sets up vaultwarden backup

hosts/dnsc-vps-sm/default.nix

@@ -115,6 +115,7 @@
     wget
     docker-compose
     actual-server
+    restic
   ];
 
   # Programs
@@ -160,6 +161,26 @@
     '';
   };
 
+  # Restic
+  services.restic.backups.dnsc-vps-sm-backup = {
+    initialize = true;
+    passwordFile = config.age.secrets."restic/password".path;
+    repository = "sftp:dnsc-storage:restic/dnsc-vps-sm";
+    paths = [
+      "/var/backup/vaultwarden"
+    ];
+    pruneOpts = [
+      "--keep-daily 1"
+      "--keep-weekly 3"
+      "--keep-monthly 5"
+      "--keep-yearly 10"
+    ];
+    timerConfig = {
+      OnCalendar = "daily";
+      Persistent = true;
+    };
+  };
+
   # Environment variables
   environment.variables.EDITOR = "nvim";