move restic to nixosModules

flake.nix

@@ -46,6 +46,7 @@
         inherit system;
         specialArgs = specialArgs // { inherit inputs system; };
         modules = [
+          self.nixosModules.default
           home-manager.nixosModules.home-manager
           nur.nixosModules.nur
         ] ++ modules;
@@ -53,7 +54,7 @@
       evalSecrets = import ./eval_secrets.nix;
     in
     {
-      nixosModules = import ./modules/nixos;
+      nixosModules.default = import ./modules/nixos;
       homeManagerModules = import ./modules/home-manager;
 
       colmena = {

machines/calcite/configuration.nix

@@ -7,7 +7,6 @@
       ./hardware-configuration.nix
       ./network.nix
       ../sops.nix
-      ../restic.nix
     ];
 
   # Bootloader.
@@ -247,6 +246,7 @@
       sopsFile = ./secrets.yaml;
     };
   };
+  custom.restic.enable = true;
   custom.restic.repositoryFile = config.sops.secrets.restic_repo_calcite.path;
   custom.restic.passwordFile = config.sops.secrets.restic_repo_calcite_password.path;
 

modules/nixos/default.nix

@@ -1,3 +1,6 @@
+{ config, pkgs, ... }:
 {
-  
+  imports = [
+    ./restic.nix
+  ];
 }

modules/nixos/restic.nix

@@ -5,6 +5,7 @@ in
 {
   options = {
     custom.restic = {
+      enable = lib.mkEnableOption "restic";
       repositoryFile = lib.mkOption {
         type = lib.types.str;
         default = "";
@@ -16,7 +17,7 @@ in
     };
   };
   config = {
-    services.restic.backups = {
+    services.restic.backups = lib.mkIf cfg.enable {
       remotebackup = {
         repositoryFile = cfg.repositoryFile;
         passwordFile = cfg.passwordFile;