{
  services.borgbackup.jobs."borgbase" = {
    paths = [
      "/var/backup"
      "/var/lib/sourcehut"
      "/var/lib/paperless"
      "/etc/nixos"
      "/root"
      "/home"
    ];
    exclude = [
      "**/*cache"
      "**/*Cache"
      "**/*trash"
      "**/*Trash"
      "/home/*/.local"
      "/home/*/.config/lnav/stdin-captures"
      "/root/.config/lnav/stdin-captures"
      "**/target"
      "**/result"
    ];
    repo = "foy40rzb@foy40rzb.repo.borgbase.com:repo";
    encryption = {
      mode = "repokey-blake2";
      passCommand = "cat /root/borgbackup/passphrase";
    };
    environment.BORG_RSH = "ssh -i /root/borgbackup/ssh_key";
    compression = "auto,lzma";
    startAt = "daily";
    # also start if the starttime was missed
    persistentTimer = true;
  };
}