{ config, lib, pkgs, ... }:

{
  # includes mail address, which includes ntfy token
  sops.secrets."monit/mail" = {};

  services.monit = {
    enable = true;

    config = ''
      include /run/secrets/monit/mail

      set daemon 120 with start delay 60
      set mailserver
          localhost
          port 2525

      set httpd port 2812 and use address localhost
          allow localhost
          allow admin:obwjoawijerfoijsiwfj29jf2f2jd

      check filesystem root with path /
            if space usage > 80% then alert
            if inode usage > 80% then alert

      check host stuebinm.eu with address stuebinm.eu
            if failed
              port 443 protocol https
            then alert
    '';
  };
}