diff --git a/ops/nixos/totoro/default.nix b/ops/nixos/totoro/default.nix
index 0d72290bba..6b7eaa6dbe 100644
--- a/ops/nixos/totoro/default.nix
+++ b/ops/nixos/totoro/default.nix
@@ -99,9 +99,14 @@ in {
     firewall.allowedTCPPorts = [
       80 443  # web
       4001  # ipfs
+
+      139 445  # SMB
+      5357  # samba-wsdd
     ];
     firewall.allowedUDPPorts = [
       4001  # ipfs
+      137 138  # SMB
+      3702  # samba-wsdd
     ];
 
     macvlans.mv-plex = { interface = "br-ext"; };
@@ -528,5 +533,29 @@ in {
 
   my.prometheus.additionalExporterPorts.trains = 2112;
 
+  services.samba-wsdd = {
+    enable = true;
+    workgroup = "WORKGROUP";
+    hostname = "TOTORO";
+    interface = "br-ext";
+  };
+  services.samba = {
+    enable = true;
+    enableNmbd = false;  # Eh, SMB1.0
+    extraConfig = ''
+      server min protocol = SMB3_11
+      client min protocol = SMB3_11
+      restrict anonymous = 2
+    '';
+    shares.homes = {
+      comment = "Home Directories";
+      browseable = "no";
+      "read only" = "no";
+      "create mask" = "0755";
+      "directory mask" = "0755";
+      "valid users" = "%S";
+    };
+  };
+
   system.stateVersion = "20.03";
 }