diff options
author | lassulus <lassulus@lassul.us> | 2019-04-07 19:09:37 +0200 |
---|---|---|
committer | lassulus <lassulus@lassul.us> | 2019-04-07 19:36:05 +0200 |
commit | 7d971fc78e35bbc0a84d51b45a5aaa18dfa65a59 (patch) | |
tree | 7099f2766ba1c948bc7ea326d94e27521c41775f /lass/2configs/prism-share.nix | |
parent | c3e644d0f597218a6e419a8c779789e302f40e0e (diff) |
l icarus.r: share prism in local network
Diffstat (limited to 'lass/2configs/prism-share.nix')
-rw-r--r-- | lass/2configs/prism-share.nix | 39 |
1 files changed, 39 insertions, 0 deletions
diff --git a/lass/2configs/prism-share.nix b/lass/2configs/prism-share.nix new file mode 100644 index 000000000..70e616ec6 --- /dev/null +++ b/lass/2configs/prism-share.nix @@ -0,0 +1,39 @@ +with import <stockholm/lib>; +{ config, pkgs, ... }: + +{ + krebs.iptables.tables.filter.INPUT.rules = [ + { predicate = "-p tcp --dport 139"; target = "ACCEPT"; } + { predicate = "-p tcp --dport 445"; target = "ACCEPT"; } + { predicate = "-p udp --dport 137"; target = "ACCEPT"; } + { predicate = "-p udp --dport 138"; target = "ACCEPT"; } + ]; + users.users.smbguest = { + name = "smbguest"; + uid = config.ids.uids.smbguest; + description = "smb guest user"; + home = "/home/share"; + createHome = true; + }; + services.samba = { + enable = true; + enableNmbd = true; + shares = { + incoming = { + path = "/mnt/prism"; + "read only" = "no"; + browseable = "yes"; + "guest ok" = "yes"; + }; + }; + extraConfig = '' + guest account = smbguest + map to guest = bad user + # disable printing + load printers = no + printing = bsd + printcap name = /dev/null + disable spoolss = yes + ''; + }; +} |