gensokyo-zone/infrastructure
1
0
Fork 0
mirror of https://github.com/gensokyo-zone/infrastructure.git synced 2026-02-09 12:29:19 -08:00
Code Issues Projects Releases Packages Wiki Activity Actions

chore(kyuuto): dial in more settings

Browse source
This commit is contained in:
arcnmx 2024-02-09 17:20:36 -08:00
parent d57c3e7b1a
commit b4e6cdac9d
3 changed files with 28 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

19
nixos/kyuuto/samba.nix
View file

@ -4,7 +4,7 @@
lib,
...
}: let
inherit (lib.modules) mkIf mkDefault;
inherit (lib.modules) mkIf mkMerge mkDefault;
inherit (lib.lists) optionals;
inherit (config.networking.access) cidrForNetwork;
inherit (config) kyuuto;
@ -24,6 +24,10 @@ in {
writeable = true;
browseable = true;
public = true;
"valid users" = mkMerge [
(mkIf cfg.guest.enable [ cfg.guest.user ])
[ "@peeps" ]
];
#"guest only" = true;
"hosts allow" = localAddrs;
"acl group control" = true;
@ -37,6 +41,10 @@ in {
writeable = false;
browseable = true;
public = true;
"valid users" = mkMerge [
(mkIf cfg.guest.enable [ cfg.guest.user ])
[ "@kyuuto-peeps" ]
];
"hosts allow" = localAddrs;
};
kyuuto-media = {
@ -51,6 +59,15 @@ in {
"force directory mode" = "3000";
"directory mask" = "7775";
};
${cfg.usershare.templateShare} = mkIf cfg.usershare.enable {
writeable = true;
browseable = true;
public = false;
"valid users" = [ "@peeps" ];
"create mask" = "0664";
"force directory mode" = "5000";
"directory mask" = "7775";
};
};
};

8
nixos/samba.nix
View file

@ -34,11 +34,17 @@ in {
"winbind scan trusted domains" = false;
"winbind use default domain" = true;
"domain master" = false;
"valid users" = [ "@peeps" ];
"remote announce" = mkIf hasIpv4 [
"10.1.1.255/${cfg.settings.workgroup}"
];
};
idmap.domains = mkIf (!cfg.ldap.enable) {
nss = {
backend = "nss";
domain = "*";
range.min = 8000;
};
};
};
services.samba-wsdd = {