diff --git a/flake.nix b/flake.nix
index e52aa76..4a46f8f 100644
--- a/flake.nix
+++ b/flake.nix
@@ -497,10 +497,17 @@
 
                 environment.systemPackages = [
                   postgresql
-                  pgbackrest
-                  rclone
                   self.packages.${pkgs.system}.scram-sha-256
-                ];
+                ] ++ (
+                  if cfg.backup.enable && (!cfg.replication.enable || cfg.replication.role == "primary")
+                  then
+                    [
+                      pgbackrest
+                      rclone
+                    ]
+                  else
+                    [ ]
+                );
 
                 # networking.firewall.allowedTCPPorts = [ cfg.port ];