version: '3.8'

# Samba - Network File Sharing (SMB/CIFS)
# Backlog: Application Deployment
# Ports: 139, 445
# GPU: No
# Storage: HDD (shares from media drive)

services:
  samba:
    image: dperson/samba
    container_name: samba
    restart: unless-stopped
    ports:
      - "139:139"
      - "445:445"
    environment:
      - TZ=Europe/Amsterdam
      - USERID=1000   # Your user ID (run: id -u)
      - GROUPID=1000  # Your group ID (run: id -g)
    volumes:
      # Config on SSD
      - /home/jpmschweitzer/docker-data/samba:/share/config

      # Shares from HDD
      - /mnt/media/jellyfin:/share/media           # Media files (read/write)
      - /mnt/media/downloads:/share/downloads      # Downloads folder
      - /mnt/media/backups:/share/backups:ro       # Backups (read-only)
    command: >
      -s "Media;/share/media;yes;no;yes;all"
      -s "Downloads;/share/downloads;yes;no;no;all"
      -s "Backups;/share/backups;yes;no;yes;all"
      -u "jpmschweitzer;IG3omTybtVW3pVmmBi1D5FjnQ0MnZLUG"
      -p

# ⚠️ SECURITY WARNING:
# Change CHANGEME_SAMBA_PASSWORD before deploying!
#
# Share Configuration Format:
# -s "ShareName;/path;browseable;readonly;guest;users"
#
# Current Shares:
# 1. Media - Read/write access to Jellyfin media
# 2. Downloads - Read/write downloads folder (guest: no)
# 3. Backups - Read-only access to backups
#
# Note: Nextcloud files accessible via web interface at https://cloud.schweitz.net
#
# Access from Clients:
#
# Windows:
# 1. Open File Explorer
# 2. Address bar: \\tower-of-joy\Media
# 3. Enter credentials: jpmschweitzer / (your password)
#
# Mac:
# 1. Finder → Go → Connect to Server
# 2. Enter: smb://tower-of-joy/Media
# 3. Enter credentials
#
# Linux:
# 1. Install smbclient: sudo apt install smbclient
# 2. List shares: smbclient -L tower-of-joy -U jpmschweitzer
# 3. Connect: smbclient //tower-of-joy/Media -U jpmschweitzer
# Or mount: sudo mount -t cifs //tower-of-joy/Media /mnt/media -o username=jpmschweitzer
#
# Mobile (iOS/Android):
# Use file manager apps that support SMB (e.g., FE File Explorer, Solid Explorer)
#
# Firewall Configuration:
# If using UFW, allow Samba:
# sudo ufw allow 139/tcp
# sudo ufw allow 445/tcp