1
0
mirror of https://github.com/kmein/niveum synced 2026-03-16 10:11:08 +01:00

zaatar: remove NAS

This commit is contained in:
2025-12-22 08:49:35 +01:00
parent 1f163d65cd
commit cba0f92a7a
2 changed files with 0 additions and 79 deletions

View File

@@ -10,7 +10,6 @@ in {
./backup.nix
./gaslight.nix
./hardware-configuration.nix
./nas.nix
../../configs/mycelium.nix
./home-assistant.nix
../../configs/monitoring.nix

View File

@@ -1,78 +0,0 @@
{ config, ... }:
{
users.extraUsers.nas = {
isSystemUser = true;
group = "nas";
uid = 7451;
};
users.extraGroups.nas = {
gid = 7452;
};
fileSystems."/media/sd" = {
device = "/dev/disk/by-id/5E4S5_0x4c585d15-part1";
fsType = "ext4";
options = [
"nofail"
"defaults"
"uid=${toString config.users.extraUsers.nas.uid}"
"gid=${toString config.users.extraGroups.nas.gid}"
];
};
fileSystems."/media/hdd" = {
device = "/dev/disk/by-id/0x50014ee658872039-part1";
fsType = "ntfs";
options = [ # ref https://askubuntu.com/a/113746
"nofail"
"defaults"
"nls=utf8"
"umask=000"
"dmask=027"
"fmask=137"
"uid=${toString config.users.extraUsers.nas.uid}"
"gid=${toString config.users.extraGroups.nas.gid}"
"windows_names"
];
};
# ref https://dataswamp.org/~solene/2020-10-18-nixos-nas.html
# ref https://www.reddit.com/r/NixOS/comments/relwsh/comment/hoapgrr/
services.samba = {
enable = true;
securityType = "user";
openFirewall = true;
settings = {
global = {
"guest account" = "nobody";
"hosts allow" = ["192.168.178." "127.0.0.1" "localhost"];
"hosts deny" = ["0.0.0.0/0"];
"map to guest" = "Bad User";
"netbios name" = "zaatar";
"security" = "user";
"server role" = "standalone server";
"server string" = "zaatar";
"workgroup" = "WORKGROUP";
};
};
shares.nas = {
path = "/media";
browseable = "yes";
writable = "yes";
# "read only" = "no";
"guest ok" = "yes";
"create mask" = "0644";
"directory mask" = "0755";
"force user" = config.users.extraUsers.nas.name;
"force group" = config.users.extraUsers.nas.group;
};
};
services.samba-wsdd = {
enable = true;
openFirewall = true;
};
networking.firewall.enable = true;
networking.firewall.allowPing = true;
}