Start refactor

modules/linux/restic/default.nix

@@ -0,0 +1,20 @@
+{ config, lib, ... }: let
+  inherit (lib) genAttrs merge mkConst mkIf remove;
+in merge <| mkIf config.isServer {
+  options.resticHosts = mkConst <| remove config.networking.hostName [ "cube" "disk" "nine" ];
+
+  config.secrets.resticPassword.file = ./password.age;
+
+  config.services.restic.backups = genAttrs config.resticHosts (host: {
+    repository   = "sftp:backup@${host}:${config.networking.hostName}-backup";
+    passwordFile = config.secrets.resticPassword.path;
+    initialize   = true;
+
+    pruneOpts = [
+      "--keep-daily 7"
+      "--keep-weekly 4"
+      "--keep-monthly 12"
+    ];
+  });
+}
+

modules/linux/restic/password.age

@@ -0,0 +1,11 @@
+age-encryption.org/v1
+-> ssh-ed25519 +rZ0Tw 06oZk46oR6ELo5J27k6yawjranT3zRItKK+rl0P9bgk
+Zl9FaZ0zz7X+NNa8YZ7mF+I3NM6uIQ4OyOxHCC7tG0s
+-> ssh-ed25519 spFFQA lNlbKPxx4NolZih3OdSW+Om6LfLzQGPcOateTm7PmjE
+faPPdpWeJytmEGMCfNiup4hE/wjwAp9hdFBRR9PJ7JE
+-> ssh-ed25519 dASlBQ 0hpF2NYQrE8k0yQWjecxaEmxPswUfqjr/isjwcuRbio
+zy5tvK0/6WaxzOOzmhRdMIdWeMyE0YYvRI+UAx4sW1c
+-> ssh-ed25519 CzqbPQ VuaclNfcFIo7wIFauMBcy4amv4QDMUwmWevaCaMICxg
+JpO3lbn95Hfhqi7x2SRUSzVHQ7tS/Ay9Gn+mFhQpKbE
+--- iuP1ypvDk453T8/jiyTnWRnVpKZ89yLdWbrMJubNwq8
+›nßÞâæ	ìQ’š)p›Õº1	Cbn)Tœ™<C593>íÿa±öO^VLš­ßç}„4@QÓ