{ ... }:

{
  fileSystems."/export/mynix" = {
    device = "/home/jan/mynix";
    options = [ "bind" ];
  };

  fileSystems."/export/projects" = {
    device = "/home/jan/projects";
    options = [ "bind" ];
  };

  services.nfs.server = {
    enable = true;
    lockdPort = 4001;
    mountdPort = 4002;
    statdPort = 4000;
    exports = ''
      /export           192.168.0.0/24(rw,fsid=0,no_subtree_check)
      /export/mynix     192.168.0.0/24(rw,nohide,insecure,no_subtree_check)
      /export/projects  192.168.0.0/24(rw,nohide,insecure,no_subtree_check)
    '';
  };
  networking.firewall = {
    allowedTCPPorts = [ 111 2049 4000 4001 4002 20048 ];
    allowedUDPPorts = [ 111 2049 4000 4001 4002 20048 ];
  };
}