This repository has no description
1.0 kB
41 lines
1{ config, pkgs, ... }:
2
3{
4 krebs.iptables.tables.filter.INPUT.rules = [
5 { predicate = "-p tcp --dport 139"; target = "ACCEPT"; }
6 { predicate = "-p tcp --dport 445"; target = "ACCEPT"; }
7 { predicate = "-p udp --dport 137"; target = "ACCEPT"; }
8 { predicate = "-p udp --dport 138"; target = "ACCEPT"; }
9 ];
10 users.users.smbguest = {
11 name = "smbguest";
12 uid = config.ids.uids.smbguest;
13 description = "smb guest user";
14 home = "/home/share";
15 createHome = true;
16 group = "share";
17 };
18 users.groups.share = {};
19
20 services.samba = {
21 enable = true;
22 enableNmbd = true;
23 shares = {
24 incoming = {
25 path = "/mnt/prism";
26 "read only" = "yes";
27 browseable = "yes";
28 "guest ok" = "yes";
29 };
30 };
31 extraConfig = ''
32 guest account = smbguest
33 map to guest = bad user
34 # disable printing
35 load printers = no
36 printing = bsd
37 printcap name = /dev/null
38 disable spoolss = yes
39 '';
40 };
41}