{
  pkgs,
  config,
  lib,
  ...
}:
{
  services.prometheus.exporters.pve = {
    enable = true;
    configFile = "/etc/prometheus-pve-exporter/pve.yml";
  };
  users.users.pve-exporter = {
    isSystemUser = true;
    group = "pve-exporter";
  };
  users.groups.pve-exporter = { };

  systemd.services."prometheus-pve-exporter".serviceConfig = {
    DynamicUser = lib.mkForce false;
  };

  sops.secrets."pve.yaml" = {
    key = "";
    path = "/etc/prometheus-pve-exporter/pve.yml";
    owner = "pve-exporter";
    group = "pve-exporter";
    mode = "0440";
    sopsFile = ../../secrets/pve.yaml;
  };

  environment.etc."alloy/pve.alloy" = {
    text = ''
      prometheus.scrape "noc_pve" {
        targets = [{
          __address__ = "127.0.0.1:9221",
          __scheme__ = "http",
        }]

        metrics_path = "/pve"
        params = {
          "target"  = ["94.45.255.1"],
          "module"  = ["default"],
        }

        scrape_interval = "10s"
        forward_to = [prometheus.relabel.pve.receiver]
      }

      prometheus.relabel "pve" {
        forward_to = [prometheus.remote_write.default.receiver]
      }
    '';
  };
}