{ ... }:
{
	services.samba = {
		enable = true;
		securityType = "user";
		openFirewall = true;
		settings = {
			global = {
				"workgroup" = "WORKGROUP";
				"server string" = "smbnix";
				"netbios name" = "smbnix";
				"security" = "user";
				"hosts allow" = "192.168.50. 127.0.0.1 localhost";
				"hosts deny" = "0.0.0.0/0";
				"guest account" = "nobody";
				"map to guest" = "bad user";
			};

			photos = {
				"path" = "/srv/samba/photos";
				"browseable" = "yes";
				"read only" = "no";
				"guest ok" = "yes";
				"create mask" = "0644";
				"directory mask" = "0755";
				"force user" = "nobody";
				"force group" = "nogroup";
			};
		};
	};

	# Used to advertise to Windows hosts
	services.samba-wsdd = {
		enable = true;
		openFirewall = true;
	};
}