diff --git a/vars/default_vars.yml b/vars/default_vars.yml
index 1cba88745..e382c5c9b 100644
--- a/vars/default_vars.yml
+++ b/vars/default_vars.yml
@@ -65,16 +65,22 @@ lan_netmask: 255.255.224.0
 # Internal Wi-Fi Access Point
 # Values are used if there is an internal Wi-Fi adapter and hostapd is enabled
 # The platform variable adapts install to specific hardware (raspberry pi=rpi2)
-hostapd_enabled: True
 host_ssid: "Internet in a Box"
 host_wifi_mode: g
 host_channel: 6
 hostapd_secure: False
 hostapd_password: changeme
-# For those installing IIAB over WiFi: "reboot_to_AP: True" makes the internal
-# WiFi Access active after the next reboot.  This is equivalent to manually
-# running "iiab-hotspot-on".  Note this variable only works with RPi's for now.
+hostapd_enabled: True
+# Above is forcibly set to False (in roles/network/tasks/main.yml) if IIAB is
+# being WiFi-installed (run "iiab-hotspot-on" AFTER ./iiab-install completes
+# and content is downloaded, to enable the internal WiFi Access Point / AP!)
 reboot_to_AP: False
+# For those installing IIAB over WiFi: "reboot_to_AP: True" overrides the above
+# behavior, forcing "hostapd_enabled: True" even if installing over WiFi.
+## Note this variable only works with RPi's for now.
+## makes the internal
+## WiFi Access active after the next reboot.  This is equivalent to manually
+## running "iiab-hotspot-on".  Note this variable only works with RPi's for now.
 
 # Gateway mode
 iiab_lan_enabled: True