# This file is managed by Ansible
[global]
        netbios name = {{ ansible_hostname | upper }}
        realm = {{ samba_realm }}
        server role = active directory domain controller
        workgroup = {{ samba_workgroup }}

        tls enabled  = yes
        tls keyfile  = /etc/letsencrypt/live/{{ ansible_fqdn }}/privkey.pem
        tls certfile = /etc/letsencrypt/live/{{ ansible_fqdn }}/fullchain.pem

        template homedir = /home/%U
        template shell = /bin/zsh

[sysvol]
        path = /var/lib/samba/sysvol
        read only = No

[netlogon]
        path = /var/lib/samba/sysvol/{{ samba_realm | lower }}/scripts
        read only = No