hosting/bob
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(nfs): Restrict server to v4 by default

Browse source 
Can be changed with `nfs_v4_only=false` which defaults to true.

Information taken from: https://wiki.debian.org/NFSServerSetup
and applied directly through Ansible.

Currently _irreversible_, meaning once we set the server to v4 only
there is NO ansible-supported playbook to reset it to all NFSv2/3/4
versions.

Has to be done manually, or could be included as manually-run playbook.
This commit is contained in:
Marty Oehme 2025-11-28 14:06:07 +01:00
parent ef1823da20
commit a5a6e297ff
Signed by: Marty
GPG key ID: 4E535BC19C61886E
3 changed files with 56 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
roles/nfs/defaults/main.yaml
View file

@ -4,3 +4,6 @@ nfs_export_lines:
- "/srv/media 192.168.0.0/24(rw,async,no_subtree_check) 100.112.0.0/16(rw,async,no_subtree_check)"
- "/srv/files 192.168.0.0/24(rw,async,no_subtree_check) 100.112.0.0/16(rw,async,no_subtree_check)"
- "/mnt/ext/data/videos 192.168.0.0/24(rw,async,no_subtree_check) 100.112.0.0/16(rw,async,no_subtree_check)"
nfs_v4_only: true
nfs_v4_disable_rpcbind_fallback: false # needed by Debian 13