{ config, pkgs, lib, ... }:

{
  services.samba = {
    enable = true;
    securityType = "user";
    extraConfig = ''
      workgroup = WORKGROUP
      server string = tahoe
      netbios name = tahoe
      security = user
      hosts allow = 10.77  192.168.0 127.
      guest account = nobody
      map to guest = bad user
      ntlm auth = true
      signing_required = no
    '';
    shares = {
      public = {
        path = "/data/media/music";
        browseable = "yes";
        "read only" = "yes";
        "guest ok" = "yes";
      };
    };
  };
}