hosts/kazuki: connect a storage box

hosts/kazuki/default.nix

@@ -12,6 +12,7 @@
       ./conduit.nix
       ./mail.nix
       ./vault.nix
+      ./storage.nix
     ];
 
     nixpkgs.hostPlatform = "aarch64-linux";

hosts/kazuki/storage.nix

@@ -0,0 +1,28 @@
+{
+  config,
+  pkgs,
+  ...
+}: {
+  age.secrets = {
+    storage-box-creds.file = ../../secrets/storage-box-creds.age;
+  };
+
+  environment.systemPackages = with pkgs; [cifs-utils];
+  fileSystems."/storage-box" = {
+    fsType = "cifs";
+    device = "//u389358.your-storagebox.de/backup";
+    options = [
+      "iocharset=utf8"
+      "x-systemd.automount"
+      "noauto"
+      "x-systemd.idle-timeout=60"
+      "x-systemd.device-timeout=5s"
+      "x-systemd.mount-timeout=5s"
+      "credentials=${config.age.secrets.storage-box-creds.path}"
+    ];
+  };
+
+  networking.firewall.extraCommands = ''
+    iptables -t raw -A OUTPUT -p udp -m udp --dport 137 -j CT --helper netbios-ns
+  '';
+}