###########################################################################
##  Copyright (C) Wizardry and Steamworks 2017 - License: GNU GPLv3      ##
##  Please see: http://gnu.org for legal details,  ##
##  rights of fair usage, the disclaimer and warranty conditions.        ##
###########################################################################
## Optimized standalone configuration template for Samba servers.        ##
##                                                                       ##
## Ideal for:                                                            ##
##   * Virtual machine file sharing                                      ##
##                                                                       ##
## Requirements:                                                         ##
##   * Samba 4.x                                                         ##
##                                                                       ##
## File placement layout:                                                ##
##  /                                                                    ##
##  `-- etc                                                              ##
##     `-- samba                                                         ##
##         |-- smb.conf                                                  ##
##         |-- smb.conf.local                                            ##
##         |-- smb.conf.share                                            ##
##         `-- smb.conf.ldap                                             ##
##                                                                       ##
## Files Description:                                                    ##
##   * /etc/samba/smb.conf (this file)                                   ##
##   * /etc/samba/smb.conf.local (local server-site settings)            ##
##   * /etc/samba/smb.conf.share (samba shares go here)                  ##
##   * /etc/samba/smb.conf.ldap (optional ldab configuration)            ##
##                                                                       ##
###########################################################################

[global]
    # Network Resolution
    name resolve order = lmhosts host wins bcast

    # Unified Systemd Journal / Syslog Logging Configuration
    # (0 -> LOG_ERR, 1 -> LOG_WARNING, 2 -> LOG_NOTICE, 3 -> LOG_DEBUG)
    logging = syslog
    log level = 1

    # Standalone Server Settings
    local master = no
    domain master = no
    preferred master = no
    security = user
    
    # High-Utility Algorithmic Identity Mapping Setup
    idmap config * : backend = autorid
    idmap config * : range = 1000000-1999999
    
    # Script & Backend Compatibility
    passdb backend = smbpasswd
    add user script = /usr/sbin/useradd -d /nonexistent -s /usr/sbin/nologin %u
    map to guest = Bad User
    guest account = nobody
    hostname lookups = yes

    # Extended File Attributes
    ea support = yes
    map acl inherit = yes
    store dos attributes = yes

    # Protocol & Legacy Compatibility
    min protocol = NT1

    # High-Performance VFS Modules
    vfs objects = catia fruit streams_xattr acl_xattr recycle crossrename io_uring

    # Recycle Bin Tuning
    recycle:repository = .recycle/%U
    recycle:keeptree = yes
    recycle:versions = yes
    recycle:touch = yes
    recycle:directory_mode = 0777
    recycle:subdir_mode = 0700

    # macOS Optimization (vfs_fruit)
    fruit:resource = xattr
    fruit:metadata = stream
    fruit:locking = none
    fruit:encoding = native
    fruit:time machine = no
    fruit:veto_appledouble = yes
    fruit:posix_rename = yes
    readdir_attr:aapl_finder_info = yes
    readdir_attr:aapl_max_access = yes
    readdir_attr:aapl_rsize = yes
    streams_xattr:store_stream_type = yes

    # VFS Engine Specifics
    crossrename:sizelimit = 50
    io_uring:num_entries = 128
    io_uring:sqpoll = no

    # Storage Performance Tuning (ZFS / General)
    strict allocate = no
    use sendfile = yes
    read raw = yes
    write raw = yes
    unix extensions = yes

    # Features Disabled For Stability/Security
    usershare max shares = 0
    load printers = no
    printing = bsd
    printcap name = /dev/null
    disable spoolss = yes
    show add printer wizard = no

    # Include LDAP configuration.
    #include = /etc/samba/smb.conf.ldap

    # Include DFS.
    #include = /etc/samba/smb.conf.dfs

    # Include local settings
    include = /etc/samba/smb.conf.local

    # Include local shares
    include = /etc/samba/smb.conf.share