{ config, ... }:
{
  vault.secrets.pve-exporter = {
    secretPath = "hosts/monitoring01/pve-exporter";
    extractKey = "config";
    outputDir = "/run/secrets/pve_exporter";
    mode = "0444";
    services = [ "prometheus-pve-exporter" ];
  };

  services.prometheus.exporters.pve = {
    enable = true;
    configFile = "/run/secrets/pve_exporter";
    collectors = {
      cluster = false;
      replication = false;
    };
  };
}