diff --git a/roles/samba/defaults/main.yml b/roles/samba/defaults/main.yml
index 7de2c790a..e647c8567 100644
--- a/roles/samba/defaults/main.yml
+++ b/roles/samba/defaults/main.yml
@@ -1,6 +1,13 @@
----
-  smbuser : smbuser
-  smbpassword : $6$51iiab$VXzRJK88k9k8SXd5sjs37bEbVQ9x4ob1ng7A5PSGyoVXTKQrhu.89BRuXZAgn8a2DPqZkKDcCpqCZVOs.cieT/ 
+# Samba: do a security audit seriously before deploying this.
+
+# samba_install: False
+# samba_enabled: False
+
+# shared_dir : "{{ content_base }}/public"    # /library/public
+
+# All above are set in: github.com/iiab/iiab/blob/master/vars/default_vars.yml
+# If nec, change them by editing /etc/iiab/local_vars.yml prior to installing!
+
+smbuser : smbuser
+smbpassword : $6$51iiab$VXzRJK88k9k8SXd5sjs37bEbVQ9x4ob1ng7A5PSGyoVXTKQrhu.89BRuXZAgn8a2DPqZkKDcCpqCZVOs.cieT/ 
 #  python -c 'import crypt; print crypt.crypt("smbpw", "$6$51iiab")'
-  shared_dir : /library/public
-  samba_enabled : false