{ config, ... }:
{
  services = {
    samba = {
      enable = true;
      openFirewall = true;

      settings = {
        usb = {
          browseable = "yes";
          path = "/mnt/usb_share";
          "guest ok" = "no";
          "read only" = "no";
          "create mask" = "0777";
          "directory mask" = "0777";
          "valid users" = config.modules.primaryUser;
          "unix extensions" = "no";
        };
      };
    };

    samba-wsdd = {
      enable = true;
      openFirewall = true;
    };
  };
}