Samba: Update Samba add-on to allow selectively enabling folders

samba/CHANGELOG.md

@@ -1,4 +1,9 @@
 # Changelog
+## 12.4.0
+
+- Add the ability to enable and disable specific shares
+- Add optional logging of samba configuration at startup
+
 ## 12.3.2
 
 - Suppress benign idmap logged error

samba/DOCS.md

@@ -12,9 +12,10 @@ Follow these steps to get the add-on installed on your system:
 
 1. In the configuration section, set a username and password.
    You can specify any username and password; these are not related in any way to the login credentials you use to log in to Home Assistant or to log in to the computer with which you will use Samba share.
-2. Save the configuration.
-3. Start the add-on.
-4. Check the add-on log output to see the result.
+2. Review the enabled shares.  Disable any you do not plan to use (they can be re-enabled later)
+3. Save the configuration.
+4. Start the add-on.
+5. Check the add-on log output to see the result.
 
 ## Connection
 
@@ -40,6 +41,14 @@ Add-on configuration:
 workgroup: WORKGROUP
 username: homeassistant
 password: YOUR_PASSWORD
+enabled_shares:
+  - addons
+  - addon_configs
+  - backup
+  - config
+  - media
+  - share
+  - ssl
 allow_hosts:
   - 10.0.0.0/8
   - 172.16.0.0/12
@@ -52,6 +61,7 @@ veto_files:
   - ".DS_Store"
   - Thumbs.db
 compatibility_mode: false
+debug: false
 ```
 
 ### Option: `workgroup` (required)
@@ -66,6 +76,10 @@ The username you would like to use to authenticate with the Samba server.
 
 The password that goes with the username configured for authentication.
 
+### Option: `enabled_shares` (required)
+
+List of Samba shares able to be accessed.
+
 ### Option: `allow_hosts` (required)
 
 List of hosts/networks allowed to access the shared folders.
@@ -85,6 +99,13 @@ when you absolutely need it and understand the possible consequences.
 
 Defaults to `false`.
 
+### Option: `debug` (optional)
+
+Outputs the resulting Samba config in the log. Generally, unless you
+know what you would be wanting to do with this information, not necessary.
+
+Optional config.  If not defined, then it will default to `false`.
+
 ## Support
 
 Got questions?

samba/config.yaml

@@ -1,5 +1,5 @@
 ---
-version: 12.3.2
+version: 12.4.0
 slug: samba
 name: Samba share
 description: Expose Home Assistant folders with SMB/CIFS
@@ -27,6 +27,14 @@ options:
   username: homeassistant
   password: null
   workgroup: WORKGROUP
+  enabled_shares:
+    - addons
+    - addon_configs
+    - backup
+    - config
+    - media
+    - share
+    - ssl
   compatibility_mode: false
   veto_files:
     - ._*
@@ -45,9 +53,12 @@ schema:
   username: str
   password: password
   workgroup: str
+  enabled_shares:
+    - "match(^(?i:(addons|addon_configs|backup|config|media|share|ssl))$)"
   compatibility_mode: bool
   veto_files:
     - str
   allow_hosts:
     - str
+  debug: bool?
 startup: services

samba/rootfs/etc/s6-overlay/s6-rc.d/init-smbd/run

@@ -12,6 +12,8 @@ if ! bashio::config.has_value 'username' || ! bashio::config.has_value 'password
     bashio::exit.nok "Setting a username and password is required!"
 fi
 
+bashio::config.require "enabled_shares" "Samba is a tool for sharing folders.  Starting it without sharing any folders defeats the purpose."
+
 # Read hostname from API or setting default "hassio"
 HOSTNAME=$(bashio::info.hostname)
 if bashio::var.is_empty "${HOSTNAME}"; then
@@ -30,11 +32,17 @@ fi
 bashio::log.info "Interfaces: $(printf '%s ' "${interfaces[@]}")"
 
 # Generate Samba configuration.
-jq ".interfaces = $(jq -c -n '$ARGS.positional' --args -- "${interfaces[@]}")" /data/options.json \
+jq ".interfaces = $(jq -c -n '$ARGS.positional' --args -- "${interfaces[@]}") |
+    .enabled_shares.[] |= ascii_downcase" /data/options.json \
     | tempio \
       -template /usr/share/tempio/smb.gtpl \
       -out /etc/samba/smb.conf
 
+if bashio::config.true 'debug'; then
+    bashio::log.yellow "Resulting Samba config:"
+    bashio::log.yellow "$(cat /etc/samba/smb.conf)"
+fi
+
 # Init user
 username=$(bashio::config 'username')
 password=$(bashio::config 'password')

samba/rootfs/usr/share/tempio/smb.gtpl

@@ -26,6 +26,7 @@
    dos charset = CP850
    unix charset = UTF-8
 
+{{ if (has "config" .enabled_shares) }}
 [config]
    browseable = yes
    writeable = yes
@@ -36,7 +37,9 @@
    force group = root
    veto files = /{{ .veto_files | join "/" }}/
    delete veto files = {{ eq (len .veto_files) 0 | ternary "no" "yes" }}
+{{ end }}
 
+{{ if (has "addons" .enabled_shares) }}
 [addons]
    browseable = yes
    writeable = yes
@@ -47,7 +50,9 @@
    force group = root
    veto files = /{{ .veto_files | join "/" }}/
    delete veto files = {{ eq (len .veto_files) 0 | ternary "no" "yes" }}
+{{ end }}
 
+{{ if (has "addon_configs" .enabled_shares) }}
 [addon_configs]
    browseable = yes
    writeable = yes
@@ -58,7 +63,9 @@
    force group = root
    veto files = /{{ .veto_files | join "/" }}/
    delete veto files = {{ eq (len .veto_files) 0 | ternary "no" "yes" }}
+{{ end }}
 
+{{ if (has "ssl" .enabled_shares) }}
 [ssl]
    browseable = yes
    writeable = yes
@@ -69,7 +76,9 @@
    force group = root
    veto files = /{{ .veto_files | join "/" }}/
    delete veto files = {{ eq (len .veto_files) 0 | ternary "no" "yes" }}
+{{ end }}
 
+{{ if (has "share" .enabled_shares) }}
 [share]
    browseable = yes
    writeable = yes
@@ -80,7 +89,9 @@
    force group = root
    veto files = /{{ .veto_files | join "/" }}/
    delete veto files = {{ eq (len .veto_files) 0 | ternary "no" "yes" }}
+{{ end }}
 
+{{ if (has "backup" .enabled_shares) }}
 [backup]
    browseable = yes
    writeable = yes
@@ -91,7 +102,9 @@
    force group = root
    veto files = /{{ .veto_files | join "/" }}/
    delete veto files = {{ eq (len .veto_files) 0 | ternary "no" "yes" }}
+{{ end }}
 
+{{ if (has "media" .enabled_shares) }}
 [media]
    browseable = yes
    writeable = yes
@@ -102,3 +115,4 @@
    force group = root
    veto files = /{{ .veto_files | join "/" }}/
    delete veto files = {{ eq (len .veto_files) 0 | ternary "no" "yes" }}
+{{ end }}

samba/translations/en.yaml

@@ -11,6 +11,14 @@ configuration:
   workgroup:
     name: Workgroup
     description: Change WORKGROUP to reflect your network needs.
+  enabled_shares:
+    name: >-
+      Enabled Shares - allowed values are:
+      addons, addon_configs, backup, config, media, share, or ssl
+    description: >-
+      List of file shares to make available.  Any you wish to add must be typed.
+      The listed values are the only allowed values.
+      Config cannot be saved if any non-allowed value is in the list.
   compatibility_mode:
     name: Enable Compatibility Mode
     description: >-
@@ -21,3 +29,6 @@ configuration:
   allow_hosts:
     name: Allowed Hosts
     description: List of hosts/networks allowed to access the shared folders.
+  debug:
+    name: Debug Logging
+    description: Log the resulting Samba config in the log