Monitoring primarily

README.org

@@ -157,6 +157,30 @@ All service data under =/mnt/data/=:
 Nextcloud is placed into maintenance mode and postgres is =pg_dump='d before
 each backup to ensure a consistent snapshot.
 
+** First-time setup — initialize the repository
+
+Restic requires a one-time =init= before the first backup can run.  The
+automated job will fail with "repository does not exist" until this is done.
+
+Run on the Pi after the first deploy:
+
+#+begin_src bash
+# Note: use single quotes around the remote script to prevent local shell expansion
+ssh admin@192.168.1.100 'sudo bash -c '"'"'
+  export AWS_ACCESS_KEY_ID=$(cat /run/secrets/restic/s3_access_key_id)
+  export AWS_SECRET_ACCESS_KEY=$(cat /run/secrets/restic/s3_secret_access_key)
+  export RESTIC_PASSWORD=$(cat /run/secrets/restic/password)
+  restic -r s3:https://s3.us-east-005.backblazeb2.com/zakobar-home-backup init
+'"'"''
+#+end_src
+
+You only need to do this once.  After =init= succeeds, the daily timer will
+run normally.  To trigger a backup immediately without waiting for 03:00:
+
+#+begin_src bash
+ssh admin@192.168.1.100 "sudo systemctl start restic-backups-homey.service"
+#+end_src
+
 ** Configuration
 
 Repository URL and credentials are set per-host: