{
  _utils,
  config,
  ...
}: let
  upsdPass = _utils.setupSingleSecret config "upsdUserPass" {};
in {
  imports = [upsdPass.generate];

  power.ups = {
    enable = true;
    mode = "standalone";

    upsd.listen = [
      {
        address = "127.0.0.1";
        port = 3493;
      }
    ];

    users.admin = {
      passwordFile = upsdPass.path;
      instcmds = ["ALL"];
      actions = ["SET" "FSD"];
    };

    ups.eaton-3s-850 = {
      driver = "usbhid-ups";
      port = "auto";
      description = "Eaton 3S 850 UPS";
    };

    upsmon.monitor.eaton-3s-850 = {
      user = "admin";
      passwordFile = upsdPass.path;
    };
  };

  services = {
    prometheus.exporters.nut = {
      enable = true;
      user = "root";
      nutUser = "admin";
      passwordPath = upsdPass.path;
      nutVariables = [
        "battery.charge"
        "battery.runtime"
        "battery.voltage"
        "device.info"
        "input.voltage"
        "ups.load"
        "ups.status"
      ];
    };

    vmagent.prometheusConfig.scrape_configs = [
      {
        job_name = "nut";
        metrics_path = "/ups_metrics";
        params.ups = ["eaton-3s-850"];
        static_configs = [
          {
            targets = ["localhost:${builtins.toString config.services.prometheus.exporters.nut.port}"];
            labels.ups = "eaton-3s-850";
          }
        ];
      }
    ];
  };
}