{ config, lib, ... }:
{
  imports = [ ./user ];

  config = lib.mkIf config.services.fileserver.enable {
    services.nfs.server = {
      enable = true;
      exports = ''
        /storage/Files *(rw,sync,no_subtree_check)
        /storage/Media *(rw,sync,no_subtree_check)
        /storage/Music *(rw,sync,no_subtree_check)
      '';
    };
    networking.firewall.extraInputRules = "ip saddr 10.0.0.0/8 tcp dport 2049 accept";
  };
}