From 43f471a017f0d8cf46107e148d3d90bf54704f43 Mon Sep 17 00:00:00 2001
From: etwas <ein@etwas.me>
Date: Tue, 14 Oct 2025 20:54:30 +0200
Subject: [PATCH] feat: create restic backup framework

---
 home/essentials/restic.nix | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)
 create mode 100644 home/essentials/restic.nix

diff --git a/home/essentials/restic.nix b/home/essentials/restic.nix
new file mode 100644
index 0000000..3652379
--- /dev/null
+++ b/home/essentials/restic.nix
@@ -0,0 +1,25 @@
+{ config, ... }:
+{
+  services.restic = {
+    enable = true;
+
+    backups = {
+      localbackup = {
+        exclude = [
+          "/home/*/.cache/*"
+          "*venv*"
+        ];
+        initialize = true;
+        passwordFile = config.age.secrets.restic-password.path;
+        paths = [
+          "/home"
+        ];
+        repository = "s3:https://s3.filmsli.de/restic-framework";
+        environmentFile = ''
+          AWS_ACCESS_KEY_ID=XFRV1PZVN3W4OJMTTQRS
+          AWS_SECRET_ACCESS_KEY=${builtins.readFile config.age.secrets.restic-s3-key.path}
+        '';
+      };
+    };
+  };
+}