{ ... }:

# Prometheus node_exporter — host vitals (CPU/mem/disk/net/uptime) for the
# homelab dashboard. No openFirewall needed: tailscale.nix already trusts
# tailscale0, so :9100 is reachable over the tailnet and blocked on every
# other interface (LAN, public) without any extra rule here.
{
  services.prometheus.exporters.node.enable = true;
}