# SPDX-FileCopyrightText: 2020-2024 Simon Bruder <simon@sbruder.de>
#
# SPDX-License-Identifier: AGPL-3.0-or-later

{ config, lib, ... }:

lib.mkIf (config.sbruder.wireguard.home.enable && !config.sbruder.machine.isVm) {
  services.prometheus.exporters.smartctl = {
    enable = true;
    listenAddress = config.sbruder.wireguard.home.address;
    # devices need to be specified for all systems that use NVMe
    # https://github.com/NixOS/nixpkgs/issues/210041
  };

  systemd.services.prometheus-smartctl-exporter = {
    after = [ "wireguard-wg-home.service" ];
    serviceConfig = {
      IPAddressAllow = lib.singleton config.sbruder.wireguard.home.subnet;
      IPAddressDeny = "any";
    };
  };
}