From f8fcc88405886d035688fdec08927616512d61d9 Mon Sep 17 00:00:00 2001
From: m3tm3re <p@m3ta.dev>
Date: Tue, 31 Mar 2026 13:40:53 +0200
Subject: [PATCH] +samba for AZ-PRM-1

---
 hosts/AZ-PRM-1/configuration.nix            | 15 ++++------
 hosts/AZ-PRM-1/services/default.nix         | 31 +--------------------
 hosts/AZ-PRM-1/services/n8n.nix             |  5 +++-
 hosts/AZ-PRM-1/services/samba.nix           |  7 +++++
 hosts/AZ-PRM-1/services/traefik-routing.nix | 31 +++++++++++++++++++++
 5 files changed, 49 insertions(+), 40 deletions(-)
 create mode 100644 hosts/AZ-PRM-1/services/samba.nix
 create mode 100644 hosts/AZ-PRM-1/services/traefik-routing.nix

diff --git a/hosts/AZ-PRM-1/configuration.nix b/hosts/AZ-PRM-1/configuration.nix
index e886778..3a4c9ed 100644
--- a/hosts/AZ-PRM-1/configuration.nix
+++ b/hosts/AZ-PRM-1/configuration.nix
@@ -1,9 +1,4 @@
-{
-  config,
-  lib,
-  pkgs,
-  ...
-}: {
+{pkgs, ...}: {
   imports = [
     ./hardware-configuration.nix
     ./disko-config.nix
@@ -19,9 +14,11 @@
 
   i18n.defaultLocale = "de_DE.UTF-8";
 
-  environment.systemPackages = [
-    pkgs.neovim
-    pkgs.git
+  environment.systemPackages = with pkgs; [
+    neovim
+    git
+    python3
+    python3Packages.pysmb
   ];
 
   programs.gnupg.agent = {
diff --git a/hosts/AZ-PRM-1/services/default.nix b/hosts/AZ-PRM-1/services/default.nix
index 21edcc4..7800794 100644
--- a/hosts/AZ-PRM-1/services/default.nix
+++ b/hosts/AZ-PRM-1/services/default.nix
@@ -7,35 +7,6 @@
     ./pgadmin.nix
     ./postgres.nix
     ./traefik.nix
+    ./traefik-routing.nix
   ];
-
-  services.traefik.dynamicConfigOptions.http = {
-    services.ptrg.loadBalancer.servers = [{url = "http://192.168.152.102:7784/";}];
-
-    routers.prtg = {
-      rule = "Host(`m.l.az-gruppe.com`)";
-      tls = {certResolver = "ionos";};
-      service = "ptrg";
-      entrypoints = "websecure";
-    };
-
-    services.AZHA.loadBalancer.servers = [{url = "http://192.168.152.47:8123/";}];
-    routers.AZHA = {
-      rule = "Host(`ha.l.az-gruppe.com`)";
-      tls = {certResolver = "ionos";};
-      service = "AZHA";
-      entrypoints = "websecure";
-    };
-    services.AZDESK.loadBalancer.servers = [
-      {
-        url = "https://azdesk.az-group.local:443/";
-      }
-    ];
-    routers.AZDESK = {
-      rule = "Host(`it-ticket.l.az-gruppe.com`)";
-      tls = {certResolver = "ionos";};
-      service = "AZDESK";
-      entrypoints = "websecure";
-    };
-  };
 }
diff --git a/hosts/AZ-PRM-1/services/n8n.nix b/hosts/AZ-PRM-1/services/n8n.nix
index 1ae6d6f..5f795dd 100644
--- a/hosts/AZ-PRM-1/services/n8n.nix
+++ b/hosts/AZ-PRM-1/services/n8n.nix
@@ -1,7 +1,10 @@
 {config, ...}: {
   services.n8n = {
     enable = true;
-    environment.WEBHOOK_URL = "https://wf.l.az-gruppe.com";
+    environment = {
+      WEBHOOK_URL = "https://wf.l.az-gruppe.com";
+      NODES_EXCLUDE = "[]";
+    };
   };
   systemd.services.n8n.serviceConfig = {
     EnvironmentFile = ["${config.age.secrets.n8n-env.path}"];
diff --git a/hosts/AZ-PRM-1/services/samba.nix b/hosts/AZ-PRM-1/services/samba.nix
new file mode 100644
index 0000000..d20555f
--- /dev/null
+++ b/hosts/AZ-PRM-1/services/samba.nix
@@ -0,0 +1,7 @@
+{pkgs, ...}: {
+  services.samba = {
+    enable = true;
+    package = pkgs.samba4Full;
+    openFirewall = true;
+  };
+}
diff --git a/hosts/AZ-PRM-1/services/traefik-routing.nix b/hosts/AZ-PRM-1/services/traefik-routing.nix
new file mode 100644
index 0000000..d72eed5
--- /dev/null
+++ b/hosts/AZ-PRM-1/services/traefik-routing.nix
@@ -0,0 +1,31 @@
+{
+  services.traefik.dynamicConfigOptions.http = {
+    services.ptrg.loadBalancer.servers = [{url = "http://192.168.152.102:7784/";}];
+
+    routers.prtg = {
+      rule = "Host(`m.l.az-gruppe.com`)";
+      tls = {certResolver = "ionos";};
+      service = "ptrg";
+      entrypoints = "websecure";
+    };
+
+    services.AZHA.loadBalancer.servers = [{url = "http://192.168.152.47:8123/";}];
+    routers.AZHA = {
+      rule = "Host(`ha.l.az-gruppe.com`)";
+      tls = {certResolver = "ionos";};
+      service = "AZHA";
+      entrypoints = "websecure";
+    };
+    services.AZDESK.loadBalancer.servers = [
+      {
+        url = "https://azdesk.az-group.local:443/";
+      }
+    ];
+    routers.AZDESK = {
+      rule = "Host(`it-ticket.l.az-gruppe.com`)";
+      tls = {certResolver = "ionos";};
+      service = "AZDESK";
+      entrypoints = "websecure";
+    };
+  };
+}