nix-conf/system/mnt.nix

{
  config,
  lib,
  pkgs,
  ...
}:
lib.mkIf (config.networking.hostName != "komikan") {
  environment.systemPackages = [pkgs.cifs-utils];
  security.wrappers."mount.cifs" = {
    program = "mount.cifs";
    source = "${lib.getBin pkgs.cifs-utils}/bin/mount.cifs";
    owner = "root";
    group = "root";
    setuid = true;
  };
  systemd.tmpfiles.settings.mnt = {
    "/mnt".d = {
      user = "root";
      mode = "0755";
    };
    "/mnt/pool".d = {
      user = "1000";
      mode = "0755";
    };
  };
  fileSystems."/mnt/pool" = {
    device = "//komikan/pool";
    fsType = "cifs";
    options = [
      "noauto"
      "x-systemd.device-timeout=5s"
      "x-systemd.mount-timeout=5s"
      "user"
      "users"
      "credentials=${config.sops.secrets.pool-credentials.path}"
      "uid=1000"
      "gid=100"
    ];
  };
}