{
  config,
  pkgs,
  ...
}: {
  #
  # Netdata
  #
  services.netdata = {
    enable = true;
    config = {
      global = {
        "memory mode" = "ram";
        "debug log" = "none";
        "access log" = "none";
        "error log" = "syslog";
      };
      web = {
        "bind to" = "127.0.0.1:19999";
      };
    };
  };

  services.caddy.virtualHosts."netdata.severijnse.eu" = {
    extraConfig = ''
      import security_headers
      import csp
      reverse_proxy 127.0.0.1:19999
      encode zstd gzip
    '';
  };
}