{ config, ... }:

{
  services.samba = {
    enable = true;
    openFirewall = false;
    nmbd.enable = false;
    winbindd.enable = false;
    settings = {
      global = {
        workgroup = "WORKGROUP";
        "server string" = config.networking.hostName;
        security = "user";
        "map to guest" = "Bad User";
        "guest account" = "nobody";
      };
      share = {
        path = "/home/sid";
        browseable = "yes";
        "read only" = "yes";
        "guest ok" = "yes";
        "force user" = "sid";
        "directory mask" = "0750";
      };
    };
  };
}