restic: allow the convenience script to source environmentFile (#6947)

modules/services/restic.nix

@@ -508,8 +508,12 @@ in
       in
       pkgs.writeShellApplication {
         name = "restic-${name}";
-        # https://github.com/koalaman/shellcheck/issues/1986
+        excludeShellChecks = [
-        excludeShellChecks = [ "SC2034" ];
+          # https://github.com/koalaman/shellcheck/issues/1986
+          "SC2034"
+          # Allow sourcing environmentFile
+          "SC1091"
+        ];
         bashOptions = [
           "errexit"
           "nounset"

tests/integration/standalone/restic-home.nix

@@ -119,6 +119,16 @@ in
           "--keep-hourly 3"
         ];
       };
+
+      env-file = {
+        inherit passwordFile paths exclude;
+        initialize = true;
+        repository = "/home/alice/repos/env-file";
+        environmentFile = "${pkgs.writeText "environmentFile" ''
+          SECRET=1234
+          TOKEN=123456789ABcdEF
+        ''}";
+      };
     };
   };
 }

tests/integration/standalone/restic.nix

@@ -271,6 +271,14 @@ in
     with subtest("Prune opts"):
       systemctl_succeed_as_alice("start restic-backups-prune-opts.service")
 
+    with subtest("Environment file"):
+      systemctl_succeed_as_alice("start restic-backups-env-file.service")
+      actual = succeed_as_alice("restic-env-file ls latest")
+      assert_list("restic-env-file ls latest", expectedIncluded, actual)
+
+      assert "exclude" not in actual, \
+        f"Paths containing \"*exclude*\" got backed up incorrectly. output: {actual}"
+
     logout_alice()
   '';
 }