{ config, pkgs, ... }:

{
  services = {
    openssh = {
      enable = true;
      ports = [ 22 ];
      passwordAuthentication = false;
      permitRootLogin = "no";
      authorizedKeysFiles = [ ".ssh/authorized_keys" ];
      challengeResponseAuthentication = false;
    };

    nfs.server = {
      enable = true;
      exports = ''
        /mnt/storage              10.0.20.2(rw,nohide,no_root_squash,no_subtree_check)
        /mnt/storage/backup       10.0.20.2(rw,nohide,no_root_squash,no_subtree_check)
        /mnt/storage              10.0.1.5(rw,nohide,no_root_squash,no_subtree_check)
      '';
    };
  };
  /*systemd = {
    services.ocd = {
      description = "0cd.xyz-go web server";
      after = [ "network.target" ];
      serviceConfig = {
        Type = "simple";
        ExecStart = "${pkgs.bash}/bin/bash /srv/0cd.xyz-go/run.sh";
      };
      wantedBy = [ "multi-user.target" ];
    };
    services.ocd.enable = true;
  };*/
}