{pkgs, ...}: {
  services.restic.server = {
    enable = true;
    prometheus = true;
    privateRepos = true;
    dataDir = "/nas/chandler/backups/restic";
    appendOnly = true;
    extraFlags = [
      "--prometheus-no-auth"
    ];
  };
  services.restic.backups = {
    remotebackup = {
      initialize = true;
      environmentFile = "/etc/secrets/restic_env";
      passwordFile = "/etc/secrets/restic_pass";
      paths = [
        "/"
      ];
      repository = "rest:http://bigbird:8000/bert/"; #"b2:chandlerswift-bert-backup/";
      pruneOpts = [
        "--keep-daily 7"
        "--keep-weekly 5"
        "--keep-monthly 12"
      ];
    };
  };
}