diff --git a/ansible.cfg b/ansible.cfg
index 87040d1..4acf70d 100644
--- a/ansible.cfg
+++ b/ansible.cfg
@@ -2,7 +2,6 @@
 inventory=inventory
 retry_files_enabled = False
 remote_user = root
-ansible_managed = DO NOT MODIFY: this file is managed by ansible!
 deperaction_warnings = True
 display_skipped_hosts = True
 
diff --git a/roles/baseline/templates/firewall.j2 b/roles/baseline/templates/firewall.j2
index dac129b..039cc3f 100644
--- a/roles/baseline/templates/firewall.j2
+++ b/roles/baseline/templates/firewall.j2
@@ -1,5 +1,5 @@
 #!/bin/bash
-# {{ ansible_managed }}
+# This file is managed by ansible, do not modify!
 
 # IPv4:
 iptables -F
@@ -75,4 +75,4 @@ ip6tables -A INPUT -j REJECT
 iptables -A FORWARD -j REJECT
 ip6tables -A FORWARD -j REJECT
 
-# {{ansible_managed}}
+# This file is managed by ansible, do not modify!
diff --git a/roles/baseline/templates/mosh.j2 b/roles/baseline/templates/mosh.j2
index 379a7ba..96d7a61 100644
--- a/roles/baseline/templates/mosh.j2
+++ b/roles/baseline/templates/mosh.j2
@@ -1,5 +1,5 @@
 #!/bin/sh
-# {{ansible_managed}}
+# DO NOT MODIFY: this file is written by ansible
 # Firewall to allow mosh sessions
 
 ip6tables -A INPUT -p udp --match multiport --dports 60001:60020 -j ACCEPT