Cut the comment bloat from the Podman playbooks

Comment blocks now stay within three lines and explain only the non-obvious. Long histories, include examples, and commented-out code are gone. No task, key, or value changed; the only data change is comment text inside the generated unit files.

rustdesk/vars/default.yml

@@ -3,9 +3,8 @@ docker_container: rustdesk
 image_name: "rustdesk/rustdesk-server-s6"
 image_version: "latest"
 
-# Public name clients use, and the name Caddy serves. hbbs hands this out as the
-# relay address, and a WebSocket client rewrites a hostname to
-# wss://<host>/ws/relay (an IP would get neither TLS nor the path).
+# Clients use this name and Caddy serves it. hbbs hands it out as the relay
+# address, so it must be a hostname and not an IP.
 host: rust.tanshu.com
 rustdesk_relay_server: "{{ host }}:21117"
 
@@ -15,10 +14,9 @@ data_location: "/var/lib/{{ host_directory }}/data"
 docker_network: "{{ docker_container }}_net"
 caddy_container: caddy
 
-# hbbs/hbbr also speak their own TCP/UDP protocol on 21115-21117, which is not
-# HTTP and so cannot go through Caddy. Leave this off to keep the host's only
-# open ports at 80/443: clients then have to enable WebSocket, and every session
-# is relayed. Turn it on for clients that do not use WebSocket.
+# hbbs and hbbr speak their own protocol on 21115-21117, which Caddy cannot
+# carry. Leave this off to keep only 80/443 open. Every session is then relayed
+# and clients must use WebSocket. Turn it on for clients that do not.
 rustdesk_publish_raw_ports: false
 rustdesk_raw_ports:
   - "21115:21115"
@@ -28,11 +26,11 @@ rustdesk_raw_ports:
 
 rustdesk_published_ports: "{{ rustdesk_raw_ports if rustdesk_publish_raw_ports | bool else [] }}"
 
-# hbbs writes id_ed25519/id_ed25519.pub under /data on first start. Clients are
-# configured with the public key, and ENCRYPTED_ONLY makes hbbr check it too.
+# hbbs writes its key pair under /data on first start. Clients need the public
+# half, and ENCRYPTED_ONLY makes hbbr check it too.
 rustdesk_encrypted_only: true
 
-# "Y" pushes every session through the relay. WebSocket clients are relay-only
+# Y pushes every session through the relay. WebSocket clients are relay-only
 # regardless, so this only matters for clients on the raw ports.
 rustdesk_always_use_relay: false
 
@@ -41,8 +39,8 @@ rustdesk_env:
   ENCRYPTED_ONLY: "{{ '1' if rustdesk_encrypted_only | bool else '0' }}"
   ALWAYS_USE_RELAY: "{{ 'Y' if rustdesk_always_use_relay | bool else 'N' }}"
 
-# Caddy terminates TLS on 443 and carries the WebSocket transports: 21118 is
-# hbbs's WebSocket listener, 21119 hbbr's. Neither is published on the host.
+# Caddy terminates TLS on 443 and carries the WebSockets: 21118 is hbbs's
+# listener, 21119 hbbr's. Neither port is published on the host.
 caddyfile_path: /var/lib/caddy/conf/Caddyfile
 snippet_block: |
   {{ host }} {