From 4f526494c3fc7b6caba7643d960f6fd28d2f9e14 Mon Sep 17 00:00:00 2001
From: Rob <rob.tranquillo@gmx.de>
Date: Sun, 17 Nov 2024 20:01:33 +0000
Subject: [PATCH] =?UTF-8?q?kl=C3=A4glich=20gescheiteter=20versuch=20SMB=20?=
 =?UTF-8?q?mit=20Windows11=20hin=20zu=20bekommen.=20Lasse=20es=20dennoch?=
 =?UTF-8?q?=20drin?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 modules/smb.nix | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/modules/smb.nix b/modules/smb.nix
index a7b17f5..4448f85 100644
--- a/modules/smb.nix
+++ b/modules/smb.nix
@@ -18,6 +18,19 @@
     securityType = "user";
 
     extraConfig = ''
+
+      # Server-seitige SMB-Signatur erzwingen
+      server signing = mandatory
+      client signing = mandatory
+
+      # Aktiviert die Unterstützung für SMB2 und SMB3
+      server min protocol = SMB2
+      server max protocol = SMB3
+
+      # Erlaubt sichere Negotation von Verbindungen
+      client min protocol = SMB2
+      client max protocol = SMB3
+
       workgroup = WORKGROUP
       server string = BFDS
       netbios name = BFDS