samba some progress

modules/base/zfsborg/default.nix

@@ -92,13 +92,15 @@ in {
                     weekly = 4;
                     monthly = 3;
                   };
-                  environment = {
-                    BORG_HOST_ID = let
-                      h = config.networking;
-                    in "${h.hostName}.${h.domain}@${h.hostId}";
-                  } // lib.optionalAttrs (sshKeyPath != null) {
-                    BORG_RSH = ''ssh -i "${config.mj.base.zfsborg.sshKeyPath}"'';
-                  };
+                  environment =
+                    {
+                      BORG_HOST_ID = let
+                        h = config.networking;
+                      in "${h.hostName}.${h.domain}@${h.hostId}";
+                    }
+                    // lib.optionalAttrs (sshKeyPath != null) {
+                      BORG_RSH = ''ssh -i "${config.mj.base.zfsborg.sshKeyPath}"'';
+                    };
                 }
                 // lib.optionalAttrs (attrs ? patterns) {
                   patterns = attrs.patterns;

modules/services/default.nix

@@ -10,6 +10,7 @@
     ./friendlyport
     ./gitea
     ./headscale
+    ./jakstpub
     ./matrix-synapse
     ./node_exporter
     ./nsd-acme

modules/services/jakstpub/default.nix

@@ -0,0 +1,55 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}: {
+  options.mj.services.jakstpub = with lib.types; {
+    enable = lib.mkEnableOption "Enable jakstpub";
+    dataDir = lib.mkOption {type = path;};
+    # RequiresMountsFor is used by upstream, hacking with the unit
+    requires = lib.mkOption {type = listOf str;};
+    uidgid = lib.mkOption {type = int;};
+  };
+
+  config = with config.mj.services.jakstpub;
+    lib.mkIf enable {
+      services.samba = {
+        enable = true;
+        securityType = "user";
+        enableNmbd = true;
+        enableWinbindd = false;
+        extraConfig = ''
+          map to guest = Bad User
+          guest account = jakstpub
+        '';
+        shares = {
+          public = {
+            path = dataDir;
+            writable = "yes";
+            printable = "no";
+            public = "yes";
+          };
+        };
+      };
+
+      users.users.jakstpub = {
+        description = "Jakstys Public";
+        home = dataDir;
+        useDefaultShell = true;
+        group = "jakstpub";
+        isSystemUser = true;
+        createHome = false;
+        uid = uidgid;
+      };
+
+      users.groups.jakstpub.gid = uidgid;
+
+      systemd.services.samba-smbd = {
+        unitConfig.Requires = requires;
+      };
+
+      # WIP ports
+      #friendlyport.vpn.ports = [ 13
+    };
+}