looks fine

system/all/restic.nix

@@ -8,29 +8,46 @@
     };
   };
 
-  config = {
+  config = let
+    servers = ["porani" "workhorse" "workout"];
+    dirs = config.backup.all.restic.dirs;
 
-  backup.services.restic =
+    setup = server: {
-    let
+      passwordFile = toString <secrets/backup/restic-repo>;
-      setup = server: {
+      repo = "sftp::backup/remote-${config.networking.hostName}";
-        passwordFile = toString <secrets/backup/restic-repo>;
+      requires = [];
-        repo = "sftp::backup/remote-${config.networking.hostName}";
+      extraArguments = [
-        requires = [];
+        "sftp.command='ssh backup@${server} -i ${toString <secrets/backup/sftp-user_rsa>} -s sftp'"
-        extraArguments = [
+      ];
-          "sftp.command='ssh backup@${server} -i ${toString <secrets/backup/sftp-user_rsa>} -s sftp'"
+      initialize = true;
-        ];
+      timerConfig = {
-        initialize = true;
+        OnCalendar = "daily";
-        timerConfig = {
+        Persistent = "true";
-          OnCalendar = "daily";
-          Persistent = "true";
-        };
-        dirs = config.backup.all.restic.dirs;
       };
-    in
+      dirs = dirs;
-    {
+    };
-      "on-porani" = setup "porani.private";
+
-      "on-workhorse" = setup "workhorse.private";
+    hostname = config.networking.hostName;
-      "on-workout" = setup "workout.private";
+    infoEntry = server: {
+      restic = {
+        folders = dirs;
+        from = hostname;
+        to = server;
+      };
+    };
+
+  in {
+
+    backup.services.restic = lib.zipAttrsWith
+    (name: vals: lib.head vals)
+    (map (server: {
+      "on-${server}" = setup "${server}.private";
+    }) servers);
+
+    environment.etc."info/restic-${hostname}.json" = {
+      enable = true;
+      text = builtins.toJSON (map infoEntry servers);
     };
   };
+
 }