added https

nixos/services/promtail.nix

@@ -1,6 +1,6 @@
 { config, pkgs, ... }:
 let
-  lokiHost = "loki.john-stream.com:3100";
+  lokiHost = "loki.john-stream.com";
 in
 {
   systemd.services.promtail.serviceConfig = {
@@ -22,7 +22,7 @@ in
       positions = {
         filename = "/tmp/positions.yaml";
       };
-      clients = [{url = "http://${lokiHost}/loki/api/v1/push";}];
+      clients = [{url = "https://${lokiHost}/loki/api/v1/push";}];
       scrape_configs = [
         {
           job_name = "journal";

nixos/services/restic.nix

@@ -2,19 +2,41 @@
 {
   sops.secrets."restic_password" = { };
 
+  environment.systemPackages = with pkgs; [
+    restic
+    (pkgs.writeShellScriptBin "restic-backup" "sudo systemctl start restic-backups-localBackup.service")
+    (pkgs.writeShellScriptBin "restic-backup-check" "sudo journalctl -b -u restic-backups-localBackup.service")
+  ];
+
+  environment.variables = {
+    RESTIC_REPOSITORY = "/mnt/restic/appdaemon";
+    RESTIC_PASSWORD = "${builtins.readFile config.sops.secrets."restic_password".path}";
+  };
+
   services.restic.backups = {
-    localbackup = {
+    localBackup = {
       repository = "/mnt/restic/appdaemon";
       passwordFile = config.sops.secrets."restic_password".path;
       initialize = true;
+      timerConfig = {
+        OnCalendar = "03:00";
+        RandomizedDelaySec = "2h";
+        Persistent = true;
+      };
       paths = [
         "/home"
+        "/conf"
+        "/etc/nixos"
       ];
       exclude = [
         ".cache"
-        ".vscode-server"
+        ".vscode*"
         ".devenv"
         ".venv"
+        "build"
+        "dist"
+        "__pycache__"
+        "*.egg-info"
       ];
     };
   };