{ config, ... }: {
  services = {
    caddy = {
      virtualHosts."promtail.${config.networking.hostName}.labs.adtya.xyz" = {
        extraConfig = ''
          reverse_proxy 127.0.0.1:9080
          tls /persist/secrets/caddy/certs/default.crt /persist/secrets/caddy/certs/default.key
        '';
      };
    };
    promtail = {
      enable = true;
      configuration = {
        server = {
          http_listen_address = "127.0.0.1";
          http_listen_port = 9080;
        };
        clients = [
          {
            url = "https://loki.labs.adtya.xyz/api/v1/push";
            tenant_id = 1;
          }
        ];
        positions = { filename = "/tmp/promtail-positions.yaml"; };
        scrape_configs = [
          {
            job_name = "journal";
            journal = {
              json = false;
              max_age = "12h";
              path = "/var/log/journal";
              matches = "_TRANSPORT=kernel";
              labels = { job = "systemd-journal"; host = "${config.networking.hostName}"; };
            };
            relabel_config = [
              {
                source_labels = [ "__journal__systemd_unit" ];
                target_label = "unit";
              }
            ];
          }
        ];
      };
    };
  };
}