diff --git a/hosts/nextcloud/default.nix b/hosts/nextcloud/default.nix
index 41b6b61..4fb05a7 100644
--- a/hosts/nextcloud/default.nix
+++ b/hosts/nextcloud/default.nix
@@ -13,7 +13,10 @@
       proxy.domain = "tegola.pro";
     };
 
-    networking.nas-samba-share.enable = true;
+    networking.nas-samba-share = {
+      enable = true;
+      allowUsers = [ "nextcloud" ];
+    };
 
     virtualisation.proxmox.enable = true;
   };
diff --git a/modules/networking/nas-samba-share.nix b/modules/networking/nas-samba-share.nix
index d0d0dca..ec32309 100644
--- a/modules/networking/nas-samba-share.nix
+++ b/modules/networking/nas-samba-share.nix
@@ -11,13 +11,22 @@ in
 {
   options.my.networking.nas-samba-share = {
     enable = mkEnableOption "Enable Samba connection with NAS";
+
+    allowUsers = mkOption {
+      type = types.listOf types.str;
+      default = [ ];
+      description = ''
+        List of users that are allowed to connect to the NAS.
+      '';
+    };
+
   };
 
   config = mkIf cfg.enable {
 
     users.groups."lxc_shares" = {
       gid = 10000;
-      members = [ config.users.users.pazpi.name ];
+      members = [ config.users.users.pazpi.name ] ++ cfg.allowUsers;
     };
 
   };