From 747ba4653e24ad5c33a114b412871c86db9dd693 Mon Sep 17 00:00:00 2001
From: Kjetil Orbekk <kj@orbekk.com>
Date: Tue, 26 Dec 2023 18:36:08 -0500
Subject: samba

---
 modules/router.nix | 5 ++---
 modules/users.nix  | 3 +++
 2 files changed, 5 insertions(+), 3 deletions(-)

(limited to 'modules')

diff --git a/modules/router.nix b/modules/router.nix
index ee95cf1..ace0b57 100644
--- a/modules/router.nix
+++ b/modules/router.nix
@@ -201,10 +201,9 @@ let
           ${toString mullvadPort}
         }
         define SERVER_LAN_PORTS = {
-          tftp, 139, 445, 137, 138,
+          tftp,
           1080, # socks
-          wsdapi, # samba
-          ws-discovery, # discovery
+          139, 445, 137, 138, wsdapi, ws-discovery, # samba
         }
         table inet filter {
           chain input {
diff --git a/modules/users.nix b/modules/users.nix
index 0b38c0a..58ad230 100644
--- a/modules/users.nix
+++ b/modules/users.nix
@@ -37,6 +37,9 @@ in {
         home = "/storage/annie";
         uid = 1001;
         description = "Annie Poon";
+        extraGroups = [
+          "readonly"
+        ];
       };
       guest = {
         isNormalUser = true;
-- 
cgit v1.2.3