thrall: Prepare off-site backup

hosts/thrall/default.nix

@@ -130,6 +130,9 @@
     git
 
     #agenix.defaultPackage.x86_64-linux
+
+    restic # fast and secure backup
+    rclone
   ];
 
   # Some programs need SUID wrappers, can be configured further or are
@@ -159,6 +162,10 @@
       interface=wg0
     '';
   };
+
+  # configure backup via restic to gdrive
+  services.restic.backups = { };
+
   services.nginx.enable = true;
   services.nginx = {
     recommendedTlsSettings = true;