Probably works

wg-relay.yml

@@ -8,12 +8,10 @@
 #   ansible-playbook wg-relay.yml -e @vars/site-a.yml --check --diff
 #   ansible-playbook wg-relay.yml -e @vars/site-a.yml
 #
-# No inventory file needed. Set relay_host to localhost (or leave it unset)
+# No inventory file needed. Set relay_host to localhost or leave it unset
 # to configure the machine you're running on. Defaults come from
-# defaults.yml; anything in the vars file wins, since -e outranks it.
-#
-# The restrictions are enforced locally at each site, so neither side can
-# widen the other's exposure.
+# defaults.yml.
+# The restrictions are enforced locally at each site.
 
 - name: Resolve which box to configure
   hosts: localhost