{ config, ... }:
{
  services.restic = {
    backups = {
      localbackup = {
        passwordFile = config.age.secrets.restic-password.path;
        environmentFile = config.age.secrets.restic-s3-key.path;

        exclude = [
          "home/*/.local/share/libvirt"
          "home/*/.local/share/Steam"
          "home/*/.local/share/Trash"
          "home/*/Android"
          ".cache"
          ".mozilla"
          ".venv"
          "venv"
          ".direnv"
          ".git"
        ];

        initialize = true;

        paths = [
          "/home"
        ];

        extraBackupArgs = [
          "--one-file-system"
        ];

        repository = "s3:https://s3.filmsli.de/restic-framework";

        pruneOpts = [
          "--keep-daily 7"
          "--keep-weekly 4"
        ];
      };
    };
  };
}