anchor.diff:            The port to scrape metrics from. If using the public IP
             address, this must instead be specified in the relabeling
             rule.
  +        '';
  +      };
  +      filters = mkOption {
  +        type = types.nullOr (types.listOf promTypes.filter);
  +        default = null;
  +        description = ''
  +          Filters can be used optionally to filter the instance list by other criteria.
  +        '';
  +      };
  +    };
  +  };
  +
  +  promTypes.filter = types.submodule {
  +    options = {
  +      name = mkOption {
  +        type = types.str;
  +        description = ''
  +          See <link xlink:href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeInstances.html">this list</link>
  +          for the available filters.
  +        '';
  +      };
  +      value = mkOption {
  +        type = types.listOf types.str;
  +        default = [];
  +        description = ''
  +          Value of the filter.
           '';
         };
       };
  
positive.code:         default = null;
          description = ''
            The AWS API key secret. If blank, the environment variable
            `AWS_SECRET_ACCESS_KEY` is used.
          '';
        };
        profile = mkOption {
  
negative.code:     };
    };
  
  in {
    options = {
      services.prometheus = {
  