{ config, pkgs, ... }:
{
  sops.secrets."restic_password" = { };

  services.restic.backups = {
    localbackup = {
      repository = "/mnt/restic/appdaemon";
      passwordFile = config.sops.secrets."restic_password".path;
      initialize = true;
      paths = [
        "/home"
      ];
      exclude = [
        ".cache"
        ".vscode-server"
        ".devenv"
        ".venv"
      ];
    };
  };
}