70 lines
1.7 KiB
Nix
70 lines
1.7 KiB
Nix
{ ... }: {
|
|
imports = [
|
|
../../profiles/common/configuration.nix
|
|
../../profiles/graphical/configuration.nix
|
|
../../modules/opinionatedDisk.nix
|
|
../../cachix.nix
|
|
|
|
./system.nix
|
|
./hw.nix
|
|
./pkg.nix
|
|
./user.nix
|
|
./boot.nix
|
|
|
|
# samba seerver
|
|
({ lib, ... }: {
|
|
|
|
# networking.firewall.enable = lib.mkForce false;
|
|
services.samba-wsdd.enable = true; # make shares visible for windows 10 clients
|
|
networking.firewall.allowedTCPPorts = [
|
|
5357 # wsdd
|
|
];
|
|
networking.firewall.allowedUDPPorts = [
|
|
3702 # wsdd
|
|
];
|
|
services.samba = {
|
|
enable = true;
|
|
|
|
securityType = "user";
|
|
|
|
extraConfig = ''
|
|
workgroup = ARBEITSGRUPPE
|
|
server string = steveej-t14
|
|
netbios name = steveej-t14
|
|
security = user
|
|
|
|
# use sendfile = yes
|
|
|
|
# for executables on windows
|
|
acl allow execute always = True
|
|
|
|
# legacy windows quirks
|
|
max protocol = NT1
|
|
min protocol = NT1
|
|
ntlm auth = yes
|
|
|
|
# client max protocol = SMB1
|
|
# client min protocol = NT1
|
|
|
|
# note: localhost is the ipv6 localhost ::1
|
|
hosts allow = 192.168. 127.0.0.1 localhost
|
|
hosts deny = 0.0.0.0/0
|
|
guest account = nobody
|
|
map to guest = bad user
|
|
'';
|
|
shares = {
|
|
voodoo = {
|
|
path = "/home/steveej/Desktop/voodoo";
|
|
browseable = "yes";
|
|
"read only" = "no";
|
|
"guest ok" = "no";
|
|
"create mask" = "0644";
|
|
"directory mask" = "0755";
|
|
# "force user" = "steveej";
|
|
# "force group" = "users";
|
|
};
|
|
};
|
|
};
|
|
})
|
|
];
|
|
}
|