In ekohl/puppet-restic#1 I started to write my own module before I found yours. It's mostly based on https://tdem.in/post/restic-with-systemd/ and that uses an interesting approach, which I like a lot more than yours.

It uses a [email protected] so you end up with [email protected]. Then if you do need to override anything, you can use a drop in file instead of changing the whole service. I think that's much more native than creating many services.

Another thing is that it uses AmbientCapabilities=CAP_DAC_READ_SEARCH so the user can read all files, like root does. This means the service can run with a regular user instead of root.

Would you be open to changing to this approach?