feat(nfs): Restrict server to v4 by default

Can be changed with `nfs_v4_only=false` which defaults to true.

Information taken from: https://wiki.debian.org/NFSServerSetup
and applied directly through Ansible.

Currently _irreversible_, meaning once we set the server to v4 only
there is NO ansible-supported playbook to reset it to all NFSv2/3/4
versions.

Has to be done manually, or could be included as manually-run playbook.
This commit is contained in:
Marty Oehme 2025-11-28 14:06:07 +01:00
parent ef1823da20
commit a5a6e297ff
Signed by: Marty
GPG key ID: 4E535BC19C61886E
3 changed files with 56 additions and 1 deletions

View file

@ -10,7 +10,7 @@
ansible.builtin.template:
src: exports.jinja
dest: /etc/exports
mode: '0644'
mode: "0644"
become: true
notify: Reload nfs service
@ -22,6 +22,10 @@
become: true
loop: "{{ nfs_export_lines }}"
- name: Disable NFSv2/NFSv3 to leave NFSv4-only server
ansible.builtin.include_tasks: "nfs-v4-only.yaml"
when: "nfs_v4_only"
- name: Enable nfs server unit
ansible.builtin.systemd:
enabled: true