diff --git a/darwin/shiro/services/default.nix b/darwin/shiro/services/default.nix
index 67de3470..2826757b 100644
--- a/darwin/shiro/services/default.nix
+++ b/darwin/shiro/services/default.nix
@@ -4,5 +4,6 @@
     ./skhd.nix
     ./tailscale.nix
     ./jellyfin.nix
+    ./samba.nix
   ];
 }
diff --git a/darwin/shiro/services/samba.nix b/darwin/shiro/services/samba.nix
new file mode 100644
index 00000000..2dfd723c
--- /dev/null
+++ b/darwin/shiro/services/samba.nix
@@ -0,0 +1,36 @@
+{...}: {
+  services = {
+    samba = {
+      enable = true;
+      openFirewall = true;
+      settings = {
+        global = {
+          "workgroup" = "WORKGROUP";
+          "server string" = "Shiro";
+          "netbios name" = "Shiro";
+          "security" = "user";
+          "hosts allow" = "192.168.11. 127.0.0.1 localhost";
+          "hosts deny" = "0.0.0.0/0";
+          "guest account" = "nobody";
+          "map to guest" = "bad user";
+        };
+
+        public = {
+          "path" = "/Volumes/External SS";
+          "browseable" = "yes";
+          "read only" = "no";
+          "guest ok" = "yes";
+          "create mask" = "0644";
+          "directory mask" = "0755";
+          # "force user" = "username";
+          # "force group" = "groupname";
+        };
+      };
+    };
+    samba-wsdd = {
+      enable = true;
+      # openFirewall = true;
+    };
+  };
+  networking.firewall.allowPing = true;
+}