Add script that installs Samba server

samba-server-over-vpn-ubuntu2004.sh

@@ -0,0 +1,58 @@
+#!/bin/bash
+
+USERNAME=smb
+DIR="/home/${USERNAME}/share"
+LAN="10.8.0.0/24" # connection will be allowed from this network only
+
+user=$(whoami)
+if [ $user != root ]; then
+    echo "You are using a non-privileged account"
+    exit 1
+fi
+
+if test -d $DIR; then
+    echo "Script is meant to be run only once and it seems to have already been executed"
+    exit 1
+fi
+
+apt update
+apt install -y samba
+
+useradd $USERNAME \
+	--shell /bin/false \
+	--create-home \
+	--user-group \
+	--comment 'SMB user' \
+	--system
+
+passwd -d $USERNAME
+
+mkdir $DIR
+
+chown $USERNAME:$USERNAME $DIR
+
+cp /etc/samba/smb.conf "/home/${USERNAME}/smb.conf"
+
+cat <<EOF >> /etc/samba/smb.conf
+[share]
+   comment = SMB share
+   hosts allow = ${LAN} 127.0.0.1
+   valid users = ${USERNAME}
+   path = ${DIR}
+   browseable = yes
+   read only = yes
+EOF
+
+smbpasswd -a $USERNAME
+
+service smbd restart
+testparm
+
+# set rsync port
+ufw allow from $LAN to any port 873
+
+# set up Samba ports
+ufw allow from $LAN proto udp to any port 137,138
+ufw allow from $LAN proto tcp to any port 139,445
+
+ufw status verbose