{
  services.samba = {
    enable = true;
    openFirewall = true;
    securityType = "user";
    extraConfig = ''
      workgroup = WORKGROUP
      server string = 005540.xyz
      netbios name = 005540.xyz
      security = user
      hosts allow = 0.0.0.0/0
      guest account = nobody
      map to guest = bad user
      log level = 2
    '';
    shares."paperless-upload" = {
      path = "/var/lib/paperless/consume";
      browsable = "yes";
      "read only" = "no";
      "guest ok" = "no";
      "write list" = "@paperless-upload";
      "read list" = "@paperless-upload";
      "force user" = "paperless-upload";
      "force group" = "paperless";
    };
  };
}