From 1d1784e417cb415d77a63c7d6eecaa960af7d489 Mon Sep 17 00:00:00 2001
From: Profpatsch <mail@profpatsch.de>
Date: Mon, 7 Jun 2021 19:25:13 +0200
Subject: machines/haku: enable samba on tailscale

Trying out filesharing to my phone. Would never enable samba on the
open internet though. :')

Might want to switch to ftp since samba seems to be rather
imperformant for simple filesharing.
---
 machines/profpatsch/haku.nix | 27 ++++++++++++++++++++++++++-
 1 file changed, 26 insertions(+), 1 deletion(-)

(limited to 'machines')

diff --git a/machines/profpatsch/haku.nix b/machines/profpatsch/haku.nix
index 821ce38a..9441e81f 100644
--- a/machines/profpatsch/haku.nix
+++ b/machines/profpatsch/haku.nix
@@ -15,6 +15,8 @@ let
   tailscaleInterface = "tailscale0";
   tailscaleAddress = "100.76.60.85";
   gonicPortTailscale = 4747;
+  sambaPortTailscale = 445;
+
   ethernetInterface = "enp0s20";
   wireguard = {
     port = wireguardPortUdp;
@@ -131,6 +133,29 @@ in
       musicDirGroup = "data-seeding";
     };
 
+    services.samba = {
+      enable = true;
+      enableNmbd = false;
+      enableWinbindd = false;
+      nsswins = false;
+      extraConfig = ''
+        # only listen to tailscale
+        interfaces = ${tailscaleInterface}
+        smb ports = ${toString sambaPortTailscale}
+      '';
+      shares = {
+        data-seeding = {
+          "path" = "/data/seeding";
+          "read only" = "yes";
+          "browsable" = "yes";
+          "guest ok" = "yes";
+        };
+      };
+    };
+    # somewhat hacky, but we want tailscale to be up
+    systemd.services.samba-smbd.wants = [ "tailscaled.service" ];
+    systemd.services.samba-smbd.after = [ "tailscaled.service" ];
+
     systemd.services.warpspeed =
       let user = config.users.users.rtorrent;
       in {
@@ -211,7 +236,7 @@ in
         interfaces.${tailscaleInterface} = {
           allowedTCPPorts = [
             gonicPortTailscale
-            # sambaPortTailscale
+            sambaPortTailscale
           ];
         };
 
-- 
cgit 1.4.1