NFS share

hosts/nixserve/default.nix

@@ -42,7 +42,8 @@
   users.groups.media = {};
   users.users.jellyfin.extraGroups = [ "media" ];
 
-  networking.firewall.allowedTCPPorts = [ 80 443 ];
+  networking.firewall.allowedTCPPorts = [ 80 443 111 2049 4000 4001 4002 20048 /* NFS */ ];
+  networking.firewall.allowedUDPPorts = [ 111 2049 4000 4001 4002 20048 /* NFS */ ];
 
   programs.zsh.enable = true;
   security.polkit.enable = true;

hosts/nixserve/services.nix

@@ -35,6 +35,16 @@ let
   };
 in
 {
+  services.nfs.server = {
+    enable = true;
+    statdPort = 4000;
+    lockdPort = 4001;
+    mountdPort = 4002;
+    exports = ''
+      /media  192.168.50.0/24(rw,sync,no_subtree_check,all_squash,anonuid=1000,anongid=1000,fsid=0)
+    '';
+  };
+
   services.jellyfin.enable = true;
 
   services.tailscale = {