diff --git a/examples/ipsec-vpn-server/docker-compose.yml b/examples/ipsec-vpn-server/docker-compose.yml
index c90733d..f27f531 100644
--- a/examples/ipsec-vpn-server/docker-compose.yml
+++ b/examples/ipsec-vpn-server/docker-compose.yml
@@ -9,12 +9,12 @@ services:
       - VPN_IPSEC_PSK=3gAW0sDYI2ARSMQIQRa2xpIHb42JS+ImsiHdf3jbTl8 # set a secure psk; e.g. via `openssl rand -base64 32`
       - VPN_USER=vpn # define your vpn username
       - VPN_PASSWORD=Cy7jRPIZGVK7dbAF5v # set a secure vpn password; e.g. via `openssl rand -base64 16`
-      #- VPN_ADDL_USERS=additional_username_1 additional_username_2 # usernames must be separated by spaces, no duplicates allowed
-      #- VPN_ADDL_PASSWORDS=additional_password_1 additional_password_2 # passwords must be separated by spaces
-      #- VPN_ADDL_IP_ADDRS=192.168.42.2 192.168.42.3 # assign static IPs to VPN clients; IKEv2 mode does NOT support this feature
-      - VPN_DNS_SRV1=1.1.1.1 # use custom primary dns server
-      - VPN_DNS_SRV2=1.0.0.1 # use custom secondary dns server
-      - VPN_CLIENT_NAME=vpnclient # default is vpnclient
+      #- VPN_ADDL_USERS=additional_username_1 additional_username_2 # add additional users; usernames must be separated by spaces, no duplicates allowed
+      #- VPN_ADDL_PASSWORDS=additional_password_1 additional_password_2 # define pws for additional users; passwords must be separated by spaces
+      #- VPN_ADDL_IP_ADDRS=192.168.42.2 192.168.42.3 # assign static IPs to clients; IKEv2 mode does NOT support this feature
+      #- VPN_DNS_SRV1=1.1.1.1 # optionally use custom primary dns server; default is Google DNS
+      #- VPN_DNS_SRV2=1.0.0.1 # optionally use custom secondary dns server; default is Google DNS
+      #- VPN_CLIENT_NAME=vpnclient # optionally set your first vpn client name; default is vpnclient
       #- VPN_DNS_NAME=vpn.example.com # optionally define dns name
       #- VPN_PUBLIC_IP=103.10.199.1 # optionally define public IP address; this variable has no effect for IKEv2 mode
       #- VPN_PROTECT_CONFIG=yes # optionally protect client config files using a random password