{
  services.grafana = {
    enable = true;
    openFirewall = true;
    settings = {
      security.secret_key = "$__file{/run/secrets/grafana/secret_key};";
      server = {
        http_addr = "0.0.0.0";
        http_port = 3000;
        enable_gzip = true;
        domain = "192.168.132.149";
      };

      analytics.reporting_enabled = false;
    };
  };

  services.prometheus = {
    enable = true;
    globalConfig.scrape_interval = "10s";
    scrapeConfigs = [
      {
        job_name = "navidrome";
        scheme = "http";
        metrics_path = "/metrics";
        static_configs = [
          {
            targets = [ "localhost:4533" ];
          }
        ];
      }
    ];
  };
}