.gitignore

@@ -1,4 +1,3 @@
-.playbook
 .vagrant
-.vscode
-/environments/
+.playbook
+/environments/

roles/base/defaults/main.yml

@@ -1,7 +1,6 @@
-allow_reboot: true
-manage_firewall: true
 manage_network: false
 network_type: static
+allow_reboot: true
 
 packages:
   - apache2-utils

roles/base/tasks/main.yml

@@ -9,7 +9,6 @@
 - name: Import Firewall tasks
   ansible.builtin.import_tasks: firewall.yml
   tags: firewall
-  when: manage_firewall
 
 - name: Import Network tasks
   ansible.builtin.import_tasks: network.yml

roles/base/tasks/samba.yml

@@ -50,4 +50,3 @@
     from: "{{ item }}"
     state: enabled
   loop: "{{ samba.firewall }}"
-  when: manage_firewall

roles/base/tasks/wireguard.yml

@@ -35,5 +35,5 @@
   community.general.ufw:
     rule: allow
     port: "{{ wireguard.listenport }}"
-    proto: udp
+    proto: tcp
   when: wireguard.listenport is defined

roles/base/templates/smb.conf.j2

@@ -13,16 +13,7 @@
 [{{ share.name }}]
    path = {{ share.path }}
    browsable = yes
-{% if share.guest_allow is defined and share.guest_allow %}
-   guest ok = yes
-{% else %}
    guest ok = no
-{% endif %}
    read only = {{ 'yes' if share.read_only | default(false) else 'no' }}
-{% if share.valid_users is defined %}
    valid users = {{ share.valid_users }}
-{% endif %}
-{% if share.force_user is defined %}
-   force user = {{ share.force_user }}
-{% endif %}
 {% endfor %}