{ config, pkgs, ... }: {
  # Enable Prometheus exporters
  services.prometheus = {
    exporters = {
      node = {
        enable = true;
        enabledCollectors = [ "systemd" ];
        port = 9002;
      };
      nginx = {
        enable = true;
        port = 9003;
        openFirewall = true;
      };
    };
  };

  networking.firewall.allowedTCPPorts =
    map (name: config.services.prometheus.exporters.${name}.port) [
      "node"
      "nginx"
    ];
}