11 files changed, 379 insertions, 59 deletions
diff --git a/dot_config/encrypted_private_wpa_supplicant.conf.tmpl.asc b/dot_config/encrypted_private_wpa_supplicant.conf.tmpl.asc
index ffefe96..dc1c07b 100644
--- a/dot_config/encrypted_private_wpa_supplicant.conf.tmpl.asc
+++ b/dot_config/encrypted_private_wpa_supplicant.conf.tmpl.asc
@@ -1,62 +1,62 @@
 -----BEGIN PGP MESSAGE-----
 
-hQUMAwAAAAAAAAAAASf/SKzTUZIR2YRFV3eciiTjAyiMEI2+014FnG/j/c7TkytF
-57G8rNbZnCspHLQEnaoe5j05bWnNq6z3O2bTPy7w2MUpRU1cc/CLkGPDeJk2/gpo
-KVQwl60vryhShDp8urrlNrUiXZJeh/xsc4u+AUlGGdyS5Ay6XYy9c76M/iJ+NIdW
-laFe7JB4X081nOHwrxhuK7sV38AzMZRq9IxgQWUMyzjv9Hyd3Se7kDKUAZSxy/L1
-/oKsP+giw5DLiWG+HWAuLlfBBAimLu4l94+PeHsKg/VrO9uitgMu0jOCRJkfr/lm
-e2Gw+7B2JADUDCwUFUkcCPMkqZJH4TFeVwNw+px/TnACkQ/Y8iM9DUinpcDG7hb5
-W80zit+/HMz9VkgUV2cvMDe1nb+o4ItSgnNc0NDQwhy40Tg4GOvrVLyhCm96Nvc0
-BL5eK5dh0rzH0FLehaesw0VYolQNzLYZ0tMOo6zRxbL1Br8qkIkwxVyMRG8EtIdi
-S0ddI8/0TMthVZdc/1DfNUzoplaeX8WH3PdvJ/WaYBCLb6ND23lTqoBFGZ5CG/y8
-SbNfVU+RaNlJqyw9kG5al6ICVJr2NNLTeSC8722Eg4nJrUBQpSWYdOvaAjjH9x/B
-U+aU1VFN6HPq1J7yGaK7GYgr76NxApUOt0bK0FbxbCJytY+xbPHjTInDdgvqbcNZ
-UP7wLDwhsg7d8kUFzFK08vyXqRj6rDp5WqE/4h/TwpmY1kmyMe9dSpYukCA4dG0t
-RYbF++kWJ6V3QEVmEAxp9+L2K+Qv3YaHjQBZcjjlXj0KYKm07p54VxQicsjvtOU2
-OtqLqdpl0FB2dI2JF3nM8Vy6eO/EFkfxHy/BiSr9iBx/uE2HSbqsMEZJ5nwtAwwY
-vgSNth4dpARbBvouw8iw3OpWFpz0m4+tmQnQuDZW8Hm6W7mxTn1KkZtQaEtgfp21
-eaPPUCJcWiBKI9IYMPOCpXPYulht8S0KKV4lkmTz8+/ab67AhgWwuf0jceomNQHK
-5shWDS/Flf2dBJj2BZd8szKjhj0ekA+RqRKoBIUF8jiRsNRex4CBUulPYDeKzRyM
-AoKbRLYKw4bPwL/oVMAbTXAaAsc4oBPgRbV8HcLXKm640SYMxl6ul7sSrie7Nc3t
-b334fFu9Qhp3v2bEpmSCf8v+M87ehN3PJR8/Kmmtm4sF3gL8YSydNx7IpgocTHnM
-KNZ9+Q2oZkwO9Z6yaycyAEomp5gv/vPRBtZRlTyLx27apEobP/zQFbKhhYuhyhPH
-tambzy+TrT6PAjE35eX3JTNB/5kAyeOElDSfPeTWkcadxiWrC4vkPho+nryR6/aW
-bpSDICa/c970vJU0KxD9FlyLvrArGh3ScHb3Dn71HLg3vqaTtTghCpxM4CJBx/xw
-kSAkOZQa7oLbWXGt3pxHUxdjq5F9/0IdI0U/Rfd5+MpX+RnrdaCu9AB9LXYohzNt
-p2hHFNDfq6VqoawYm0+KaDp6nfL5DXjyN4R9se6J3/1pUbkGpb3RJeF+p29Tewau
-71pXyfAVet5AJAsdksqrxDKDa+bsIFvo8Hr7nGj2x7lYJ4TlDWdKZ+Zz2V0GTv8B
-IlINXfdJDAastpW+g02g26irHEvwPb4Qb+lCmSP/z+Ly95CsBUiGSHu/95zkuXNV
-dOWBXuDu8U1HflVLLnZVI6fOcEXg0LZImdJ0wgp5Wppj2zz4OG862EBDV2xuyE7S
-6gHulx4l1ZhaGI1dw0Nv827qGkpnjnZ2K3sWcJEFMWG4GxREjSobiSWcAcPLMJgb
-6ClP2owxDoiGYUxqq+wjlOeKw8AGo8bRzVvaGks+5qe/OUxcd5/JQL5fjbmmspYe
-7DtIdIcxxF4eiOGo9Yv7rVIkqxOr10rqbMWjJDYoFpvOsNffBAKEOjvAeR+Jo047
-gLKsAEz74OFL/VB/HV2O5juv3264FyEprZUqjdZrO0QvxptIhKvYBXqX/2pvnHsM
-zjDahs96wjtGMKFAiwWkXEUuGxQEuC7HkmiL6bJPZPGyTtLEM/bSAUBGubNeSHVm
-6e3kJsyNnZJo8V6d+Jzyu12EB6/5OGoTURCIa+T+G3Oh9dGMZcQKgJTXtH9054XB
-Oadl7t4Uh+a5qvVyE24tHILLNIm15Kcrrd/X+QGjSf0j5mcqGVUjSl4S2I0148z5
-nDxVzPi+P6GJMw8fvPCfGIjvbl+nnVwc4W1E4Srf9HyOXTeq+fRSUEFlwJNEToeK
-r3PDn+5PvXE4zV+NcCKSJZOaEAd3zt9cLzjeRXIP38TwYbeerfIL0rn0pGuQwL2Y
-4+ClcBSNW+qUKMcxGiIGFhOPSjqDVXPtufICQFBBhbXGzzDcy6TK/Uc3SyNOCd8o
-SB7LGIPQ4yZpb+Z6QVw4CnG8rtIMbHGEM08vfyZwsQHi1QRGRlbsKw7ItqtcLj/U
-M6b0eTvkT2LZoXA+XwOncBSDe1WBdudJTLQ/7bZeJzKgT650jJi99s1J0z50Mb7j
-D8v2P2y/YQRHrsHr2z1BLnBiRQDR8Sy3JZKOVdNZilGn7DxAHshdFUZ5/k6ZW+Lu
-0ZYjeLE7eG8EdA4fPmhqh57VDOZjcATnGRutRfl0JhMyBKEald10f8gRg7p39B3O
-jXdK1eymBPV0kQlc70PjmUhA0QKEeKUVsFyZUTzFCABk3m31wpsYdjGAOCLQafgU
-zNM1HWQAB6dBmyzvGT/yRrfaJDRoloibe7UFydpe1605yqKj52b4rCCfsn36s6yB
-09CchEblxkqOV7BwVdL4n6oyF9RP1VKkMW9LZAzPXn+Erz+BL41ESRlHm9Rvkx8W
-UHJG4xXM4G+0+fbrbB5KLtBGxg3MCfcetkeanFXX6YNNgJTvxxGokeMgnYyazFUk
-jjKKfDEyIvCWbyostSEgTBJ2gll8PYbcyNRCkB4HNP3lXMPWMbZp6DJnHXE0Edzi
-jfzwmjvWMlcTGsDpkB45PT9diJQSQrqQS0cEJNn0MeoyF9l1BuMZ4TQZGSfN1wAD
-0pHjx3QZ86FYb9b4cqsFJ1rtjdPP82qAds5IUn0ASPb+f7THTXTFuLdn0Y7vzosl
-gWDna7u7GE8Vgj7FkCceqynBAxu/dfn9WCJ3WZYAr0zmqWYeDE/T7XqPpLarN2cY
-osP7G4J/T8dCa3UXuddjatAkK0f0rg6Brp/uJ90V3dAF6dGfsehgmDaKJ3Es5+4J
-497iC2WIRMin+DwqdOaqsFnXeWh5bILtSC+/HoeZVvTsVXah1bNe5XEz8K4AhEXr
-skiC7fwX8JiUwOrJA5aSZbzxbMKkf7rAFpE54iFvJJoNERaF4XFiAr7Gp5Rpa+4V
-7GERZTw7ZOA2+ooeZIzntk+9C/0qw72qK3WG5kxjGg1OKYsT0OJFapc2fvhTX6k/
-gCQcxwunI2Ajp1QB0O3FW/QkU6jBjBRlHlM3UTFzHKdtNsbiRuanOaKvV488c63B
-PF9ns1HU8j8vIUur5ZpmAX7cGuoL8TeN2MyIm0v+PD7nN8q2yklOElPOlIR3XKyr
-OH5naQPMXZTfJ7erPaPDhLRHGshnofxvCX0lQDRSs1CWK3QOLVkvqeU+oamL8a5X
-yVWd3kFq6kpnZv7tP+zFNpjoqyf0e42Rq2RsIH8Ivf/AQG1haYNDvBXFIUjUpVB9
-BlbQLaIrJuVxwXmDQRcqa3aVz0tukcn4MJnt6kB9eilTgX+o+fM=
-=kVvU
+hQUMAwAAAAAAAAAAASf+LAANO5BwaToUyHkVL4TtI0MhWx3HwKnpa8F14h8ILhce
+QgN9ZNc+798IOdfNQjnaACIMogMHTbqUpW5i6o68rQgCgJLOZqpaPoWBndK3Py2h
+KtJ+FjnU6Mp6d5U1pCsTCZk4azJS+EZX22VIr16gaMO3M65dOKnpuSoHiMFg7PO/
+3Uad2Bsp8HPX6FwKLjoItkqvwCc3ODAbMPLp/Ojc75waJ6bWxeYgZWXYqF8DITEo
+DEHxVP9n4sZMr2SEQslQlZuiHudP42oa/nITaz312D2p20uka1kVnI/0B+2k3oGK
+SagQi4nmYVGv9QlxUXfFp3wNNJe9ZOQvS3hdhVFBecz1FGhXxLxKntaThcwiLi+s
+/z8Ado9yMxlJsQJlQSwKI0+7bA+tbVjwh+fhqdf0u16vHRL4txv9qhKJjlc7wAcU
+7O1MOMBl1EDdE+URkE4uVrleb6GDPtml/VUf/3vNKFXtKk/L1PmfTcif94ruSjnW
+S+qG4HwJuwHGLAz/hp33qWibQJlniEaOh89jUZ69627fkH7R0tmcLfUUrfanCBwf
+ACt4zGB3h1fCGp8KdmKdeU4ex83kyXVcKe+s1/Rdi4P+u/h+5ZoYuJEX7B/lEfTM
++gJ04hGl58yNyLbEnBIIhWEq2oVvgpxINrm1TmklxKbGK7fod+foW9xtzZXVR/8m
+mvGqW1oOhOzvPiZadj9xW5S8D41uTW0oO3N+7+xOggBtagcjETssD95WeQlpqq7+
+nT5ITWWoIRIEvEaJbqDy7yYKjDhrqhzDdhSqodtvkxnl/tcF6yp72usdIyJfjBhh
+enUka+OH8ed0R4QtmgJfrJriQ1yhN8APolDbcaqAM/xl9txYH36u302hRpyTFzDS
+C+34yQ29z+sD6djHWrfH0xxjb97mZOc8q+1G+3DWtbK5NGiivBZLZfH2/n+aE90y
+v/ISdhCualxJPMtI1mjv1YU10TqdLfTM8QO6J/QGosSpCJZFuNN7qGOlrNko0lx3
+pqww8cyno80x9lcZuXkP1B0knbJlmghDqjy0kU7h9xnH5kGH7VGhbLE9W6lTnwOT
+4k2lZb722Lajsut8Qeq41VNVISjLRNvDPBe8h78wXzoaMbjV6HG/FRK0yOVQS8uV
+YEiG/yodt4F49m4AM/gO54IDkqerbs/uOuD4IMTZUQ80k2440rhBFGdhCtekYpVZ
+xTtug4NBqgwiTFSdmSflrGwpE/QvOBp/eo7JrKIr/KeSXOg44TE9HHRvHjje0tCn
+o0Wbii6OVR/QQ69s2RvSQowwap2cFRXixUwAmrNzfMF0sdb+nGT3f66XEsoEiEGy
+nxJ5CuC9pLi+qRrotbCxGN3phllMq4j6gxNorezh9rBQpZm2rdbfeGPmcESoTEJv
+y+Mvu9n+EUAT/fGveXnpYRESCQnKShWWF0mrtyKHWRNxWnYtd12xiGonwY8Oce+6
+0QzQApuYHzsU7pievWwT6q8dnYHQPALmJp5NnvSZswP8Vyl8+WgKEScCX94Yy5RZ
+W7wd1xfPMS/Rxg+jVnqVfmvktKi4seoGI2ffrNA8SQ8O1vqoFBULaJ9gDfdm0UVD
+bgvUcKSZSniP/xJn+3GpUvppZmBmi2ftm8MNFc7IkwYBHLdZRhg37DvevRRvDbfc
+4VqDgL7U+zqYNYljyfPoPwro27ELl2Mree4lblM7BYSCgR2XAomwF80WYRoWPMHS
+6gHQDBGkCW7A7XoN7A5H3VHKRtBDgZ+N+yYH1bvk0jn+xUFF9vWVKM8Ao7/1eyyb
+CZOgHM5IQePJxg68K0RVJkIdQUjcyTsL7WWvIRNckH+nLD6A0Ot1wm7CeNnQnO5Z
+v8iHb96JMK1seihbHT300NsNjoHqrKjJykEeHj7+xdBZz0ekJmkVGSlsYe5czg6M
+2i5/ukRWoIbfYueqfcNQxhN09qnug5cDTBKB1jWGv4J879nMnx8V+/yRh31noBgb
+yIMBk7d0KbcxW7Rh98alEntK11JvJxwYis/KxqD4pi0gBFA9mYJ9QnahYIQ41w2D
+qmn/XLxjCAlrTFeYqe+Tgh3MWmVUTrCZ0FgVwqrfq3v8SnjcqmkdRAjzqSwX4I+e
+ZxC/LcEBd/skwDNzq9p2kEzQI9G0DeBjvNyDcwnkVGUyyAbnjtanJzV5q6MT+4mF
+mEFL3O3iLrPvDy5CP0WYy9KZTNBeEmzZr6UgPXbcO43FcTQNqCmDwiR8kHO9Ff2R
+D/5wam+jue/06WUNiJx30OTASyDc4LqqqiefhIj6BgQ259bTz2tqBmgbPtQz7/or
+K22JfwNCmZ9XEhtKdpkg1ZrghCVnwXORRyU45e2d03BuUfWhJZi+hscZmbxG3NXx
+eTTZdZKXrW/Maq7WDceklJpIfOO0wOD4KW5Ii29rIVRJz+cSyxdYKDeajKJtuiyP
+w4VA9HUJ2BZ9u6hM6MxYUqRS+UekRj7d2D+kCLExyX+Y94WoQzb02rdpvdc/YbQs
+kLiW/6GkB133yxcGRmXB6fLTczuXZUFiFyiNNWHzQAMTTx7HEbL/en0TvwRvm6hT
+s8ht60plJYo2EiYMi3IT9BcS82XbJBuHJpt6DifEZy0SiLP2Go14q/kw5BEGKitA
+i/aH5jRzyy+fQ0O1a3t4Imgv9RB4ZfZ6QYBbcazdPuse2Y8lC3DvoXib+I6/99NI
+lWc0UlW4r2dPKCLWQM2Uzwy23tEbwhd7jmsEU4do9/gW11d6LatVjfYOSyTVAA4d
+F0VI3f7rGdvgGC/0EzqRTXgiFZwZ4vn/aFZIdxlyuYuvEeLhT6ONLMpwdGWD6LPN
+TNg+O6CO8odFf1+bYI6+dfWhWCHf4xVXM3I9pGp9CJfD582rfI4HcGyhQzsuTN3u
+WmAyE+d0DfNzfSGkaWjkODccyLBJ8Jvqfe48Fbwb3HIeSc6F/YiPxb6s3mbl+xn+
+Q+O6jXlMUAlkjB2lMclkcS8aYBOFxLoaTq272IMq8ZYDKMFeZSBoFpgOcvdd3p+6
+UliugF4Pyd1ZOTToS7XBQFEGahGXwkR5TR67EeUz0QNizDq9AP747phsffE0Szn2
+2R4i8y+VcXJbE7LPG7SWqhTA/+//PU6XnabjYKH2lmn+cNy48GtOHjoiDPH4cxMZ
+LpTVXR3fu5vkOpzO+qEWbKOBv8TbP6AKSz4mrsNHteJtTdi9jalsHHk4uaYbcy3i
+Q4CbG4h9TRiF9dS6ktiLD9my/KesOMe4LiDZMVstS5OJk9/iNgisyaMUFNHHt5o8
+qAnQ0Rr1VeKdqkjhIqChPRvr6t8jMwXp6gvt4An1oR2ZaVKy1hTim5/EK8yaxQhA
+/VceU/KcBi+sv1Zj7YrV4Aj2O8njqeS4pAl8SUl/X52xWXq5PoZLgbq+MX2WzUnv
+fwTsrhddaU4NWHNmm4VwYoHHQHiP7VT6PAkMlpoYJ5xRgW5I9uesRM/rYf0FKs6V
+Uvqan0OkZRf41wYHmJZDeSZNlaXWJzL7buHRzkxSe/sRo8MqMV5SCKD1NtS5Zpjb
+IcO9cXktnnKfCuoO1QKw25IQ/bHqGcHOWdJFEqVsFU6opCyQYtUK5gLgxHfpIg5N
+La1I/0LVAd/MW5RHSv+KO0wRCE36EuVFsLl8y2JllKd3utqVag8GbWXxaEjuY3h/
+jE0c2msrrRjpcpkx//R6pVsB1smc96eVRQ8eU4kNslCrCw==
+=WRzN
 -----END PGP MESSAGE-----
diff --git a/dot_config/private_borgmatic/encrypted_private_home.yaml.asc b/dot_config/private_borgmatic/encrypted_private_home.yaml.asc
new file mode 100644
index 0000000..5ca20a1
--- /dev/null
+++ b/dot_config/private_borgmatic/encrypted_private_home.yaml.asc
@@ -0,0 +1,39 @@
+-----BEGIN PGP MESSAGE-----
+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+=o5Ju
+-----END PGP MESSAGE-----
diff --git a/dot_config/private_borgmatic/encrypted_private_music.yaml.asc b/dot_config/private_borgmatic/encrypted_private_music.yaml.asc
new file mode 100644
index 0000000..a6a46fb
--- /dev/null
+++ b/dot_config/private_borgmatic/encrypted_private_music.yaml.asc
@@ -0,0 +1,38 @@
+-----BEGIN PGP MESSAGE-----
+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+=iDQK
+-----END PGP MESSAGE-----
diff --git a/dot_config/private_borgmatic/encrypted_private_pictures.yaml.asc b/dot_config/private_borgmatic/encrypted_private_pictures.yaml.asc
new file mode 100644
index 0000000..386f7d5
--- /dev/null
+++ b/dot_config/private_borgmatic/encrypted_private_pictures.yaml.asc
@@ -0,0 +1,38 @@
+-----BEGIN PGP MESSAGE-----
+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+=+84j
+-----END PGP MESSAGE-----
diff --git a/dot_config/private_borgmatic/encrypted_private_tosh.yaml.asc b/dot_config/private_borgmatic/encrypted_private_tosh.yaml.asc
new file mode 100644
index 0000000..d269968
--- /dev/null
+++ b/dot_config/private_borgmatic/encrypted_private_tosh.yaml.asc
@@ -0,0 +1,39 @@
+-----BEGIN PGP MESSAGE-----
+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=
+=mjV/
+-----END PGP MESSAGE-----
diff --git a/dot_config/systemd/user/backup-email.service b/dot_config/systemd/user/backup-email.service
new file mode 100644
index 0000000..47260f1
--- /dev/null
+++ b/dot_config/systemd/user/backup-email.service
@@ -0,0 +1,38 @@
+[Unit]
+Description=backup dovecot
+Wants=network-online.target
+BindsTo=dovecot.service
+After=network-online.target
+ConditionFileNotEmpty=/media/t/Archives/email/rak.ac/backup.sh
+Before=borgmatic@tosh.service
+
+[Install]
+WantedBy=borgmatic@tosh.service
+
+[Service]
+Type=oneshot
+LockPersonality=true
+MemoryDenyWriteExecute=no
+NoNewPrivileges=yes
+PrivateTmp=yes
+ProtectControlGroups=yes
+ProtectHostname=yes
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK
+RestrictNamespaces=yes
+RestrictRealtime=yes
+RestrictSUIDSGID=yes
+SystemCallArchitectures=native
+SystemCallFilter=@system-service
+SystemCallErrorNumber=EPERM
+ProtectSystem=full
+
+Nice=19
+CPUSchedulingPolicy=batch
+IOSchedulingClass=best-effort
+IOSchedulingPriority=7
+IOWeight=100
+
+Restart=no
+LogRateLimitIntervalSec=0
+
+ExecStart=/media/t/Archives/email/rak.ac/backup.sh
diff --git a/dot_config/systemd/user/backup-email.timer b/dot_config/systemd/user/backup-email.timer
new file mode 100644
index 0000000..bf49a60
--- /dev/null
+++ b/dot_config/systemd/user/backup-email.timer
@@ -0,0 +1,10 @@
+[Unit]
+Description=Backup email
+
+[Timer]
+OnCalendar=daily
+Persistent=true
+RandomizedDelaySec=3h
+
+[Install]
+WantedBy=timers.target
diff --git a/dot_config/systemd/user/backup-irclogs.service b/dot_config/systemd/user/backup-irclogs.service
new file mode 100644
index 0000000..424073a
--- /dev/null
+++ b/dot_config/systemd/user/backup-irclogs.service
@@ -0,0 +1,37 @@
+[Unit]
+Description=backup IRC logs
+Wants=network-online.target
+After=network-online.target
+ConditionFileNotEmpty=/media/t/Archives/irc-logs/backup.sh
+Before=borgmatic@tosh.service
+
+[Install]
+WantedBy=borgmatic@tosh.service
+
+[Service]
+Type=oneshot
+LockPersonality=true
+MemoryDenyWriteExecute=no
+NoNewPrivileges=yes
+PrivateTmp=yes
+ProtectControlGroups=yes
+ProtectHostname=yes
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK
+RestrictNamespaces=yes
+RestrictRealtime=yes
+RestrictSUIDSGID=yes
+SystemCallArchitectures=native
+SystemCallFilter=@system-service
+SystemCallErrorNumber=EPERM
+ProtectSystem=full
+
+Nice=19
+CPUSchedulingPolicy=batch
+IOSchedulingClass=best-effort
+IOSchedulingPriority=7
+IOWeight=100
+
+Restart=no
+LogRateLimitIntervalSec=0
+
+ExecStart=/media/t/Archives/irc-logs/backup.sh
diff --git a/dot_config/systemd/user/backup-irclogs.timer b/dot_config/systemd/user/backup-irclogs.timer
new file mode 100644
index 0000000..c074ecb
--- /dev/null
+++ b/dot_config/systemd/user/backup-irclogs.timer
@@ -0,0 +1,10 @@
+[Unit]
+Description=Backup irc logs
+
+[Timer]
+OnCalendar=weekly
+Persistent=true
+RandomizedDelaySec=1h
+
+[Install]
+WantedBy=timers.target
diff --git a/dot_config/systemd/user/borgmatic@.service b/dot_config/systemd/user/borgmatic@.service
new file mode 100644
index 0000000..0a2b3e7
--- /dev/null
+++ b/dot_config/systemd/user/borgmatic@.service
@@ -0,0 +1,61 @@
+[Unit]
+Description=borgmatic backup
+Wants=network-online.target
+After=network-online.target
+# Prevent borgmatic from running unless the machine is plugged into power. Remove this line if you
+# want to allow borgmatic to run anytime.
+ConditionACPower=true
+ConditionFileNotEmpty=/home/rak/.config/borgmatic/%I.yaml
+Documentation=https://torsion.org/borgmatic/
+
+[Service]
+Type=oneshot
+
+# Security settings for systemd running as root, optional but recommended to improve security. You
+# can disable individual settings if they cause problems for your use case. For more details, see
+# the systemd manual: https://www.freedesktop.org/software/systemd/man/systemd.exec.html
+LockPersonality=true
+# Certain borgmatic features like Healthchecks integration need MemoryDenyWriteExecute to be off.
+# But you can try setting it to "yes" for improved security if you don't use those features.
+MemoryDenyWriteExecute=no
+NoNewPrivileges=yes
+PrivateTmp=yes
+ProtectControlGroups=yes
+ProtectHostname=yes
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK
+RestrictNamespaces=yes
+RestrictRealtime=yes
+RestrictSUIDSGID=yes
+SystemCallArchitectures=native
+SystemCallFilter=@system-service
+SystemCallErrorNumber=EPERM
+# To restrict write access further, change "ProtectSystem" to "strict" and uncomment
+# "ReadWritePaths", "ReadOnlyPaths", "ProtectHome", and "BindPaths". Then add any local repository
+# paths to the list of "ReadWritePaths" and local backup source paths to "ReadOnlyPaths". This
+# leaves most of the filesystem read-only to borgmatic.
+ProtectSystem=full
+# ReadWritePaths=-/mnt/my_backup_drive
+# ReadOnlyPaths=-/var/lib/my_backup_source
+# This will mount a tmpfs on top of /root and pass through needed paths
+# ProtectHome=tmpfs
+# BindPaths=-/root/.cache/borg -/root/.config/borg -/root/.borgmatic
+
+# May interfere with running external programs within borgmatic hooks.
+#CapabilityBoundingSet=CAP_DAC_READ_SEARCH CAP_NET_RAW
+
+# Lower CPU and I/O priority.
+Nice=19
+CPUSchedulingPolicy=batch
+IOSchedulingClass=best-effort
+IOSchedulingPriority=7
+IOWeight=100
+
+Restart=no
+# Prevent rate limiting of borgmatic log events. If you are using an older version of systemd that
+# doesn't support this (pre-240 or so), you may have to remove this option.
+LogRateLimitIntervalSec=0
+
+# Delay start to prevent backups running during boot. Note that systemd-inhibit requires dbus and
+# dbus-user-session to be installed.
+#ExecStartPre=sleep 1m
+ExecStart=systemd-inhibit --who="borgmatic" --what="sleep:shutdown" --why="Prevent interrupting scheduled backup" /usr/bin/borgmatic --verbosity -1 --syslog-verbosity 1 -c ${HOME}/.config/borgmatic/%I.yaml
diff --git a/dot_config/systemd/user/borgmatic@.timer b/dot_config/systemd/user/borgmatic@.timer
new file mode 100644
index 0000000..d51c9b2
--- /dev/null
+++ b/dot_config/systemd/user/borgmatic@.timer
@@ -0,0 +1,10 @@
+[Unit]
+Description=Run borgmatic backup
+
+[Timer]
+OnCalendar=daily
+Persistent=true
+RandomizedDelaySec=3h
+
+[Install]
+WantedBy=timers.target