#!/usr/bin/env bash

export zone_name=nfs-access

firewall-cmd --new-zone=${zone_name} --permanent
firewall-cmd --reload

clients=(
         10.10.88.48/32
         ...
)

for client in ${clients[@]}
do
    firewall-cmd --permanent --zone=${zone_name} --add-source=${client}
done

firewall-cmd --permanent --zone=${zone_name} --add-service=nfs --add-service=rpc-bind --add-service=mountd
firewall-cmd --reload