diff --git a/services/sabnzbd.nix b/services/sabnzbd.nix
new file mode 100644
index 0000000..9b74cb0
--- /dev/null
+++ b/services/sabnzbd.nix
@@ -0,0 +1,43 @@
+{ config, pkgs, lib, ... }:
+{
+  config = lib.mkIf (config.networking.hostName == "FredOS-Mediaserver") {
+
+    users.users.sabnzbd = {
+      isSystemUser = true;
+      group = "media";
+    };
+
+    systemd.tmpfiles.rules = [
+      "d /var/lib/sabnzbd 0755 sabnzbd media -"
+      "Z /var/lib/sabnzbd 0755 sabnzbd media -"
+      "d /mnt/storage/usenet/downloads 2775 sabnzbd media -"
+      "Z /mnt/storage/usenet/downloads 2775 sabnzbd media -"
+      "d /mnt/storage/usenet/incomplete 2775 sabnzbd media -"
+      "Z /mnt/storage/usenet/incomplete 2775 sabnzbd media -"
+    ];
+
+    systemd.services.sabnzbd = {
+      description = "SABnzbd usenet downloader";
+      after = [ "network.target" ];
+      wantedBy = [ "multi-user.target" ];
+      serviceConfig = {
+        Type = "simple";
+        User = "sabnzbd";
+        Group = "media";
+        # --server overrides the port in sabnzbd.ini on each start
+        ExecStart = "${pkgs.sabnzbd}/bin/sabnzbd --config-file /var/lib/sabnzbd/sabnzbd.ini --server 127.0.0.1:8085";
+        Restart = "on-failure";
+        UMask = "0002";
+        NoNewPrivileges = true;
+        PrivateTmp = true;
+        ProtectSystem = "strict";
+        ProtectHome = false;
+        ReadWritePaths = [
+          "/var/lib/sabnzbd"
+          "/mnt/storage/usenet"
+        ];
+        WorkingDirectory = "/var/lib/sabnzbd";
+      };
+    };
+  };
+}
\ No newline at end of file