diff options
Diffstat (limited to 'hosts/jupiter/samba.nix')
| -rw-r--r-- | hosts/jupiter/samba.nix | 64 |
1 files changed, 31 insertions, 33 deletions
diff --git a/hosts/jupiter/samba.nix b/hosts/jupiter/samba.nix index 7897e52..8cf3429 100644 --- a/hosts/jupiter/samba.nix +++ b/hosts/jupiter/samba.nix @@ -1,4 +1,17 @@ -{ +{config, ...}: { + users.users.${config.collinux.user.name}.extraGroups = ["brainusers"]; + users.users.bob = { + isNormalUser = true; + extraGroups = ["brainusers"]; + hashedPassword = "$y$j9T$L8CQv7V.LCD3gw/xR8M2T0$A4NHW9qpgc9pua7XE18P6ShICj.PNXHoyMW4yqmEMID"; + }; + + users.groups."brainusers".name = "brainusers"; + + # sudo smbpasswd -a collin <PASSWORD> + # sudo smbpasswd -n bob # no password + + networking.firewall.allowedTCPPorts = [445]; services.samba = { enable = true; openFirewall = true; @@ -6,13 +19,8 @@ global = { "workgroup" = "WORKGROUP"; "server string" = "brain2.0"; - "security" = "user"; - "map to guest" = "bad user"; - "guest account" = "nobody"; - - "bind interfaces only" = "no"; - "interfaces" = "lo wlp2s0"; + "map to guest" = "Bad User"; # disable printing "load printers" = "no"; @@ -21,45 +29,35 @@ "disable spoolss" = "yes"; }; - "brain2.0" = { - comment = ""; + "brain2.0-public" = { path = "/srv/brain"; - browseable = "yes"; - "guest ok" = "yes"; "read only" = "yes"; - "create mask" = "0644"; - "directory mask" = "0755"; - - "write list" = ""; - "valid users" = "@users, guest"; - - # Hide guest-editable dirs - "veto files" = "/notes/worldbuilding/"; + "guest ok" = "yes"; + "force group" = "brainusers"; }; "brain2.0-admin" = { - comment = ""; path = "/srv/brain"; + "read only" = "no"; + "valid users" = "collin"; + writeable = "yes"; browseable = "yes"; "guest ok" = "no"; - "valid users" = "collin"; - "create mask" = "0644"; - "directory mask" = "0755"; + "create mask" = "0660"; + "directory mask" = "0770"; + "force group" = "brainusers"; }; "brain2.0-worldbuilding" = { - comment = ""; path = "/srv/brain/notes/worldbuilding"; - browseable = "yes"; - "guest ok" = "yes"; "read only" = "no"; - "create mask" = "0664"; - "directory mask" = "0775"; - "force create mode" = "0664"; - "force directory mode" = "0775"; - - "write list" = "@users, guest"; - "valid users" = "@users, guest"; + "guest ok" = "yes"; + writeable = "yes"; + browseable = "yes"; + public = "yes"; # make windows not ask for password? + "create mask" = "0660"; + "directory mask" = "0770"; + "force group" = "brainusers"; "delete readonly" = "no"; # prevent deletion of the directory }; |