{
  config,
  pkgs,
  lib,
  ...
}: let
  cfg = config.vhack.monitoring.scrutiny;
in {
  options.vhack.monitoring.scrutiny = {
    enable = lib.mkEnableOption "scrutiny service";
  };

  # We don't currently _care_ about the health of the hardware, because hetzner does
  # this for us (nor can we care, because it's not exposed in the VPS)
  config = lib.mkIf false {
    vhack.monitoring = {
      prometheus.sources = [
        {
          name = "scrutiny";
          extra.metrics_path = "/api/metrics";
          target = "127.0.0.1:${toString config.services.scrutiny.settings.web.listen.port}";
        }
        {
          name = "smartctl";
          target = "127.0.0.1:${toString config.services.prometheus.exporters.smartctl.port}";
        }
      ];
      grafana.dashboards = [
        ../dashboards/Health.json
      ];
    };

    users = {
      groups = {
        smartctl-exporter-access.gid = config.vhack.constants.ids.gids.smartctl-exporter-access;
      };
      users = {
        smartctl-exporter-access = {
          isSystemUser = true;
          group = "smartctl-exporter-access";
          uid = config.vhack.constants.ids.uids.smartctl-exporter-access;
        };
      };
    };

    services = {
      scrutiny = {
        enable = true;

        openFirewall = false;

        # This src includes Prometheus metrics exporter.
        package = pkgs.scrutiny.overrideAttrs {
          src = pkgs.fetchFromGitHub {
            owner = "ibizaman";
            repo = "scrutiny";
            rev = "74faf06f77df83f29e7e1806cd88b2fafc0bbb82";
            hash = "sha256-r0AVWL+E046xHxitwMPfRNTOpjuOk+W6tB41YgmLTPg=";
          };

          vendorHash = "sha256-kAlnlWnBMFCdgdak5L5hRquRtyLi5MTmDa/kxwqPs4E=";
        };

        settings = {
          web = {
            metrics.enabled = true; # Enables Prometheus exporter
            listenHost = "127.0.0.1";
          };
        };

        collector = {
          enable = true;
        };
      };
      prometheus = {
        exporters.smartctl = {
          enable = true;
          port = 9115;
          listenAddress = "127.0.0.1";
        };
      };
    };

    # nixpkgs.overlays = [
    #   (final: prev: {
    #     prometheus-systemd-exporter = prev.prometheus-systemd-exporter.overrideAttrs {
    #       src = final.fetchFromGitHub {
    #         owner = "ibizaman";
    #         repo = prev.prometheus-systemd-exporter.pname;
    #         # rev = "v${prev.prometheus-systemd-exporter.version}";
    #         rev = "next_timer";
    #         sha256 = "sha256-jzkh/616tsJbNxFtZ0xbdBQc16TMIYr9QOkPaeQw8xA=";
    #       };
    #
    #       vendorHash = "sha256-4hsQ1417jLNOAqGkfCkzrmEtYR4YLLW2j0CiJtPg6GI=";
    #     };
    #   })
    # ];
  };
}