From c8432ed61bcd4b78a101046bb1c1a9b17e4d2d41 Mon Sep 17 00:00:00 2001
From: ahuston-0 <aliceghuston@gmail.com>
Date: Wed, 4 Dec 2024 18:54:56 -0500
Subject: [PATCH] add samba to palatine-hill

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>
---
 systems/palatine-hill/samba.nix | 37 +++++++++++++++++++++++++++++++++
 1 file changed, 37 insertions(+)
 create mode 100644 systems/palatine-hill/samba.nix

diff --git a/systems/palatine-hill/samba.nix b/systems/palatine-hill/samba.nix
new file mode 100644
index 0000000..339e2ef
--- /dev/null
+++ b/systems/palatine-hill/samba.nix
@@ -0,0 +1,37 @@
+{ ... }:
+{
+  services.samba = {
+    enable = true;
+    securityType = "user";
+    openFirewall = true;
+    settings = {
+      global = {
+        "workgroup" = "WORKGROUP";
+        "server string" = "palatine-hill";
+        "netbios name" = "palatine-hill";
+        "security" = "user";
+        #"use sendfile" = "yes";
+        #"max protocol" = "smb2";
+        # note: localhost is the ipv6 localhost ::1
+        "hosts allow" = "192.168.76. 127.0.0.1 localhost";
+        "hosts deny" = "0.0.0.0/0";
+        "guest account" = "nobody";
+        "map to guest" = "bad user";
+      };
+      zfs-primary-backups = {
+        path = "/ZFS/ZFS-primary/backups";
+
+        writeable = "yes";
+        browseable = "yes";
+      };
+    };
+  };
+
+  services.samba-wsdd = {
+    enable = true;
+    openFirewall = true;
+  };
+
+  networking.firewall.enable = true;
+  networking.firewall.allowPing = true;
+}