From: Skullheadx <admonty1@protonmail.com>
Date: Thu, 4 Jun 2026 02:03:15 +0000 (-0400)
Subject: nfs
X-Git-Url: http://git.skullheadx.com/index.css?a=commitdiff_plain;h=b3038106c095363d83eb2ca573cf9cf008fce4a6;p=nixos.git

nfs
---

diff --git a/hosts/icon/configuration.nix b/hosts/icon/configuration.nix
index 658e4bf..06d7350 100644
--- a/hosts/icon/configuration.nix
+++ b/hosts/icon/configuration.nix
@@ -131,6 +131,24 @@
     hostName = "skullheadx.com";
   };
 
+  # NFS
+  services.nfs = {
+    server = {
+      enable = true;
+      createMountPoints = true;
+      exports = ''
+        /srv/data *(rw,sync,no_subtree_check,crossmnt,fsid=0,root_squash)
+      '';
+      extraNfsdConfig = ''
+        [nfsd]
+        vers3=off
+        vers4=yes
+        udp=off
+        tcp=on
+      '';
+    };
+  };
+
   networking.hostName = "icon";
   # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
 
@@ -142,6 +160,7 @@
   # $ nix search wget
   environment.systemPackages = with pkgs; [
     wireguard-tools
+    nfs-utils
     btop
     nethogs
   ];
@@ -174,8 +193,8 @@
   };
 
   # Open ports in the firewall.
-  networking.firewall.allowedTCPPorts = [9418 8080 6667];
-  networking.firewall.allowedUDPPorts = [55555];
+  networking.firewall.allowedTCPPorts = [9418 8080 6667 2049]; # git, gitweb, irc, nfs
+  networking.firewall.allowedUDPPorts = [55555]; # wireguard
   # Or disable the firewall altogether.
   # networking.firewall.enable = false;