aboutsummaryrefslogtreecommitdiff
path: root/hosts/jupiter/samba.nix
blob: 7897e52959c204c0c44d64fb7baa835337127ae7 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
{
  services.samba = {
    enable = true;
    openFirewall = true;
    settings = {
      global = {
        "workgroup" = "WORKGROUP";
        "server string" = "brain2.0";

        "security" = "user";
        "map to guest" = "bad user";
        "guest account" = "nobody";

        "bind interfaces only" = "no";
        "interfaces" = "lo wlp2s0";

        # disable printing
        "load printers" = "no";
        "printing" = "bsd";
        "printcap name" = "/dev/null";
        "disable spoolss" = "yes";
      };

      "brain2.0" = {
        comment = "";
        path = "/srv/brain";
        browseable = "yes";
        "guest ok" = "yes";
        "read only" = "yes";
        "create mask" = "0644";
        "directory mask" = "0755";

        "write list" = "";
        "valid users" = "@users, guest";

        # Hide guest-editable dirs
        "veto files" = "/notes/worldbuilding/";
      };

      "brain2.0-admin" = {
        comment = "";
        path = "/srv/brain";
        browseable = "yes";
        "guest ok" = "no";
        "valid users" = "collin";
        "create mask" = "0644";
        "directory mask" = "0755";
      };

      "brain2.0-worldbuilding" = {
        comment = "";
        path = "/srv/brain/notes/worldbuilding";
        browseable = "yes";
        "guest ok" = "yes";
        "read only" = "no";
        "create mask" = "0664";
        "directory mask" = "0775";
        "force create mode" = "0664";
        "force directory mode" = "0775";

        "write list" = "@users, guest";
        "valid users" = "@users, guest";

        "delete readonly" = "no"; # prevent deletion of the directory
      };
    };
  };
}