{config, ...}: let
  domain = "monitoring.everest.tailscale";
in {
  users.users.caddy.extraGroups = ["grafana"];
  services = {
    grafana = {
      enable = true;
      settings = {
        server = {
          protocol = "socket";
        };
      };
    };

    headscale.settings.dns.extra_records = [
      {
        name = domain;
        type = "A";
        value = "100.100.0.1";
      }
    ];
    caddy.virtualHosts.grafana = {
      hostName = domain;
      extraConfig = ''
        import tailscale
        reverse_proxy unix/${config.services.grafana.settings.server.socket}
      '';
    };
  };
}