diff --git a/nixos/fuchsia/services/borgbackup/offsite.nix b/nixos/fuchsia/services/borgbackup/offsite.nix
index 519b655..52ff0d0 100644
--- a/nixos/fuchsia/services/borgbackup/offsite.nix
+++ b/nixos/fuchsia/services/borgbackup/offsite.nix
@@ -81,7 +81,9 @@
       passCommand = "cat ${config.age.secrets.borgbackup.path}";
     };
 
-    environment.BORG_RSH = "ssh -i /etc/ssh/ssh_host_ed25519_key";
+    environment = {
+      BORG_RSH = "ssh -i /etc/ssh/ssh_host_ed25519_key";
+    };
 
     compression = "zstd,9";
     startAt = "14:00"; # Daily at 2pm when system is reliably awake
diff --git a/nixos/fuchsia/services/borgbackup/onsite.nix b/nixos/fuchsia/services/borgbackup/onsite.nix
index ed17648..4a1e8d5 100644
--- a/nixos/fuchsia/services/borgbackup/onsite.nix
+++ b/nixos/fuchsia/services/borgbackup/onsite.nix
@@ -75,7 +75,10 @@ in {
     # No encryption for onsite backups (physical security assumed)
     encryption.mode = "none";
 
-    environment.BORG_RSH = "ssh -i /etc/ssh/ssh_host_ed25519_key";
+    environment = {
+      BORG_RSH = "ssh -i /etc/ssh/ssh_host_ed25519_key";
+      BORG_UNKNOWN_UNENCRYPTED_REPO_ACCESS_IS_OK = "yes";
+    };
 
     compression = "zstd,9";
     startAt = "hourly";
diff --git a/nixos/viridian/services/borgbackup/offsite.nix b/nixos/viridian/services/borgbackup/offsite.nix
index df766b4..3ea5790 100644
--- a/nixos/viridian/services/borgbackup/offsite.nix
+++ b/nixos/viridian/services/borgbackup/offsite.nix
@@ -100,7 +100,10 @@
       passCommand = "cat ${config.age.secrets.borgbackup.path}";
     };
 
-    environment.BORG_RSH = "ssh -i /etc/ssh/ssh_host_ed25519_key";
+    environment = {
+      BORG_RSH = "ssh -i /etc/ssh/ssh_host_ed25519_key";
+    };
+
     compression = "zstd,9";
     startAt = "daily"; # Daily at midnight
 
diff --git a/nixos/viridian/services/borgbackup/onsite.nix b/nixos/viridian/services/borgbackup/onsite.nix
index 2108e84..51cc50e 100644
--- a/nixos/viridian/services/borgbackup/onsite.nix
+++ b/nixos/viridian/services/borgbackup/onsite.nix
@@ -103,6 +103,10 @@ in {
     # No encryption for local backups (physical security assumed)
     encryption.mode = "none";
 
+    environment = {
+      BORG_UNKNOWN_UNENCRYPTED_REPO_ACCESS_IS_OK = "yes";
+    };
+
     compression = "zstd,9";
     startAt = "hourly";