{config, pkgs, ...}:
{
  services.samba = {
    enable = true;
    # securityType = "user";
    openFirewall = true;
    settings = {
      global = {
        "workgroup" = "WORKGROUP";
        "server string" = "smbnix";
        # "netbios name" = "smbnix";
        "security" = "user";
      };
        "public" = {
        "path" = "/srv/samba/hoardfrost/mainstore";
        "browseable" = "yes";
        public = "yes";
        "read only" = "no";
        "guest ok" = "yes";
        "create mask" = "0644";
        "directory mask" = "0755";
        # "force user" = "autumn";
        # "force group" = "groupname";
        "valid users" = "autumn lia madeleine";
      };
        "private" = {
        "path" = "/srv/samba/hoardfrost/private";
        "browseable" = "yes";
        "read only" = "no";
        "guest ok" = "no";
        "create mask" = "0644";
        "directory mask" = "0755";
        "force user" = "autumn";
        # "force group" = "groupname";
        "valid users" = "autumn";
      };
    };
  };
  services.samba-wsdd = {
    enable = true;
    openFirewall = true;
    discovery = true;
  };
}