diff --git a/hosts/common/optional/nixos-containers/nix-bitcoin.nix b/hosts/common/optional/nixos-containers/nix-bitcoin.nix
index 93a1b98..ca4753f 100644
--- a/hosts/common/optional/nixos-containers/nix-bitcoin.nix
+++ b/hosts/common/optional/nixos-containers/nix-bitcoin.nix
@@ -20,6 +20,18 @@ in {
     ];
   };
 
+  services.restic.backups = {
+    daily = {
+      paths = [
+        "/media/main-ssd/nix-bitcoin/"
+      ];
+      exclude = [
+        "/media/main-ssd/nix-bitcoin/bitcoind"
+        "/media/main-ssd/nix-bitcoin/electrs"
+      ];
+    };
+  };
+
   networking.nat.enable = true;
   networking.nat.internalInterfaces = ["ve-+"];
   networking.nat.externalInterface = "br0";
@@ -132,7 +144,9 @@ in {
           };
           extraConfig = ''
             alias=bitlab21
-            '';
+            tor.active=true
+            tor.skip-proxy-for-clearnet-targets=1
+          '';
         };
         rtl = {
           enable = true;
diff --git a/hosts/common/users/sam/default.nix b/hosts/common/users/sam/default.nix
index e8d669a..6d3ea29 100644
--- a/hosts/common/users/sam/default.nix
+++ b/hosts/common/users/sam/default.nix
@@ -14,6 +14,18 @@
   baseddataPostgresIp = configVars.networking.addresses.postgres.ip;
   username = "sam";
 in {
+  services.restic.backups = {
+    daily = {
+      paths = [
+        "/home/${username}/"
+      ];
+      exclude = [
+        "/home/${username}/.mozilla"
+        "/home/${username}/.cache"
+      ];
+    };
+  };
+
   users.users.${username} = {
     isNormalUser = true;
     shell = pkgs.zsh; # default shell
@@ -27,6 +39,8 @@ in {
       "lp"
       "docker"
       "podman"
+      "render"
+      "video"
     ];
   };
   services.tailscale.enable = true;
diff --git a/hosts/semita/default.nix b/hosts/semita/default.nix
index dc6cb4f..55cf4a1 100644
--- a/hosts/semita/default.nix
+++ b/hosts/semita/default.nix
@@ -58,7 +58,8 @@ in {
     ../common/optional/nix-ld.nix
     ../common/optional/gaming.nix
 
-    ../common/optional/docker/jellyfin.nix
+    ../common/optional/restic-backup.nix
+    ../common/optional/nixos-containers/backup-server.nix
   ];
 
   fileSystems."/media/main-ssd" = {