From 2dac20cab5dc3d50e82cf575d623be22a6c058ea Mon Sep 17 00:00:00 2001
From: Mark Nipper <nipsy@bitgnome.net>
Date: Wed, 16 Oct 2024 12:00:22 -0700
Subject: Restrict NFS to v4

---
 hosts/arrakis/services.nix | 20 +++++++++++++++-----
 1 file changed, 15 insertions(+), 5 deletions(-)

diff --git a/hosts/arrakis/services.nix b/hosts/arrakis/services.nix
index 8054fb8..b295116 100644
--- a/hosts/arrakis/services.nix
+++ b/hosts/arrakis/services.nix
@@ -64,11 +64,21 @@
 
     jellyfin.enable = true;
 
-    nfs.server = {
-      enable = true;
-      exports = ''
-        /srv/nfs	192.168.1.0/24(ro,all_squash,insecure,crossmnt,subtree_check,fsid=0)
-      '';
+    nfs = {
+      server = {
+        enable = true;
+        exports = ''
+          /srv/nfs	192.168.1.0/24(ro,all_squash,insecure,crossmnt,subtree_check,fsid=0)
+        '';
+      };
+      settings = {
+        nfsd = {
+          udp = false;
+          vers2 = false;
+          vers3 = false;
+          vers4 = true;
+        };
+      };
     };
 
     nginx = {
-- 
cgit v1.2.3