diff --git a/content/ocis/8.3/modules/admin/examples/ocis_helpers/extended/extended_configvars.adoc b/content/ocis/8.3/modules/admin/examples/ocis_helpers/extended/extended_configvars.adoc
index 84d09ac..601091e 100644
--- a/content/ocis/8.3/modules/admin/examples/ocis_helpers/extended/extended_configvars.adoc
+++ b/content/ocis/8.3/modules/admin/examples/ocis_helpers/extended/extended_configvars.adoc
@@ -77,7 +77,7 @@ a| [subs=-attributes]
 a| [subs=-attributes]
 ++ ++
 a| [subs=-attributes]
-++'true' or 'false', defaults to false. Requires MICRO_REGISTRY_ENABLE_TLS to be true ++
+++'true' or 'false', defaults to false. Requires MICRO_REGISTRY_ENABLE_TLS to be true. Do not enable this in production because it disables authentication of the NATS server. Use it only for testing with self-signed certificates. ++
 
 a| `MICRO_REGISTRY_TLS_ROOT_CA_CERTIFICATE` +
 a| [subs=-attributes]
diff --git a/content/ocis/8.3/services/persistent_files/extended_vars.yaml b/content/ocis/8.3/services/persistent_files/extended_vars.yaml
index f0476ce..a4102a5 100644
--- a/content/ocis/8.3/services/persistent_files/extended_vars.yaml
+++ b/content/ocis/8.3/services/persistent_files/extended_vars.yaml
@@ -4,7 +4,7 @@ variables:
   foundincode: true
   name: CS3_GATEWAY
   type: ""
-  default_value: "ignored intentionally"
+  default_value: ignored intentionally
   description: ""
   do_ignore: true
 - rawname: CS3_MACHINE_AUTH_API_KEY
@@ -13,7 +13,7 @@ variables:
   name: CS3_MACHINE_AUTH_API_KEY
   type: ""
   default_value: ""
-  description: "ignored intentionally"
+  description: ignored intentionally
   do_ignore: true
 - rawname: _registryRegisterIntervalEnv
   path: ../../ocis/ocis-pkg/registry/expiry.go:19
@@ -21,7 +21,7 @@ variables:
   name: EXPERIMENTAL_REGISTER_INTERVAL
   type: ""
   default_value: ""
-  description: "ignored intentionally"
+  description: ignored intentionally
   do_ignore: true
 - rawname: _registryRegisterTTLEnv
   path: ../../ocis/ocis-pkg/registry/expiry.go:28
@@ -29,7 +29,7 @@ variables:
   name: EXPERIMENTAL_REGISTER_TTL
   type: ""
   default_value: ""
-  description: "ignored intentionally"
+  description: ignored intentionally
   do_ignore: true
 - rawname: _serverMaxConnectionAgeEnv
   path: ../../ocis/ocis-pkg/service/grpc/keepalive.go:19
@@ -115,7 +115,8 @@ variables:
   type: string
   default_value: ""
   description: '''true'' or ''false'', defaults to false. Requires MICRO_REGISTRY_ENABLE_TLS
-    to be true'
+    to be true. Do not enable this in production because it disables authentication
+    of the NATS server. Use it only for testing with self-signed certificates.'
   do_ignore: false
 - rawname: _registryTLSRootCAEnv
   path: ../../ocis/ocis-pkg/natsjsregistry/registry.go:257
@@ -123,7 +124,7 @@ variables:
   name: MICRO_REGISTRY_TLS_ROOT_CA_CERTIFICATE
   type: string
   default_value: ""
-  description: 'The Micro Registry TLS root CA certificate'
+  description: The Micro Registry TLS root CA certificate
   do_ignore: false
 - rawname: OCIS_BASE_DATA_PATH
   path: ../../ocis/ocis-pkg/config/defaults/paths.go:23
@@ -141,7 +142,7 @@ variables:
   foundincode: true
   name: OCIS_BASE_DATA_PATH
   type: ""
-  default_value: "dupe of OCIS_BASE_DATA_PATH"
+  default_value: dupe of OCIS_BASE_DATA_PATH
   description: ""
   do_ignore: true
 - rawname: OCIS_CONFIG_DIR
@@ -168,14 +169,14 @@ variables:
   name: OCIS_INSECURE
   type: ""
   default_value: ""
-  description: "OCIS_INSECURE"
+  description: OCIS_INSECURE
   do_ignore: true
 - rawname: OCIS_INSECURE
   path: ../../ocis/services/idp/pkg/service/v0/service.go:367
   foundincode: true
   name: OCIS_INSECURE
   type: ""
-  default_value: "dupe of OCIS_INSECURE"
+  default_value: dupe of OCIS_INSECURE
   description: ""
   do_ignore: true
 - rawname: OCIS_LOG_LEVEL
@@ -184,7 +185,7 @@ variables:
   name: OCIS_LOG_LEVEL
   type: ""
   default_value: ""
-  description: "ignored intentionally"
+  description: ignored intentionally
   do_ignore: true
 - rawname: parts[0]
   path: ../../ocis/ocis-pkg/config/envdecode/envdecode.go:396
diff --git a/ocis_helpers/extended_vars.yaml.do_not_delete b/ocis_helpers/extended_vars.yaml.do_not_delete
index 9c44b70..f0a34c4 100644
--- a/ocis_helpers/extended_vars.yaml.do_not_delete
+++ b/ocis_helpers/extended_vars.yaml.do_not_delete
@@ -115,7 +115,8 @@ variables:
   type: string
   default_value: ""
   description: '''true'' or ''false'', defaults to false. Requires MICRO_REGISTRY_ENABLE_TLS
-    to be true'
+    to be true. Do not enable this in production because it disables authentication
+    of the NATS server. Use it only for testing with self-signed certificates.'
   do_ignore: false
 - rawname: _registryTLSRootCAEnv
   path: ../../ocis/ocis-pkg/natsjsregistry/registry.go:257