{ config, lib, ... }:
{
  imports = [ ./user ];

  config = lib.mkIf config.services.fileserver.enable {
    services.nfs.server = {
      enable = true;
      exports = "/storage *(rw,sync,no_subtree_check)";
    };
    networking.firewall.extraInputRules = "ip saddr 10.0.0.0/8 tcp dport 2049 accept";
  };
}