diff --git a/hosts/activity-relay/default.nix b/hosts/activity-relay/default.nix
index 050613c9..df69e4af 100644
--- a/hosts/activity-relay/default.nix
+++ b/hosts/activity-relay/default.nix
@@ -25,10 +25,13 @@
       };
     };
 
-    redis = {
+    backup = {
       enable = true;
+      paths = [ "/var/lib/activity-relay/" ];
     };
 
+    redis.enable = true;
+
     nginx = {
       enable = true;
       virtualHosts."activity-relay.serv.zentralwerk.org" = {
diff --git a/hosts/auth/default.nix b/hosts/auth/default.nix
index c9c8dc29..e3b49be5 100644
--- a/hosts/auth/default.nix
+++ b/hosts/auth/default.nix
@@ -13,6 +13,11 @@
   };
 
   services = {
+    backup = {
+      enable = true;
+      paths = [ "/var/lib/portunus/" ];
+    };
+
     dex.settings.oauth2.skipApprovalScreen = true;
 
     nginx = {
diff --git a/hosts/blogs/default.nix b/hosts/blogs/default.nix
index 07dd24f2..b1fdee2d 100644
--- a/hosts/blogs/default.nix
+++ b/hosts/blogs/default.nix
@@ -7,6 +7,11 @@
   networking.hostName = "blogs";
 
   services = {
+    bacup = {
+      backup = true;
+      paths = [ "/var/lib/plume/" ];
+    };
+
     nginx = {
       enable = true;
       virtualHosts."blogs.c3d2.de" = {
diff --git a/hosts/gnunet/default.nix b/hosts/gnunet/default.nix
index f1f5c88d..fde3835e 100644
--- a/hosts/gnunet/default.nix
+++ b/hosts/gnunet/default.nix
@@ -10,12 +10,19 @@ _:
 
   networking.hostName = "gnunet";
 
-  services.gnunet = {
-    enable = true;
-    load = {
-      # bits/s
-      maxNetDownBandwidth = 1000 * 1000 * 1000;
-      maxNetUpBandwidth = 1 * 1000 * 1000;
+  services = {
+    backup = {
+      enable = true;
+      paths = [ "/var/lib/gnunet/" ];
+    };
+
+    gnunet = {
+      enable = true;
+      load = {
+        # bits/s
+        maxNetDownBandwidth = 1000 * 1000 * 1000;
+        maxNetUpBandwidth = 1 * 1000 * 1000;
+      };
     };
   };
 
diff --git a/hosts/hedgedoc/default.nix b/hosts/hedgedoc/default.nix
index f5089a53..15b6a966 100644
--- a/hosts/hedgedoc/default.nix
+++ b/hosts/hedgedoc/default.nix
@@ -8,7 +8,10 @@
   networking.hostName = "hedgedoc";
 
   services = {
-    backup.paths = [ "/var/lib/hedgedoc" ];
+    backup = {
+      enable = true;
+      paths = [ "/var/lib/hedgedoc/" ];
+    };
 
     hedgedoc = {
       enable = true;
diff --git a/hosts/home-assistant/default.nix b/hosts/home-assistant/default.nix
index 63610050..3e80b2e8 100644
--- a/hosts/home-assistant/default.nix
+++ b/hosts/home-assistant/default.nix
@@ -35,6 +35,11 @@ in
   services = {
     avahi.enable = true;
 
+    backup = {
+      enable = true;
+      paths = [ "/var/lib/hass/" ];
+    };
+
     home-assistant = {
       enable = true;
       config = {
diff --git a/hosts/mailtngbert/default.nix b/hosts/mailtngbert/default.nix
index 9363749e..2fa46e05 100644
--- a/hosts/mailtngbert/default.nix
+++ b/hosts/mailtngbert/default.nix
@@ -47,6 +47,11 @@ in
   };
 
   services = {
+    backup = {
+      enable = true;
+      paths = [ "/var/lib/dovecot/" "/var/lib/postfix/" ];
+    };
+
     portunus.addToHosts = true;
 
     postfix = {
diff --git a/hosts/mobilizon/default.nix b/hosts/mobilizon/default.nix
index ffe81694..96015c2b 100644
--- a/hosts/mobilizon/default.nix
+++ b/hosts/mobilizon/default.nix
@@ -10,6 +10,11 @@
   networking.hostName = "mobilizon";
 
   services = {
+    backup = {
+      exclude = [ "/var/lib/mobilizon/geo/" "/var/lib/mobilizon/secret-env.sh" "/var/lib/mobilizon/tzdata/" ];
+      paths = [ "/var/lib/mobilizon/" ];
+    };
+
     mobilizon = {
       enable = true;
       settings = let
diff --git a/hosts/sdrweb/default.nix b/hosts/sdrweb/default.nix
index 9d586c61..3c474fed 100644
--- a/hosts/sdrweb/default.nix
+++ b/hosts/sdrweb/default.nix
@@ -16,6 +16,11 @@
   networking.hostName = "sdrweb";
 
   services = {
+    backup = {
+      enable = true;
+      paths = [ "/var/lib/private/openwebrx/" ];
+    };
+
     collectd.plugins = {
       curl_json = ''
         <URL "http://localhost:8073/metrics.json">