diff --git a/modules/smb.nix b/modules/smb.nix
index a7b17f5..4448f85 100644
--- a/modules/smb.nix
+++ b/modules/smb.nix
@@ -18,6 +18,19 @@
     securityType = "user";
 
     extraConfig = ''
+
+      # Server-seitige SMB-Signatur erzwingen
+      server signing = mandatory
+      client signing = mandatory
+
+      # Aktiviert die Unterstützung für SMB2 und SMB3
+      server min protocol = SMB2
+      server max protocol = SMB3
+
+      # Erlaubt sichere Negotation von Verbindungen
+      client min protocol = SMB2
+      client max protocol = SMB3
+
       workgroup = WORKGROUP
       server string = BFDS
       netbios name = BFDS