diff --git a/app.py b/app.py
index 0e2999c..187d584 100644
--- a/app.py
+++ b/app.py
@@ -1571,25 +1571,34 @@ async def ansible_run(request: Request, _=Depends(_verify)):
     if not hostname:
         return JSONResponse({"error": "limit/hostname required"}, status_code=400)
     action = body.get("action", "setup")
-    if action not in {"setup", "tune", "pvetune"}:
-        return JSONResponse({"error": "action must be setup, tune or pvetune"}, status_code=400)
+    if action not in {"setup", "tune", "pvetune", "nfs"}:
+        return JSONResponse({"error": "action must be setup, tune, pvetune or nfs"}, status_code=400)
     if not re.fullmatch(r"[a-zA-Z0-9_.:-]+", hostname):
         return JSONResponse({"error": "invalid hostname/limit"}, status_code=400)
-    if action in {"tune", "pvetune"}:
-        approved_files = (
-            "roles/sysctl/defaults/main.yml",
-            "roles/sysctl/tasks/main.yml",
-            "group_vars/vps/sysctl.yml",
-            "sysctl-proxmox.yaml",
-            "roles/sysctl_proxmox/tasks/main.yml",
-        )
+    if action in {"tune", "pvetune", "nfs"}:
+        if action == "nfs":
+            approved_files = (
+                "roles/nfs_stability/tasks/main.yml",
+                "nfs-stability.yml",
+                "pfannkuchen.sh",
+            )
+            prepare = "mkdir -p roles/nfs_stability/tasks && "
+        else:
+            approved_files = (
+                "roles/sysctl/defaults/main.yml",
+                "roles/sysctl/tasks/main.yml",
+                "group_vars/vps/sysctl.yml",
+                "sysctl-proxmox.yaml",
+                "roles/sysctl_proxmox/tasks/main.yml",
+            )
+            prepare = ""
         file_sync = " && ".join(
             f"git show origin/master:{path} > {path}" for path in approved_files
         )
         command = (
             "cd /app-config/ansible && "
             "git fetch origin master && "
-            f"{file_sync} && "
+            f"{prepare}{file_sync} && "
             f"bash pfannkuchen.sh {action} {hostname}"
         )
     else: