{ pkgs, ... }: { systemd = { timers.restic = { wantedBy = [ "timers.target" ]; partOf = [ "restic.service" ]; timerConfig.OnCalendar = [ "hourly" "daily" ]; }; services.restic = { serviceConfig = { Type = "oneshot"; User = "restic"; Environment = [ "AWS_ACCESS_KEY_ID=" "AWS_SECRET_ACCESS_KEY=" ]; }; script = '' restic -r s3:s3.amazonaws.com/ backup /var/vmail /var/vmail ''; }; }; users.users.restic = { isNormalUser = false; }; }