From 1a2661d0c916153fb399c309b934b88911841c39 Mon Sep 17 00:00:00 2001
From: Dennis <dennis@dnsc-work.fritz.box>
Date: Fri, 20 Feb 2026 10:25:21 +0100
Subject: [PATCH] configures backrest

---
 modules/backrest/default.nix | 36 ++++++++++++++++++++++++------------
 1 file changed, 24 insertions(+), 12 deletions(-)

diff --git a/modules/backrest/default.nix b/modules/backrest/default.nix
index 7f3f580..2296889 100644
--- a/modules/backrest/default.nix
+++ b/modules/backrest/default.nix
@@ -1,6 +1,5 @@
 {
   pkgs,
-  config,
   lib,
   ...
 }:
@@ -12,22 +11,35 @@
     ]
   );
 
-  systemd.user.services.backrest = {
-    Unit = {
-      Description = "Restic GUI";
+  users.groups.backrest = { };
+  users.users.backrest = {
+    isSystemUser = true;
+    group = "backrest";
+    home = "/var/lib/backrest";
+    createHome = true;
+    description = "Backrest service user";
+  };
+
+  systemd.services.backrest = {
+    enable = true;
+    description = "Restic GUI";
+    after = [ "network.target" ];
+    wantedBy = [ "multi-user.target" ];
+
+    environment = {
+      BACKREST_PORT = "127.0.0.1:9004";
+      BACKREST_RESTIC_COMMAND = "${pkgs.restic}/bin/restic";
+      BACKREST_CONFIG = "/var/lib/backrest/config";
+      BACKREST_DATA = "/var/lib/backrest/data";
     };
 
-    Service = {
-      Environment = [
-        "BACKREST_PORT=127.0.0.1:9004"
-        "BACKREST_RESTIC_COMMAND=${pkgs.restic}/bin/restic"
-        "BACKREST_CONFIG=${config.home.homeDirectory}/.backrest/config"
-        "BACKREST_DATA=${config.home.homeDirectory}/.backrest/data"
-      ];
+    serviceConfig = {
+      Type = "simple";
+      User = "backrest";
+      Group = "backrest";
       ExecStart = "${pkgs.backrest}/bin/backrest";
       Restart = "on-failure";
       RestartSec = "5s";
-      wantedBy = [ "multi-user.target" ];
     };
   };
 }