{ pkgs, ... }:
{
  homelab.monitoring.scrapeTargets = [{
    job_name = "postgres";
    port = 9187;
  }];

  services.prometheus.exporters.postgres = {
    enable = true;
    runAsLocalSuperUser = true; # Use peer auth as postgres user
  };

  services.postgresql = {
    enable = true;
    enableJIT = true;
    enableTCPIP = true;
    extensions = ps: with ps; [ pgvector ];
    authentication = ''
      # Allow access to everything from gunter
      host    all             all             10.69.30.105/32         scram-sha-256
    '';
  };
}