waffentrager: samba change dirs

This commit is contained in:
Mateusz Słodkowicz 2024-04-12 11:49:25 +02:00
parent afac05dad3
commit 5d9c165df4
Signed by: materus
GPG Key ID: 28D140BCA60B4FD1
1 changed files with 7 additions and 0 deletions

View File

@ -44,6 +44,9 @@
networking.firewall.allowedUDPPorts = [ 135 137 138 389 88 53 123 464];
systemd.tmpfiles.rules = [
"d ${servicePath}/tls/ 0600 root 3000000 -"
"d ${servicePath}/private/ 0600 root 3000000 -"
"d ${servicePath}/lock/ 0600 root 3000000 -"
"d ${servicePath}/cache/ 0600 root 3000000 -"
];
services.samba = {
enable = true;
@ -60,6 +63,10 @@
workgroup = ${materusArg.waffentrager.samba.workgroup}
idmap_ldb:use rfc2307 = yes
ldap server require strong auth = yes
private dir = ${servicePath}/private
lock dir = ${servicePath}/lock
state directory = ${servicePath}/lock
cache directory = ${servicePath}/cache
tls enabled = yes
tls keyfile = ${servicePath}/tls/key.pem
tls certfile = ${servicePath}/tls/fullchain.pem