stockholm/makefu/2configs/share/gum.nix

{ config, lib, pkgs, ... }:

with import <stockholm/lib>;
let
  hostname = config.krebs.build.host.name;
in {
  # users.users.smbguest = {
  #   name = "smbguest";
  #   uid = config.ids.uids.smbguest;
  #   description = "smb guest user";
  #   home = "/var/empty";
  # };
  environment.systemPackages = [ pkgs.samba ];
  users.users.download.uid = genid "download";
  services.samba = {
    enable = true;
    shares = {
      download = {
        path = "/var/download";
        "read only" = "no";
        browseable = "yes";
        "guest ok" = "no";
        "valid users" = "download";
      };
    };
    extraConfig = ''
      # guest account = smbguest
      # map to guest = bad user
      # disable printing
      load printers = no
      printing = bsd
      printcap name = /dev/null
      disable spoolss = yes
    '';
  };
  networking.firewall.extraCommands = ''
      iptables -A INPUT -i retiolum -p tcp --dport 445 -j ACCEPT
      iptables -A INPUT -i wiregrill -p tcp --dport 445 -j ACCEPT
  '';
}