{ lib, ... }: {

  backup.services.restic = { "on-porani.insecure".enable = false; };

  backup.all.restic.dirs = [ "/home/palo/.password-store" ];

}