{ config, ... }:

let
  mariko_ipv4 = "185.163.117.133/32";
  mariko_ipv6 = "2a03:4000:3b:28b::/64";
  cccb_mon_ipv4 = "195.160.173.14/32";
  cccb_mon_ipv6 = "2001:678:760:cccb::14/128";
in
{
  services.prometheus.exporters.node = {
    enable = true;
    openFirewall = true;
    firewallRules = ''
      ip6 saddr ${cccb_mon_ipv6} tcp dport ${toString config.services.prometheus.exporters.node.port} accept comment "Allow prometheus on monitoring.berlin.ccc.de"
      ip6 saddr ${mariko_ipv6} tcp dport ${toString config.services.prometheus.exporters.node.port} accept comment "Allow uptime-kuma on mon.xengi.de"
      ip saddr ${cccb_mon_ipv4} tcp dport ${toString config.services.prometheus.exporters.node.port} accept comment "Allow prometheus on monitoring.berlin.ccc.de"
      ip saddr ${mariko_ipv4} tcp dport ${toString config.services.prometheus.exporters.node.port} accept comment "Allow uptime-kuma on mon.xengi.de"
    '';
    enabledCollectors = [ ];
    disabledCollectors = [ ];
  };
}