diff --git a/config-example.yaml b/config-example.yaml
index 494121b2..d0b0bb6e 100644
--- a/config-example.yaml
+++ b/config-example.yaml
@@ -1,11 +1,20 @@
 ---
+# The url clients will connect to.
+# Typically this will be a domain.
 server_url: http://127.0.0.1:8080
+
+# Address to listen to / bind to on the server
 listen_addr: 0.0.0.0:8080
+
+# Path to WireGuard private key file
 private_key_path: private.key
+
+# Path to a file containing a map of DERP nodes.
 derp_map_path: derp.yaml
+
 ephemeral_node_inactivity_timeout: 30m
 
-# SQLite config (uncomment it if you want to use SQLite)
+# SQLite config
 db_type: sqlite3
 db_path: db.sqlite
 
@@ -19,16 +28,23 @@ db_path: db.sqlite
 
 acme_url: https://acme-v02.api.letsencrypt.org/directory
 acme_email: ""
+
 tls_letsencrypt_hostname: ""
 tls_letsencrypt_listen: ":http"
 tls_letsencrypt_cache_dir: ".cache"
 tls_letsencrypt_challenge_type: HTTP-01
+
 tls_cert_path: ""
 tls_key_path: ""
+
+# Path to a file containg ACL policies.
 acl_policy_path: ""
+
 dns_config:
+  # Upstream DNS servers
   nameservers:
     - 1.1.1.1
   domains: []
+
   magic_dns: true
   base_domain: example.com