# Samba

  Provides authenticated SMB access to selected host storage and documentation on
  Nautilus.

  ## Deployment layout

  - **Compose:** `/srv/docker/samba/docker-compose.yml`
  - **Static configuration/source:** no additional mounted configuration
  - **Non-secret environment:** share definitions and the NetBIOS name are declared inline in Compose; account,
  UID, and share-user settings are supplied by the central environment; there is no project-local `.env`
  - **Secrets:** `/srv/docker/secrets/samba/.env`
  - **NVMe application state:** none
  - **Bulk HDD data:** none owned by Samba
  - **Other mounts:** `/data/Data1` read-write, `/srv/downloads` read-only, `/srv/certs` read-only, `/home/beda/nautilus-docs` read-write, and `./samba_shares` as the explicit `/shares` volume root

  Secrets are never committed to this repository. The central secret environment
  is supplied to the Samba service.

  ## Dependencies and recovery

  - **Networks/dependencies:** Samba uses host networking and depends on `/data/Data1`, `/srv/downloads`, `/srv/certs`,
  and `/home/beda/nautilus-docs` being available; no container dependencies are declared
  - **Back up:** the separately protected Samba secret environment; shared source paths follow their respective backup
  policies
  - **Re-creatable:** the Samba container and empty `samba_shares` mount-point scaffolding; no persistent cache or
  Samba-owned application state is declared