{ self, config, ... }:
let secrets = config.age.secrets;
in
{
  # this unit is broken and useless. I don't know how to not install
  # it, so let's mask it.
  systemd.services.mdmonitor.enable = false;

  my.services = {
    monitoring = {
      prometheus = {
        enable = true;
        listenAddress = "192.168.6.40";
      };
      loki = {
        enable = true;
        listenAddress = "192.168.6.40";
      };
      grafana = {
        enable = true;
        vhostName = "dash.${config.homelab.domain}";
      };
      promtail.enable = true;
      node-exporter.enable = true;
    };
    backup = {
      enable = true;
      repository = "/data/slow/backups/hosts/tahoe";
      timerConfig = { OnCalendar = "00:15"; };
      passwordFile = secrets."restic/repo-systems".path;
      paths =
        [
          "/data/fast/music"
          "/data/fast/photos"
          "/home/fcuny/documents"
          "/home/fcuny/workspace"
          "/home/fcuny/media"
        ];
      exclude = [ ];
    };
    sendsms.enable = true;
  };
}