diff --git a/modules/services/network-filesystems/samba.nix b/modules/services/network-filesystems/samba.nix
index be7406cd5df..29c44d46e68 100644
--- a/modules/services/network-filesystems/samba.nix
+++ b/modules/services/network-filesystems/samba.nix
@@ -124,7 +124,7 @@ in
             log file = /var/log/samba/log.%m
             log level = 10
             max log size = 50000
-            security = user
+            security = ${cfg.securityType}
 
             client lanman auth = Yes
             dns proxy = no
@@ -159,6 +159,12 @@ in
 	};
       };
 
+      securityType = mkOption {
+        description = "Samba security type";
+	default = "user";
+	example = "share";
+      };
+
     };
 
   };