add nfs share instead of sshfs

hosts/thea/configuration.nix

@@ -28,6 +28,7 @@ in
   # Use the systemd-boot EFI boot loader.
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;
+  boot.supportedFilesystems = [ "fuse.sshfs" "nfs" ];
 
   networking = {
     hostName = "thea"; # Define your hostname.
@@ -42,6 +43,7 @@ in
       allowedTCPPorts = [
         nodes.sin.config.services.gitea.settings.server.SSH_PORT
         993 # mail port
+        2049 # nfs
       ]
       ++ [
         # minecraft ad hoc server ports

hosts/thea/jellyfin.nix

@@ -4,15 +4,8 @@ let
 in
 {
   fileSystems."/mnt/mediacenter" = {
-    device = "shobu@${sin-address}:/mnt/mediacenter";
-    fsType = "sshfs";
-    options = [
-      "nodev"
-      "noatime"
-      "allow_other"
-      "user=n100"
-      "IdentityFile=/root/.ssh/id_ed25519"
-    ];
+    device = "${sin-address}:/exports/mediacenter";
+    fsType = "nfs4";
   };
 
   fileSystems."/mnt/jellyfin" = {

hosts/thea/nginx.nix

@@ -27,6 +27,10 @@ in
     typesHashMaxSize = 512;
     mapHashMaxSize = 512;
 
+    appendHttpConfig = ''
+      limit_conn_zone $binary_remote_addr zone=copyparty_dl:10m;
+    '';
+
     virtualHosts =
       let
         mkVHost =

hosts/thea/shares.nix

@@ -3,7 +3,6 @@ let
   sin-address = "192.168.1.14";
 in
 {
-  boot.supportedFilesystems = [ "fuse.sshfs" ];
   programs.fuse.userAllowOther = true;
 
   fileSystems = {