{ pkgs, ... }:
{
  services.prometheus.exporters.blackbox = {
    enable = true;
    configFile = pkgs.writeText "blackbox.yml" ''
      modules:
        https_cert:
          prober: http
          timeout: 10s
          http:
            fail_if_not_ssl: true
            preferred_ip_protocol: ip4
            valid_status_codes:
              - 200
              - 204
              - 301
              - 302
              - 303
              - 307
              - 308
              - 400
              - 401
              - 403
              - 404
              - 405
              - 500
              - 502
              - 503
    '';
  };
}