{ ... }: {
  services.borgbackup.jobs.onyx = {
    paths = [
      "/home/charlotte/.ssh/id_ed25519"
      "/home/charlotte/.ssh/id_ed25519.pub"
    ];
    repo = "borg@runestone.bunny-hops.ts.net:~/onyx";
    encryption = {
      mode = "keyfile";
      passCommand = "cat /x/secrets/borg_password";
    };
    startAt = "daily";
    prune.keep = {
      daily = 7;
      weekly = 4;
      monthly = 6;
    };
  };
}