{ config, ... }:

{
  services.samba-wsdd = {
    # make shares visible for Windows clients
    enable = true;
    openFirewall = true;
  };

  # Curiously, `services.samba` does not automatically open
  # the needed ports in the firewall.
  networking.firewall.allowedTCPPorts = [ 445 139 ];
  networking.firewall.allowedUDPPorts = [ 137 138 ];

  services.samba = {
    enable = true;
    enableNmbd = true;
    securityType = "user";

    extraConfig = ''
      workgroup = WORKGROUP
      server string = BFDS
      netbios name = BFDS
      server role = standalone server
      map to guest = bad user

      log file = /var/log/samba/smbd.%m
      max log size = 50 

      # dns proxy = no       
      # security = user
      # use sendfile = yes
      # max protocol = smb2
      # note: localhost is the ipv6 localhost ::1
      # hosts allow = 192.168.0. 127.0.0.1 localhost
      # hosts deny = 0.0.0.0/0
      # guest account = nobody
    '';

    shares = {
      Rob = {
        path = "/bfds-nix/rob";
        browseable = "yes";
        "writable" = "yes";
        "guest ok" = "yes";
#        "public" = "yes";
        "create mask" = "0644";
        "directory mask" = "0755";
        "force user" = "smbuser";
        "force group" = "smbuser";
      };

      Peggy = {
        path = "/bfds-nix/peggy";
        browseable = "yes";
        "writable" = "yes";
        "guest ok" = "yes";
        "public" = "yes";
      };

      Musik = {
        path = "/bfds-nix/music";
        browseable = "yes";
        "writable" = "yes";
        "guest ok" = "yes";
        "public" = "yes";
      };

      Filme = {
        path = "/bfds-nix/movies";
        browseable = "yes";
        "writable" = "yes";
        "guest ok" = "yes";
        "public" = "yes";
      };

      "Hörbücher" = {
        path = "/bfds-nix/hoerbuecher";
        browseable = "yes";
        "writable" = "yes";
#        "guest ok" = "yes";
#        "public" = "yes";
        "create mask" = "0644";
        "directory mask" = "0755";
        "force user" = "smbuser";
        "force group" = "smbuser";
      };

      Ebooks = {
        path = "/bfds-nix/ebooks";
        browseable = "yes";
        "writable" = "yes";
        "guest ok" = "yes";
        "public" = "yes";
      };

      Ablage = {
        path = "/bfds-nix/ablage";
        browseable = "yes";
        "writable" = "yes";
        "guest ok" = "yes";
        "public" = "yes";
      };
    };
  };
}