{ lib, ... }: {

  backup.services.restic = {
    "on-porani.insecure".enable = lib.mkDefault true;
    "on-workhorse.private".enable = lib.mkDefault true;
    "on-workout.private".enable = lib.mkDefault true;
  };

  backup.all.restic.dirs = [ "/home/palo/.password-store" ];

}