on the backup machine, I have

```
services.borgbackup.repos = {
  reponame = {
    allowSubRepos = true;
    authorizedKeys = [ "pubkey id" ];
    group = "users";
    path = /home/user/backups;
    user = "user";
  };
};
```