{ config, pkgs, lib, ... }:

{
  services.samba = {
    enable = true;
    securityType = "user";
    extraConfig = ''
      workgroup = WORKGROUP
      server string = tahoe
      netbios name = tahoe
      security = user
      guest account = nobody
      mangled names = no
      client min protocol = SMB2
      map to guest = bad user
      ntlm auth = true
    '';
    shares = {
      music = {
        path = "/data/media/music";
        browseable = "yes";
        "read only" = "yes";
        "guest ok" = "yes";
      };
    };
  };
}