diff --git a/machines/elendel/default.nix b/machines/elendel/default.nix
index 7251e426..0f7f8191 100644
--- a/machines/elendel/default.nix
+++ b/machines/elendel/default.nix
@@ -41,6 +41,14 @@
       nix.enableDirenv = true;
       zfs = {
         enable = true;
+        backups = [
+          {
+            path = "zroot/safe/data";
+            remotePath = "zroot/recv/elendel/safe/data";
+            fast = true;
+            location = "marabethia.vanpetegem.me";
+          }
+        ];
         rootDataset = "zroot/local/root";
         rootPool = "zroot";
       };
diff --git a/machines/marabethia/default.nix b/machines/marabethia/default.nix
index af1d5193..c7d3db1f 100644
--- a/machines/marabethia/default.nix
+++ b/machines/marabethia/default.nix
@@ -29,6 +29,32 @@
       nix.enableDirenv = true;
       zfs = {
         enable = true;
+        backups = [
+          {
+            path = "zroot/safe/data";
+            remotePath = "zdata/recv/marabethia/safe/data";
+            fast = true;
+            location = "elendel.vanpetegem.me";
+          }
+          {
+            path = "zroot/safe/services/forgejo";
+            remotePath = "zdata/recv/marabethia/safe/services/forgejo";
+            fast = true;
+            location = "elendel.vanpetegem.me";
+          }
+          {
+            path = "zroot/safe/services/nextcloud";
+            remotePath = "zdata/recv/marabethia/safe/services/nextcloud";
+            fast = true;
+            location = "elendel.vanpetegem.me";
+          }
+          {
+            path = "zroot/safe/services/postgresql";
+            remotePath = "zdata/recv/marabethia/safe/services/postgresql";
+            fast = true;
+            location = "elendel.vanpetegem.me";
+          }
+        ];
         rootDataset = "zroot/local/root";
         rootPool = "zroot";
       };
diff --git a/secrets/authorized_keys/charlotte.age b/secrets/authorized_keys/charlotte.age
index 022d0905..4db35656 100644
Binary files a/secrets/authorized_keys/charlotte.age and b/secrets/authorized_keys/charlotte.age differ
diff --git a/secrets/authorized_keys/root.age b/secrets/authorized_keys/root.age
index 2a796a84..38c16f74 100644
Binary files a/secrets/authorized_keys/root.age and b/secrets/authorized_keys/root.age differ