wip7

nas/smb.conf.template

@@ -0,0 +1,42 @@
+[global]
+workgroup = WORKGROUP
+smb ports = 445
+load printers = no
+disable spoolss = yes
+
+server role = standalone
+security = user
+passdb backend = tdbsam
+map to guest = Never
+
+server min protocol = SMB3
+server smb encrypt = required
+server smb3 encryption algorithms = AES-256-GCM
+server smb3 signing algorithms = AES-128-GMAC AES-128-CMAC HMAC-SHA256
+server signing = mandatory
+
+client min protocol = SMB3
+client smb encrypt = required
+client smb3 encryption algorithms = AES-256-GCM
+client smb3 signing algorithms = AES-128-GMAC AES-128-CMAC HMAC-SHA256
+client signing = required
+client ipc signing = required
+
+browseable = yes
+writable = yes
+create mask = 0660
+directory mask = 0770
+force user = root
+force group = root
+
+vfs objects = fruit streams_xattr
+fruit:metadata = stream
+fruit:model = Backup
+fruit:veto_appledouble = no
+fruit:nfs_aces = no
+fruit:wipe_intentionally_left_blank_rfork = yes
+fruit:delete_empty_adfiles = yes
+fruit:posix_rename = yes
+fruit:time machine = yes
+spotlight backend = elasticsearch
+