Add retention policy for restic.

cl.yaml

@@ -65,7 +65,7 @@ systemd:
         [Service]
         Type=oneshot
         EnvironmentFile=/restic-env
-        ExecStart=/usr/bin/bash -c "docker run --rm --volume /nassella:/nassella --volume /restic-password:/restic-password -e AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID} -e AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY} -i restic/restic:0.18.0 backup --verbose --repo s3:${BACKBLAZE_BUCKET_URL} --password-file /restic-password --tag daily_automatic /nassella"
+        ExecStart=/restic-scheduled-snapshot.sh
         ExecStopPost=systemctl start app.service
 
     - name: restic-backup.timer
@@ -152,6 +152,10 @@ storage:
       mode: 0755
       contents:
         local: restic-snapshot.sh
+    - path: /restic-scheduled-snapshot.sh
+      mode: 0755
+      contents:
+        local: restic-scheduled-snapshot.sh
     - path: /etc/ssh/sshd_config.d/custom.conf
       overwrite: true
       mode: 0600