configurations/host/waffentrager/services/auth.nix

@@ -5,87 +5,10 @@
   config =
     let
       cfg = config.waffentragerService.auth;
-      sambaCfg = config.services.samba;
-      servicePath = "/var/lib/elements/services/samba";
-      smbToString = x:
-        if builtins.typeOf x == "bool"
-        then lib.boolToString x
-        else builtins.toString x;
-      shareConfig = name:
-        let share = lib.getAttr name cfg.shares; in
-        "[${name}]\n " + (smbToString (
-          map
-            (key: "${key} = ${smbToString (lib.getAttr key share)}\n")
-            (lib.attrNames share)
-        ));
     in
     lib.mkIf cfg.enable {
       waffentragerService.elements.enable = true;
       waffentragerService.nginx.enable = true;
 
-
-
-      systemd.services.resolvconf.enable = false;
-      environment.etc = {
-        resolvconf = {
-          text = ''
-            search ${materusArg.waffentrager.samba.domain}
-            nameserver ${materusArg.waffentrager.samba.dnsIp}
-            nameserver 9.9.9.9
-          '';
     };
-      };
-      systemd.services.samba-smbd.enable = false;
-      systemd.services.samba = {
-        description = "Samba Service Daemon";
-
-        requiredBy = [ "samba.target" ];
-        partOf = [ "samba.target" ];
-
-        serviceConfig = {
-          ExecStart = "${pkgs.samba4Full}/sbin/samba --foreground --no-process-group";
-          ExecReload = "${pkgs.coreutils}/bin/kill -HUP $MAINPID";
-          LimitNOFILE = 16384;
-          PIDFile = "/run/samba.pid";
-          Type = "notify";
-          NotifyAccess = "all";
-        };
-        unitConfig.RequiresMountsFor = servicePath;
-      };
-      # https://wiki.samba.org/index.php/Samba_AD_DC_Port_Usage
-      networking.firewall.allowedTCPPorts = [ 139 445 389 88 53 464 636 3268];
-      networking.firewall.allowedUDPPorts = [ 135 137 138 389 88 53 123 464];
-
-      services.samba = {
-        enable = true;
-        enableNmbd = false;
-        enableWinbindd = false;
-        package = pkgs.samba4Full;
-        configText = ''
-          # Global parameters
-          [global]
-              dns forwarder = ${materusArg.waffentrager.samba.dnsIp}
-              netbios name = ${materusArg.waffentrager.samba.netbiosName}
-              realm = ${lib.toUpper materusArg.waffentrager.samba.domain}
-              server role = active directory domain controller
-              workgroup = ${materusArg.waffentrager.samba.workgroup}
-              idmap_ldb:use rfc2307 = yes
-              ldap server require strong auth = no
-
-          [sysvol]
-              path = ${servicePath}/sysvol
-              read only = No
-
-          [netlogon]
-              path = ${servicePath}/sysvol/${materusArg.waffentrager.samba.domain}/scripts
-              read only = No
-
-
-            ${sambaCfg.extraConfig}
-
-            ${smbToString (map shareConfig (lib.attrNames sambaCfg.shares))}
-        '';
-      };
-    };
-
 }