Switch backup script to template and move lots of tarsnap config values to variables