NFS Share

Overview

It can be sometimes useful to expose application data as a NFS share. For example, you might want to copy a large number of media files into (or from) Emby/Jellyfin or copy images into Surfer etc.

In this guide, we will see how to expose directories on Cloudron via NFS.

Insecure traffic

Please note that NFS traffic is unencrypted and can be tampered. For this reason, you must use NFS mounts only on secure private networks.

Install NFS Server

To install, run the following command on Cloudron server:

sudo apt install nfs-kernel-server

Exposing a directory

Edit /etc/exports and add a line like so:

# this exposes data of the app with id appid to the Client IP address client_ip
/home/yellowtent/appsdata/app_id/data client_ip(rw,sync,no_subtree_check,no_root_squash)

Export the directory

Export the NFS directory that we configured above:

exportfs -a
systemctl restart nfs-kernel-server

Expose NFS port

Port 2049 (TCP/UDP) is used for NFS traffic. Add this to Cloudron Firewall by editing /home/yellowtent/platformdata/firewall/ports.json:

{
    "allowed_tcp_ports": [ 2049 ],
    "allowed_udp_ports": [ 2049 ]
}

Restart the firewall to apply the configuration:

systemctl restart cloudron-firewall

Mounting on client

Add the following entry to your laptop/PC's /etc/fstab:

cloudron_ip:/home/yellowtent/appsdata/app_id/data               /mounts/app      nfs auto,nofail,noatime,nolock,intr,tcp,actimeo=1800 0 0