{
  glucose.modules = [
    ({
      config,
      lib,
      ...
    }: {
      services.grafana = {
        enable = true;
        dataDir = "/var/services/grafana";
        # declarativePlugins = null;

        settings = {
          analytics = {
            check_for_plugin_updates = false;
            check_for_updates = false;
            feedback_links_enabled = false;
            reporting_enabled = false;
          };

          database = {
            host = "10.24.1.9:5432";
            type = "postgres";
            name = "grafanadb";
            user = "grafana";
            password = builtins.concatStringsSep "" ["$__file" "{${config.sops.secrets.grafana_db_pass.path}}"];
          };
          # paths = {};
          security = {
            admin_user = builtins.concatStringsSep "" ["$__file" "{${config.sops.secrets.grafana_admin_account.path}}"];
            admin_password = builtins.concatStringsSep "" ["$__file" "{${config.sops.secrets.grafana_admin_pass.path}}"];
            secret_key = builtins.concatStringsSep "" ["$__file" "{${config.sops.secrets.grafana_secret_key.path}}"];

            disable_gravatar = true;
            cookie_secure = true;
          };
          server = {
            root_url = "https://grf.collective-conciousness.monster";
            enable_gzip = true;
            http_addr = "0.0.0.0";
            http_port = 6700;
          };
          # smtp = {};
          users = {
            allow_org_create = true;
            default_theme = "system";
          };
        };

        /*
          provision = {
          alerting = {};
          dashboards = {};
          datasources = {};
        };
        */
      };
    })
  ];
}