smb_guest_user: smb-guest
smb_guest_group: smb-guest
smb_storage_dir: /storage

smb_default_config:
  acl_allow_execute_always: yes
  aio_max_threads: 25
  allow_dns_updates: disabled
  browseable: yes
  client_min_protocol: SMB2
  client_signing: mandatory
  create_mask: 0750
  deadtime: 600
  directory_mask: 0750
  disable_netbios: yes
  disable_spoolss: yes
  follow_symlinks: no
  force_create_mode: 0750
  force_directory_mode: 0750
  guest_ok: yes
  guest_only: no
  hide_dot_files: no
  hide_special_files: yes
  host_msdfs: no
  kernel_oplocks: yes
  lm_announce: no
  load_printers: no
  logging: syslog
  log_level: 1
  map_archive: no
  map_to_guest: "Bad Password"
  multicast_dns_register: no
  name_resolve_order: "lmhosts host"
  netbios_name: smb
  ntlm_auth: ntlmv2-only
  read_only: yes
  reject_md5_clients: yes
  reject_md5_servers: yes
  security: user
  server_role: standalone
  server_min_protocol: SMB2_10
  server_services:
    - smb
    - _s3fs
  server_signing: mandatory
  show_add_printer_wizard: no
  unix_extensions: no
  use_sendfile: yes

  idmap_uid: 10000-20000
  idmap_gid: 10000-20000
  syslog_only: yes
  syslog: 1

  hosts_allow:
    - "127."
    - "{{ int_net | ipaddr('network') }}/{{ int_net | ipaddr('netmask') }}"

  force_group: "{{ smb_guest_group }}"
  force_user: "{{ smb_guest_user }}"
  guest_account: "{{ smb_guest_user }}"
  server_string: "{{ org }} SMB server"
  workgroup: "{{ smb_workgroup | default(org | upper) }}"


smb_shares:
  - name: soft
    comment: software packages
  - name: script
    comment: powershell scripts
    has_scripts: yes