preparation for role domaincontroller

2025-10-02 14:22:30 +02:00
parent 787c82465d
commit 57d51024ae
8 changed files with 144 additions and 0 deletions
--- a/roles/domaincontroller/templates/smb.conf.j2
+++ b/roles/domaincontroller/templates/smb.conf.j2
@@ -0,0 +1,21 @@
+# This file is managed by Ansible
+[global]
+        netbios name = {{ ansible_hostname | upper }}
+        realm = {{ samba_realm }}
+        server role = active directory domain controller
+        workgroup = {{ samba_workgroup }}
+
+        tls enabled  = yes
+        tls keyfile  = /etc/letsencrypt/live/{{ ansible_fqdn }}/privkey.pem
+        tls certfile = /etc/letsencrypt/live/{{ ansible_fqdn }}/fullchain.pem
+
+        template homedir = /home/%U
+        template shell = /bin/zsh
+
+[sysvol]
+        path = /var/lib/samba/sysvol
+        read only = No
+
+[netlogon]
+        path = /var/lib/samba/sysvol/{{ samba_realm | lower }}/scripts
+        read only = No