diff --git a/roles/base/tasks/samba.yml b/roles/base/tasks/samba.yml
index 033ed21..66e5f45 100644
--- a/roles/base/tasks/samba.yml
+++ b/roles/base/tasks/samba.yml
@@ -26,7 +26,7 @@
   ansible.builtin.template:
     src: smb.conf.j2
     dest: /etc/samba/smb.conf
-    mode: "700"
+    mode: "644"
   notify: restart_samba
 
 - name: Start smbd and enable on boot
diff --git a/roles/base/templates/wireguard.j2 b/roles/base/templates/wireguard.j2
index b7a29da..5f866aa 100644
--- a/roles/base/templates/wireguard.j2
+++ b/roles/base/templates/wireguard.j2
@@ -8,6 +8,9 @@ ListenPort = {{ wireguard.listenport }}
 {% for peer in wireguard.peers %}
 [Peer]
 PublicKey = {{ peer.publickey }}
+{% if peer.presharedkey is defined %}
+PresharedKey = {{ peer.presharedkey }}
+{% endif %}
 {% if peer.endpoint is defined %}
 Endpoint = {{ peer.endpoint }}
 {% endif %}