Update Samba and WireGuard configuration

- Adjust Samba config file permissions to 644
- Introduce PresharedKey option in WireGuard config template

roles/base/tasks/samba.yml

@@ -26,7 +26,7 @@
   ansible.builtin.template:
     src: smb.conf.j2
     dest: /etc/samba/smb.conf
-    mode: "700"
+    mode: "644"
   notify: restart_samba
 
 - name: Start smbd and enable on boot

roles/base/templates/wireguard.j2

@@ -8,6 +8,9 @@ ListenPort = {{ wireguard.listenport }}
 {% for peer in wireguard.peers %}
 [Peer]
 PublicKey = {{ peer.publickey }}
+{% if peer.presharedkey is defined %}
+PresharedKey = {{ peer.presharedkey }}
+{% endif %}
 {% if peer.endpoint is defined %}
 Endpoint = {{ peer.endpoint }}
 {% endif %}