WIP everything

nix/os/devices/steveej-t14/configuration.nix

@@ -11,5 +11,61 @@
     ./user.nix
     ./boot.nix
     ./secrets.nix
+
+    # samba seerver
+    ({ lib, ... }: {
+
+      # networking.firewall.enable = lib.mkForce false;
+      services.samba-wsdd.enable = true; # make shares visible for windows 10 clients
+      networking.firewall.allowedTCPPorts = [
+        5357 # wsdd
+      ];
+      networking.firewall.allowedUDPPorts = [
+        3702 # wsdd
+      ];
+      services.samba = {
+        enable = true;
+
+        securityType = "user";
+
+        extraConfig = ''
+          workgroup = ARBEITSGRUPPE
+          server string = steveej-t14
+          netbios name = steveej-t14
+          security = user
+
+          # use sendfile = yes
+
+          # for executables on windows
+          acl allow execute always = True
+
+          # legacy windows quirks
+          max protocol = NT1
+          min protocol = NT1
+          ntlm auth = yes
+
+          # client max protocol = SMB1
+          # client min protocol = NT1
+
+          # note: localhost is the ipv6 localhost ::1
+          hosts allow = 192.168. 127.0.0.1 localhost
+          hosts deny = 0.0.0.0/0
+          guest account = nobody
+          map to guest = bad user
+        '';
+        shares = {
+          voodoo = {
+            path = "/home/steveej/Desktop/voodoo";
+            browseable = "yes";
+            "read only" = "no";
+            "guest ok" = "no";
+            "create mask" = "0644";
+            "directory mask" = "0755";
+            # "force user" = "steveej";
+            # "force group" = "users";
+          };
+        };
+      };
+    })
   ];
 }