Moved sysconfig-nfs into a template, defaults allow it to work through a firewall