{ pkgs, ... }: {
  services.endlessh-go = {
    enable = true;
    extraOptions = [
      "-max_clients=200"
      "-geoip_supplier=ip-api"
    ];
    port = 2333;
    openFirewall = true;

    prometheus = {
      enable = true;
      port = 4212;
      listenAddress = "127.0.0.1";
    };
  };
}