Commit f814b2299ec0

Vincent Demeester <vincent@sbr.pm>
2025-05-29 23:27:46
systems/aix: enable samba
Signed-off-by: Vincent Demeester <vincent@sbr.pm>
1 parent 1f812cd
Changed files (2)
systems
aix
common
services
systems/aix/extra.nix
@@ -1,12 +1,24 @@
 { globals, ... }:
 {
   imports = [
+    ../common/services/samba.nix
     ../common/services/prometheus-exporters-node.nix
   ];
 
   networking.firewall.enable = false;
 
   services = {
+    samba.settings."vincent" = {
+      path = "/data/share";
+      public = true;
+      browseable = true;
+      writable = true;
+      comment = "Vincent's share";
+      "create mask" = "0644";
+      "directory mask" = "0755";
+      "force user" = "vincent";
+      "force group" = "users";
+    };
     wireguard = {
       enable = true;
       ips = globals.fn.wg-ips globals.machines.aix.net.vpn.ips;
systems/common/services/samba.nix
@@ -0,0 +1,32 @@
+{
+  pkgs,
+  ...
+}:
+{
+  services = {
+    # Network shares
+    samba = {
+      package = pkgs.samba4Full;
+      enable = true;
+      openFirewall = true;
+      settings = {
+        global = {
+          "server smb encrypt" = "required";
+          "server min protocol" = "SMB3_00";
+          "server string" = "Aix";
+        };
+      };
+    };
+    avahi = {
+      publish.enable = true;
+      publish.userServices = true;
+      nssmdns4 = true;
+      enable = true;
+      openFirewall = true;
+    };
+    samba-wsdd = {
+      enable = true;
+      openFirewall = true;
+    };
+  };
+}