adriangl
/
nix-dotfiles
mirror of https://github.com/adrlau/nix-dotfiles.git
1
2
Fork 0
Code Issues Packages Projects Releases Wiki Activity

smb more

This commit is contained in:
Adrian Gunnar Lauterer 2024-04-10 17:18:31 +02:00
parent 5ef3c78d4b
commit 7a08654e28
2 changed files with 43 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
machines/galadriel/configuration.nix
View File

@ -124,8 +124,8 @@
services.tailscale.enable = true; services.tailscale.enable = true;
# Open ports in the firewall. # Open ports in the firewall.
networking.firewall.allowedTCPPorts = [ 22 80 8090 8096 443 433 6969 1194 ]; networking.firewall.allowedTCPPorts = [ 22 80 8090 8096 443 433 6969 1194 445 139];
networking.firewall.allowedUDPPorts = [ 22 80 8090 8096 443 433 6969 1194 ]; networking.firewall.allowedUDPPorts = [ 22 80 8090 8096 443 433 6969 1194 137 138];
networking.firewall.enable = true; networking.firewall.enable = true;
##storage ##storage

47
services/smb.nix
View File

@ -3,6 +3,7 @@
services.samba = { services.samba = {
package = pkgs.samba4Full;
enable = true; enable = true;
securityType = "user"; securityType = "user";
openFirewall = true; openFirewall = true;
@ -13,13 +14,13 @@ services.samba = {
security = user security = user
#use sendfile = yes #use sendfile = yes
#max protocol = smb2 #max protocol = smb2
min protocol = SMB2 min protocol = SMB3_00
server smb encrypt = required
# note: localhost is the ipv6 localhost ::1 # note: localhost is the ipv6 localhost ::1
hosts allow = 192.168.1. 127.0.0.1 localhost 100. hosts allow = 192.168.1. 127.0.0.1 localhost 100.
hosts deny = 0.0.0.0/0 hosts deny = 0.0.0.0/0
guest account = nobody guest account = guest
map to guest = bad user map to guest = bad user
smb encrypt = required
''; '';
shares = { shares = {
# public = { # public = {
@ -39,9 +40,9 @@ services.samba = {
"force group" = "gunalx"; "force group" = "gunalx";
browseable = "yes"; browseable = "yes";
"read only" = "no"; "read only" = "no";
"guest ok" = "no"; "guest ok" = "yes";
"create mask" = "0644"; "create mask" = "0777";
"directory mask" = "0755"; "directory mask" = "0777";
}; };
}; };
}; };
@ -55,4 +56,38 @@ services.samba-wsdd = {
networking.firewall.allowPing = true; networking.firewall.allowPing = true;
services.avahi.openfirewall = true;
services.avahi = {
enable = true;
nssmdns = true;
nssmdns4 = true;
publish = {
enable = true;
addresses = true;
domain = true;
hinfo = true;
userServices = true;
workstation = true;
};
extraServiceFiles = {
smb = ''
<?xml version="1.0" standalone='no'?><!--*-nxml-*-->
<!DOCTYPE service-group SYSTEM "avahi-service.dtd">
<service-group>
<name replace-wildcards="yes">%h</name>
<service>
<type>_smb._tcp</type>
<port>445</port>
</service>
</service-group>
'';
};
};
} }