mirror of
https://github.com/fscotto/infra.git
synced 2026-09-27 19:03:47 +00:00
160d63c02d
* Add Atlas media and storage services * Document Atlas backend phase one and WireGuard deployment * Enable Atlas NAS management and document bootstrap workflow * Harden Atlas network, SSH, firewall, and sharing * Rotate Ansible Vault secrets * Allow configurable Aegis SSH users and authorized keys * Manage Aegis SSH authorized key fragments * Manage SSH authorized key fragments for infrastructure hosts * Harden Rocky storage and sharing configuration * Verify WireGuard handshakes and restore Podman networking
22 lines
592 B
Django/Jinja
22 lines
592 B
Django/Jinja
# Managed by Ansible. Do not edit manually.
|
|
[global]
|
|
workgroup = {{ atlas_samba_workgroup }}
|
|
security = user
|
|
map to guest = Never
|
|
server min protocol = SMB3
|
|
server signing = mandatory
|
|
smb encrypt = {{ atlas_samba_encryption }}
|
|
disable netbios = yes
|
|
smb ports = 445
|
|
hosts allow = {{ atlas_lan_subnet }}
|
|
include = registry
|
|
|
|
[{{ atlas_samba_share_name }}]
|
|
path = {{ atlas_archive_mountpoint }}
|
|
browseable = yes
|
|
read only = no
|
|
valid users = {{ atlas_samba_valid_users | join(' ') }}
|
|
force group = {{ atlas_admin_group }}
|
|
create mask = 0660
|
|
directory mask = 0770
|