diff --git a/.config.sample.env b/.config.sample.env
index 48d6d6c3..6d233c18 100644
--- a/.config.sample.env
+++ b/.config.sample.env
@@ -9,12 +9,12 @@ export BOOTSTRAP_GIT_REPOSITORY=""
 # To enable Flux to update your cluster on `git push` set the following to one of:
 # `generated` - this will generate a token and print it in the logs
 # Set this to any other string and it will be used for the secret
-export BOOTSTRAP_FLUX_GITHUB_WEBHOOK_SECRET="generated"
+export BOOTSTRAP_FLUX_GITHUB_WEBHOOK_SECRET="generated" # NOTE: Must only contain alphanumeric characters and dashes
 
 # The Weave GitOps dashboard admin password
 # `generated` - this will generate a token and print it in the logs
 # Set this to any other string and it will be used for the secret
-export BOOTSTRAP_WEAVE_GITOPS_ADMIN_PASSWORD="generated"
+export BOOTSTRAP_WEAVE_GITOPS_ADMIN_PASSWORD="generated" # NOTE: Must only contain alphanumeric characters and dashes
 
 # Choose one of your cloudflare domains
 # e.g. onedr0p.com
@@ -60,8 +60,8 @@ export BOOTSTRAP_TIMEZONE="Etc/UTC"
 # These are unused on nodes where BOOTSTRAP_ANSIBLE_HOSTNAME_ is provided
 #
 
-export BOOTSTRAP_ANSIBLE_DEFAULT_CONTROL_NODE_HOSTNAME_PREFIX="k8s-"
-export BOOTSTRAP_ANSIBLE_DEFAULT_NODE_HOSTNAME_PREFIX="k8s-"
+export BOOTSTRAP_ANSIBLE_DEFAULT_CONTROL_NODE_HOSTNAME_PREFIX="k8s-" # NOTE: Must only contain alphanumeric characters and dashes
+export BOOTSTRAP_ANSIBLE_DEFAULT_NODE_HOSTNAME_PREFIX="k8s-" # NOTE: Must only contain alphanumeric characters and dashes
 
 #
 # Ansible hosts - repeat this block as many times as you need,
@@ -73,22 +73,22 @@ export BOOTSTRAP_ANSIBLE_DEFAULT_NODE_HOSTNAME_PREFIX="k8s-"
 # e.g. 192.168.1.200
 export BOOTSTRAP_ANSIBLE_HOST_ADDR_0=""
 # User Ansible will log into the nodes
-export BOOTSTRAP_ANSIBLE_SSH_USERNAME_0=""
+export BOOTSTRAP_ANSIBLE_SSH_USERNAME_0="" # NOTE: Must only contain alphanumeric characters and dashes
 # Password Ansible will use to escalate to sudo
-export BOOTSTRAP_ANSIBLE_SUDO_PASSWORD_0=""
+export BOOTSTRAP_ANSIBLE_SUDO_PASSWORD_0="" # NOTE: Must only contain alphanumeric characters and dashes
 # Set this node as a control node (true/false)
 export BOOTSTRAP_ANSIBLE_CONTROL_NODE_0=""
 # Optional: Set the hostname of the node, if set this will override the *_HOSTNAME_PREFIX vars above
 export BOOTSTRAP_ANSIBLE_HOSTNAME_0=""
 
 # export BOOTSTRAP_ANSIBLE_HOST_ADDR_1=""
-# export BOOTSTRAP_ANSIBLE_SSH_USERNAME_1=""
-# export BOOTSTRAP_ANSIBLE_SUDO_PASSWORD_1=""
+# export BOOTSTRAP_ANSIBLE_SSH_USERNAME_1="" # NOTE: Must only contain alphanumeric characters and dashes
+# export BOOTSTRAP_ANSIBLE_SUDO_PASSWORD_1="" # NOTE: Must only contain alphanumeric characters and dashes
 # export BOOTSTRAP_ANSIBLE_CONTROL_NODE_1=""
 # export BOOTSTRAP_ANSIBLE_HOSTNAME_1=""
 
 # export BOOTSTRAP_ANSIBLE_HOST_ADDR_2=""
-# export BOOTSTRAP_ANSIBLE_SSH_USERNAME_2=""
-# export BOOTSTRAP_ANSIBLE_SUDO_PASSWORD_2=""
+# export BOOTSTRAP_ANSIBLE_SSH_USERNAME_2="" # NOTE: Must only contain alphanumeric characters and dashes
+# export BOOTSTRAP_ANSIBLE_SUDO_PASSWORD_2="" # NOTE: Must only contain alphanumeric characters and dashes
 # export BOOTSTRAP_ANSIBLE_CONTROL_NODE_2=""
 # export BOOTSTRAP_ANSIBLE_HOSTNAME_2=""