diff --git a/roles/containers/defaults/main.yml b/roles/containers/defaults/main.yml
index 3e455c5..d7e4277 100644
--- a/roles/containers/defaults/main.yml
+++ b/roles/containers/defaults/main.yml
@@ -16,5 +16,8 @@ syncthing_conf_dir: "{{ dataroot }}/syncthing/config"
 music_path: "{{ dataroot }}/music"
 
 navidrome_domain: "mus.{{ domain }}"
+# enable navidrome shares (this will give permissions to all users!)
+# quotes are important
+navidrome_sharing: "false"
 
 paperless_domain: "doc.{{ domain }}"
diff --git a/roles/containers/templates/docker-compose.yml.j2 b/roles/containers/templates/docker-compose.yml.j2
index 34fb900..8808881 100644
--- a/roles/containers/templates/docker-compose.yml.j2
+++ b/roles/containers/templates/docker-compose.yml.j2
@@ -57,6 +57,7 @@ services:
     user: {{ user_navidrome.uid }}:{{ user_navidrome.group }}
     environment:
       ND_LISTENBRAINZ_ENABLED: true
+      ND_ENABLESHARING: {{ navidrome_sharing | default("false", true) }}
     restart: unless-stopped
     volumes:
       - "{{ dataroot }}/navidrome:/data"