Enable restic backups

hosts/default.nix

@@ -111,6 +111,7 @@
           "hercules-ci-secrets-json".owner = "hercules-ci-agent";
           "git-workspace-tokens".owner = "ccr";
           "autistici-password".owner = "ccr";
+          "restic-hetzner-password" = {};
         };
       };
 
@@ -132,6 +133,7 @@
           "cachix-personal-token".owner = "ccr";
           "home-planimetry".owner = "hass";
           "cloudflare-dyndns-api-token" = {};
+          "restic-hetzner-password" = {};
         };
       };
     };

hosts/picard/default.nix

@@ -28,6 +28,8 @@
       "printing"
       "pam"
       "wireguard-client"
+      "restic"
+      "binfmt"
     ]
     ++ [
       ./disko.nix
@@ -60,6 +62,7 @@
       "digikam"
     ];
     extraGroups = [];
+    backupPaths = [];
   };
 
   boot.kernelParams = ["ip=dhcp"];

hosts/sisko/default.nix

@@ -17,14 +17,14 @@
       # "nextcloud"
       "home-assistant"
       # "immich"
-      # "adguard-home"
-      # "mount-hetzner-box"
+      "adguard-home"
       "cloudflare-dyndns"
       "rock5b-proxy"
       "invidious"
       "searx"
       "rock5b-samba"
       "paperless"
+      "restic"
     ]
     ++ [
       ./disko.nix