As an alternative to specifying config, you can specify the path to the evaluated NixOS system configuration, typically a symlink to a system profile.

The Flake URI of the NixOS configuration to use for the container

Location of the host path to be mounted.

Determine whether the mounted path will be accessed in read-only mode.

Path to device node

A path to the nixpkgs that provide the modules, pkgs and lib for evaluating the container

Takes the path to a file representing a kernel network namespace that the container shall run in

Path to an image file to load before running the image

Path to file containing password.

A set of NixOS system configurations to be run as lightweight containers

Path to a script that streams the desired image on standard output

A specification of the desired configuration of this container, as a NixOS module.

Whether the container is automatically started at boot-time.

Extra veth-pairs to be created for the container.

An extra list of directories that is bound to the container.

A list of device nodes to which the containers has access to.

Extra flags passed to the systemd-nspawn command

Mount point on the container file system.

Allows the container to create and setup tunnel interfaces by granting the NET_ADMIN capability and enabling access to /dev/net/tun.

Put the host-side of the veth-pair into the named bridge

Mounts a set of tmpfs file systems into the container

The IPv4 address assigned to the host interface. (Not used when hostBridge is set.)

The IPv6 address assigned to the host interface. (Not used when hostBridge is set.)

Put the host-side of the veth-pair into the named bridge

The IPv4 address assigned to the host interface. (Not used when hostBridge is set.)

A set of special arguments to be passed to NixOS modules

The IPv6 address assigned to the host interface. (Not used when hostBridge is set.)

Container name, e.g., shopping.

The list of host interfaces from which macvlans will be created

Container name, e.g., shopping.

Source port of the external interface on host

Time for the container to start

Source port of the external interface on host

List of forwarded ports from host to container

Whether the container should be restarted during a NixOS configuration switch if its definition has changed.

The IPv4 address assigned to the interface in the container

The list of interfaces to be moved into the container.

List of forwarded ports from host to container

The IPv6 address assigned to the interface in the container

The IPv4 address assigned to the interface in the container

Set an IPv6 address for the container.

Set an IPv4 address for the container.

The IPv6 address assigned to the interface in the container

Container name, e.g., shopping.

The command to run after the container start.

The user ID inside the container.

Packages added to the service's PATH environment variable

Use a user namespace for the container.

The container image.

Whether to give the container its own private virtual Ethernet interface

The group ID inside the container.

A mapping of ports between host and container

Attribute set of container configurations

Container icon.

The labels to apply to the container.

The protocol specifier for port forwarding between host and container

Attribute set of container configurations

Container ID

The protocol specifier for port forwarding between host and container

Each attribute in this set specifies an option in the [Path] section of the unit

Container color.

Whether to start the container on boot (requires user lingering).

Packages added to the service's PATH environment variable

Container icon.

The autoupdate policy for the container.

Packages added to the service's PATH environment variable

The volumes to mount into the container.

The devices to mount into the container

Runs container in ephemeral mode with the empty root filesystem at boot

Container ID

The name of this systemd unit, including its extension

Container color.

Whether to give the container its own private UIDs/GIDs space (user namespacing)

Target port of container

Define which other containers this one depends on

INI sections and values to populate the Container Quadlet.

Target port of container

Each attribute in this set specifies an option in the [Path] section of the unit

Attribute set of container configurations

Podman-specific settings in OCI containers

Network aliases for the container.

The path to repo in local machine

Extra arguments to pass to the podman run command.

Container icon.

The network mode or network/s to connect the container to

Container ID

Packages added to the service's PATH environment variable

Container color.

Commandline arguments to pass to the image's entrypoint.

The name of this systemd unit, including its extension

The hostname of the container.

OCI image to run.

Systemd service name that manages the container

Override the username or UID (and optionally groupname or GID) used in the container.

Image pull policy for the container

Device node access modifier

Labels to attach to the container at runtime.

Username for login.

The container entrypoint.

This is the absolute path to the plugin executable.

The user under which the container should run.

List of devices to attach to this container.

Override the default working directory for the container.

Packages added to the service's PATH environment variable

When enabled, the container is automatically started on boot

Automatically remove the container when it is stopped or killed

Networks to attach the container to

Whether to force replace the existing containers configuration

Extra options for podman run.

Profile path.

The description of the container.

Registry where to login to.

Extra options for podman that go before the run argument.

Environment variables to set in the container.

Whether to force replace the existing containers configuration

The resulting path of the generated Diffie-Hellman parameters file for other services to reference

Give extended privileges to the container

Override the default entrypoint of the image.

List of volumes to attach to this container

Logging driver for the container

Paths to files containing container environment variables.

Profile path.

Path to host the API on and forward to the daemon's api port

Environment variables to set for this container.

The capabilities to add to the container.

Path to maildir directory where mail for this account is stored

The capabilities to drop from the container.

Whether to force replace the existing containers configuration

Environment files for this container.

File or block device to export.

Determines how podman should notify systemd that the unit is ready

Grant additional capabilities to the container

The path of the storage.

A path of a profile file to include

Capabilities to configure for the container

Network ports to publish from the container to the outer host

Profile path.

The path of the storage.

Path where to store the data files of the hidden service

Absolute path of the salt on the unencrypted device with that device's root directory as "/".

Start the specified units when this unit is started.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Custom skills for Codex

If the specified units are started at the same time as this unit, delay this unit until they have started.

The path at which to sync the repository

Where to store the backups

Path to target file relative to HOME.

Additional packages that should be added to the agent's PATH

Project directory.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Start the specified units when this unit is started.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Aliases of that unit.

Path to target file relative to xdg.dataHome.

If the specified units are started at the same time as this unit, delay this unit until they have started.

DDNS server path

Keep this unit running as long as the listed units are running

The path to the folder which should be shared

Path to target file relative to xdg.cacheHome.

The path to the folder which should be shared

Keeps the specified running while this unit is running

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Path to target file relative to xdg.stateHome.

Whether the target path should be unconditionally replaced by the managed file source

If the specified units are started at the same time as this unit, delay them until this unit has started.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Aliases of that unit.

Each attribute in this set specifies an option in the [Unit] section of the unit

Custom skills for Claude Code

Whether the target path should be unconditionally replaced by the managed file source

Keep this unit running as long as the listed units are running

Path to target file relative to xdg.configHome.

Custom agent skills for opencode

Keeps the specified running while this unit is running

Path of the source file or directory

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Whether the target path should be unconditionally replaced by the managed file source

Whether the target path should be unconditionally replaced by the managed file source

Path(s) to back up

Each attribute in this set specifies an option in the [Unit] section of the unit

External wpa_supplicant.conf configuration file

Path to encrypted luks device that contains the user's home directory.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Path of the source file or directory

Units that want (i.e. depend on) this unit

A path which will be scanned for repositories.

Stream URL

The path to the user's shell

Attributes for user's entry in pam_mount.conf.xml

If set to false, this unit will be a symlink to /dev/null

Configure unit start rate limiting

Path to host the API on and forward to the daemon's api port

Path to host the built-in UI on and forward to the daemon's api port

The name of the multipath device

If the specified units are started, then this unit is stopped and vice versa.

The DNS name of the storage array

Custom tools for opencode

Database name

Path of the source file or directory

Path of the source file or directory

Whether the target path should be unconditionally replaced by the managed file source

Drive name without the full path.

Units that require (i.e. depend on and need to go down with) this unit

Secrets to append to the initrd

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Units that want (i.e. depend on) this unit

The path to the nixpkgs sources used to build the system

Similar to requires

Whether to run the machine in rootful mode

The path to the nixpkgs sources used to build the system

If set to false, this unit will be a symlink to /dev/null

Configure unit start rate limiting

Path to a certificate signing request to apply when fetching the certificate.

Path to encrypted luks device that contains the user's home directory.

Regex pattern to match the GC root path.

If the specified units are started, then this unit is stopped and vice versa.

Path of the source file or directory

Units that require (i.e. depend on and need to go down with) this unit

The path to the user's shell

Custom agents for opencode

Attributes for user's entry in pam_mount.conf.xml

Path to the private key to the matching certificate signing request.

The path on the current machine where the remote path would be mounted.

Similar to requires

List of paths that should be mounted before this one

Pairs of full-path and corresponding desired short name

The user of the file

Path to the socket for local or remote transports

The group of the file

This optional key is a variant of SockPathName

An arbitrary list of items such as derivations

Custom themes for opencode

Custom commands for opencode

Root path of window

An arbitrary list of items such as derivations

Configure unit start rate limiting

The file access mode to use when creating this file or directory.

Path to the directory storing the hooks

Path to the directory storing the hooks

Description of this unit used in systemd messages and progress indicators.

Which paths to backup, in addition to ones specified via dynamicFilesFrom

The path to the user's shell in initrd.

An arbitrary list of items such as derivations

Paths to back up, alongside those defined by the dynamicFilesFrom option

Delete a file when it reaches a certain age

This optional key implies SockFamily is set to "Unix"

Path of the underlying encrypted block device.

Source of the plugin package or path

The user of the file

An arbitrary list of items such as derivations

Configure unit start rate limiting

Path to a Containerfile which contains instructions to build the image.

Path to the file which contains the actual base64 encoded key

The group of the file

The full path to a file that contains the user's (clear text) password

Root path of pane

This optional key is a variant of SockPathName

Path to world folder containing the dimension to render

Description of this unit used in systemd messages and progress indicators.

Path of the authentication file.

A local file path specifying the location of the mount point.

The type of operation to perform on the file

Path to plugin file.

Path of the source file.

The absolute path to the program to be wrapped.

This optional key is a variant of SockPathName

The name of the path priority routine

An attribute set mapping remote file paths to their corresponding mount point configurations

Path to the repository

This optional key is a variant of SockPathName

Path of certificates (*.{crt,cert,key}) used to connect to registry.

Path of the authentication file used to connect to registry.

Path of the source file.

A short human-readable label of the unit.

Unix domain socket path to bind this listener to.

The specified name-string gives the system file name of the storage device managed by this storage daemon

The file access mode to use when creating this file or directory.

Path to the directory with database, registration, and other data for the bridge service

List of paths that should be mounted before this one

The path of the web root directory.

Path to the certificate authority certificate.

Path of the source file.

Path of the source file.

Path of the source file.

Path to the SSH key to use for authentication

Path to the Public Key.

Path or reference to the host key.

Path to a keyfile used to unlock the backing encrypted device

The configuration file path to supply bitcoind.

Path to the SVG of the panel.

Path to the host certificate.

Delete a file when it reaches a certain age

Path of the source file.

An argument whose meaning depends on the type of operation

Path to the unix socket file on which to accept FastCGI requests.

Root path in filesystem of the smug project

Path of the subvolume or mount point

Path of the source file.

Path of the source file.

The path to the socket to bind to.

Path to file containing local secret key in binary or hexadecimal form.

This optional key implies SockFamily is set to "Unix"

Whether to enable this proxy cache path entry.

The path of a device which is mounted for the volume.

The path to the workdir

The type of operation to perform on the file

Path to the directory where the pastes will be saved to

A list of URIs referencing documentation for this unit or its configuration.

The remote path to mount.

The device as passed to mount

This optional key implies SockFamily is set to "Unix"

Defines how unit configuration is provided for systemd:

asDropinIfExists creates a unit file when no unit file is provided by the package otherwise it creates a drop-in file named overrides.conf.

asDropin creates a drop-in file named overrides.conf

File path where the logs will be written

This optional key implies SockFamily is set to "Unix"

Path of the source .yaml file.

Path of the symlink.

Specify path to the control socket used for connection sharing.

Path to 64x64 logo png.

Path to 32x32 logo png.

Path of the source file.

Path of the source .yaml file.

Path of the source file.

Source of the custom plugin

Name of the wrapper that is installed into PATH

Path to the working directory (used for config and pidfile)

Path to key file

Path to the key file.

A list of URIs referencing documentation for this unit or its configuration.

Path to the SSH host public key.

Absolute file path to an SSH private key, usually generated by rad auth

Diffie-Hellman parameters to generate

The path of a PEM encoded TLS private key

The path of a PEM encoded TLS private key

Defines how unit configuration is provided for systemd:

asDropinIfExists creates a unit file when no unit file is provided by the package otherwise it creates a drop-in file named overrides.conf.

asDropin creates a drop-in file named overrides.conf

An argument whose meaning depends on the type of operation

Path to server SSL certificate key.

Path to the certificate file.

Path to directory of CRLs (Certificate Revocation Lists) in PEM format

Path to the data dir fedimintd will use to store its data

The name of private PKCS #8 key file for this policy to be found in the baseDirectory, or the absolute path to the key file

Path to target vault relative to the user's HOME.

Path to server SSL certificate.

Allow clients to create repositories in subdirectories of the specified path

To enable SSL, specify path to the name of certificate files without extension

Path of the source file or directory.

List of URIs referencing documentation for the unit.

URL path part of the web interface.

Specifies the path to a file containing the clear text password for the account

The path to the xkb types file

Path to target relative to the vault's directory.

Configuration written to Visual Studio Code's mcp.json

Path to the SSH host private key.

Path to the accounts file.

Path of the private RSA keyfile.

Path of the source file.

Path of the source file.

A list of glob patterns, indicating which paths to expose to the sandbox

Path to the unix socket file to use for authentication.

Path to a JWT secret for authenticated RPC endpoint.

Path to server SSL chain file.

Path to the keyboard's device file.

Path of the init script file

If set, users listed in $XDG_CONFIG_HOME/Yubico/u2f_keys (or $HOME/.config/Yubico/u2f_keys if XDG variable is not set) are able to log in with the associated U2F key

Relative path of the sent mail folder.

The path to the upperdir

Path to directory of X.509 certificates in PEM format for trusted parties

If given an IP address, it can be a host name ("localhost"), an IPv4 dotted-quad ("127.0.0.1") or an IPv6 address enclosed in square brackets ("[::1]").

(VCL4.1 and higher) If given an absolute Path ("/path/to/listen.sock") or "@" followed by the name of an abstract socket ("@myvarnishd") accept connections on a Unix domain socket

The path to the xkb compat file

The font used for the virtual consoles

Name that ControlMachine should be referred to in establishing a communications path.

Name of theme or path to theme file in rasi format or attribute set with theme configuration

The list of path(s) to the lowerdir(s)

The path of the web root directory.

The wayland-compositor binary path that will be called by UWSM

Path to a file containing the password.

Configuration written to Visual Studio Code's tasks.json

Whether to append a minimal default PATH environment variable to the service, containing common system utilities.

Specifies the path to muchsync on the server

Relative path of the inbox mail.

The path to the xkb symbols file

Path of the symlink.

Path of the source file.

Path to the unix socket file to use for authentication.

Relative path of the deleted mail folder.

Path of the source file.

Description of how to identify the filesystem to be duplicated by this instance of bees

Path(s) to additional configuration files that are then linked to the 'conf' directory.

Path to server SSL certificate key.

Path to the GPG encrypted passphrase.

The full path to a file containing the password from upsd.users for accessing this UPS

List of path(s) to respective plugin(s) which are copied into the 'plugin' directory.

List of certificates to accept for authentication

The user borg serve is run as

Path to server SSL certificate.

Configuration of this OpenVPN instance

Where Calibre-Web stores its data

Specify the index to create device path /dev/rshim<index>

Path(s) to respective theme(s) which are copied from the 'theme' directory.

A Setup Key file path used for automated login of the machine.

A Setup Key file path used for automated login of the machine.

Extra packages to add to PATH of the service to make them available to workflows.

Extra packages to add to PATH of the service to make them available to workflows.

The absolute path to the directory which hosts the public-inbox.

Path to the SVG of the highlight.

Path of the source file.

An attribute set of repositories as described in: https://pgbackrest.org/configuration.html#section-repository

Each repository defaults to set repo-host to the attribute's name

The package to use for this runner, nix will try to find the executable for this package

The token from your Buildkite "Agents" page

The token from your Buildkite "Agents" page

If provided, each item on this list will generate an entry on khard configuration file as a separate addressbook (vdir)

Path to a file containing the sync account username.

Relative path of the drafts mail folder.

Path of the source file.

The group borg serve is run as

Whether to append a minimal default PATH environment variable to the service, containing common system utilities.

For type pipe or file, the path to the pipe or file

The path to the xkb keycodes file

Path to serial port this printer is connected to

The path to the public key file for the host

Path to certificate private key (PEM with private key)

Path to certificate (PEM with certificate chain)

Path to server SSL chain file.

The profile file contents

Path to the built firmware package.

List of CA certificates to accept for authentication

Enable SASL external authentication

Lua plugins

Specifies the path to a file containing the password hash for the account, generated with grub-mkpasswd-pbkdf2

The path to the xkb geometry file

List of raw public keys to accept for authentication

Text lines with include.* and exclude.* directives to be used when sending files to the IBM TSM server, or an absolute path pointing to a file with such lines.

Path(s) to respective plugin(s) which are copied from the 'plugins' directory.

List of certificate candidates to use for authentication

Path to firmware config which is generated using klipper-genconf

Pre-made themes

Absolute path to the certificate to load

The device as passed to mount

Path to 64x64 logo png.

Path to 32x32 logo png.

Path of the private ed25519 keyfile.

The path that opendkim should put its generated private keys into

Absolute path to a directory where builds will be stored in context of selected executor (Locally, Docker, SSH).

Absolute path to a directory where builds will be stored in context of selected executor (Locally, Docker, SSH).

Path to a git repository

Path to the files with alerting and/or recording rules.

The path of Apache's document root directory

Absolute path to the certificate to load

Address on which spiped should listen for incoming connections

Path to key used for decryption of images.

A set of containers and all its respective configurations

List of raw public key candidates to use for authentication

vdirsyncer's status path

Configuration written to Visual Studio Code's settings.json

Path to the SimpleSAMLphp library directory.

Absolute path to the certificate to load

List of path(s) to respective template(s) which are copied into the 'tpl' directory.

The path to the public key file for the host

Libraries to add to the Icingaweb2 library path

List of path(s) to respective language(s) which are copied from the 'languages' directory.

Path to the file containing the repository location to backup to.

OpenSSH private key

A run-time path to the key file, which is supposed to be provisioned outside of Nix store.

OpenSSH private key

A run-time path to the key file, which is supposed to be provisioned outside of Nix store.

Path to CA bundle file (PEM/X509)

Secret key of the onion service

Whether to generate and add a script to the system path, that has the same environment variables set as the systemd service

Whether to generate and add a script to the system path, that has the same environment variables set as the systemd service

Defines Podman container quadlet configurations.

The compressor to use on the initrd image

Paths to the Nix profile

Path to the file containing rclone configuration

Path to easytier config file

(Path of) Script command to execute followed by args, i.e. cmd [args]...

Path to the unix socket file to use for authentication.

Path to a file containing the repository location to backup to

Path to server SSL certificate key.

OCI (Docker) containers to run as systemd services.

List of paths that should be mounted before this one

The prefix to use for store paths

Path to server SSL certificate.

This option can be used to store the username / password credentials with the "auth-user-pass" authentication method

Path within the configuration store where Patroni will keep information about the cluster.

The path of Apache's document root directory

Path to an EnvironmentFile for the cert's service containing any required and optional environment variables for your selected dnsProvider

Additional Apache modules to be used

Path to a list of ini file containing confidential settings such as credentials

Path to server SSL certificate.

Path to the SimpleSAMLphp config directory.

Regular expression to match the vendor name

Path to server SSL chain file.

Whether to pass the binary to the interpreter as an open file descriptor, instead of a path.

The TCP address or UNIX socket path to listen on.

Custom agents for Claude Code

Path to server SSL certificate key.

Set a specific keyfile for this archive

Use a specific HTTP path prefix that will show up in the upgrade request to the wstunnel server

Much like the WatchPaths option, this key will watch the paths for modifications

The path to the file used for signing derivation data

Socket address

Path to a file containing the API Token for ZeroTier Central.

Path to an environment file, containing the TOKEN environment variable, that holds a token to register at the configured Gitea/Forgejo instance.

The path to the public key file for the host

Path to file containing this interface's private key.

Regular expression to match the product name

Path to the built klipper-flash package.

Modular rule files for Claude Code

By default sidebar shows the full path of the mailbox, but with this enabled only the relative name is shown.

The certificates may use a relative path from the swanctl x509ca directory or an absolute path

The full path to the PEM encoded TLS certificate

The full path to the PEM encoded TLS certificate

Path of the source file or directory.

Path to certificate file

Path to your JWT secret used during identity verificaton.

Specify the local database filename to store persistent data

Path to target relative to the vault's directory.

Keybindings written to Visual Studio Code's keybindings.json

A file path where access tokens are stored.

Null or path to certificate to verify SSL against

Path to use for the pid file.

Path to keystore (combined PEM with cert/key, or PKCS12 keystore)

A path to prepend to all the routes of the server.

Either a path to a certificate with a client certificate and the key or a list of paths to the files with them.

URL where SimpleSAMLphp can be reached.

The name of public X.509 certificate (chain) file in PEM format for this policy to be found in the baseDirectory, or the absolute path to the certificate file

The path to the file containing the value for backends.<name>.secret

Path to a keyfile used to unlock the backing encrypted device

Whether to run in snapshot only mode

Command to call for each item creation and modification

Path of the source file.

An attribute set in which each key represents a container and each value an attribute set providing its configuration properties

The path specifying a PEM encoded TLS CA certificate(s)

The path specifying a PEM encoded TLS CA certificate(s)

Path to the sqlite database.

The path of Apache's document root directory

Specifies the path to a file containing the clear text password for the user.

path for anonymously created PDF files

Custom commands for Claude Code

Absolute path to a file with environment variables used for gitlab-runner registration with runner registration tokens

Path to your HMAC secret used to sign OIDC JWTs.

Null or path to certificate to verify SSL against

A file path where access tokens are stored.

The armagetronad-dedicated package to use

Either a path to a certificate with a client certificate and the key or a list of paths to the files with them.

Path to root SSL certificate for stapling and client certificates.

Path to server SSL certificate.

Much like the WatchPaths option, this key will watch the paths for modifications

The mandatory base directory for cryptographic objects of this policy

Command to call for each item creation and modification

Restrictions on the connections that the server will accept

Path to a file containing the certificate used for client authentication to the server.

IR camera device to depend on

Path to server SSL certificate key.

containers.conf configuration

Deduplicating backups using BorgBackup

Path to the file containing the database url windmill should connect to

A list of additional patches to apply to the kernel

Name of the UKI

Much like the WatchPaths option, this key will watch the paths for modifications

Path to the certificate authority (CA) for the certificate of your origin

An attribute set of context files to create in ~/.gemini/

Much like the WatchPaths option, this key will watch the paths for modifications

The basic secret to use for this service

Path to your session secret

Automatically create or share folders that this device advertises at the default path

Automatically create or share folders that this device advertises at the default path

Optional, path to file containing the pre-shared key for this peer.

Path to use for the pid file.

This option enables the common /etc/containers configuration module.

Specifies the path to a file containing the clear text password for the MQTT user

CNI plugins to install on the system.

Path to your private key file used to encrypt OIDC JWTs.

Path to the yaml registration file of the appservice.

Whether to copy the DF bit to the outer IPv4 header in tunnel mode

containers.conf configuration

The path to the boot directory where GRUB will be written

Path to file containing certificate authorities that should be used to validate the connection authenticity

Path to file containing certificate authorities that should be used to validate the connection authenticity

The name of the user account

The name of the user account

Path to the external filter program.

Path where Home Manager should link the {file}`

Packages added to the PATH environment variable when executing programs from Udev rules.

coreutils, gnu{sed,grep}, util-linux and config.systemd.package are automatically included.

Path to root SSL certificate for stapling and client certificates.

Priority of this policy

The path to the workdir

List of path(s) to respective template(s) which are copied from the 'invoice_templates/pdf' directory.

The family name of the font within the package.

The full path to a file which contains either

• a fine-grained personal access token (PAT),
• a classic PAT
• or a runner registration token

Changing this option or the tokenFile’s content triggers a new runner registration

Name of the voice model to use

Additional packages or strings with context to add to the closure of the chroot

Absolute path to a file containing environment variables used for gitlab-runner registrations with runner authentication tokens

The device as passed to mount

Path to a file containing the password

Packages added to the adapter's PATH.

Where the tftp server files are stored.

The path of the directory to share, can be a shell variable

List of path prefixes to ignore

The name-string specifies an external program to be called that will automatically change volumes as required by Bacula

The id of the bootloader to store in efi nvram

The default logging directory

Subdirectory used for reverse proxy setups

Path to your storage encryption key.

The name of the group

The group's name

Absolute path to the certificate to load

The file for log configuration

Specifies the path to a file containing the hashed password for the MQTT user

Path prefixes to ignore under home directory

Argument passed to the filter action, e.g. a folder path.

The path to the upperdir

The full path to a file which contains either

• a fine-grained personal access token (PAT),
• a classic PAT
• or a runner registration token

Changing this option or the tokenFile’s content triggers a new runner registration

The list of path(s) to the lowerdir(s)

Packages added to the service's PATH.

The name of the theme within the package.

GitLab path for backups.

Additional packages to place in the path of public-inbox-mda, public-inbox-watch, etc.

Absolute path to a file with environment variables used for gitlab-runner registration

Path at which the UNIX socket will be created.

Additional scripts for WirePlumber to be used by configuration files

Additional Munin plugins to activate

Pads ESP packets with additional data to have a consistent ESP packet size for improved Traffic Flow Confidentiality

The URI of the homeserver that the pantalaimon proxy should forward requests to, without the matrix API path but including the http(s) schema.

The name of the user account

Path of the configuration file to include.

Files to load as an environment file just before Traefik starts

The local path name of a CSS file for the PSGI web interface.

Path to the directory in which Diffie-Hellman parameters will be stored

The name of the system used in the system.build.toplevel derivation

Name of HTTP request header used for dynamic prefixing of UI links and redirects

Where to put the Dropbox directory.

To enforce UDP encapsulation of ESP packets, the IKE daemon can fake the NAT detection payloads

Signature verification policy file

The family name of the font within the package.

The family name of the font within the package.

The family name of the font within the package.

The name of the group

Name of HTTP request header used for dynamic prefixing of UI links and redirects

Path to a file containing a registration token for the PeerTube instance

Extra packages to add to the PATH of phpfpm-pool.

Path to the sqlite3 database file.

Definition of systemd path units; see systemd.path(5).

Name of the database when using the psycopg2 backend, path to the database location when using sqlite3.

History file location

The default path to use for Home Manager

The name of the theme within the package.

The name of the theme within the package.

The name of the theme within the package.

The name of the icon theme within the package.

Path to an environment file as defined in systemd.exec(5)

Path to the API key to authenticate with a local CrowdSec API

List of allowed indicator modules to use for the lightdm gtk greeter panel

HTTP path for resolve application

Enable the OCI seccomp BPF hook

storage.conf configuration

The keyfile which associates this machine with your tarsnap account

The name of this nylon instance.

The file that holds the logging configuration.

The full path to a file that contains the hash of the user's password

Path to the sqlite3 database file.

Path to the sqlite3 database file.

The name of this systemd unit, including its extension

Device node or address of the phone

File path to write the authorized YubiKeys, relative to HOME.

Definition of systemd per-user path units.

List of blocked repositories.

Discourse site settings

Path to file with trusted public keys in OpenSSH's authorized_keys format

The full path to a file that contains the hash of the user's password

Specify which claims to derive user information from

Packages added to the services' PATH environment variable

List of packages to provide in PATH for the imapnotify service

Whether to enable the Linux kernel

List of repositories to search.

Enables dynamic resolving of backchannel URLs, including hostname, scheme, port and context path

This option enables lxd, a daemon that manages containers

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

List of derivations to put in Offlineimap's path.

List of derivations to put in Offlineimap's path.

Name of the zone.

Specific name of the application.

The name of the icon theme within the package.

The name of the icon theme within the package.

The name of the icon theme within the package.

Name of the PPP peer.

If set to "yes", using the bindings file /etc/multipath/bindings to assign a persistent and unique alias to the multipath, in the form of mpath

List of insecure repositories.

The name of this systemd unit, including its extension

List of derivations to put in protonmail-bridge's path.

Name of the action.

Configuration file path.

The name of the cursor theme within the package.

Data directory of TSDB.

Path to UNIX domain socket to listen on

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

This option allows you to define multipath groups as described in http://christophe.varoqui.free.fr/usage.html.

The underlying Docker implementation to use.

Path to the Wireguard Config to add the peer's name to the stats of a peer

Name of the image

location of your media files

The identifier for the multipath device

Type of the filesystem

Directory where to store cache files (if cache.type = "file").

List of source directories and files to backup

Containers that have only one child are "flattened".

The endpoint name.

Path to the SQLite database used

Definition of systemd path units.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Path to the embedded database file

The endpoint name.

The name of the cursor theme within the package.

The name of the cursor theme within the package.

The name of the cursor theme within the package.

This enables Linux Containers (LXC), which provides tools for creating and managing system or application containers on Linux.

Remap all the path requests as relative to the given path

Sets basepath for all routes.

Etcd unique node name.

Definition of systemd per-user path units

Name of the control, as it appears in alsamixer

Only applicable to sqlite3 database

Path to plugin

File path where DMS greeter logs will be saved

Extra directories to prepend to PATH

Username for JSON-RPC connections.

Name of the PAM service.

If the mode is set to "file", the path to a HuJSON file containing ACL policies.

The name of the cask to install.

The name of the formula to install.

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

Name of the worker

The name of this systemd unit, including its extension

Prefix to all HTTP paths.

Options used to mount the file system

Default location for the Mattermost control socket used by mmctl.

Determines where on the local filesystem a data node should store its blocks.

Whether to enable support for NixOS containers.

The cursor name within the package.

The unique name for THIS channel in THIS group

Path to a folder to be added to the dock.

Path to the Xen multiboot binary used for BIOS booting

Name of modem device, will be searched for in /dev.

Package providing the ffmpeg and ffprobe executables below the bin/ directory.

Path to the Xen Store Daemon

This option defines the default shell assigned to user accounts

The name of this systemd unit, including its extension

Profile name.

Profile name

The profile's name.

The name of the node which is used as an identifier when communicating with the remote nodes in the mesh

This option enables docker, a daemon that manages linux containers

Whether to enable modprobe config

Name of the runner to configure

Name of the runner to configure

Path to xen.efi. pkgs.xen is patched to install the xen.efi file on $boot/boot/xen.efi, but an unpatched Xen build may install it somewhere else, such as $out/boot/efi/efi/nixos/xen.efi

The name of the network interface to match against.

Path to store session recordings.

Unique identifier of the account

Name i2pd appears in UPnP forwardings list.

Absolute directory path to the media directory to index.

The friendly name you give to the network device

The friendly name you give to the network device

Specifies the Name of the Storage daemon.

Path to the executable of the chromium to use.

This library's name.

Path to the sqlite3 database file.

Path to xen.efi. pkgs.xen is patched to install the xen.efi file on $boot/boot/xen.efi, but an unpatched Xen build may install it somewhere else, such as $out/boot/efi/efi/nixos/xen.efi

Path to YAML rules configuration

The name of this group for this account

The family name of the font within the package.

When clone_target is unspecified, this is the name of a formula repository to tap from GitHub using HTTPS

Database name.

Profile name.

the path to store the segments

Containers that nest into each other must have opposite orientations.

In containers, whether to use the resolv.conf supplied by the host.

The name of the Helm chart

The endpoint name.

The endpoint name.

The name of the Helm chart

Keyboard name.

A system user name for this client instance.

A system user name for this client instance.

The director name used by the system administrator

The user's UID.

Whether to enable incusd, a daemon that manages containers and virtual machines

The language to use for personal names.

The name of the agent as seen in the buildkite dashboard.

The name of the agent as seen in the buildkite dashboard.

The client name that must be used by the Director when connecting

Path to the plugin folder

Akkoma frontend name.

Name for the device

Unix domain socket path to bind this listener to.

Path to YAML dashboard configuration

Name of the redis server

Path in which suricata-update managed rules are stored by default.

Database name.

The name of the service to run

Name of the site.

The name of the host

The endpoint name.

The endpoint name.

The user's primary group.

The unique agent name.

Unique identifier of the account

Unique identifier of the contact account

The name of the instance.

Path to the unlock script

Agent name, usually same as the hostname

Mail "from" name.

Agent name, usually the same as the hostname.

The name of the plugin.

The theme name.

Name of the tmux window;

The network subnet to use for the containers.

Path to YAML mute timings configuration

Text of the file

The path to the boot directory where the extlinux-compatible configuration files will be written.

Font name, as used by fontconfig.

Path to YAML datasource configuration

The name of the theme within the package.

Path to YAML notification policies configuration

The name of the plugin.

Table name.

Name is referenced in logs

The user's home directory.

Path to the repository

Unique identifier of the calendar

Name is used as a suffix for the service name, user, and group

The name of the mailbox.

Name of the interface.

Name of the font to use for regreet.

Path to YAML contact points configuration

The name to return in service discovery responses for the MUC service itself

Profile name.

Name of the redis server

Path to YAML templates configuration

Name of the Docker context

Mail "reply-to" name.

Name of the GNOME Shell theme.

Name of the rule.

Name of the plugin.

Name of the plugin.

The group's GID.

Name of the interface

Text of the file

Path to the output directory for backups.

The user's home directory mode in numeric format

Absolute path to directory holding application data

Name of the machine when registering it at the central or local api.

The endpoint name.

Name of the iSCSI initiator to boot from

Path to the output directory for backups.

The account UID

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

Name of the theme to use for regreet.

The name of the service to run

The name of an explicit dtb to be loaded, relative to the dtb base

The name of the server

Name of the user to ensure.

The default Nix expression search path, used by the Nix evaluator to look up paths enclosed in angle brackets (e.g. <nixpkgs>).

Adds new directories to the Nix expression search path

Name of the existing database.

The logical name of the Galera cluster

The user's primary group.

The name of the watcher

The name of the plugin.

The path under which the metrics will be exposed.

Path to a custom configuration path, can be json, yaml or toml.

The endpoint name.

Name of directory from which to import ZFS device, this is passed to zpool import as the value of the -d option

Name of the beat

Name of the wiki.

Name of the server.

If set to priorities the multipath configurator will assign path weights as "path prio * rr_min_io".

Name of the profile.

Database name.

Name of this iscsi initiator

Whether to enable extra-container, a tool for running declarative NixOS containers without host system rebuilds .

Text of the file

Text of the file

Database name.

Database name.

Path to the plugin folder

List of paths to autocomplete calls to cd.

The name of this authentication provider

Name of the icon theme to use for regreet.

Name of ICMP pinging job.

Whether this file should be generated

Whether to enable ‹name›.

Server name to be used for this virtual host

Database name.

Absolute path to directory holding application caches

Absolute path to directory holding application states

The path relative to / for serving resources.

This feed account's name.

Number of I/O requests to route to a path before switching to the next in the same path group

The name of this gateway as shown in firezone

The name of the cookie that the oauth_proxy creates.

The endpoint name.

The serial port to which your UPS is connected. /dev/ttyS0 is usually the first port on Linux boxes, for example.

Program to execute, possibly with arguments.

This option contains the store path that typically represents a NixOS system

CSS style of the bar

CSS style of the bar

CSS style of wleave

The group GID

Name associated with the build

The advertised name for zeroconf discovery.

The name of this actor

The name of this group

The name of the host in the network as well as the configuration for that host

Icon to display in file manager, menus, etc.

Database name, only used when the databse is created locally.

The database name

Each attribute of this option defines a systemd service that runs hans

Name of the service.

The user's home directory mode in numeric format

The endpoint name.

Database name.

Database name.

Database name.

This primary server will notify all given secondary servers about zone changes

This profile's name.

The name identifying the runner instance towards the Gitea/Forgejo instance.

Name of the redis server

Path to your SSL CA certificate.

Whether this file should be generated

Name of symlink

The user's home directory.

The name of the device.

The name of the device.

The name of the immich database.

name of the virtualhost

Whatever to enable a Systemd Unit that automatically rebuilds your containers when changes are detected.

The name of the database to use for Wakapi.

Unique identifier of the boxxy rule

Database name.

The flake reference from is rewritten to.

The flake reference to which from> is to be rewritten.

The name of an existing user account under which the rsync process should run.

The name of this server.

The name of this relay group

Text of the file

Control group which subgroups are placed under

CSS style of the bar

Name of the cursor theme to use for regreet.

The name of this client as shown in firezone

The name of this systemd unit, including its extension

Name of this overlay

The account UID

Disable running fsck on this filesystem.

Text of this systemd unit.

Name of symlink

Adapter name that is used in the radicle-ci-broker configuration

Path to Kanidm database.

Name of symlink

Database name.

Database name.

Name of the plugin linked to $XDG_CONFIG_HOME/ranger/plugins/

The name of the hook

Whether to make the user account hidden.

Name used to derive peer unit name.

This is the target address is to match against

A path to directory writable by logstash that it uses to store data

Absolute path to directory holding application configurations

PostgreSQL database name

Path to Kanidm database.

Whether this file should be generated

Whether this file should be generated

The name of an existing user group under which the rsync process should run.

The user's primary group.

The flake reference to be rewritten.

The flake reference to be rewritten.

The default path selector algorithm to use; they are offered by the kernel multipath target

The name of the wrapper program

Whether to enable FRR pathd.

Name of the local AutoSSH session

Name of the local AutoSSH session

Display name of the radio station.

This optional key can be used to request that the service be registered with the mDNSResponder(8)

The name of this gateway as shown in firezone

Each attribute of this option defines a systemd service that runs iodine

Database name.

Specify the program to run to talk to this UPS. apcsmart, bestups, and sec are some examples.

Name of symlink (relative to /etc)

The name of this gateway group

Name of symlink

Specifies the real host name to log into.

The name of this resource

The path to a file containing the secret_key_base secret

The path where castopod stores all data

If set to a value greater than 0, multipathd will watch paths and check how many times a path has been failed due to errors

Name of the existing database (has no effect if type is "sqlite").

Path to blobs

Server name.

Path grafana will watch for dashboards

Path of the PEM-encoded private key for this account

Path under which to expose metrics.

null will default to /metrics.

Name of the snippet.

The name of services's user

The user's home directory

Whether to enable the filesystem mount.

The command the user is allowed to run

Path to file that contain addresses of query peers

Domain to fetch certificate for (defaults to the entry name).

Node name

Create the home directory when creating the user.

A short description of the user account, typically the user's full name

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Whether the window focus commands automatically wrap around the edge of containers

Name of the beat

When set to something distinct to null NSD is able to collect statistics per zone

Alias of home.pointerCursor.name.

User to run the cgit service as.

The group GID

Number of I/O requests to route to a path before switching to the next in the same path group

The name of the dawarich database.

MySQL database name.

Database name for FreshRSS.

Bind port for ‹name› endpoint.

Name of the satellite.

Lines which would be added inside ups.conf for handling this UPS.

Path were the YouTrack state is stored

Path of the image, relative to $out in system.build.image

Path to the service's config file

Database name.

Whether the window focus commands automatically wrap around the edge of containers

The account name

The flake input from is rewritten to.

The flake input from is rewritten to.

The flake input to which from> is to be rewritten.

Name of the game as it will appear in the game listing.

Bind port for ‹name› endpoint.

Use cgroups to enforce resource limits on containers

The path to the world file (.wld) which should be loaded

Whether this file should be generated

The user's auxiliary groups.

Options for the FRR pathd daemon.

The flake reference from is rewritten to

If set to false, the user account will not be created

This optional key specifies the node to connect(2) or bind(2) to.

Shell commands to run when file has changed between generations

Name of the modifier.

Location where MongoDB stores its files

Tell multipathd how to manage path group failback

Set the log-level

The path to the SSH private key with which to authenticate on the build machine

Path to files that contain addresses of store API servers

The path to the SSH private key with which to authenticate on the build machine

The path to the SSH private key with which to authenticate on the build machine

Whether to enable this mount.

Type of the file system

The mode in which new containers on workspace level will start.

Text of this systemd unit.

This optional key tells launchctl what type of socket to create

Whether to enable automatic mounting.

Where to mount this dataset.

An attribute set of plugin paths to be added to the [package.path]https://www.lua.org/manual/5.4/manual.html#pdf-package.path of the ~/config/xplr/init.lua configuration file

The group's members.

Interface name

Replace any existing runner with the same name

Replace any existing runner with the same name

Database name.

The mode in which new containers on workspace level will start.

Name of this virtual host

Name for where mail coming from the remote (far) mail server will end up locally

Path to a TrueType, OpenType, or pf2 font to be used by Grub.

Path to the grub theme to be used.

Override for package "short name", used for generating configuration

Group to run the cgit service as.

Enables lxd to use zfs as a storage for containers

File path regex that this association should match.

Target node name on the IBM TSM server.

Interface name

Port number Go Ethereum will be listening on, both TCP and UDP.

The name of the file or block device that should be used as header for the encrypted device.

Generic name of the application.

Shell commands to run when file has changed between generations

Virtual networks to which the container or VM is connected

Whether to force focus wrapping in tabbed or stacked containers

A path to the password file for your bot

Hostname or address of the postgresql server

Profile name

The flake reference to be rewritten

Add the necessary actions for a upsmon process to work

Database name.

Database name.

Extra configuration lines to add to THIS channel's configuration.

Whether to create the home directory and ensure ownership as well as permissions to match the user.

Name of the symlink (relative to /var/lib/rancher/k3s/server/manifests)

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

Path of the device or swap file.

This optional key can be used to request that the service be registered with the mDNSResponder(8)

Format: [AXFR|UDP] <ip-address> <key-name | NOKEY>

Discourse database name.

This optional key specifies the mode of the socket

S3 bucket name to use for HTTP-01 based challenges

Whether to force focus wrapping in tabbed or stacked containers

Name of the remote read config, which if specified must be unique among remote read configs

The name of the file (can be a raw device or a partition) that should be used as the decryption key for the encrypted device

Name of the symlink (relative to /var/lib/rancher/rke2/server/manifests)

Name of the PCM card to control (slave).

DNS full-qualified domain name of a database server

DNS full-qualified domain name of a database server

The plugin.

The name of the database to create.

The nickname of this Tahoe node.

What port to listen for client requests, default is 1080.

Whether to enable ‹name›.

Name of Google storage bucket

The set of system-wide known SSH hosts

TLS options for virtual host

Start the specified units when this unit is started.

Start the specified units when this unit is started.

Path to store the gem files and the sqlite database

SSID to be used in IEEE 802.11 management frames.

APIs to enable over WebSocket

Name of symlink

The path to a file containing the secret_key_base secret

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Whether to enable ‹name›.

cgit repository settings, see cgitrc(5)

Name of the remote write config, which if specified must be unique among remote write configs

Rename nodes to different name.

The name of the first admin user.

VirtualHost to serve cgit on, defaults to the attribute name.

This option enables Podman, a daemonless container engine for developing, managing, and running OCI Containers on your Linux System

Directories from the host filesystem to be included in the sandbox.

Directories from the host filesystem to be included in the sandbox.

Real name

Location where ChromaDB stores its files

This optional key can be used to request that the service be registered with the mDNSResponder(8)

Username

Default blacklisted interfaces, this includes NixOS containers interfaces (ve).

Default config (default.conf) for new containers, i.e. for network config

Whether to enable cgit.

Name of the user to ensure.

Name of the user to ensure.

Local secret key in hexadecimal form.

Path to TLS private key.

(Superseded by uid_attribute) The default program and args to callout to obtain a unique path identifier

This optional key can be used to request that the service be registered with the mDNSResponder(8)

Shell commands to run when file has changed between generations

Shell commands to run when file has changed between generations

Units that want (i.e. depend on) this unit

The name of this client as shown in firezone

Name that will be shown.

Path to scrapers

Database name.

ACME options for virtual host.

HTTP options for virtual host

Subordinate group ids that user is allowed to use

Subordinate user ids that user is allowed to use

Members of this group can access the control socket for this interface.

Complete netdata config directory except netdata.conf

Path to initial supybot config file

Blockchain garbage collection mode.

Whether to enable hub instance.

Interface to use when method is iface.

Whether to join this channel on connect.

The type of the desktop entry.

Proxy account name, without the possibility to include domain name ('at' sign is interpreted literally).

Name of symlink

If the specified units are started at the same time as this unit, delay this unit until they have started.

The user names of the group members, added to the /etc/group file.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Instead of synchronizing just the mailboxes that match the farPattern, use it as a prefix which is not matched against the patterns, and is not affected by mailbox list overrides.

Whether the SSID is to be interpreted using UTF-8 encoding.

Aliases of that unit.

Port number of Go Ethereum HTTP API.

The path to the TLS key.

Path to TLS certificate.

Base path of the service url.

Count of subordinate user ids

Count of subordinate group ids

This optional key specifies the service on the node to connect(2) or bind(2) to.

Name of consistency check to run.

Allow the user to do certain things with upsd

Whether to enable Go Ethereum Node.

Additional arguments passed to Go Ethereum.

The name of the host in the network as well as the configuration for that host

Name of the model to download and use for speech synthesis

Name of the kernel module that provides the card.

Database name.

Database name.

Name of database.

The type of the device.

How to display the tag when focused.

Program to execute, possibly with arguments.

Backup type as described in: https://pgbackrest.org/command.html#command-backup/category-command/option-type

When enabled dockerd is started on boot

Automatically allocate subordinate user and group ids for this user

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

The path to the efi system mount point

Path to the configuration file read by fnott

The user's auxiliary groups.

Label of the device

If set to false, the user account will not be created

The default method used to determine the paths state

Path to the service's environment file

Name of the PostgreSQL database.

The name of the Linkwarden database.

Extra options to be appended to the FRR pathd daemon options.

Number of vcores that can be allocated for containers.

Deprecated, please use hardware.nvidia-container-toolkit.enable instead

Deprecated, please use hardware.nvidia-container-toolkit.enable instead

Listed primary servers are allowed to notify this secondary server

The node name of the device

The node name of the device

Name of modem configuration file, will be searched for in config in the spooling area directory.

Root directory for requests.

The path to MPD's database

If this option is set, ‘device’ is interpreted as the path of a swapfile that will be created automatically with the indicated size in MiB (1024×1024 bytes).

The default Nix expression search path, used by the Nix evaluator to look up paths enclosed in angle brackets (e.g. <nixpkgs>)

The path to MPD's database

Bind address for ‹name› endpoint.

Name displayed when sending mails.

Name for the filter.

IMAP4 patterns for which mailboxes on the remote mail server to sync

Instance name.

Local Mattermost database name.

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Whether to enable TLS support.

Name to display

Output DPI configuration.

Output DPI configuration.

This optional key specifies the node to connect(2) or bind(2) to.

Open firewall ports for nodemanager

URL path for the website

Name of the PCM device to control (slave).

Set name to shared memory zone.

Name of symlink

List of directories to be symlinked in /run/current-system/sw.

List of directories to be symlinked in /run/current-system/sw.

The user's shell

Bind address for ‹name› endpoint.

A program name specifying a Postfix service/daemon process

Name of the homebridge UI platform

Name of the printer / printer queue

Database name.

Shell commands executed as the service's main process.

Icon to display in file manager, menus, etc.

Specify the bind mode that the bind is used in

If Scrutiny will be behind a path prefixed reverse proxy, you can override this value to serve Scrutiny on a subpath.

Output resolution.

Output framerate.

Output resolution.

Output framerate.

Start the specified units when this unit is started.

Start the specified units when this unit is started.

Name of the MySQL database that holds EPGStation's data.

Name of the beat

The path to the confd configs.

The path to the TLS certificate.

SSL certificate file path.

url path for uploads

SSL CA file path for client certificate verification.

Absolute path of device node, file or other resource. (Mandatory)

Hostname or address of the postgresql server

This optional key specifies the protocol to be passed to socket(2)

Name of symlink

The name of the Grafana database.

Units that want (i.e. depend on) this unit

Amount of physical memory, in MB, that can be allocated for containers.

Database name to use when connecting to an external or manually provisioned database; has no effect when a local database is automatically provisioned

This optional key tells launchctl what type of socket to create

Location where the file system will be mounted

Adds index directive.

Alias directory for requests.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

static: Immediately answer any Neighbor Solicitation Messages (if they match the IP rule). iface: Forward the Neighbor Solicitation Message through the specified interface and only respond if a matching Neighbor Advertisement Message is received. auto: Same as iface, but instead of manually specifying the outgoing interface, check for a matching route in /proc/net/ipv6_route.

Username used to connect to registry.

How to name the created archives

Path to a HSM pin.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Keep this unit running as long as the listed units are running

Output video display controller.

Output video display controller.

Start the specified units when this unit is started.

Start the specified units when this unit is started.

Shell commands to run when file has changed between generations

Whether to create the home directory and ensure ownership as well as permissions to match the user.

Optional PKCS#11 module name.

Verify peer certificate

Verify peer certificate

Adds DirectoryIndex directive

Alias directory for requests

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Attribute set of NetBird client daemons, by default each one will:

1. be manageable using dedicated tooling:

• netbird-<name> script,
• NetBird - netbird-<name> graphical interface when appropriate (see ui.enable),

2. run as a netbird-<name>.service,
3. listen for incoming remote connections on the port 51820 (openFirewall by default),
4. manage the netbird-<name> wireguard interface,
5. use the /var/lib/netbird-/config.json configuration file,
6. override /var/lib/netbird-/config.json with values from /etc/netbird-/config.d/*.json,
7. (hardened) be locally manageable by netbird-<name> system group,

With following caveats:

• multiple daemons will interfere with each other's DNS resolution of netbird.cloud, but should remain fully operational otherwise

Path to the file containing the password for the intermediate certificate private key.

Path to a file containing the logo of your Hydra instance.

Absolute path to log all stdout output.

The cgit package to use.

The geth package to use.

Uhub plugin configuration.

Adds try_files directive.

Start URL of the site.

Whether the from reference needs to match exactly

Whether the from reference needs to match exactly

Whether the from reference needs to match exactly

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Define a launchd job

Label of the unlocked encrypted device

Aliases of that unit.

Aliases of that unit.

Remote public key in hexadecimal form.

Configuration for MPD

Path to a HSM pin.

If true, the user's shell will be set to users.defaultUserShell.

Isolate traffic between stations (clients) and prevent them from communicating with each other.

Path to scrapers

Marks the server as a backup server

Set the host address for this virtual host

The set of packages that should be made available to the user

The set of packages that should be made availabe to the user

Enables nylon as a running service upon activation.

Output gamma configuration.

Output gamma configuration.

This optional key specifies the node to connect(2) or bind(2) to.

Group running the ACME client.

Whether to enable remove bind.

Levels (minimum value for logged events): 0 = verbose debugging 1 = debugging 2 = informational messages 3 = notification 4 = warning

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

Optional PKCS#11 module name.

Label for this destination

This optional key specifies the mode of the socket

This optional key specifies the node to connect(2) or bind(2) to.

Override the default TLS port for this virtual host.

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Model path.

Path to your SSL CA certificate.

Custom index.html path

Path to your SSL key.

The server username of this account

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Specify what to do when all paths are down

User name of file owner

Local name of the IBM TSM server, must not contain space or more than 64 chars.

The object to make available inside the initrd.

This optional key tells launchctl what type of socket to create

If the device does not currently contain a filesystem (as determined by blkid), then automatically format it with the filesystem type specified in fsType

Each attribute of this option defines a systemd service that runs an OpenVPN instance

ID of the user in initrd.

The MIME type(s) supported by this application.

Start of the range of subordinate user ids that user is allowed to use.

Start of the range of subordinate group ids that user is allowed to use.

This is a small wrapper over systemd's LoadCredential

Name of this virtual host

The domain name to collect stats for.

Whether to enable DNSSEC.

Adds a return directive, for e.g. redirections.

This optional key tells launchctl what type of socket to create

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Password HMAC-SHA-256 for JSON-RPC connections

Aliases of that unit.

Specifies the MAC addresses to deny if macAcl is set to "deny" or "radius"

The vlan identifier

Alternative path to storage of i2pd data (RI, keys, peer profiles, ...)

Proxy ssl key path

Path to the file where DHT keys are stored.

ssl private key path A self-signed certificate will be generated if file not exists.

The user's home directory

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Vertical scaling factor/pixels.

Horizontal scaling factor/pixels.

Horizontal scaling factor/pixels.

Vertical scaling factor/pixels.

Use a different name as mailbox name

Whether to enable nftables and use nftables based firewall if enabled. nftables is a Linux-based packet filtering framework intended to replace frameworks like iptables

Whether to allow privileged containers on Kubernetes.

How to display the tag when unfocused

Change current mode after bind is executed

Whether to enable the output.

Output rotate configuration.

Whether to enable the output.

Output rotate configuration.

The name of the database to store data in.

The underlying network device on which the tunnel resides.

Command executed as the service's main process.

Whether to enable the device mapper multipath (DM-MP) daemon.

The actual zone data

Subordinate user ids that user is allowed to use

Subordinate group ids that user is allowed to use

This option specifies additional PATH that the emacs daemon would have

Optional PKCS#11 module name.

Text of the file.

The hotkey.

Label to use for the name of the config file.

Whether the luksOpen will be attempted before LVM scan or after it.

Override the default HTTP port for this virtual host.

The user names of the group members, added to the /etc/group file.

Zone file resource records contain columns of data, separated by whitespace, that define the record.

The base path for the UI.

Whether to enable Go Ethereum HTTP API.

The relationship with upsd

The network to connect to

Location where RethinkDB stores its data, 1 data directory per instance.

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

Interpolation method to be used for scaling the output.

Group name of file owner

Path to the Nix store when looking for kernels at boot

UNIX domain socket path to bind.

Path to your SSL certificate.

Storage path of netbox.

ssl certificate path A self-signed certificate will be generated if file not exists.

The time-to-live of the connection to the remote tunnel endpoint.

Count of subordinate group ids

Count of subordinate user ids

Shell commands executed as the service's main process.

This optional key specifies the mode of the socket

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

A short description of the user account, typically the user's full name

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

The specified name-string must be the generic SCSI device name of the autochanger that corresponds to the normal read/write Archive Device specified in the Device resource

Specifies the MAC addresses to allow if macAcl is set to "allow" or "radius"

This option enables docker in a rootless mode, a daemon that manages linux containers

These lines go to the end of cgitrc verbatim.

Shell commands executed to stop the service.

A system group name for this client instance.

A system group name for this client instance.

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

Name of the homebridge

The device to update.

Enable logging, default is no logging.

If set, the filesystem is grown to its maximum size before being mounted. (This is typically the size of the containing partition.) This is currently only supported for ext2/3/4 filesystems that are mounted during early boot.

This optional key specifies the mode of the socket

Automatically allocate subordinate user and group ids for this user

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

The multipath-tools package to use.

Units that want (i.e. depend on) this unit

Configuration for this host

Shell commands executed as the service's main process.

Dataset name to send snapshots to.

Specify the log file name

When or how often the backup should run

An attribute set of option values passed to rclone mount

The database name.

Location of hardware kiss tnc for this interface.

Start the specified units when this unit is started.

Start the specified units when this unit is started.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Storage path for uploaded media.

This optional key specifies the service on the node to connect(2) or bind(2) to.

DNS full-qualified domain name of a database server

Path to bosun's ledis data dir

Path to the directory cook-cli will look for recipes.

Proxy ssl certificate path

Path to a file containing the API key to use when modifying DNS records.

File path containing the k3s token to use when connecting to a server.

Absolute path of a directory of the mount point

Path to the informative notifications' icon.

If set to "yes", multipathd will do a deferred remove instead of a regular remove when the last path device has been deleted

Whether to enable this PPP peer.

Port to bind the TTS server to.

User account under which this pool runs.

Start the specified units when this unit is started.

Whether to enable Operate silently.

Basic Auth protection for a vhost

Adds DirectoryIndex directive

Alias directory for requests

Location where each instance's pid file is located.

Additional groups under which Traefik runs

Username from upsd.users for accessing this UPS

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Path used for the database file.

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

Text of the file.

A system group name for this client instance.

A system group name for this client instance.

Keeps the specified running while this unit is running

Keeps the specified running while this unit is running

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Name of the class implementing the check

Aliases of that unit.

Aliases of that unit.

Path to hg-ssh (if not in $PATH).

The path to the Nix state directory

Keep this unit running as long as the listed units are running

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

A program name specifying a Postfix service/daemon process

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

Whether output should be marked as primary

Whether output should be marked as primary

Master=false means slave server

Addresses who may request zone transfers.

Limit retry time for secondary zones.

Whether to enable this RAUC slot.