{ ... }:
{
  services.samba = {
    enable = true;
    openFirewall = true;
    settings = {
      global = {
        workgroup = "WORKGROUP";
        "server string" = "monolith";
        "netbios name" = "monolith";
        security = "user";
        "invalid users" = [ "root" ];
        "guest account" = "nobody";
        "map to guest" = "bad user";
      };
      public = {
        path = "/library/share";
        browseable = "yes";
        "read only" = "no";
        "guest ok" = "yes";
      };
    };
  };

  services.samba-wsdd = {
    enable = true;
    openFirewall = true;
  };
}