diff --git a/machines/gustave/default.nix b/machines/gustave/default.nix
index 3c42fbd..692be2b 100644
--- a/machines/gustave/default.nix
+++ b/machines/gustave/default.nix
@@ -13,6 +13,7 @@
     ./borg.nix
     ./pages.nix
     ./readeck.nix
+    ./plausible.nix
   ];
 
   machine.meta = {
diff --git a/machines/gustave/plausible.nix b/machines/gustave/plausible.nix
new file mode 100644
index 0000000..9115421
--- /dev/null
+++ b/machines/gustave/plausible.nix
@@ -0,0 +1,32 @@
+{ config, ... }:
+
+{
+  services.plausible = {
+    enable = true;
+    adminUser = {
+      activate = true;
+      email = "analytics@luj.fr";
+      passwordFile = config.age.secrets.plausible-admin-password.path;
+    };
+    server = {
+      baseUrl = "https://probable.luj.fr";
+      port = 8455;
+      secretKeybaseFile = config.age.secrets.plausible-secret-key-base.path;
+    };
+  };
+
+  services.nginx.virtualHosts = {
+    "probable.luj.fr" = {
+      forceSSL = true;
+      enableACME = true;
+      locations."/" = {
+        proxyPass = "http://localhost:${toString config.services.plausible.server.port}";
+      };
+    };
+  };
+
+  age.secrets = {
+    plausible-admin-password.file = ../../secrets/plausible-password.age;
+    plausible-secret-key-base.file = ../../secrets/plausible-keybase-secret.age;
+  };
+}