It seems that you didn’t enable the Samba file server. In this case Samba uses the Wireguard VPN IP (10.5.4.1) instead of the LAN one so the clients can’t join the domain and the Samba DNS is unreachable.
After changing the Samba IP, the Samba DC should be reachable for clients: