{ ... }:
{
  networking.firewall.allowedTCPPorts = [ 2049 ];
  # networking.firewall.allowedUDPPorts = [ 111 2049 4000 4001 4002 20048 ];
  fileSystems."/export/containers" = {
    device = "/Velaris/Containers";
    options = [ "bind" ];
  };
  services.nfs.server = {
    enable = true;
    createMountPoints = true;
    lockdPort = 4001;
    mountdPort = 4002;
    statdPort = 4000;
    exports = ''
      /export 10.5.0.0/24(rw,fsid=0,no_subtree_check)
      /export/containers 10.5.0.0/24(rw,nohide,insecure,no_subtree_check)
    '';
  };
}