{ config, pkgs, lib, inputs, ... }:
{
  age.secrets.restic-pw = {
    file = ../secrets/restic-pw.age;
  };
  age.secrets.restic-s3 = {
    file = ../secrets/restic-s3.age;
  };
  age.secrets.restic-gdrive = {
    file = ../secrets/restic-gdrive.age;
  };
  services.restic = {
    backups = {
        localbackup = {
            exclude = [
                "/home/**/Cache"
                "/home/**/.cache"
                "/home/**/__pycache__"
                "/home/**/node_modules"
                "/home/**/venv"
            ];
            initialize = true;
            passwordFile = config.age.secrets.restic-pw.path;
            paths = [
                "/home"
                "/var/backup/postgresql"
                "/mnt/250ssd/matrix-synapse/media_store/"
                "/mnt/250ssd/nextcloud"
                "/mnt/250ssd/paperless"
                "/mnt/250ssd/kavita"
            ];
            pruneOpts = [ "--keep-daily 7" "--keep-weekly 10" "--keep-monthly 12" "--keep-yearly 75" ];
            repository = "/mnt/2tb/restic";
        };
        localbackup-1tb = {
            initialize = true;
            passwordFile = config.age.secrets.restic-pw.path;
            paths = [
                "/home"
                "/var/backup/postgresql"
                "/mnt/250ssd/matrix-synapse/media_store/"
                "/mnt/250ssd/nextcloud"
                "/mnt/250ssd/paperless"
                "/mnt/250ssd/kavita"
            ];
            exclude = [
                "/home/**/Cache"
                "/home/**/.cache"
                "/home/**/__pycache__"
                "/home/**/node_modules"
                "/home/**/venv"
            ];
            repository = "/mnt/1tb/restic";
            pruneOpts = [ "--keep-daily 5" "--keep-weekly 5" "--keep-monthly 12" "--keep-yearly 75" ];
            timerConfig = {
                OnCalendar = "*-*-03,06,09,12,15,18,21,24,27,30 02:00:00";
                Persistent = true;
            };
        };
        remotebackup-gdrive = {
            initialize = true;
            passwordFile = config.age.secrets.restic-pw.path;
            paths = [
                "/home"
                "/var/backup/postgresql"
                "/mnt/250ssd/matrix-synapse/media_store/"
                "/mnt/250ssd/nextcloud"
                "/mnt/250ssd/paperless"
            ];
            exclude = [
                "/home/**/Cache"
                "/home/**/.cache"
                "/home/**/__pycache__"
                "/home/**/node_modules"
                "/home/**/dont_remotebackup"
                "/home/**/venv"
            ];
            rcloneConfigFile = config.age.secrets.restic-gdrive.path; 
            repository = "rclone:it-experts:backup";
            pruneOpts = [ "--keep-daily 5" "--keep-weekly 5" "--keep-monthly 12" "--keep-yearly 75" ];
            timerConfig = {
                OnCalendar = "*-*-03,06,09,12,15,18,21,24,27,30 02:00:00";
                Persistent = true;
            };
        };
        remotebackup = { 
            exclude = [
                "/home/**/Cache"
                "/home/**/.cache"
                "/home/**/__pycache__"
                "/home/**/node_modules"
                "/home/**/venv"
                "/home/**/dont_remotebackup"
            ];
            initialize = true;
            passwordFile = config.age.secrets.restic-pw.path;
            environmentFile = config.age.secrets.restic-s3.path;
            paths = [
                "/home"
                "/var/backup/postgresql"
            ];
            pruneOpts = [ "--keep-daily 5" "--keep-weekly 5" "--keep-monthly 12" "--keep-yearly 75" ];
            timerConfig = {
              OnCalendar = "*-*-03,06,09,12,15,18,21,24,27,30 00:00:00";
              Persistent = true;
            };
            repository = "s3:s3.us-west-002.backblazeb2.com/kop-bucket";
      };
    };
  };
}