The problem seems to be that when you run restic with systemctl start, it passen on your user environment including the information of where your rclone.conf lies. When the systemd service runs on its own it doesn't have this.
You need to either tell restic the path to your rclone config or set the home environment such that the systemd service checks the right location.
I've done this using separate networks, each device group I want to treat differently get's its own subnet/vlan pair and I firewall the whole vlan. No matter what ips clients have (or even what ips they statically set themself) they can't get past the firewall.
To physically get them connected to the network I use something similar to this config to have one wpa2-personal ssid that leads to multiple vlans depending on the password. Though you could also have multiple ssids with one vlan each or even wpa2-enterprise.
The router doesn't know the IP of android devices (though it doesn't need to), it only knows the vlans of the clients and what network they come from.
For all other clients I have dhcpv6.
DNS is on the router and can be set for each network.
Lots of bugfixes. Assorted user visible changes and fixes:
[...]
Nocow writes can now be rebalanced (e.g. background_target,
background_compression options)
Repair improvements: we'll now reconstruct missing inodes if we find
contents for that inode (more than one or two keys), not just if the
inodes btree was damaged: similarly for 'dirent to missing inode'.
These messages don't fill me with confidence, they sound like new features and seem somewhat complicated. Maybe they were already implemented and just broken and now fixed but remembering his track record...
Yeah I know, that's just mostly the debate I'm seeing.
I think the most viable good solution is EU regulation, maybe through citizen initiative, seeing as payment processors are one of the biggest Gatekeeper around.
A mirror isn't a full backup, are you sure you don't want to use something like restic?If someone deletes a file it's gone, if a virus overwrites it good luck.
You didn't specify if your pool should be a distributed one or one individual pool per nas.
What's the difference to sharing to the Paperless mobile app?