diff --git a/vars/default_vars.yml b/vars/default_vars.yml
index 914c4b89d..1447e5f5b 100644
--- a/vars/default_vars.yml
+++ b/vars/default_vars.yml
@@ -74,11 +74,15 @@ hostapd_password: changeme
 iiab_lan_enabled: True
 iiab_wan_enabled: True
 ssh_port: 22
+# Ties in what the user populated in the GUI for static WAN IP address info:
 gui_wan: True
 adm_cons_force_ssl: False
 adm_cons_allow_downloads: False
 
 # Gateway and Filters
+# Most all implementations set "iiab_gateway_enabled: False" within
+# local_vars.yml as they cannot afford Internet access for students
+# and teachers, and the many associated IT/support/training costs.
 iiab_gateway_enabled: True
 gw_squid_whitelist: False
 gw_block_https: False
@@ -105,15 +109,16 @@ dansguardian_enabled: False
 wondershaper_install: False
 wondershaper_enabled: False
 
-# Intended for developers
+# Intended for developers: ONLY CHANGE THESE IF YOU KNOW WHAT YOU ARE DOING
+# The following 2 override the detection when not "auto"
 user_wan_iface: auto
 user_lan_iface: auto
 wan_ip: dhcp
 wan_netmask:
 wan_gateway:
 wan_nameserver:
-exFAT_enabled: False
-#only change these if you know what you are doing
+# exFAT is auto-enabled for all "debuntu" OS's as of Nov 2017, in roles/2-common/tasks/packages.yml#L35-L36
+# exFAT_enabled: True
 
 # Parameters by Aggregate Roles
 # Each Role must have the following variables which are either True or False:
@@ -334,7 +339,6 @@ xovis_install: False
 xovis_enabled: False
 xovis_target_host: "127.0.0.1:5984"
 xovis_deployment_name: olpc
-
 xovis_db_name: xovis
 xovis_db_user: admin
 xovis_db_password: admin