if node.os != "alpine":
    raise BundleError(f"{node.name}: OS {node.os} is not supported.")

svc_openrc = {
    "nfs": {
        "enabled": True,
        "running": True,
        "needs": {
            "pkg_apk:nfs-utils",
        },
    }
}

actions = {
    "reload_exportfs": {
        "command": "exportfs -afv",
        "triggered": True,
    },
}

directories = {
    "/var/nfs": {},
}

files = {
    "/etc/exports": {
        "triggers": {
            "svc_openrc:nfs:restart",
            "action:reload_exportfs",
        },
    },
    # "/etc/nftables.d/61-nfs.nft": {
    #     "source": "nfs.nft",
    #     "triggers": {"svc_openrc:nftables:restart"},
    # }
}

# TODO:
# https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/7/html/storage_administration_guide/s1-nfs-security#s2-nfs-security-files
# https://overflow.adminforge.de/exchange/serverfault.com/questions/1131152/setup-sso-openldap-kerberos-nfstruenas
# https://wiki.gentoo.org/wiki/Nfs-utils
# https://ariq.nauf.al/blog/securely-sharing-storage-with-nfs-and-tailscale/
# need to configure nfs service to include rpc.idmapd ?
# https://dhole.github.io/post/nfs_wireguard/
# https://github.com/xetdata/nfsserve ?