Another solution I use for my regular backups:
- Dedicated cloud backup server running rest-server
- Every host and repos on the host use individual restic repository password and backup data to the server
- After adding new repo I manually add second common key/password for created repo on the server
- Run scheduled forget, check and report tasks for every repo on the server using common repo password
- Scheduled rsync all repos from backup server to home NAS