{ config, lib, pkgs, ... }: with lib; let inInitrd = any (fs: fs == "nfs") config.boot.initrd.supportedFilesystems; nfsStateDir = "/var/lib/nfs"; rpcMountpoint = "${nfsStateDir}/rpc_pipefs"; idmapdConfFile = pkgs.writeText "idmapd.conf" '' [General] Pipefs-Directory = ${rpcMountpoint} ${optionalString (config.networking.domain != "") "Domain = ${config.networking.domain}"} [Mapping] Nobody-User = nobody Nobody-Group = nogroup [Translation] Method = nsswitch ''; cfg = config.services.nfs; in { ###### interface options = { services.nfs = { statdPort = mkOption { default = null; example = 4000; description = '' Use fixed port for rpc.statd, usefull if NFS server is behind firewall. ''; }; lockdPort = mkOption { default = null; example = 4001; description = '' Use fixed port for NFS lock manager kernel module (lockd/nlockmgr), usefull if NFS server is behind firewall. ''; }; }; }; ###### implementation config = mkIf (any (fs: fs == "nfs" || fs == "nfs4") config.boot.supportedFilesystems) ({ services.rpcbind.enable = true; system.fsPackages = [ pkgs.nfsUtils ]; boot.kernelModules = [ "sunrpc" ]; boot.initrd.kernelModules = mkIf inInitrd [ "nfs" ]; systemd.services.statd = { description = "NFSv3 Network Status Monitor"; path = [ pkgs.nfsUtils pkgs.sysvtools pkgs.utillinux ]; wantedBy = [ "network-online.target" "multi-user.target" ]; before = [ "network-online.target" ]; requires = [ "basic.target" "rpcbind.service" ]; after = [ "basic.target" "rpcbind.service" "network.target" ]; unitConfig.DefaultDependencies = false; # don't stop during shutdown preStart = '' mkdir -p ${nfsStateDir}/sm mkdir -p ${nfsStateDir}/sm.bak sm-notify -d ''; serviceConfig.Type = "forking"; serviceConfig.ExecStart = '' @${pkgs.nfsUtils}/sbin/rpc.statd rpc.statd --no-notify \ ${if cfg.statdPort != null then "-p ${toString statdPort}" else ""} ''; serviceConfig.Restart = "always"; }; systemd.services.idmapd = { description = "NFSv4 ID Mapping Daemon"; path = [ pkgs.sysvtools pkgs.utillinux ]; wantedBy = [ "network-online.target" "multi-user.target" ]; before = [ "network-online.target" ]; requires = [ "rpcbind.service" ]; after = [ "rpcbind.service" ]; preStart = '' mkdir -p ${rpcMountpoint} mount -t rpc_pipefs rpc_pipefs ${rpcMountpoint} ''; postStop = '' umount ${rpcMountpoint} ''; serviceConfig.Type = "forking"; serviceConfig.ExecStart = "@${pkgs.nfsUtils}/sbin/rpc.idmapd rpc.idmapd -c ${idmapdConfFile}"; serviceConfig.Restart = "always"; }; } // mkIf (cfg.lockdPort != null) { boot.extraModprobeConfig = '' options lockd nlm_udpport=${toString cfg.lockdPort} nlm_tcpport=${toString cfg.lockdPort} ''; }); }