diff --git a/src/steps-config/50-wesher-wireguard.sh b/src/steps-config/50-wesher-wireguard.sh
index a33bcd5..c5f058f 100755
--- a/src/steps-config/50-wesher-wireguard.sh
+++ b/src/steps-config/50-wesher-wireguard.sh
@@ -11,4 +11,14 @@ queue_postinstall_step "10-wesher.sh";
 
 queue_firewall_rule allow 7946 comment wesher-gossip;
 queue_firewall_rule allow 51820/udp comment wesher-wireguard;
+# Allow all traffic from the VPN; we don't actually know what ports Nomad will use
 queue_firewall_rule allow in on wgoverlay;
+
+
+# See the Keepass entry in our database for copy-paste commands to join nodes.
+# Basically:
+#	sudo wesher --cluster-key CLUSTER_KEY_HERE --join 172.16.230.100 --overlay-net 172.31.250.0/16 --log-level info
+#	sudo systemctl enable --now wesher.service
+#	sudo systemctl status wesher.service
+# 
+# This is all automated now thanks to this script andit's postinstall cousin.