{ ... }:
{
  networking.firewall.allowedTCPPorts = [ 111 2049 ];
  fileSystems."/export/containers" = {
    device = "/Velaris/Containers";
    options = [ "bind" ];
  };
  services.nfs.server = {
    enable = true;
    createMountPoints = true;
    lockdPort = 4001;
    mountdPort = 4002;
    statdPort = 4000;
    exports = ''
      /export         10.5.0.2(rw,fsid=0,no_subtree_check,vers=4)
      /export/containers  10.5.0.2(rw,nohide,insecure,no_subtree_check,vers=4)
    '';
  };
}