From 1a8f9595c8eb901634cde551ddc75cc6a0c47ebd Mon Sep 17 00:00:00 2001
From: Rob <rob.tranquillo@gmx.de>
Date: Wed, 17 Jan 2024 06:14:55 +0000
Subject: [PATCH] try SMB,  folder public wird angezeigt, login klappt nicht

---
 modules/root-programs.nix |  1 +
 modules/smb.nix           | 42 ++++++++++++++++++++++++++++-----------
 modules/users.nix         | 14 +++++++++++++
 result                    |  1 +
 4 files changed, 46 insertions(+), 12 deletions(-)
 create mode 120000 result

diff --git a/modules/root-programs.nix b/modules/root-programs.nix
index ee67694..3c44b82 100644
--- a/modules/root-programs.nix
+++ b/modules/root-programs.nix
@@ -10,5 +10,6 @@
      ncdu
      parted
      gpart
+     tmux
    ];
 }
diff --git a/modules/smb.nix b/modules/smb.nix
index 51c0d87..3b1bbe7 100644
--- a/modules/smb.nix
+++ b/modules/smb.nix
@@ -9,31 +9,49 @@
 
   services.samba = {
     enable = true;
+    enableNmbd = true;
     securityType = "user";
+
     extraConfig = ''
       workgroup = WORKGROUP
-      server string = smbnix
-      netbios name = smbnix
-      security = user 
+      server string = BFDS
+      # netbios name = BFDS
+      server role = standalone server
+
+      log file = /var/log/samba/smbd.%m
+      max log size = 50 
+
+      #dns proxy = no       
+      #security = user
       #use sendfile = yes
       #max protocol = smb2
       # note: localhost is the ipv6 localhost ::1
-      hosts allow = 192.168.0. 127.0.0.1 localhost
-      hosts deny = 0.0.0.0/0
-      guest account = nobody
+      #hosts allow = 192.168.0. 127.0.0.1 localhost
+      #hosts deny = 0.0.0.0/0
+      #guest account = nobody
       map to guest = bad user
     '';
+
     shares = {
       public = {
         path = "/bfds-nix/";  ## "/mnt/Shares/Public";
         browseable = "yes";
-        "read only" = "no";
-        "guest ok" = "yes";
-        "create mask" = "0644";
-        "directory mask" = "0755";
-        "force user" = "username";
-        "force group" = "groupname";
+        "writable" = "yes";
+        #"guest ok" = "yes";
+        "public" = "yes";
+        "force user" = "share";
+        
+        #"create mask" = "0644";
+        #"directory mask" = "0755";
+        #"force user" = "smbuser";
+        #"force group" = "smbuser";
       };
     };
   };
+
+  # Curiously, `services.samba` does not automatically open
+  # the needed ports in the firewall.
+  networking.firewall.allowedTCPPorts = [ 445 139 ];
+  networking.firewall.allowedUDPPorts = [ 137 138 ];
+
 }
diff --git a/modules/users.nix b/modules/users.nix
index 97b7afb..7fc2c38 100644
--- a/modules/users.nix
+++ b/modules/users.nix
@@ -13,5 +13,19 @@ in
      extraGroups = [ "wheel" "users" "dialout" "network" "system-network" "input" "rsync" ];
      openssh.authorizedKeys.keys = keys;
    };
+  };
+
+
+ ## SMB user ###
+ users.groups = {
+    smbuser = {};
  };
+ users.users = {
+   smbuser = {
+      isNormalUser = true;
+      group = "smbuser";
+      description = "Fuer den Zugriff per SMB";
+      extraGroups = [ "users" ];
+    };
+  };
 }
diff --git a/result b/result
new file mode 120000
index 0000000..a2c5fc6
--- /dev/null
+++ b/result
@@ -0,0 +1 @@
+/nix/store/lc5s2x37mpcgx8b6hg8ikaf8qpf6hvci-nixos-system-bfds-23.11.2217.d02d818f22c7
\ No newline at end of file