{ config, ... }:

{

  systemd.services.backups-maintenance-fcuny = {
    Unit = {
      Description = "maintenance for fcuny backups";
      Documentation = "man:restic(1)";
    };
    Service = {
      Type = "oneshot";
      User = "restic";
      ReadWritePaths = "/data/slow/backups/users/fcuny";
      Environment = [
        "RESTIC_REPOSITORY=/data/slow/backups/users/fcuny"
        "RESTIC_PASSWORD_FILE="
      ];
      ExecStart = [
        "${pkgs.restic}/bin/restic --verbose rebuild-index"
        "${pkgs.restic}/bin/restic --verbose prune"
        "${pkgs.restic}/bin/restic --verbose forget --prune --keep-daily 7 --keep-weekly 4 --keep-monthly 12 --keep-yearly 3"
      ];
    };
  };
}