diff --git a/defaults/main.yml b/defaults/main.yml
index 6ca42d9..ef5e6cf 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -32,11 +32,15 @@
 strongswan_conf_auth_type: "psk"
 
 # What operation should be done automatically at IPsec startup
-# Acceptable values are add, start, or route
+# Acceptable values: add, start, or route
 strongswan_conf_auto: "route"
-strongswan_conf_dpdaction: "clear"
 strongswan_conf_keyingtries: "3"
 
+# Actions that are taken when a connection drops
+# Acceptable values: clear, hold, restart
+strongswan_conf_dpdaction: "clear"
+strongswan_conf_closeaction: "clear"
+
 # Whether rekeying of an IKE_SA should also reauthenticate the peer
 strongswan_conf_reauth: "no"