anchor.diff:          description = ''
             Whether to enable Samba, which provides file and print
             services to Windows clients through the SMB/CIFS protocol.
  +
  +          <note>
  +            <para>If you use the firewall consider adding the following:</para>
  +            <programlisting>
  +              networking.firewall.allowedTCPPorts = [ 139 445 ];
  +              networking.firewall.allowedUDPPorts = [ 137 138 ];
  +            </programlisting>
  +          </note>
           '';
         };
   
  
positive.code:         description = ''
            Additional global section and extra section lines go in here.
          '';
        };
  
        configText = mkOption {
  
negative.code:         '';
          type = types.attrsOf (types.attrsOf types.unspecified);
          example =
            { public =
               { path = "/srv/public";
                 "read only" = true;
                 browseable = "yes";
                 "guest ok" = "yes";
                  comment = "Public samba share.";
               };
            };
  