{
  config,
  lib,
  self,
  ...
}: {
  pub-solar.monitoring-server.enable = true;

  # wireguard exporter
  networking.firewall.allowedTCPPorts = [9585];
  services.prometheus = {
    exporters.wireguard = {
      enable = true;
      withRemoteIp = true;
    };
    scrapeConfigs = [
      {
        job_name = "chonk-wireguard";
        static_configs = [
          {
            targets = ["10.0.1.6:9586"];
          }
        ];
      }
    ];
  };
}