{ config, pkgs, lib, ... }:

{
  age.secrets.rclone-gcs-sa.file =
    ../../../secrets/rclone/gcs_service_account.json.age;

  age.secrets.rclone-config.file = ../../../secrets/rclone/config.ini.age;

  systemd = {
    packages = [ pkgs.rclone ];
    timers.rclone-sync = {
      description = "synchronize restic repository to GCS";
      wantedBy = [ "timers.target" ];
      partOf = [ "rclone-sync.service" ];
      timerConfig = { OnCalendar = "02:00"; };
    };
    services.rclone-sync = {
      description = "synchronize restic repository to GCS";
      environment.RCLONE_GCS_SERVICE_ACCOUNT_CREDENTIALS =
        config.age.secrets.rclone-gcs-sa.path;
      serviceConfig = {
        Type = "oneshot";
        ExecStart = [
          "${pkgs.rclone}/bin/rclone --config=${config.age.secrets.rclone-config.path} --fast-list --verbose sync /data/slow/backups gbackup:fcuny-backups-systems"
          "${pkgs.rclone}/bin/rclone --config=${config.age.secrets.rclone-config.path} --fast-list --verbose sync /data/slow/backups gbackup:fcuny-backups-users"
        ];
      };
    };
  };
}