Improve borg config

container-config/borgmatic/config.yaml

@@ -3,10 +3,14 @@ source_directories:
   - /run/host/var/home
   - /run/host/var/lib/container-data
   - /run/host/var/lib/containers/storage/secrets
-  - /run/host/var/lib/containers/storage/volumes
+  - /run/host/var/lib/containers/storage/volumes/systemd-*
   - /run/host/var/roothome
 exclude_patterns:
   - /run/host/var/lib/containers/storage/volumes/systemd-monero
+repositories:
+  - label: remote
+    path: ${BORG_REMOTE}
+encryption_passphrase: ${BORG_PASSWORD}
 keep_daily: 7
 keep_weekly: 4
 keep_monthly: 3

home/etc/containers/systemd/borgmatic.container.d/override.conf

@@ -0,0 +1,2 @@
+[Container]
+Network=postgresql.network

server/etc/containers/systemd/borgmatic.container

@@ -11,6 +11,8 @@ Volume=borgmatic-config.volume:/root/.config/borg:U,Z
 Volume=borgmatic-ssh.volume:/root/.ssh:U,Z
 Tmpfs=/etc/crontabs
 Environment=BACKUP_CRON="0 0 * * *"
+Secret=BORG_PASSWORD,type=env
+Secret=BORG_REMOTE,type=env
 AutoUpdate=registry
 [Install]
 WantedBy=multi-user.target