VEGAS: NFS

hosts/VEGAS/services/nfs/default.nix

@@ -0,0 +1,12 @@
+{ lib, tools, ... }:
+{
+  imports = [ ./exports.nix ];
+  services.nfs = {
+    server = {
+      enable = true;
+    };
+    idmapd.settings = {
+      General.Domain = lib.mkForce tools.meta.domain;
+    };
+  };
+}

hosts/VEGAS/services/nfs/exports.nix

@@ -0,0 +1,14 @@
+let
+  entry = { directory, network, security ? "krb5i", writable ? true, options ? [] }:
+  let
+    mode = if writable then "rw" else "ro";
+    optionsFinal = [ mode "sec=${security}" ] ++ options;
+    concat = builtins.concatStringsSep "," optionsFinal;
+  in "${directory} ${network}(${concat})";
+
+  exports = map entry [
+    { directory = "/srv/storage/www/soda"; network = "10.10.2.0/24"; options = [ "no_root_squash" ]; }
+  ];
+in {
+  services.nfs.server.exports = builtins.concatStringsSep "\n" exports;
+}

hosts/VEGAS/system.nix

@@ -24,6 +24,7 @@
       ./services/git
       ./services/ipfs
       ./services/jokes
+      ./services/nfs
     ]
     # TODO: fix users
     # ++ (import ../../users "server").groups.admin