{ lib, config, ... }: { services.restic.server = { enable = true; appendOnly = true; extraFlags = [ "--no-auth" ]; dataDir = "/var/lib/backup"; prometheus = true; }; networking = { firewall.enable = true; firewall.allowedTCPPorts = [ 8000 ]; }; }