diff --git a/hosts/nixserve/default.nix b/hosts/nixserve/default.nix
index 137d3c8..0462fb0 100644
--- a/hosts/nixserve/default.nix
+++ b/hosts/nixserve/default.nix
@@ -42,7 +42,8 @@
   users.groups.media = {};
   users.users.jellyfin.extraGroups = [ "media" ];
 
-  networking.firewall.allowedTCPPorts = [ 80 443 ];
+  networking.firewall.allowedTCPPorts = [ 80 443 111 2049 4000 4001 4002 20048 /* NFS */ ];
+  networking.firewall.allowedUDPPorts = [ 111 2049 4000 4001 4002 20048 /* NFS */ ];
 
   programs.zsh.enable = true;
   security.polkit.enable = true;
diff --git a/hosts/nixserve/services.nix b/hosts/nixserve/services.nix
index d5619f0..7abe70d 100644
--- a/hosts/nixserve/services.nix
+++ b/hosts/nixserve/services.nix
@@ -35,6 +35,16 @@ let
   };
 in
 {
+  services.nfs.server = {
+    enable = true;
+    statdPort = 4000;
+    lockdPort = 4001;
+    mountdPort = 4002;
+    exports = ''
+      /media  192.168.50.0/24(rw,sync,no_subtree_check,all_squash,anonuid=1000,anongid=1000,fsid=0)
+    '';
+  };
+
   services.jellyfin.enable = true;
 
   services.tailscale = {