linuxlab.nix/machines/nfs/nfs.nix

{
  services.nfs.server = {
    enable = true;
    exports = ''
      /home   10.32.45.0/24(rw,async,no_root_squash)
    '';
  };

  networking.firewall.allowedTCPPorts = [
    2049 # NFSv4
  ];
}