{ config, lib, ... }:
{
  fileSystems."/export/desktop" = {
    device = "/mnt/zvault/desktop";
    options = [ "bind" ];
  };

  services.nfs.server.enable = true;
  services.nfs.server.exports = ''
    /export          192.168.0.20(rw,fsid=0,no_subtree_check)
    /export/desktop  192.168.0.20(rw,nohide,insecure,no_subtree_check)
  '';

  networking.firewall.allowedTCPPorts = [ 2049 ];
}