal music blog Traefik - https://github.com/traefik/traefik Umami - https://github.com/umami-software/umami Uptime Kuma - https://github.com/louislam/uptime-kuma Vikunja - https://github.com/go-vikunja/vikunja wg-easy - https://github.com/wg-easy/wg-easy ZeroByte - https://github.com/nicotsx/zerobyte I used to run a couple of Hugo blogs but I've ended up moving them to bunny.
In Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7?
hnarn·Dec 18, 2025
Interesting that this got posted today, I also have a server on Hetzner (although I don't think it's relevant) and noticed yesterday that a Monero miner had been installed. Luckily for me, the software I had installed[1] was in an LXC container running under Incus, so the intrusion never escaped the application environment, and the container itself was configured with low CPU priority so I didn't even notice it until I tried to visit the page and it didn't load. I looked around a bit and it seemed like an SSH key had been added under the root user, and there were some kind of remote management agents installed. This container was running Alpine so it was pretty easy to identify what processes didn't belong from a simple ps output of the remaining processes after shutting down the actual web application. In the end, I just scrapped the con
Read the rest
tainer, but I did save it in case I ever feel like digging around (probably not). In the end I did learn some useful things: - It's a good idea to assume your system will get taken over, so ensure it's isolated and suitably resource constrained (looking at you, pay-as-you-go cloud users). - Make sure you have snapshots and backups, in my case I do daily ZFS snapshots in Incus which makes rolling back to before the intrusion a breeze. - While ideally anything compromised should be scrapped, rolling back, locking it down and upgrading might be OK depending on the threat. Regarding the miner itself: - from what I could see in its configuration it hadn't actually been correctly configured, so it's possible they do some kind of benchmark and just leave the system silently compromised if it's not "worth it", they still have a way in to use it for other purposes. - no attempt had been made at file system obfuscation, which is probably the only reason I really discovered it. There were literally folders in /root lying around with the word "monero" in them, this could have been easily hidden. - if they hadn't installed a miner and just silently compromised the system, leaving whatever running on it alone (or even doing a better job at CPU priority), I probably never would have noticed this. [1]: https://github.com/umami-software/umami
In I got hacked: My Hetzner server started mining Monero
ddxv·Nov 10, 2025
I've seen an interesting politically motivated one. It didn't appear to be a bot, just a user from China: https://github.com/umami-software/umami/pull/3678 The goal is "Taiwan" -> "Taiwan, Province of China" but via the premise of updating to UN ISO standards, which of course does not allow Taiwan. The comment after was interesting with how reasonable it sounds: "This is the technical specification of the ISO 3166-1 international standard, just like we follow other ISO standards. As an open-source project, it follows international technical standards to ensure data interoperability and professionalism." The politics of the intent of the PR was masked. Luckily, it was still a bit hamfisted. The PR incorrectly changed many things and the user stated their political intention in the original PR (the above is from a later comment).
In LLM policy?
ksec·Apr 23, 2025
Lots of Google analytics competitors appeared between 2017 and 2023 due to privacy reasons. And a lot of them started with normal Postgres or MySQL then switched to Clickhouse or simply started with Clickhouse knowing they could scale far better. At least in terms of capability and reputation it was already well known by 2021 and certainly not legacy or bulky. At least on HN clickhouse is very often submitted and reached front page. Compared to MySQL when I tried multiple times no one is interested. Edit: On another note Umami is finally supporting Clickhouse! [1], Not sure how they implementing it because it still requires Postgres. But it should hopefully be a lot more scalable. [1] https://github.com/umami-software/umami/issues/3227
In ClickHouse gets lazier and faster: Introducing lazy materialization
Benjamin_Dobell·Feb 17, 2025
I just shut down a companion app for a game I'd reverse engineered — developed over the last 2-3 months. The companion app, among other things: - Generated insights — https://bizarre.gg/meta - Show detailed interactive gameplay logs (from "Umami" analytic events) — https://bizarre.gg/runs/00493ccf-5b96-523c-beb4-06e8154cc158 Thread w/ development overview: https://news.ycombinator.com/item?id=43080066 I used Umami and mention it in the video. Admittedly, it was a mistake for my use case. I had to heavily modify Umami due to lack of features and performance issues. There are a also lot of bugs in the project which are immediately revealed simply by enabling TypeScript strict flags, and some more linting rules. Granted, I was not really using Umami exactly as intended. I do think it's great this project exists, and whilst I had to heavily m
Read the rest
odify it for my use case, I did at least help the upstream project diagnose one issue: https://github.com/umami-software/umami/pull/2946#issuecomme...
In Umami is a simple, fast, privacy-focused alternative to Google Analytics

Showing the 15 most recent of 28 sources. Enable JavaScript to search and browse every indexed mention.

MAKE YOURSELF AT HOME

A few shortcuts

/
Search the collection
?
Open this guide
Esc
Close dialogs and navigation

Your saved repositories and interests stay in this browser.