diff --git a/nodes/htz-hel/backup-kunsi.py b/nodes/htz-hel/backup-kunsi.py
new file mode 100644
index 0000000..40a921a
--- /dev/null
+++ b/nodes/htz-hel/backup-kunsi.py
@@ -0,0 +1,37 @@
+nodes['htz-hel.backup-kunsi'] = {
+    'hostname': '2a01:4f9:6b:2d99::1337',
+    'bundles': {
+        'backup-server',
+        'dm-crypt',
+        'zfs',
+    },
+    'groups': {
+        'debian-bullseye',
+    },
+    'metadata': {
+        'apt': {
+            'unattended-upgrades': {
+                # requires manual apply after reboot to unlock dm-crypt
+                # devices
+                'reboot-enabled': False,
+            },
+        },
+        'interfaces': {
+            'ens18': {
+                'ips': {
+                    '2a01:4f9:6b:2d99::1337/64',
+                },
+                'gateway6': '2a01:4f9:6b:2d99::2',
+            },
+        },
+        'backups': {
+            # This is the backup target.
+            'exclude_from_backups': True,
+        },
+        'backup-server': {
+            'encrypted-devices': {
+                '/dev/sdb1': bwpass.password('bw/backup-kunsi/encryption-passphrase'),
+            },
+        },
+    },
+}