This works on a freshly installed machine without ssh config yet.
cd $HOME
LOG=.cache/backup/log
PATH=$PATH:/sbin:/usr/sbin
-#RESTIC="restic --password-file $HOME/.config/backup-passphrase --repo sftp:piware.de:backup/restic"
+# use default SSH key
+# RESTIC="restic --password-file $HOME/.config/backup-passphrase --repo sftp://piware.de:659/backup/restic"
# use TPM key; requires ~/.ssh/authorized_keys with
# command="internal-sftp -d backup/restic",restrict KEY tpm-backup@abakus
RESTIC="restic --password-file $HOME/.config/backup-passphrase --repo sftp:piwaretpmbackup:"