{ lib, config, ... }:
{
  options.server.nfs.enable = lib.mkEnableOption "Enable NFS shares";

  config = lib.mkIf config.server.nfs.enable {
    services.nfs.server = {
      enable = true;
      exports = ''
        /export         192.168.178.111/24(rw,fsid=0,no_subtree_check)
        /export/share   192.168.178.111/24(rw,nohide,insecure,no_subtree_check)
        /export/torrent 192.168.178.111/24(rw,nohide,insecure,no_subtree_check)
      '';
    };

    services.nfs.settings.main = {
      UDP = false;
      vers2 = false;
      vers3 = false;
    };

    fileSystems."/export/share" = {
      device = "/data/share";
      options = [ "bind" ];
    };

    fileSystems."/export/torrent" = {
      device = "/data/torrent";
      options = [ "bind" ];
    };

    networking.firewall.allowedTCPPorts = [ 2049 ];
  };
}