diff --git a/hosts/andromedae/default.nix b/hosts/andromedae/default.nix
index 8287171..46f88cc 100644
--- a/hosts/andromedae/default.nix
+++ b/hosts/andromedae/default.nix
@@ -14,6 +14,7 @@ in
   imports = [
     ./hardware-configuration.nix
     ./boot.nix
+    ./samba.nix
 
     inputs.catppuccin.nixosModules.catppuccin
     inputs.lsfg-vk.nixosModules.default
diff --git a/hosts/andromedae/samba.nix b/hosts/andromedae/samba.nix
new file mode 100644
index 0000000..9fae545
--- /dev/null
+++ b/hosts/andromedae/samba.nix
@@ -0,0 +1,42 @@
+{ ... }:
+{
+  services.samba = {
+    enable = true;
+    openFirewall = true;
+    settings = {
+      global = {
+        "workgroup" = "WORKGROUP";
+        "server string" = "smbnix";
+        "netbios name" = "smbnix";
+        "security" = "user";
+        #"use sendfile" = "yes";
+        #"max protocol" = "smb2";
+        # note: localhost is the ipv6 localhost ::1
+        "hosts allow" = "10.10.10. 127.0.0.1 localhost";
+        "hosts deny" = "0.0.0.0/0";
+        "guest account" = "ataraxia";
+        "map to guest" = "bad user";
+      };
+      "extra" = {
+        "path" = "/run/media/ataraxia/Extra/Anomaly";
+        "browseable" = "yes";
+        "read only" = "no";
+        "guest ok" = "no";
+        "create mask" = "0644";
+        "directory mask" = "0755";
+        "force user" = "ataraxia";
+        "force group" = "users";
+      };
+      "gamma" = {
+        "path" = "/media/games/Anomaly-Gamma";
+        "browseable" = "yes";
+        "read only" = "no";
+        "guest ok" = "no";
+        "create mask" = "0644";
+        "directory mask" = "0755";
+        "force user" = "ataraxia";
+        "force group" = "users";
+      };
+    };
+  };
+}