diff --git a/roles/network/defaults/main.yml b/roles/network/defaults/main.yml
index 9adbf7ad8..ed8d75b86 100644
--- a/roles/network/defaults/main.yml
+++ b/roles/network/defaults/main.yml
@@ -66,16 +66,19 @@ services_externally_visible: False
 dhcpd_install: True
 dhcpd_enabled: True
 named_install: True
-named_enabled: True
-dnsmasq_enabled: False
-dnsmasq_install: False
+named_enabled: False
+dnsmasq_enabled: True
+dnsmasq_install: True
 
 # For @tim-moody's Nodogsplash approach to Captive Portal?  High experimental as of June 2018: github.com/iiab/iiab/issues/608
 captive_portal_enabled: False
 
-# Simple python Captive Portal, that @m-anish & @jvonau are experimenting with in July 2018: github.com/iiab/iiab/pull/870
+# Python-based Captive Portal, that @m-anish & @jvonau experimented with in
+# July 2018 (https://github.com/iiab/iiab/pull/870) and that @georgejhunt
+# extensively refined in Sept 2018 (https://github.com/iiab/iiab/pull/1179)
 py_captive_portal_install: True
 py_captive_portal_enabled: True
 py_captive_portal_port: "9090"
 py_captive_portal_username: "Admin"
 py_captive_portal_password: "changeme"
+# In a pinch, disable it by running: systemctl disable py-captive-portal