1 files changed, 21 insertions, 4 deletions

diff --git a/hosts/vidhar/samba.nix b/hosts/vidhar/samba.nix
index 0ddf56a3..ffca9c6d 100644
--- a/hosts/vidhar/samba.nix
+++ b/hosts/vidhar/samba.nix
@@ -14,28 +14,45 @@
         guest account = nobody
         bind interfaces only = yes
         interfaces = lo lan
+        server signing = mandatory
+        server min protocol = SMB3
+        server smb encrypt = required
       '';
       shares = {
         homes = {
-          comment = "Home Directories";
+          comment = "Home directory for %S";
           path = "/home/%S";
-          browseable = "no";
+          browseable = false;
           "valid users" = "%S";
-          "read only" = "no";
+          "read only" = false;
           "create mask" = "0700";
           "directory mask" = "0700";
           "vfs objects" = "shadow_copy2";
           "shadow:snapdir" = ".zfs/snapshot";
+          "shadow:snapdirseverywhere" = true;
           "shadow:sort" = "desc";
           "shadow:format" = "%Y-%m-%dT%H:%M:%SZ";
         };
         eos = {
-          comment = "Disk image of eos";
+          comment = "Disk image of legacy eos";
           browseable = true;
           "valid users" = "mherold";
           writeable = "true";
           path = "/srv/eos";
         };
+        home-eos = {
+          comment = "Home directoriy for %u on PXE booted EOS";
+          path = "/srv/cifs/home-eos/%u";
+          volume = "%u@eos";
+          browseable = true;
+          "read only" = false;
+          "create mask" = "0700";
+          "directory mask" = "0700";
+          "vfs objects" = "shadow_copy2";
+          "shadow:snapdir" = ".zfs/snapshot";
+          "shadow:sort" = "desc";
+          "shadow:format" = "%Y-%m-%dT%H:%M:%SZ";
+        };
       };
     };
     services.samba-wsdd = {