{ config, ... }:
let
  inherit (config.serverConfig) ports vhosts;
  inherit (config.networking) domain;
in
{
  age.secrets.grafana_admin_pass = {
    file = ../secrets/grafana_admin_pass.age;
    owner = "grafana";
    group = "grafana";
    mode = "0600";
  };

  services.grafana = {
    enable = true;
    settings = {
      security = {
        admin_user = "admin";
        admin_email = "admin@${domain}";
        admin_password = "$__file{${config.age.secrets.grafana_admin_pass.path}}";
      };
      server = {
        domain = vhosts.grafana_host.host;
        root_url = "https://${vhosts.grafana_host.host}";
        http_port = vhosts.grafana_host.port;
      };
    };
  };
}