diff --git a/samba.nix b/samba.nix
index 8b66b9b..f9b5b9c 100644
--- a/samba.nix
+++ b/samba.nix
@@ -11,7 +11,8 @@
       hosts allow = 0.0.0.0/0
       guest account = nobody
       map to guest = bad user
-      log level = 2
+      log level = 4
+      smb encrypt = mandatory
     '';
     shares."paperless-upload" = {
       path = "/var/lib/paperless-upload";