The local hostname, or local network name, is displayed beneath the computer's name at the top of the Sharing preferences pane

The address of the local endpoint which the remote side should send packets to.

The address of the local endpoint which the remote side should send packets to.

The local-ai package to use.

Use the browser's local timezone instead of the server's for displaying dates.

Local address (and optionally device) to bind to using the given port.

Whether to enable FTP for local users.

The local directory for storing configuration and cached store paths

This option represents a directory which vsftpd will try to change into after a local (i.e. non- anonymous) login

Path of file to link to /etc/rspamd/rspamd.local.lua for local rules written in Lua

The address of the local endpoint which the remote side should send packets to.

Whether to enable local discovery for the Kubo daemon

Local configuration for the contacts.

This tells pgmanage whether or not to set the listening socket to local addresses only.

Local UDP port.

Whether to enable LocalAI is the free, Open Source OpenAI alternative..

Add ~/.local/bin/ to $PATH

Network device to bind to.

Extra local variables defined at the top of .zshrc.

Local configuration for the calendar.

Whether to enable Local-Content-Share.

Additional environment passed to local-ai service

Permissions granted for the services.syncoid.user user for local source datasets

List of accepted local users

The local-content-share package to use.

Define list of allowed domains.

If storageType is local, this sets the parent directory under which all attachments/images go.

IP address or hostname of the local end.

Local address to bind to

Set to false if you want to run OpenGFW on FORWARD chain. (e.g. on a router)

Port on which the service will be available

The domain name serving your Weblate instance.

Local store extra configuration.

The type of the storage.

The path of the storage.

Specify local port forwardings

System-wide customization file contents, has higher priority than defaultFonts settings.

The file extension to use.

Local configuration files, written into /etc/rspamd/local.d/{name}.

Systems with a recently generated hardware-configuration.nix do not need to specify this option, unless cross-compiling, in which case you should set only nixpkgs.buildPlatform

Local port binding options

Permissions granted for the services.syncoid.user user for local target datasets

The path of the storage.

The type of the storage.

Listen on localhost:.

The domain serving your Dawarich instance.

The domain serving your CastoPod instance.

The domain serving your Mastodon instance.

The domain serving your PeerTube instance.

The configuration for a crowdsec security engine.

Listen on local and forwards traffic from remote.

The file extension to use.

khal will show all times in this timezone

Whether to begin the synchronisation by running notmuch new locally.

Local addresses to which the server binds.

Section for a local authentication round

The IPv4 address assigned to the interface in the container

The IPv6 address assigned to the interface in the container

The unique name that identifies this particular node within the cluster

Permissions granted for the services.syncoid.user user for local source datasets

Shell commands to be executed at the end of the network-setup systemd service

File encoding for items, both content and file name

Local address to assume when running behind NAT.

The domain serving your FileSender instance.

File encoding for items, both content and file name

Whether to automatically open the specified port in the firewall

Extra configuration options to add to the local account section.

khal locale settings.

The set of parser specifications

Host port binding options

Permissions granted for the services.syncoid.user user for local target datasets

Address on which the service will be available

Path to the local source folder.

IP address or hostname of this node that will be used for cluster communication

Open ports in the firewall for Steam Local Network Game Transfers.

A list of files containing custom grok patterns.

A list of profiles to enable

Specifies port number to forward to.

Specifies port number to bind to.

Optional configuration to be written to the Zerotier JSON-based local.conf

A list of additional contexts to specify

The IPv4 address assigned to the interface in the container

The IPv6 address assigned to the interface in the container

Whether Postfix and Dovecot should be set up to receive mail locally. parsedmarc will be configured to watch the local inbox as the automatically created user specified in services.parsedmarc.provision.localMail.recipientName

Local ZFS filesystem from which snapshots should be sent

A list of stage s00-raw specifications

If specified, the OCS Inventory Agent will run in offline mode and the resulting inventory file will be stored in the specified path.

A list of stage s01-parse specifications

List of directories to store localized files in.

A list of scenarios specifications

When not set to null this option defines the path at which the unbound remote control socket should be created at

Per each i18n.extraLocaleSettings, choose the character set to use for it

The address to forward to.

The address to bind to.

The set of Postoverflows specifications

your ip on the vpn

A list of stage s02-enrich specifications

Check for locally modified files

Whether to send announcements to the local LAN, also use such announcements to find other devices.

Whether to send announcements to the local LAN, also use such announcements to find other devices.

Whether local users are confined to their home directory.

The DMARC mail recipient name, i.e. the name part of the email address which receives DMARC reports

Text of the file.

The domain serving your SimpleSAMLphp instance

The server main locale

Local tag to which the remote Gmail 'TRASH' label is translated.

List of raw public key candidates to use for authentication

Whether to enable localsend, an open source cross-platform alternative to AirDrop.

The localsend package to use.

The localtime package to use.

A list of acquisition specifications, which define the data sources you want to be parsed

IKE identity to use for authentication round

Section for a certificate candidate to use for authentication

The port on which to listen and send IPv4 broadcast announcements to.

The port on which to listen and send IPv4 broadcast announcements to.

Path of the source file.

Client EAP-Identity to use in EAP-Identity exchange and the EAP method.

Optional slot number of the token that stores the certificate.

Optional numeric identifier by which authentication rounds are sorted

Absolute path to the certificate to load

Whether this file locals should be generated

Optional PKCS#11 module name.

A list of stage s01-whitelist specifications

Client XAuth username used in the XAuth exchange.

The hostname to use when configuring Postfix

Whether to enable LocalSearch, indexing services for TinySPARQL search engine and metadata storage system.

A list of notifications to enable and use in your profiles

List of certificate candidates to use for authentication

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

User to use when no root privileges are required

Whether to enable opening the firewall port 53317 for receiving files.

Server side EAP-Identity to expect in the EAP method

Enable localtimed, a simple daemon for keeping the system timezone up-to-date based on the current location

Local UDP port for IKE communication

The Geoclue2 package to use.

Local address(es) to use for IKE communication

By default enable localnet for loopback address ranges.

The hostname under which the Ollama UI interface should be accessible

khal will display and understand all times in this format

khal will display and understand all dates in this format

The user_id localpart to assign to the appservice

Connection to a redis server

User accounts for GRUB

FoundationDB locality settings.

Enable week numbers in calendar and interactive (ikhal) mode

Controls Link-Local Multicast Name Resolution support (RFC 4795) on the local host

Contents of /etc/pam.d/sudo_local

The app environment

File containing the password for the mpd daemon

mailinglist local user

The user_id localpart to assign to the AS.

The first day of the week, where Monday is 0 and Sunday is 6.

URI to use for the main PostgreSQL database

Authentication to perform locally.

• The default pubkey uses public key authentication using a private key associated to a usable certificate.
• psk uses pre-shared key authentication.
• The IKEv1 specific xauth is used for XAuth or Hybrid authentication,
• while the IKEv2 specific eap keyword defines EAP authentication.
• For xauth, a specific backend name may be appended, separated by a dash

Remove local messages that have been deleted on the remote.

mailinglist local group

Whether to enable managing /etc/pam.d/sudo_local with nix-darwin.

URI to use for the main PostgreSQL database

Local Redis instance name

Zone identifier key

Whether to allow traffic to local networks

The MODE determines which part of the NUT is to be started, and which configuration files must be modified

To support uploading of images for avatars and document attachments an s3-compatible storage can be provided

Data hall identifier key

Whether to enable the mDNS NSS (Name Service Switch) plug-in for IPv6

Whether to enable Touch ID with sudo

An ordered, comma-separated list of key-value pairs that describe the topography of the machine

Local system IP address to be used for CLI server endpoint.

Database name to use when connecting to an external or manually provisioned database; has no effect when a local database is automatically provisioned

Whether a database should be automatically created on the local host

Machine identifier key

Use Apple Watch for sudo authentication, for devices without Touch ID or laptops with lids closed, consider using this

Whether to enable cntlm, which starts a local proxy.

Whether to install the HTML manual

khal will display and understand all datetimes in this format

khal will display and understand all dates in this format

Whether to enable reattaching a program to the user's bootstrap session

The local directory for storing configuration and cached store paths

Whether to request X11 forwarding on outgoing connections by default

Connect to someone as a client and establish a local accept endpoint

Whether to enable Gancio, a shared agenda for local communities.

The local port to use.

If set, keep the hardware clock in local time instead of UTC.

Whether a database should be automatically created on the local host

Custom ordering of accounts and local folders in Thunderbird's folder pane

The local address to use.

Whether to enable ollama server for local large language models.

Whether to enable ollama server for local large language models.

Username to use when connecting to an external or manually provisioned database; has no effect when a local database is automatically provisioned

The local IP address to which all traffic that does not match any forwarding rule is forwarded.

Name of the machine when registering it at the central or local api.

Data center identifier key

Whether a database should be automatically created on the local host

List of additional peer IP addresses to add to the local list.

Whether to configure for the local MPD daemon

Whether to enable confd, a service to manage local application configuration files using templates and data from etcd/consul/redis/zookeeper.

The path to repo in local machine

Port to bind local redis instance to.

Address to bind local redis instance to.

Depending on the local firewall/NAT rules, you might need to force Miredo to use a fixed UDP port and or IPv4 address.

This option implements Override local DNS as it is not yet implemented in Tailscaled-on-macOS

By default khal uses some Unicode symbols (as in "non-ASCII") as indicators for things like repeating events

Whether to enable blocky, a fast and lightweight DNS proxy as ad-blocker for local network with many features.

Whether to enable the automatic creation of a local postgres database for museum..

Local network interface

Local port of the encapsulation UDP socket.

Local web interface to use

Whether to enable private-gpt for local large language models.

Whether to enable Stratis Storage - Easy to use local storage management for Linux.

Default for new events or if khal does not understand the timezone in an ical file

Path to local .zip file to reseed from.

This option lists the machines to be used if distributed builds are enabled (see nix.distributedBuilds)

Use S3 for storage instead of local storage.

Any additional flags passed to nixos-rebuild

This option lists the machines to be used if distributed builds are enabled (see nix.distributedBuilds)

This option lists the machines to be used if distributed builds are enabled (see nix.distributedBuilds)

Environment variables to send from the local host to the server.

A list of repositories to use when resolving dependencies

Whether a database should be automatically created on the local host

Whether to open the UDP port used for multicast peer discovery

Which local IP to bind the UDP socket to.

Whether to automatically set up a local Redis cache and configure Sharkey to use it.

List of non-local DNS domains to be browsed.

Arguments to be passed to AutoSSH and retransmitted to SSH process

Arguments to be passed to AutoSSH and retransmitted to SSH process

Path to local domain socket which is used for communication with the daemon

Niceness for local instances of btrbk

Enable local network discovery.

Username to use when connecting to an external or manually provisioned database; has no effect when a local database is automatically provisioned

Enables distributed pollers for this LibreNMS instance

Whether to run the Avahi daemon, which allows Avahi clients to use Avahi's service discovery facilities and also allows the local machine to advertise its presence and services (through the mDNS responder implemented by avahi-daemon).

Whether the HTTP service (when enabled) will decode ERIS content at /uri-res/N2R?urn:eris:

Whether to run searx in uWSGI as a "vassal", instead of using its built-in HTTP server

Whether to register a mDNS HINFO record which contains information about the local operating system and CPU.

Open ports needed for discovery of scanners on the local network, e.g. needed for Canon scanners (BJNP protocol).

Whether to fetch location from NMEA sources on local network.

List of devices that gpsd should subscribe to

The port that the local PeerTube web server will listen on.

Whether to enable Web Services Dynamic Discovery host daemon

Database name to use when connecting to an external or manually provisioned database; has no effect when a local database is automatically provisioned

Whether to enable the Router Advertisement Daemon (radvd), which provides link-local advertisements of IPv6 router addresses and prefixes using the Neighbor Discovery Protocol (NDP)

Whether to create a local redis automatically.

List of local traffic selectors to include in CHILD_SA

Depending on the local firewall/NAT rules, you might need to force Miredo to use a fixed UDP port and or IPv4 address.

Auto start a session when Zsh is launched in a local terminal.

Configure a local redis server for db-rest.

The hostname of your system, as visible from the command line and used by local and remote networks when connecting through SSH and Remote Login

The path to the SSH private key with which to authenticate on the build machine

Name of the local AutoSSH session

Specifies the clear text password for the account

GitLab database hostname

Mail transfer agent (MTA) integration

Name of the local AutoSSH session

The path to the SSH private key with which to authenticate on the build machine

The path to the SSH private key with which to authenticate on the build machine

Whether to enable the mDNS NSS (Name Service Switch) plug-in for IPv4

Definition of all cell-local database server machines

Only applies if sslEnable is true

Configure local Redis server for Nitter.

Local domains set (see opendkim(8) for more information on datasets)

The TCP port to use to connect to the local XMPP component.

The protocol used for communicating with the build machine

Enable execution of compinit call for all interactive zsh shells

Whether to create a local redis automatically.

Enable execution of compinit call for all interactive zsh shells

khal will display and understand all datetimes in this format

Allow the specified IPs to act as a proxy

Whether to enable a local mongodb instance.

Directory to read CSV config files from

Force enable or disable solicitation and receipt of IPv6 Router Advertisements

Whether to enable the Thanos receiver which accept Prometheus remote write API requests and write to local tsdb.

The user for the service

Only applies if sslEnable is true

Auto start a session when Zsh is launched in a local terminal.

Whether to enable local nginx integration.

Whether to enable local minio integration.

Configure a local Redis server for SearXNG

Database connection scheme

Allow binding to non local addresses.

Whether to configure a local nginx for Zammad.

Remote or local repository to back up to.

Path to file containing XMLRPC URI for use by web UI - this is a secret, since it contains auth credentials

Specifies whether local printers are shared by default.

Whether to enable Configure local livekit server.

path to the local directory where all files are stored

Set to true if you want to send RST for blocked TCP connections, needs local = false.

Enable the shairport-sync daemon

Whether to enable local redis integration in a dedicated redis-server.

Whether to set up a local redis instance.

The protocol used for communicating with the build machine

The protocol used for communicating with the build machine

The protocol used for communicating with the build machine

Mount nvidia-docker-1 directories on containers: /usr/local/nvidia/lib and /usr/local/nvidia/lib64.

Specifies the path to a file containing the clear text password for the account

Create and use a local Redis instance

Whether to let the nslcd daemon (nss-pam-ldapd) handle the LDAP lookups for NSS and PAM

Your local yggdrasil address

Whether to enable a local postgresql database for Firezone.

File storage type, it can be local or s3.

Enables the x2goserver module

Whether to propagate local changes to the remote.

Configure local Postfix SMTP server for Mastodon.

Local port to proxy associations to be performed

Configure local Postfix SMTP server for PeerTube.

Path to sendmail program

Whether to register mDNS address records for all local IP addresses.

Determines where on the local filesystem a data node should store its blocks.

Specifies the password hash for the account, generated with grub-mkpasswd-pbkdf2

The interface the BitlBee daemon will be listening to

Block retention time on local disk

Configure local Redis cache server for docs.

Whether to enable local postfix integration.

Whether to create a local redis automatically.

Whether to configure the required settings to use pfix-srsd in the local Postfix instance.

The postgresql database server to connect to

Configure local Redis server for PeerTube.

Configure local Redis server for Mastodon.

Allow falling back to local locks if Redis is unavailable (WARNING: breaks HA guarantees).

Whether to create a local database automatically.

local database using UNIX socket authentication

Whether to enable Configure local Redis cache server for meet.

A required list of local or remote repositories with paths and optional labels (which can be used with the --repository flag to select a repository)

Whether dnsmasq should resolve local queries (i.e. add 127.0.0.1 to /etc/resolv.conf).

Path to file containing local secret key in binary or hexadecimal form.

Source ZFS dataset

Whether unbound should resolve local queries (i.e. add 127.0.0.1 to /etc/resolv.conf).

Repeat interval for syncing the blocks between local and remote view

If enabled, virtual users will use the same privileges as local users

The public IP address to which packets from the local network are to be rewritten

Discourse database hostname. null means “prefer local unix socket connection”.

Whether to enable a local Redis database using UNIX socket authentication.

Local secret key in hexadecimal form.

Whether to enable OfflineIMAP, a software to dispose your mailbox(es) as a local Maildir(s).

Whether to create a local database automatically.

List of local domains, that do not require rewriting.

Whether to enable Offlineimap, a software to dispose your mailbox(es) as a local Maildir(s).

Jupyterhub spawner to use

There are many spawners available including: local process, systemd, docker, kubernetes, yarn, batch, etc.

Use a local postgresql database, create user and database

The public IPv6 address to which packets from the local network are to be rewritten

Target ZFS dataset

Configure local PostgreSQL database server for Mealie.

Which mode to use for sending mail

Whether to create a local database automatically.

The database host Invidious should use

Whether to run searx in uWSGI as a "vassal", instead of using its built-in HTTP server

List of local endpoints to listen for connections.

Arguments to pass to the daemon

Local Mattermost database name.

Whether to automatically set up a local PostgreSQL database and configure Sharkey to use it.

Local Mattermost database username.

Local port binding options

Listen on remote and forwards traffic from local

List of network interfaces that should be used by the avahi-daemon

The interfaces the Quassel daemon will be listening to

Restrictions for access from non-local IP addresses

SSH port displayed in clone URL

Whether to enable and configure a local Redis instance.

IO scheduling class for btrbk (see ionice(1) for a quick description)

When tun is disabled, a lighthouse can be started without a local tun interface (and therefore without root).

A local file path specifying the location of the mount point.

Whether to enable System bus notification support

WARNING: enabling this option (while convenient) should not be done on a machine where you do not trust the other users as it allows any other local user to DoS your session by spamming notifications .

Configure local PostgreSQL database server for Homebox.

Specifies the path to a file containing the password hash for the account, generated with grub-mkpasswd-pbkdf2

Whether to create a local PostgreSQL database automatically

Whether to automatically set up the database on the local DBMS instance

The path to load specific local geoip/geosite db files

Set owner MXID otherwise first talking local user will claim the bridge

Whether to enable and configure a local PostgreSQL database server.

Whether to create a local database automatically.

Whether to enable automatic creation of a local postgres database.

calls fsync system call after every write to disk in local storage

Definition of all cell-local backup database server machines

An attribute set mapping remote file paths to their corresponding mount point configurations

Whether to configure the required settings to use postsrsd in the local Postfix instance.

Listen addresses for incoming connections

Whether to configure a local Redis server for Dawarich

By default, the Drone RPC server will listen on all interfaces and local IPv4 addresses for incoming connections from clients

Defines the mapping from system users to database users

Relay address (the local IP address that will be used to relay the packets to the peer)

Whether to create a local database automatically.

Enable billing Cron-Jobs on the local instance

Whether to create a local database automatically.

Whether to enable automatic creation of a local postgres database.

How long to retain raw samples on local storage.

0d - disables this retention

Defaults to 15d in Thanos when set to null.

Open ports in the firewall for Mirakurun.

Whether to create a local database automatically.

Additional packages that should be added to the agent's PATH

Whether to create a local database automatically.

Attribute set of Nheko preferences (converted to an INI file)

Whether to register a service of type "_workstation._tcp" on the local LAN.

Name of the local WireGuard interface to use for this peer.

Create a local PostgreSQL or MySQL database for Mattermost automatically.

Configure local PostgreSQL database server for Mastodon.

Whether to automatically set up the database on the local DBMS instance

Configure local PostgreSQL database server for PeerTube.

SSH port displayed in clone URL

Whether to enable a local mongodb instance.

Duo Unix reports the IP address of the authorizing user, for the purposes of authorization and whitelisting

If set, the service will register a new session with systemd's login manager

Whether to enable a local database using UNIX socket authentication.

Remove remote snapshots that don't have a local correspondent.

Local name of the IBM TSM server, must not contain space or more than 64 chars.

Use local tailscaled instead of tsnet.

Whether to configure the required settings to use postfix-tlspol in the local Postfix instance.

The repository to fetch from

Path to the sendmail binary

The extension's version, required for local installation

Whether to enable local postgresql integration.

URL at which to reach Prometheus's API

Lock backend to use: 'local' (single instance), 'redis' (distributed), 'postgres' (distributed, requires PostgreSQL)

Whether a PostgreSQL database should be automatically created and configured on the local host

Whether to create a local database with PostgreSQL.

Whether to configure a local PostgreSQL server and database for Dawarich

Configure local PostgreSQL database server for Paperless.

Whether to enable and configure a local PostgreSQL database server.

Whether to automatically configure a local redis server for matrix-synapse.

Open ports in the firewall for the EPGStation web interface.

Use local DNS server for resolving.

What to do in case of a conflict between the storages

IP detection provider for IPv4

IP detection provider for IPv6

Configure local PostgreSQL database server for Tandoor Recipes.

Whether to create a local database automatically

Whether to setup a local postgres database and populate the db-type fields in services.gotosocial.settings.

Configure local PostgreSQL database server for docs.

Whether the repo (which must be local) is a removable device.

Fileserver role, serves files and volumes from its local storage.

Database host name. localhost is treated specially and inserts systemd dependencies, other hostnames or IP addresses of the local machine do not.

Multiaddr or array of multiaddrs describing the address to serve the local HTTP API on

Whether to enable Configure local PostgreSQL database server for meet.

Whether this is a default library

Environment variables for configuring the rke2 service/agent

A required list of local or remote repositories with paths and optional labels (which can be used with the --repository flag to select a repository)

Password used for authentication

Whether to enable publishing the pulseaudio sink in the local network.

Auto-connect to other cjdns nodes on the same network

Specify the local database filename to store persistent data

Type of 9p cache to use when mounting host nix store. "none" provides no caching. "loose" enables Linux's local VFS cache. "fscache" uses Linux's fscache subsystem

The local path name of a CSS file for the PSGI web interface.

Create and use a local Meilisearch instance

Whether to configure a local postgres database and connect to it.

Whether to configure a local PostgreSQL server.

URL of the local API.

Path to a user's home directory from which to copy DankMaterialShell configuration files

Connection string to postgresql in the [rust postgres crate config format](https://docs.rs/postgres/latest/postgres/config/struct

Password for local Mattermost database user

Whether to enable and configure a local PostgreSQL server by creating a user and database for weblate

Path to a file containing the public key of the local Rosenpass peer

Path to a file containing the secret key of the local Rosenpass peer

HTTP bind address for serving local build information/monitoring.

Whether to enable presence tracking

Whether to automatically set up a local Meilisearch instance and configure Sharkey to use it

Whether to enable discovery of pulseaudio sinks in the local network.

Whether reads should be made for queries for time ranges that the local storage should have complete data for.

User name under which the chrony exporter shall be run

The local port the bridge is listening on.

Group under which the chrony exporter shall be run

If set, all recipients to users at either "localhost" (the literal string) or the canonical host name (from the me control attribute) are remapped to this address

The database user's password (not applicable for sqlite3)

Path to an environment file as defined in systemd.exec(5)

Path to the API key to authenticate with a local CrowdSec API

The SQL server URI

List of addresses and ports to listen on (ListenAddress directive in config)

Whether to create database and user on the local machine if they do not exist

Whether to apply bandwidth limits to devices in the same broadcast domain as the local device.

Whether to apply bandwidth limits to devices in the same broadcast domain as the local device.

Map of incoming traffic patterns to local targets

Whether to run the exporter as the local 'postgres' super user.

Path to the service's config file

An extra set of filesystem paths that FoundationDB can read to and write from

Set labels to ignore when syncing from local tags to remote labels (after translations).

Sets the HTTP Host header on requests sent to the local service.

Whether the official parsedmarc grafana dashboard should be provisioned to the local grafana instance.

nix substituter to fetch debuginfo from

Secret key used for signing

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

The room ID or alias where moderators can use the bot's functionality

List of domain names intended for local delivery using /etc/passwd and /etc/aliases.

https://www.postfix.org/postconf.5.html#mydestination

ChronyServerAddress of the chrony server side command port. (Not enabled by default.) Defaults to the local unix socket.

Authentication to expect from remote

API key to authenticate with a local crowdsec API

Extra directives that should be added under this accounts local storage directive

If provided, each item on this list will generate an entry on khard configuration file as a separate addressbook (vdir)

List of local or remote repositories with paths and optional labels.

Disable the “happy eyeballs” algorithm for IPv4/IPv6 fallback if your local network has misconfigured one of the protocols.

Addresses of public STUN services to use to automatically find the public and local addresses of this Jitsi-Videobridge instance without the need for manual configuration

Whether to set up and use a local instance of Elasticsearch.

Extra directives that should be added under this accounts local storage directive

Send notifications about killed processes via the system d-bus

Path to the socket for local or remote transports

Options for configuring workers

Path to the service's environment file

Install the SPICE USB redirection helper with setuid privileges

Whether to enable pay-respects' LLM integration

Extension to include in local file names, which can be useful for indexing with third-party programs.

What to do in case of a conflict between the storages

Specifies if mapped OpenID Connect accounts are automatically created upon successful authentication

What to do in case of a conflict between the storages

Environment variables which are read by healthchecks (local)_settings.py

Whenever to send systembus-notify notifications

Environment variables which are read by healthchecks (local)_settings.py

Default admin password

Enable hardened VirtualBox, which ensures that only the binaries in the system path get access to the devices exposed by the kernel modules instead of all users in the vboxusers group.

Path to the service's config file

Configuration from which XMonad gets compiled

Specifies if mapped OpenID Connect accounts are automatically created upon successful authentication

Path to the postgres socket directory

This option will ensure that team memberships for OpenID Connect users are dynamic and synchronized with membership of OpenID Connect groups or assigned roles

Datasource specific secure configuration

Your role in Tor network

Identity under which the peer is registered at the mediation server, that is, the IKE identity the other end of this connection uses as its local identity on its connection to the mediation server

This option will ensure that team memberships for OpenID Connect users are dynamic and synchronized with membership of OpenID Connect groups or assigned roles

Set Gmail labels to ignore when syncing from remote labels to local tags (before translations).

Custom engine path for local transcription.

The client TLS security level.

https://www.postfix.org/postconf.5.html#smtp_tls_security_level

By default, non global IP addresses are never forwarded to upstream servers