From f427bfc67c0552c07158d8b02660ea172c29cbcd Mon Sep 17 00:00:00 2001
From: Grisha Shipunov
Date: Sun, 11 Jan 2026 19:38:29 +0100
Subject: minime: config time machine

---
 hosts/minime/timemachine.nix | 81 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 81 insertions(+)
 create mode 100644 hosts/minime/timemachine.nix

(limited to 'hosts/minime/timemachine.nix')

diff --git a/hosts/minime/timemachine.nix b/hosts/minime/timemachine.nix
new file mode 100644
index 0000000..988b006
--- /dev/null
+++ b/hosts/minime/timemachine.nix
@@ -0,0 +1,81 @@
+{ ... }:
+{
+  users.groups.time_machine = {};
+  users.users.time_machine = {
+    isSystemUser = true;
+    group = "time_machine";
+  };
+
+  networking.firewall.interfaces.enp90s0.allowedTCPPorts = [ 445 ];
+  networking.firewall.interfaces.enp90s0.allowedUDPPorts = [ 445 ];
+
+  services.samba = {
+    enable = true;
+    settings = {
+        global = {
+          "workgroup" = "WORKGROUP";
+          "server string" = "smbnix";
+          "netbios name" = "smbnix";
+          "security" = "user";
+
+          # Only available on localhost and lan
+          "hosts allow" = "192.168.2.0/24 127.0.0.1 localhost";
+          "hosts deny" = "0.0.0.0/0";
+          "guest account" = "nobody";
+          "map to guest" = "bad user";
+        };
+      "tm_share" = {
+        "path" = "/srv/timemachine";
+        "valid users" = "time_machine";
+        "public" = "no";
+        "writable" = "yes";
+        "force user" = "time_machine";
+        "fruit:aapl" = "yes";
+        "fruit:time machine" = "yes";
+        "vfs objects" = "catia fruit streams_xattr";
+      };
+    };
+  };
+
+  services.avahi = {
+    enable = true;
+
+    publish.enable = true;
+    publish.userServices = true;
+    nssmdns4 = true;
+
+      # https://wiki.nixos.org/wiki/Samba#Apple_Time_Machine
+      extraServiceFiles = {
+        timemachine = ''
+          <?xml version="1.0" standalone='no'?>
+          <!DOCTYPE service-group SYSTEM "avahi-service.dtd">
+          <service-group>
+            <name replace-wildcards="yes">%h</name>
+            <service>
+              <type>_smb._tcp</type>
+              <port>445</port>
+            </service>
+              <service>
+              <type>_device-info._tcp</type>
+              <port>0</port>
+              <txt-record>model=TimeCapsule8,119</txt-record>
+            </service>
+            <service>
+              <type>_adisk._tcp</type>
+              <!--
+                change tm_share to share name, if you changed it.
+              -->
+              <txt-record>dk0=adVN=tm_share,adVF=0x82</txt-record>
+              <txt-record>sys=waMa=0,adVF=0x100</txt-record>
+            </service>
+          </service-group>
+        '';
+      };
+    };
+
+  fileSystems."/srv/timemachine" = {
+    device = "zpool/backup/timemachine";
+    fsType = "zfs";
+    options = [ "zfsutil" ];
+  };
+}
-- 
cgit v1.3.1