106 lines
3.2 KiB
Cheetah
106 lines
3.2 KiB
Cheetah
[global]
|
|
# Allow connections with hostnames that can be resolved from hostname.local.{{ .user.domain }}
|
|
allow hosts = .local.{{ .user.domain }}
|
|
hostname lookups = yes
|
|
# Allows users without accounts to log in and be assigned to the guest account
|
|
map to guest = bad user
|
|
netbios name = {{ .host.samba.netbiosName }}
|
|
obey pam restrictions = yes
|
|
proxy = no
|
|
# Allow using DNS to specify allowed hosts
|
|
# Source: https://serverfault.com/questions/702455/samba-hosts-allow-example-com
|
|
dns proxy = yes
|
|
# Required for macOS JuiceFS Samba
|
|
ea support = yes
|
|
passdb backend = tdbsam
|
|
security = user
|
|
server role = standalone server
|
|
server string = Samba on %L
|
|
workgroup = {{ .host.samba.workgroup }}
|
|
# Printing - Uncomment these lines to enable Samba printer sharing with CUPSD
|
|
# Source: https://wiki.archlinux.org/index.php/CUPS/Printer_sharing
|
|
# load printers = yes
|
|
# printing = CUPS
|
|
# Symlinks - Uncomment the following two options to enable symlinking (including symlinks outside of the shared folder)
|
|
# This feature is disabled by default due to security concerns (i.e. people can create symlinks on the shares and access system files if the share is writable)
|
|
# unix extension = no
|
|
# wide links = yes
|
|
|
|
[default]
|
|
### Source: https://gist.github.com/jbfriedrich/49b186473486ac72c4fe194af01288be
|
|
# Use NTFS streams if supported
|
|
streams = yes
|
|
# Soft mount by default
|
|
soft = yes
|
|
# Disable signing due to macOS bug
|
|
signing_required = no
|
|
# Disable directory caching
|
|
dir_cache_off = yes
|
|
# Lock negotiation to SMB2/3 only
|
|
# 7 == 0111 SMB 1/2/3 should be enabled
|
|
# 6 == 0110 SMB 2/3 should be enabled
|
|
# 4 == 0100 SMB 3 should be enabled
|
|
protocol_vers_map = 6
|
|
# No SMB1, so we disable NetBIOS
|
|
port445 = no_netbios
|
|
# Turn off notifications
|
|
notify_off = yes
|
|
# SMB Multichannel behavior
|
|
# To disable multichannel support completely uncomment the next line
|
|
# mc_on=no
|
|
# Some Wi-Fi networks advertise faster speeds than the connected wired network.
|
|
mc_prefer_wired = yes
|
|
|
|
[Private]
|
|
browsable = yes
|
|
comment = Authenticated share with read/write capabilities (backed up to S3)
|
|
follow symlinks = yes
|
|
guest only = no
|
|
path = /mnt/private
|
|
public = no
|
|
unix extension = yes
|
|
valid users = @sambausers
|
|
wide links = yes
|
|
writable = true
|
|
|
|
[Public]
|
|
browsable = yes
|
|
comment = Public folder provided for file sharing on the LAN (backed up to S3)
|
|
follow symlinks = no
|
|
guest only = yes
|
|
path = /mnt/public
|
|
public = yes
|
|
writable = yes
|
|
|
|
[User]
|
|
browsable = yes
|
|
comment = Public user home directory folder for file sharing on the LAN
|
|
follow symlinks = no
|
|
guest only = yes
|
|
path = /home/{{ .user.name }}/Public
|
|
public = yes
|
|
writable = yes
|
|
|
|
# [printers]
|
|
# browsable = yes
|
|
# comment = Printers
|
|
# path = /var/spool/samba/
|
|
# printable = yes
|
|
# public = yes
|
|
# writable = no
|
|
|
|
# [print]
|
|
# browsable = yes
|
|
# comment = Printer drivers
|
|
# path = /var/lib/samba/printers
|
|
# public = yes
|
|
# writable = no
|
|
|
|
# [HPOfficeJetPro]
|
|
# comment = HP OfficeJet Pro printer
|
|
# path = /var/spool/samba/
|
|
# printable = yes
|
|
# # Source: https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Print_Server
|
|
# printer name = HP OfficeJet Pro 6978
|
|
# public = yes
|
|
# writable = no
|