h,europa: wrap restic bin more intelligently

bins/restic.nix

@@ -1,9 +1,17 @@
-{ pkgs }:
+{ lib, pkgs, config, ... }:
 
-let resticBin = "${pkgs.restic}/bin/restic";
+assert (builtins.length
+  (lib.mapAttrsToList (a: _: a) config.services.restic.backups)) <= 1;
+
+let
+  resticBin = "${pkgs.restic}/bin/restic";
+  cfg = config.services.restic.backups;
+  bkp = lib.mapAttrs' (_: lib.nameValuePair "default") cfg;
 in ''
   #!/usr/bin/env sh
 
-  export $(cat /run/secrets/restic_env_file)
-  ${resticBin} --password-file /run/secrets/restic_password_file $@
+  set -e
+
+  export $(cat ${bkp.default.environmentFile})
+  ${resticBin} -r ${bkp.default.repository} --password-file ${bkp.default.passwordFile} $@
 ''

hosts/europa/default.nix

@@ -1,5 +1,10 @@
 { config, pkgs, lib, xinlib, ... }:
 let
+  restic = pkgs.writeScriptBin "restic" (import ../../bins/restic.nix {
+    inherit pkgs;
+    inherit lib;
+    inherit config;
+  });
   myEmacs = pkgs.callPackage ../../configs/emacs.nix { };
   peerixUser = if builtins.hasAttr "peerix" config.users.users then
     config.users.users.peerix.name
@@ -294,6 +299,8 @@ in {
     })
     (callPackage ../../pkgs/gokrazy.nix { })
     (callPackage ../../pkgs/zutty.nix { })
+
+    restic
   ];
 
   # for Pharo

hosts/h/default.nix

@@ -1,8 +1,11 @@
 { config, pkgs, isUnstable, ... }:
 with pkgs;
 let
-  restic = pkgs.writeScriptBin "restic"
-    (import ../../bins/restic.nix { inherit pkgs; });
+  restic = pkgs.writeScriptBin "restic" (import ../../bins/restic.nix {
+    inherit pkgs;
+    inherit lib;
+    inherit config;
+  });
   gqrss = callPackage ../../pkgs/gqrss.nix { inherit isUnstable; };
   icbirc = callPackage ../../pkgs/icbirc.nix { inherit isUnstable; };
   mcchunkie = callPackage ../../pkgs/mcchunkie.nix { inherit isUnstable; };