{ lib, ... }: {
  system.activationScripts.makeBackupDir = lib.stringAfter [ "var" ] ''
    mkdir -p /var/lib/backup
  '';

  services.forgejo.dump = {
    enable = true;
    file = "forgejo-dump";
    backupDir = "/var/lib/backup";
  };

  services.restic.backups.s3 = {
    passwordFile = "/var/secrets/restic-backup";
    environmentFile = "/var/secrets/restic-s3";
    initialize = true;
    repository = "s3:https://object.ceph-waw3.hswaw.net/cebulacamp-backups";
    paths = [
      "/var/lib/backup"
      "/var/lib/postgresql"
      "/var/lib/redis-authentik"
      "/var/lib/nextcloud"
    ];
  };
}