diff --git a/hieradata/node/auxtel-ccs1.tu.lsst.org.yaml b/hieradata/node/auxtel-ccs1.tu.lsst.org.yaml
index 752cf45cb4..bff55db12c 100644
--- a/hieradata/node/auxtel-ccs1.tu.lsst.org.yaml
+++ b/hieradata/node/auxtel-ccs1.tu.lsst.org.yaml
@@ -4,3 +4,10 @@ profile::ccs::daq_interface::uuid: "ff897057-3958-47f7-bfe0-a2579288aebf"
 profile::ccs::daq_interface::was: "p2p1"
 profile::ccs::daq_interface::mode: "dhcp-client"
 ccs_software::hostname: "atsccs1"
+
+nfs::client_enabled: true
+nfs::client_mounts:
+  /ccs-data:
+    share: "ccs-data"
+    server: "auxtel-ccs2.tu.lsst.org"
+    atboot: true
diff --git a/hieradata/node/auxtel-ccs2.tu.lsst.org.yaml b/hieradata/node/auxtel-ccs2.tu.lsst.org.yaml
index 1e422b7d11..b3f4bb323c 100644
--- a/hieradata/node/auxtel-ccs2.tu.lsst.org.yaml
+++ b/hieradata/node/auxtel-ccs2.tu.lsst.org.yaml
@@ -4,3 +4,20 @@ profile::ccs::daq_interface::uuid: "fd524cfc-e6e4-4571-8fcb-7fbc0be591c1"
 profile::ccs::daq_interface::was: "p2p1"
 profile::ccs::daq_interface::mode: "dhcp-client"
 ccs_software::hostname: "atsccs2"
+
+nfs::server_enabled: true
+nfs::nfs_v4_export_root_clients: >-
+  %{facts.networking.ip}/32(ro,fsid=root,insecure,no_subtree_check,async,root_squash)
+  auxtel-ccs1.tu.lsst.org(ro,fsid=root,insecure,no_subtree_check,async,root_squash)
+nfs::nfs_exports_global:
+  /ccs-data:
+    clients: >-
+      %{facts.networking.ip}/32(ro,nohide,insecure,no_subtree_check,async,root_squash)
+      auxtel-ccs1.tu.lsst.org(ro,nohide,insecure,no_subtree_check,async,root_squash)
+
+nfs::client_enabled: true
+nfs::client_mounts:
+  /net/self/ccs-data:
+    share: "ccs-data"
+    server: "%{facts.fqdn}"
+    atboot: true
diff --git a/hieradata/org/lsst/role/atsccs.yaml b/hieradata/org/lsst/role/atsccs.yaml
index ae4991aa7f..ab00d36f67 100644
--- a/hieradata/org/lsst/role/atsccs.yaml
+++ b/hieradata/org/lsst/role/atsccs.yaml
@@ -5,6 +5,7 @@ classes:
   - "profile::core::common"
   - "profile::core::debugutils"
   - "profile::core::nfsclient"
+  - "profile::core::nfsserver"
   - "ccs_sal"
 
 nfs::client_enabled: true