materus
/
nixos-config
mirror of https://github.com/materusPL/nixos-config
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

waffentrager: samba change dirs

This commit is contained in:
Mateusz Słodkowicz 2024-04-12 11:49:25 +02:00
parent afac05dad3
commit 5d9c165df4
Signed by: materus
GPG Key ID: 28D140BCA60B4FD1
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
configurations/host/waffentrager/services/auth/samba.nix
View File

@ -44,6 +44,9 @@
networking.firewall.allowedUDPPorts = [ 135 137 138 389 88 53 123 464]; networking.firewall.allowedUDPPorts = [ 135 137 138 389 88 53 123 464];
systemd.tmpfiles.rules = [ systemd.tmpfiles.rules = [
"d ${servicePath}/tls/ 0600 root 3000000 -" "d ${servicePath}/tls/ 0600 root 3000000 -"
"d ${servicePath}/private/ 0600 root 3000000 -"
"d ${servicePath}/lock/ 0600 root 3000000 -"
"d ${servicePath}/cache/ 0600 root 3000000 -"
]; ];
services.samba = { services.samba = {
enable = true; enable = true;
@ -60,6 +63,10 @@
workgroup = ${materusArg.waffentrager.samba.workgroup} workgroup = ${materusArg.waffentrager.samba.workgroup}
idmap_ldb:use rfc2307 = yes idmap_ldb:use rfc2307 = yes
ldap server require strong auth = yes ldap server require strong auth = yes
private dir = ${servicePath}/private
lock dir = ${servicePath}/lock
state directory = ${servicePath}/lock
cache directory = ${servicePath}/cache
tls enabled = yes tls enabled = yes
tls keyfile = ${servicePath}/tls/key.pem tls keyfile = ${servicePath}/tls/key.pem
tls certfile = ${servicePath}/tls/fullchain.pem tls certfile = ${servicePath}/tls/fullchain.pem