diff --git a/hosts/skydick/datapool.nix b/hosts/skydick/datapool.nix
index 4cd4d9d..d0cd745 100644
--- a/hosts/skydick/datapool.nix
+++ b/hosts/skydick/datapool.nix
@@ -527,6 +527,14 @@
         "vfs objects" = "catia fruit streams_xattr recycle";
         "fruit:metadata" = "stream";
         "fruit:nfs_aces" = "no";
+
+        # Stop macOS Finder turds accumulating on the rw shares (public, homes):
+        # veto .DS_Store + the AppleDouble/dot-junk family at the SMB layer so
+        # they are never written or shown. fruit:metadata=stream keeps real Apple
+        # metadata in xattr streams (not ._ files), so vetoing ._* is safe.
+        # `delete veto files` lets a dir still be removed if it only holds these.
+        "veto files" = "/._*/.DS_Store/.AppleDouble/.Trashes/.TemporaryItems/.fseventsd/.apdisk/";
+        "delete veto files" = "yes";
         "recycle:repository" = ".recycle/%U";
         "recycle:keeptree" = "yes";
         "recycle:versions" = "yes";