* General
Backups are managed with =restic= and are stored on the NAS.

There's a single password for all the repositories, it's managed with =agenix=, and the file is under secrets (=restic_password.age=).