i think we good

hosts/rpi/default.nix

@@ -23,14 +23,17 @@
     };
 
     # todo: module for dis stuff (maybe)
+    networking.firewall.allowedTCPPorts = [ 80 443 22 ];
 
     services.samba = {
       enable = true;
+      openFirewall = true;
       shares = {
         media = {
           path = "/media";
           writeable = "yes";
           public = "yes";
+          browsable = "yes";
           "create mask" = "0777";
           "directory mask" = "0777";
         };
@@ -42,15 +45,10 @@
       additionalModules = [ pkgs.nginxModules.fancyindex ];
       virtualHosts.media = {
         default = true;
-        addSSL = true;
+        # addSSL = true;
-        enableACME = true;
+        # enableACME = true;
 
-        listen = [{
+        root = "/media";
-          addr = "192.168.1.12";
-          port = "80";
-        }];
-
-        root = "/share";
 
         serverName = "_";
 
@@ -67,10 +65,10 @@
       };
     };
 
-    security.acme = {
+    # security.acme = {
-      acceptTerms = true;
+    #   acceptTerms = true;
-      defaults.email = "krizej@protonmail.com";
+    #   defaults.email = "krizej@protonmail.com";
-    };
+    # };
 
     chuj = {
       system = {

modules/stuff/thunar.nix

@@ -26,6 +26,7 @@ in {
       ffmpegthumbnailer
       gsettings-desktop-schemas
       xarchiver # not really thunar but can be here ig
+      samba
     ];
   };
 }