2 files changed, 40 insertions, 0 deletions
diff --git a/roles/elevate/media/tasks/main.yml b/roles/elevate/media/tasks/main.yml
index 54a0801f..1d1193c5 100644
--- a/roles/elevate/media/tasks/main.yml
+++ b/roles/elevate/media/tasks/main.yml
@@ -7,11 +7,15 @@
       - python-docker
       - systemd-docker
       - python-openssl
+      - samba
     state: present
 
 - name: configure network
   import_tasks: network.yml
 
+- name: configure samba
+  import_tasks: samba.yml
+
 - name: configure nginx
   import_tasks: nginx.yml
 
diff --git a/roles/elevate/media/tasks/samba.yml b/roles/elevate/media/tasks/samba.yml
new file mode 100644
index 00000000..acf81c1f
--- /dev/null
+++ b/roles/elevate/media/tasks/samba.yml
@@ -0,0 +1,36 @@
+---
+- name: create group for shared access
+  group:
+    name: share
+    gid: 800
+
+- name: create guest user for samba
+  user:
+    name: share
+    uid: 800
+    home: /var/lib/share
+    group: share
+    shell: /bin/false
+
+## TODO: create software raid + lvm -> mount to /srv/smbdata
+
+- name: create directory for shared data
+  file:
+    state: directory
+    path: /srv/smbdata/share
+    owner: root
+    group: share
+    mode: 02775
+
+- name: create directory for read-only nextcloud files
+  file:
+    state: directory
+    path: /srv/smbdata/nextcloud
+
+- name: install samba config
+  template:
+    src: smb.conf.j2
+    dest: /etc/samba/smb.conf
+  notify:
+    - restart nmbd
+    - restart smbd