diff --git a/clusters/cl01tl/monitoring/kube-prometheus-stack/templates/external-secret.yaml b/clusters/cl01tl/monitoring/kube-prometheus-stack/templates/external-secret.yaml
index 2467b23be..d30e24db4 100644
--- a/clusters/cl01tl/monitoring/kube-prometheus-stack/templates/external-secret.yaml
+++ b/clusters/cl01tl/monitoring/kube-prometheus-stack/templates/external-secret.yaml
@@ -34,6 +34,29 @@ spec:
         metadataPolicy: None
         property: ntfy_password
 
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: garage-metric-secret
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: garage-metric-secret
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: token
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/token
+        metadataPolicy: None
+        property: metric
+
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
diff --git a/clusters/cl01tl/monitoring/kube-prometheus-stack/templates/scrape-config.yaml b/clusters/cl01tl/monitoring/kube-prometheus-stack/templates/scrape-config.yaml
index a8d7f3ec2..3b7190c8c 100644
--- a/clusters/cl01tl/monitoring/kube-prometheus-stack/templates/scrape-config.yaml
+++ b/clusters/cl01tl/monitoring/kube-prometheus-stack/templates/scrape-config.yaml
@@ -54,3 +54,27 @@ spec:
         - it01ag.alexlebens.net:9926
   metricsPath: /metrics
   scheme: HTTP
+
+---
+apiVersion: monitoring.coreos.com/v1alpha1
+kind: ScrapeConfig
+metadata:
+  name: garage-https
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: garage-https
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  staticConfigs:
+    - labels:
+        job: garage
+      targets:
+        - garage-ps10rp.boreal-beaufort.ts.net
+  metricsPath: /metrics
+  scheme: HTTPS
+  authorization:
+    type: Bearer
+    credentials:
+      key: token
+      name: garage-metric-secret
diff --git a/clusters/cl01tl/monitoring/kube-prometheus-stack/templates/service.yaml b/clusters/cl01tl/monitoring/kube-prometheus-stack/templates/service.yaml
index dc3878ce5..28a6f22f9 100644
--- a/clusters/cl01tl/monitoring/kube-prometheus-stack/templates/service.yaml
+++ b/clusters/cl01tl/monitoring/kube-prometheus-stack/templates/service.yaml
@@ -12,3 +12,19 @@ metadata:
 spec:
   externalName: placeholder
   type: ExternalName
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: garage-ps10rp
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: garage-ps10rp
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+  annotations:
+    tailscale.com/tailnet-fqdn: garage-ps10rp.boreal-beaufort.ts.net
+spec:
+  externalName: placeholder
+  type: ExternalName