network fileshare #3

Open
opened 2024-10-24 13:13:33 +02:00 by kalipso · 4 comments
Owner

some network fileshare for storing the movies and streaming them within the network

same goes for zines/books

some network fileshare for storing the movies and streaming them within the network same goes for zines/books
ahtlon added the Lokal label 2024-10-29 17:37:46 +01:00
ahtlon self-assigned this 2024-10-29 20:31:02 +01:00
ahtlon added reference fileserver 2024-10-29 21:05:55 +01:00
Author
Owner

About the issue of having RW/RO access based on subnets only:

There was the request to add an internal wifi to enhance our network security by segregation.

That means we would have a public and internal/core vlan allowing us to give read/write access to the internal subnet and read only access to the public/guests subnet.

About the issue of having RW/RO access based on subnets only: There was the request to add an internal wifi to enhance our network security by segregation. That means we would have a public and internal/core vlan allowing us to give read/write access to the internal subnet and read only access to the public/guests subnet.
Author
Owner

The new printer supports samba shares, no nfs sadly.
I would therefore setup a smb share as destination for scans. When we have this setup already question is if we still want nfs share for zines and other stuff or just go with smb.
I have never played around with smb yet, so i will make myself an opinion while setting it up. @ahtlon do you have experience with smb?

The new printer supports samba shares, no nfs sadly. I would therefore setup a smb share as destination for scans. When we have this setup already question is if we still want nfs share for zines and other stuff or just go with smb. I have never played around with smb yet, so i will make myself an opinion while setting it up. @ahtlon do you have experience with smb?
Collaborator

Ive only set it up once for a windows vm:

services.samba = {
      enable = true;
      openFirewall = true;
      extraConfig = ''
        browseable = yes
        smb encrypt = required
        unix extensions = no
      '';
      shares = {
        virt = {
          path = "/share/virt";
          writable = "true";
          comment = "Hello World!";
          browseable = "yes";
          "read only" = "yes";
          "guest ok" = "no";
          "create mask" = "0644";
          "directory mask" = "0755";
          "follow symlinks" = "no";
          "wide links" = "no";
        };
      };
    };
    services.samba-wsdd = {
      enable = true;
      openFirewall = true;
    };
    services.avahi = {
      publish.enable = true;
      publish.userServices = true;
      # Needed to allow samba to automatically register mDNS records (without the need for an `extraServiceFile`
      nssmdns4 = true;
      # ^^ Not one hundred percent sure if this is needed
	    enable = true;
      openFirewall = true;
    };
Ive only set it up once for a windows vm: ``` services.samba = { enable = true; openFirewall = true; extraConfig = '' browseable = yes smb encrypt = required unix extensions = no ''; shares = { virt = { path = "/share/virt"; writable = "true"; comment = "Hello World!"; browseable = "yes"; "read only" = "yes"; "guest ok" = "no"; "create mask" = "0644"; "directory mask" = "0755"; "follow symlinks" = "no"; "wide links" = "no"; }; }; }; services.samba-wsdd = { enable = true; openFirewall = true; }; services.avahi = { publish.enable = true; publish.userServices = true; # Needed to allow samba to automatically register mDNS records (without the need for an `extraServiceFile` nssmdns4 = true; # ^^ Not one hundred percent sure if this is needed enable = true; openFirewall = true; }; ```
Collaborator

I think if we have to do smb for the printer just focus on that. Linux support for smb shares is good enough (and securing nfs properly would require us to set up samba anyways)

I think if we have to do smb for the printer just focus on that. Linux support for smb shares is good enough (and securing nfs properly would require us to set up samba anyways)
Sign in to join this conversation.
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: kalipso/infrastructure#3