{pkgs, ...}: {
  project.name = "nas";

  networks.dmz = {
    name = "dmz";
    external = true;
  };

  services = {
    samba.service = {
      image = "dperson/samba";
      container_name = "samba";
      ports = [
        "137:137/udp"
        "138:138/udp"
        "139:139/tcp"
        "445:445/tcp"
      ];
      environment = {
        USERID = 1000;
        GROUPID = 1000;
        TZ = "Europe/Berlin";
      };
      command = "-s 'public;/mount;yes;no;yes' -p";
      volumes = [
        "/storage/dataset/nas:/mount"
      ];
      restart = "always";
      networks = [
        "dmz"
      ];
    };
  };
}