nixos/nfs: Fix dependency ordering
nixos: Add network-pre.target and adjust firewall start ordering