nixos-config/hosts/x86_64-linux/beleth/nfs.nix

{
  config,
  lib,
  inputs,
  ...
}: {
  #            "2a0f:be01:0:100::/64"
  #            "2a0f:be01:0:200::/64"
  #            "2a0f:be01:fe:f00::/56"
  services.nfs = {
    server = {
      enable = true;
      exports = ''
        /export 	2a0f:be01:0:100::/64(ro,insecure,crossmnt,async,fsid=0,no_subtree_check) 2a0f:be01:0:200::/64(ro,insecure,crossmnt,async,fsid=0,no_subtree_check) 2a0f:be01:fe:f00::/56(ro,insecure,crossmnt,async,fsid=0,no_subtree_check)
      '';
    };
  };

  networking.firewall.allowedTCPPorts = [111 2049 /* 4000 4001 4002 20048 */];
  networking.firewall.extraInputRules = ''
    iifname wg0 ip6 saddr { 2a0f:be01:0:100::/64, 2a0f:be01:0:200::/64, 2a0f:be01:fe:f00::/56 } tcp dport { 111, 2049 } accept
  '';

  fileSystems = {
    "/export/shows" = {
      device = "/home/xqtc/jellyfin/shows";
      options = ["bind"];
    };
    "/export/movies" = {
      device = "/home/xqtc/jellyfin/movies";
      options = ["bind"];
    };
    "/export/music" = {
      device = "/home/xqtc/jellyfin/music";
      options = ["bind"];
    };
  };
}