[global]
        server string = samba
        idmap config * : range = 3000-7999
        security = user
        server min protocol = SMB2

        # disable printing services
        load printers = no
        printing = bsd
        printcap name = /dev/null
        disable spoolss = yes

%{for share in shares ~}
[${share.name}]
        path = /host/${share.path}
        comment = ${share.comment}
        valid users = ${join(", ", share.valid_users)}
        browseable = ${share.browseable}
        writable = ${share.writable}
        read only = ${share.read_only}
        force user = ${share.force_user}
        force group = ${share.force_group}
%{endfor ~}