diff --git a/modules/nixos/services/samba/default.nix b/modules/nixos/services/samba/default.nix
index 1aed976..0ef4e66 100755
--- a/modules/nixos/services/samba/default.nix
+++ b/modules/nixos/services/samba/default.nix
@@ -18,17 +18,43 @@ in
       enable = true;
       openFirewall = true;
       settings = {
+        global = {
+          "workgroup" = "WORKGROUP";
+          "server string" = "NixOS Samba Server";
+          "netbios name" = "ceres";
+          "security" = "user";
+          "hosts allow" = "192.168.0. 127.0.0.1 localhost";
+          "hosts deny" = "0.0.0.0/0";
+          "guest account" = "nobody";
+          "map to guest" = "bad user";
+          "create mask" = "0664";
+          "directory mask" = "0775";
+          "force create mode" = "0664";
+          "force directory mode" = "0775";
+        };
         ${instances.jellyfin.name} = {
           path = instances.jellyfin.paths.path0;
           writable = "true";
+          "valid users" = "%wheel";
+          "force group" = "users";
+          "create mask" = "0664";
+          "directory mask" = "0775";
         };
         ${instances.audiobookshelf.name} = {
           path = instances.audiobookshelf.paths.path0;
           writable = "true";
+          "valid users" = "%wheel";
+          "force group" = "users";
+          "create mask" = "0664";
+          "directory mask" = "0775";
         };
         ${instances.comfyui.name} = {
           path = instances.comfyui.paths.path0;
           writable = "true";
+          "valid users" = "%wheel";
+          "force group" = "users";
+          "create mask" = "0664";
+          "directory mask" = "0775";
         };
       };
     };
diff --git a/systems/ceres/config/comfyui.nix b/systems/ceres/config/comfyui.nix
index 3083753..cdac944 100755
--- a/systems/ceres/config/comfyui.nix
+++ b/systems/ceres/config/comfyui.nix
@@ -56,6 +56,7 @@ in
   users.users.${service.name}.extraGroups = [
     "nginx"
     "caddy"
+    "users"
   ];
 
   networking = {