selfprivacy_fork/static/restic.nix

{ pkgs, ... }:

{
  systemd = {
    timers.restic = {
      wantedBy = [ "timers.target" ];
      partOf = [ "restic.service" ];
      timerConfig.OnCalendar = [ "hourly" "daily" ];
    };
    services.restic = {
	  serviceConfig = {
        Type = "oneshot";
        User = "restic";
		Environment = [ "AWS_ACCESS_KEY_ID=" "AWS_SECRET_ACCESS_KEY=" ];
      };
      script = ''
	 restic -r s3:s3.amazonaws.com/ backup /var/vmail /var/vmail 
	 '';
    };
  };
  users.users.restic = {
    isNormalUser = false;
  };
}