unit/modules/datasync.nix

{ config, lib, pkgs, ... }:

{
  # Samba configuration
  environment.systemPackages = with pkgs; [ samba ];

  services.samba = {
    enable = true;
    nsswins = true;
    syncPasswordsByPam = true;
    extraConfig = ''
      workgroup = WORKGROUP
      server string = unit
      netbios name = unit
      guest account = nobody
      map to guest = bad user
      load printers=no
      smb encrypt = required
      server min protocol = SMB2_10
      client min protocol = SMB2
      client max protocol = SMB3
      ntlm auth = yes
    '';
    shares.public = {
      path = "/vault/samba/CSD";
      browseable = "yes";
      "read only" = "no";
      "guest ok" = "yes";
      "create mask" = "0644";
      "directory mask" = "0755";
      "force user" = "coace";
    };
  };

  # ZFS automatic backup solution
  services.znapzend = {
    enable = true;
    pure = true;
    zetup."vault" = {
      plan = "1h=>10min,1d=>1h,1w=>1d,1m=>1w,1y=>1m";
      recursive = true;
      destinations.backup = {
        host = "10.0.1.4";
        dataset = "shield/unit";
        plan = "1w=>1d,1m=>1w,1y=>1m";
      };
    };
  };
}