diff --git a/host/montalin/backup.nix b/host/montalin/backup.nix
index 68a3341..a899546 100644
--- a/host/montalin/backup.nix
+++ b/host/montalin/backup.nix
@@ -2,18 +2,16 @@
 
 let
   mountService = "var-backup-disk.mount";
-  repo = "/var/backup/disk/montalin"; # TODO: Does this make sense?
+  backupDisk = "/var/backup/disk";
+  repo = "${backupDisk}/montalin";
 in {
   services.borgbackup.jobs = {
     data = {
-      exclude = [
-        "/var/backup" # TODO: Does this make sense?
-        "/var/tmp"
-        "/var/cache"
-      ];
-      paths = [ "/etc" "/home" "/root" "/var" ];
-      preHook = "systemctl mount ${mountService}";
+      exclude = [ backupDisk "/var/tmp" "/var/cache" ];
+      paths = [ "/etc" "/home" "/root" "/var" "/secrets" ];
+      preHook = "systemctl start ${mountService}";
       postHook = "systemctl stop ${mountService}";
+      readWritePaths = [ backupDisk ];
       prune.keep = {
         within = "14d";
         weekly = 4;