add rybbit monitoring to ingresses [ci skip]

modules/kubernetes/immich/frame.tf

@@ -112,4 +112,5 @@ module "ingress" {
   name            = "highlights-immich"
   tls_secret_name = var.tls_secret_name
   service_name    = "immich-frame"
+  rybbit_site_id  = "602167601c6b"
 }

modules/kubernetes/immich/main.tf

@@ -326,6 +326,24 @@ resource "kubernetes_ingress_v1" "ingress" {
         directio 4m;
         sendfile off;
         aio on;
+
+        limit_req_status 429;
+        limit_conn_status 429;
+
+        # Rybbit Analytics
+        # Only modify HTML
+        sub_filter_types text/html;
+        sub_filter_once off;
+
+        # Disable compression so sub_filter works
+        proxy_set_header Accept-Encoding "";
+
+        # Inject analytics before </head>
+        sub_filter '</head>' '
+        <script src="https://rybbit.viktorbarzin.me/api/script.js"
+              data-site-id="35eedb7a3d2b"
+              defer></script> 
+        </head>';
       EOF
 
       "nginx.ingress.kubernetes.io/enable-modsecurity" : "false" # this is important!!!; setting it to true enables buffering and can lead to ooms when ploading big files