This repository has no description
1.1 kB
53 lines
1{ config, ... }:
2
3{
4 krebs.iptables.tables.filter.INPUT.rules = [
5 {
6 predicate = "-p tcp --dport 139";
7 target = "ACCEPT";
8 }
9 {
10 predicate = "-p tcp --dport 445";
11 target = "ACCEPT";
12 }
13 {
14 predicate = "-p udp --dport 137";
15 target = "ACCEPT";
16 }
17 {
18 predicate = "-p udp --dport 138";
19 target = "ACCEPT";
20 }
21 ];
22 users.users.smbguest = {
23 name = "smbguest";
24 uid = config.ids.uids.smbguest;
25 description = "smb guest user";
26 home = "/home/share";
27 createHome = true;
28 group = "share";
29 };
30 users.groups.share = { };
31
32 services.samba = {
33 enable = true;
34 enableNmbd = true;
35 shares = {
36 incoming = {
37 path = "/mnt/prism";
38 "read only" = "yes";
39 browseable = "yes";
40 "guest ok" = "yes";
41 };
42 };
43 extraConfig = ''
44 guest account = smbguest
45 map to guest = bad user
46 # disable printing
47 load printers = no
48 printing = bsd
49 printcap name = /dev/null
50 disable spoolss = yes
51 '';
52 };
53}