feat: Add nfs server to host machines

roles/nfs/defaults/main.yaml

@@ -0,0 +1,5 @@
+---
+
+nfs_export_lines:
+  - "/srv/media 192.168.0.0/24(rw,async,nosuid,no_subtree_check)"
+  - "/srv/files 192.168.0.0/24(rw,async,nosuid,no_subtree_check)"

roles/nfs/handlers/main.yaml

@@ -0,0 +1,7 @@
+---
+- name: Reload nfs service
+  ansible.builtin.systemd:
+    name: nfs-server.service
+    daemon_reload: true
+    state: restarted
+  become: true

roles/nfs/tasks/main.yaml

@@ -0,0 +1,30 @@
+---
+- name: Install nfs kernel package
+  ansible.builtin.package:
+    name: nfs-kernel-server
+    state: present
+  become: true
+  notify: Reload nfs service
+
+- name: Create exports conf file
+  ansible.builtin.template:
+    src: exports.jinja
+    dest: /etc/exports
+    mode: '0644'
+  become: true
+  notify: Reload nfs service
+
+- name: Ensure share directories exist
+  ansible.builtin.file:
+    state: directory
+    # nfs conf lines start with the shared dir
+    path: "{{ item.split(' ')[0] }}"
+  become: true
+  loop: "{{ nfs_export_lines }}"
+
+- name: Enable nfs server unit
+  ansible.builtin.systemd:
+    enabled: true
+    name: nfs-server.service
+    state: started
+  become: true

roles/nfs/templates/exports.jinja

@@ -0,0 +1,3 @@
+{% for line in nfs_export_lines %}
+    {{ line }}
+{% endfor %}

site.yaml

@@ -25,6 +25,11 @@
         name: system
       tags: system
 
+    - name: Set up nfs shares
+      ansible.builtin.import_role:
+        name: nfs
+      tags: nfs
+
       # FIXME: Role needs much fixup before it can run
     # - name: Prepare incus
     #   ansible.builtin.import_role: