{ config, pkgs, ... }:
{
  age = {
    secrets = {
      restic-local-pw = {
        file = ../secrets/restic-pw.age;
      };
    };
  };

  environment.systemPackages = with pkgs; [
    restic
  ];

  services.restic = {
    backups = {
      local = {
        paths = [ ];
        passwordFile = config.age.secrets.restic-local-pw.path;
        repository = "/data/backups/";
        initialize = true;
        timerConfig.OnCalendar = "daily";
        timerConfig.RandomizedDelaySec = "5m";
        extraBackupArgs = [ ];
        pruneOpts = [
          "--keep-daily=7"
          "--keep-weekly=4"
          "--keep-monthly=12"
        ];
      };
    };
  };
}