From 1ddd49c8938dcfc9cebda0371e84d3f977a5ca1f Mon Sep 17 00:00:00 2001 From: makefu <github@syntax-fehler.de> Date: Fri, 28 Oct 2016 14:11:31 +0200 Subject: [PATCH] m 1 gum: add gum-share --- 1systems/gum.nix | 1 + 2configs/gum-share.nix | 39 +++++++++++++++++++++++++++++++++++++++ 2 files changed, 40 insertions(+) create mode 100644 2configs/gum-share.nix diff --git a/1systems/gum.nix b/1systems/gum.nix index bfd880b..8a43d25 100644 --- a/1systems/gum.nix +++ b/1systems/gum.nix @@ -24,6 +24,7 @@ in { ../2configs/torrent.nix ../2configs/graphite-standalone.nix ../2configs/sabnzbd.nix + ../2configs/gum-share.nix ../2configs/opentracker.nix diff --git a/2configs/gum-share.nix b/2configs/gum-share.nix new file mode 100644 index 0000000..e578f43 --- /dev/null +++ b/2configs/gum-share.nix @@ -0,0 +1,39 @@ +{ config, lib, pkgs, ... }: + +with config.krebs.lib; +let + hostname = config.krebs.build.host.name; +in { + # users.users.smbguest = { + # name = "smbguest"; + # uid = config.ids.uids.smbguest; + # description = "smb guest user"; + # home = "/var/empty"; + # }; + + users.users.download = { }; + services.samba = { + enable = true; + shares = { + download = { + path = "/var/download"; + "read only" = "no"; + browseable = "yes"; + "guest ok" = "no"; + "valid users" = "download"; + }; + }; + extraConfig = '' + # guest account = smbguest + # map to guest = bad user + # disable printing + load printers = no + printing = bsd + printcap name = /dev/null + disable spoolss = yes + ''; + }; + networking.firewall.extraCommands = '' + iptables -A INPUT -i retiolum -p tcp --dport 445 -j ACCEPT + ''; +}