{ config, lib, pkgs, ... }:

{
  services = {
    # Enable samba
    samba = {
      enable = true;
      enableNmbd = true;
      extraConfig = ''
        bind interfaces only = yes
        browseable = yes
        client lanman auth = no
        create mask = 0755
        directory mask = 2775
        dns proxy = no
        ea support = yes
        force create mode = 0755
        force directory mode = 2775
        fruit:metadata = stream
        fruit:model = MacSamba
        fruit:posix_rename = yes
        fruit:veto_appledouble = no
        fruit:wipe_intentionally_left_blank_rfork = yes
        fruit:delete_empty_adfiles = yes
        interfaces = lan mgmt 10.25.0.12/24
        local master = yes
        map to guest = never
        min protocol = SMB2
        ntlm auth = yes
        obey pam restrictions = yes
        passdb backend = tdbsam
        preferred master = yes
        printable = no
        restrict anonymous = 2
        server role = standalone server
        server signing = mandatory
        server string = Seednode''\'s Storage Space
        vfs objects = fruit streams_xattr
        wins support = yes
        workgroup = WORKGROUP
      '';
      nsswins = true;
      securityType = "user";
      shares = {
        storage = {
          "path" = "/storage";
          "read list" = "sinc";
          "write list" = "sinc";
          "writeable" = "yes";
        };
      };
    };
    samba-wsdd = {
      discovery = true;
      enable = true;
      interface = "0.0.0.0";
    };
  };
}