smb.conf for simple /var/www sharing ... make sure /var/www is owned by www-data...

smb.conf

[global]
        unix charset = UTF8
        workgroup = XXX
        netbios name = XXX
        server string = %h server (Samba, Ubuntu)
        interfaces = lo eth0
        bind interfaces only = Yes
        security = SHARE
        obey pam restrictions = Yes
        guest account = www-data
        map to guest = bad user
        syslog = 0
        log file = /var/log/samba/log.%m
        max log size = 1000
        unix extensions = Yes
        socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE SO_RCVBUF=131072 SO_SNDBUF=131072
        load printers = No
        domain master = No
        dns proxy = No
        wins support = Yes
        panic action = /usr/share/samba/panic-action %d
        invalid users = root
        create mask = 0664
        force create mode = 0664
        security mask = 0664
        force security mode = 0664
        directory mask = 0775
        force directory mode = 0775
        directory security mask = 0775
        force directory security mode = 0775
        delete veto files = Yes
        veto files = /.DS_Store/._*/.TemporaryItems/.AppleDouble/.bin/.AppleDesktop/Network Trash Folder/
        strict locking = No
        follow symlinks = No
        usershare allow guests = No
        usershare max shares = 0


[xxx-htdocs]
        comment = htdocs
        path = /var/www
        force user = www-data
        force group = www-data
        read only = No
        guest ok = Yes

why is this sharing data as public access? This is horrible.