Match block conditions used by this block

Host pattern used by this conditional block

Match displays based on edid instead of name

Match displays based on edid instead of name.

Specifies the user to log in as.

Each attribute in this set specifies an option in the [Match] section of the unit

Environment variables and their value to send to the server.

Specify per-host settings

Specifies port number to connect on remote host.

Environment variables to send from the local host to the server.

Each attribute in this set specifies an option in the [Match] section of the unit

The proxy host to use to connect to the server.

Check the host IP address in the known_hosts file.

Each attribute in this set specifies an option in the [Match] section of the unit

Specify path to the control socket used for connection sharing.

Specifies the real host name to log into.

The command to use to connect to the server.

Extra configuration options for the host.

Specifies whether X11 connections will be automatically redirected over the secure channel and DISPLAY set.

Indicates that ssh(1) should hash host names and addresses when they are added to the known hosts file.

Whether the connection to the authentication agent (if any) will be forwarded to the remote machine.

if --rga-accurate, only match by mime types, ignore extensions completely

Syntax: field = value Specifies the log entry field this block should apply to

Specifies which address family to use when connecting.

Match windows where wm name contains string.

Specifies one or more files to use for the user host key database, separated by whitespace

Configure sharing of multiple sessions over a single network connection.

When enabled, a private key that is used during authentication will be added to ssh-agent if it is running (with confirmation enabled if set to 'confirm')

Specifies the location of the ssh identity agent.

Specifies files from which the user identity is read

Match windows that wm class contains string.

Specify local port forwardings

Sets the number of server alive messages which may be sent without SSH receiving any messages back from the server.

Whether control socket should remain open in the background.

Host port binding options

Local port binding options

Specify remote port forwardings

Match windows where wm class group contains string.

Match windows where wm name contains string.

Host port binding options

Local port binding options

Specifies whether remote X11 clients will have full access to the original X11 display.

Match windows that wm class contains string.

Specifies port number to forward to.

Specifies port number to bind to.

Specifies the available KEX (Key Exchange) algorithms.

Set timeout in seconds after which response will be requested.

Specify dynamic port forwardings

Specifies port number to bind to.

Specifies port number to bind to.

Specifies port number to forward to.

Match windows where wm class group contains string.

Specifies whether to use compression

The address to forward to.

The address to bind to.

Specifies files from which the user certificate is read.

Specifies that ssh should only use the authentication identity explicitly configured in the ~/.ssh/config files or passed on the ssh command-line, even if ssh-agent offers more identities.

The address to bind to.

The address to forward to.

The address to bind to.

Whether the from reference needs to match exactly

Whether the from reference needs to match exactly

Whether the from reference needs to match exactly

The Espanso matches to use

Whether to launch with the credentials and security token of the binary, not the interpreter (e.g. setuid bit)

Whether to hide url hints not matching input in url hints mode.

The query string used to match one or more fans: can be a fullpath to the temperature file (single fan) or a fullpath to a driver directory (multiple fans).

The user's home directory

Whether or not checksum validation failure should be a fatal error at boot time.

Whether to create the home directory and ensure ownership as well as permissions to match the user.

The query string used to match one or more sensors: can be a fullpath to the temperature file (single sensor) or a fullpath to a driver directory (multiple sensors).

Give certain environment variables for said match.

interface name of the NetworkManager connection

UUID of the connection profile

UUIDs are assigned once on connection creation and should never change as long as the connection still applies to the same network.

connection id used by NetworkManager

NetworkManager connection type

The NetworkManager configuration settings reference roughly corresponds to connection types

Whether to create the home directory and ensure ownership as well as permissions to match the user.

name of the setting section for which secrets are requested

When performing a match to select a backend server, SNI host name received from the client is used instead of the request host

The local IP address to which all traffic that does not match any forwarding rule is forwarded.

Height of the slide bar

Hide match and plugin info icons.

The plugin script to source

Override for package "short name", used for generating configuration

List of keycodes to match.

Process matchers.

Override for extensions directory

These are the rules grobi tries to match to the current output configuration

The name of the network interface to match against.

config.yaml configuration as a Nix attribute set

The filters to apply on all messages which satisfy match

List of events to match.

This is a rule that the target address is to match against

A condition to match a file.

A list of fans to pick in case multiple fans match the query.

The shell (/bin/sh) command executed to obtain the DHCP DNS server address

Action for packets that doesn't match any rules.

Specifies the platform on which NixOS should be built

Optional cookie domains to force cookies to (ie: .yourcompany.com)

Configuration for Gemstash

The final user-facing URL

Specifies the platform on which nix-darwin should be built

Whether to enable spice-autorandr service that will automatically resize display to match SPICE client window size.

config.yaml configuration as a Nix attribute set

Regular expression to match the vendor name

If set, the pkgs argument to all nix-darwin modules is the value of this option, extended with nixpkgs.overlays, if that is also set

The exact version of Nvidia drivers to use

Do not enter command lines into the history list if they match any one of the given shell patterns.

A set of policies to apply to the IPsec connections.

ZSH_AUTOSUGGEST_STRATEGY is an array that specifies how suggestions should be generated

config.yaml configuration as a Nix attribute set

ZSH_AUTOSUGGEST_STRATEGY is an array that specifies how suggestions should be generated

A list of sensors to pick in case multiple sensors match the query.

Regular expression to match the product name

OpenAFS kernel module package

List of PostgreSQL plugins

Any metrics received which match one of the expressions will be dropped.

Only metrics received which match one of the expressions will be persisted.

An optional list of equality matchers which have to be present in a selector to query the remote read endpoint.

This is the target address is to match against

Regular expression to match the product revision

Process matchers.

An optional SHA256 checksum of the desktop picture/wallpaper

Path to an image file to load before running the image

Specifies whether sshd(8) should look up the remote host name, and to check that the resolved host name for the remote IP address maps back to the very same IP address

Mime type regex that this association should match.

OpenAFS programs package

File path regex that this association should match.

How to treat USB devices that don't match any rule in the policy

config.yaml configuration as a Nix attribute set

config.yaml configuration as a Nix attribute set

Incoming search requests which match this filter are ignored.

If enabled, pam_wallet will attempt to automatically unlock the user's default KDE wallet upon login

static: Immediately answer any Neighbor Solicitation Messages (if they match the IP rule). iface: Forward the Neighbor Solicitation Message through the specified interface and only respond if a matching Neighbor Advertisement Message is received. auto: Same as iface, but instead of manually specifying the outgoing interface, check for a matching route in /proc/net/ipv6_route.

If enabled, pam_gnome_keyring will attempt to automatically unlock the user's default Gnome keyring upon login

Event to match.

Process matchers.

Process matchers.

ID to match.

Unix socket that lmtpd listens on, used by deliver(8)

Path to a custom home page

Extra configuration options for Syncthing

List of keys to match

config.yaml configuration as a Nix attribute set

The criteria can either be an output name, an output description or "*"

Name to match.

Extra configuration options for Syncthing

Commands to execute when the conditions match (required).

config.yaml configuration as a Nix attribute set

The application ID to match (optional).

The redirect URL of the service

POSIX Extended Regular Expressions that match store paths that should not appear in the system closure, with the exception of system.extraDependencies, which is not checked.

The criteria can either be an output name, an output description or "*"

Also suspend descendant processes that match this regex.

The magic number or extension to match on.

If set, the pkgs argument to all NixOS modules is the value of this option, extended with nixpkgs.overlays, if that is also set

Regex pattern to match the GC root path.

Group under which the postfix exporter shall be run

Location to match.

Name to match.

Also suspend descendant processes that match this regex.

Exposes EDID files from users-sourced database at https://github.com/linuxhw/EDID

Attribute names will be mapped to EDID filenames <NAME>.bin

The criteria can either be an output name, an output description or "*"

The language most likely to be used on the server - used when indexing, to ensure the returned results match expectations

The workspace name to match (optional).

Instead of synchronizing just the mailboxes that match the farPattern, use it as a prefix which is not matched against the patterns, and is not affected by mailbox list overrides.

Channel to match.

Location to match.

If true, a backend match requires the frontend connection be TLS encrypted

Regex substring to match the app name (optional).

The set of kernel modules in the initial ramdisk used during the boot process

Redirect to correct domain if the host header does not match the domain

Condition to match messages against.

Substring to match in the window title (optional).

Whether to match during aerospace startup (optional).

The D-Bus implementation used on the system

Whether to generate new thumbnails on the fly to precisely match the resolution requested by the client

Local address(es) to use for IKE communication

Network ports to publish from the container to the outer host

Sets the password for WPA3-SAE

Netfilter mark and mask for output traffic

Whether to set mark_in on the inbound SA

Netfilter mark and mask for input traffic

Remote address(es) to use for IKE communication

Netfilter mark applied to packets after the inbound IPsec SA processed them

Whether to install outbound FWD IPsec policies or not

Key bindings mapping keys to commands in different modes

filterBlocks can be defined to blacklist journal messages which are not errors

Highlight the matching char of the character under the selections' cursor using the MatchingChar face.

Assign block I/O scheduler by device name pattern

Enable the DHCP client for any interface whose name matches any of the shell glob patterns in this list

Include/exclude paths matching the given patterns

Prevents deletion of images for which repository:tag matches the specified regex.

The glob expansion which matches all directories relevant.

Whether to enable DHCP on the interfaces matched.

The action to be executed when the pattern is matched

If specified, Duo authentication is required only for users whose primary group or supplementary group list matches one of the space-separated pattern lists

Configuration options for the Default Terminal Execution Specification

Configuration options for the Default Terminal Execution Specification

Whether to enable fuzzy searching. 0 is off; higher numbers weight toward shorter matches

"ignoreIP" can be a list of IP addresses, CIDR masks or DNS hosts

Iptables filters that if matched will get the packet off of redsocks.

A list of regular expressions that are matched against the reported client id (such as task 2.3.0)

Include this configuration only when condition matches

The APP_URL used by firefly-iii internally

Preview command for files matched by this association.

List of ID matchers to export.

If enabled, the agent attempts to install and then load an RDMA kernel driver that matches the version of the firmware on the underlying hardware.

Shared secret token to authenticate the client

Shared secret token to authenticate the client

The fingerprint of the endorsement key

A list of regular expressions that are matched against the reported client id (such as task 2.3.0)

Packages to which no replacements should be applied

Retention period for the GC roots matched by this policy.

External filter program to further filter GC roots matched by this policy.

List of channel matchers to export.

Disable the DHCP client for any interface whose name matches any of the shell glob patterns in this list

Catch-all service if no ingress matches

System-wide default emoji font(s)

Per-user default emoji font(s)

Action to perform on matched messages.

By default, all networks will get same priority group (0)

IMAP4 patterns for which mailboxes on the remote mail server to sync

Path to the private key to the matching certificate signing request.

The subnets which this tinc daemon will serve

Disable the DHCP client for any interface whose name matches any of the shell glob patterns in this list

Conditions to make outbound packets go through this redsocks instance

Only write log for matching AREAs (all|main|network|bus|device|update|other) below or equal to LEVEL (none|error|notice|info|debug)

Only include .dtb files matching glob expression.

Only write log for matching AREAs (all|main|network|bus|device|update|other) below or equal to LEVEL (none|error|notice|info|debug)

Only write log for matching AREAs (all|main|network|bus|device|update|other) below or equal to LEVEL (none|error|notice|info|debug)

Sets the default UI theme. system matches the user's system theme.

Whether to enable dsearch, a fast filesystem search service with fuzzy matching.

Only write log for matching AREAs (all|main|network|bus|device|update|other) below or equal to LEVEL (none|error|notice|info|debug)

A regexp matching the full paths of cgroups whose data shouldn't be collected

Game will be published on the official Factorio matching server.

A command to run for the matching file.

Only write log for matching AREAs (all|main|network|bus|device|update|other) below or equal to LEVEL (none|error|notice|info|debug)

Only write log for matching AREAs (all|main|network|bus|device|update|other) below or equal to LEVEL (none|error|notice|info|debug)

Regular expression against which the extracted value is matched

Only write log for matching AREAs (all|main|network|bus|device|update|other) below or equal to LEVEL (none|error|notice|info|debug)

List of IP (v4 or v6) addresses with CIDR masks from which this peer is allowed to send incoming traffic and to which outgoing traffic for this peer is directed

Skip authentication for requests matching any of these regular expressions.

Comma-separated list of language codes to prefer for cask installation

Literal DTS contents, overlay is applied to each .dtb file matching "compatible" of the overlay.

Path to .dts overlay file, overlay is applied to each .dtb file matching "compatible" of the overlay.

Only apply to .dtb files matching glob expression.

If the file source is a directory, then this option determines whether the directory should be recursively linked to the target location

List of IP (v4 or v6) addresses with CIDR masks from which this peer is allowed to send incoming traffic and to which outgoing traffic for this peer is directed

If the file source is a directory, then this option determines whether the directory should be recursively linked to the target location

A regexp pattern matching the header

Whether to enable Devilspie2, a window matching utility, allowing the user to perform scripted actions on windows as they are created.

If the file source is a directory, then this option determines whether the directory should be recursively linked to the target location

If the file source is a directory, then this option determines whether the directory should be recursively linked to the target location

If not null and --rga-accurate is enabled, mime type matching is used instead of file name matching

Path to the directory Traefik should watch for configuration files.

The source labels select values from existing labels

Paths to be searched for matching data

Default block I/O scheduler

Installing a public key allows firmware signed with a matching private key to be recognized as trusted, which may require less authentication to install than for untrusted files

If the file source is a directory, then this option determines whether the directory should be recursively linked to the target location

The MODE determines which part of the NUT is to be started, and which configuration files must be modified

File containing x509 private key matching tlsCertFile.

Exclude files and directories matching these patterns.

Regular expression against which the extracted value is matched

Replacement value against which a regex replace is performed if the regular expression matches

Prune a repository by deleting all archives not matching any of the specified retention options

A mask to be ANDed with the byte sequence of the file before matching

For each user matching one of comma-separated glob patterns, enable TTY auditing

Include only files and directories matching these patterns (the empty list includes everything)

Specify a list of approved path patterns for PKCS#11 and FIDO authenticator middleware libraries

Whether interactive shells should show which Nix package (if any) provides a missing command

sysfs attributes to be set as soon as they become available

Exclude paths matching any of the given patterns

Regular expression against which the extracted value is matched

For each user matching one of comma-separated glob patterns, disable TTY auditing

Pick CSV config files matching initial scan ("none" or empty for no initial scan message, "full" for full scan, or a single hex address to scan, default is to send a broadcast ident message)

The source labels select values from existing labels

Which pinentry package to use

If specified, public-inbox-watch(1) will only process mail containing a matching header.

List of local traffic selectors to include in CHILD_SA

File containing the password for the mpd daemon

The source labels select values from existing labels

This setting configures the name of a mailbox for which administrator scripts are configured

List files matching a pattern to include

List files matching a pattern to include

Replacement value against which a regex replace is performed if the regular expression matches

Default block I/O scheduler for rotational drives (e.g. hard disks)

Comma-separated list of authorized principals to permit; if the user presents a certificate with one of these principals, then they will be authorized

Path to a list of principals; if the user presents a certificate with one of these principals, then they will be authorized

The LightDM greeter to login via

Optional list of URL matches that the URL preview spider is denied from accessing.

Replacement value against which a regex replace is performed if the regular expression matches

Authentication to perform locally.

• The default pubkey uses public key authentication using a private key associated to a usable certificate.
• psk uses pre-shared key authentication.
• The IKEv1 specific xauth is used for XAuth or Hybrid authentication,
• while the IKEv2 specific eap keyword defines EAP authentication.
• For xauth, a specific backend name may be appended, separated by a dash

Drive(s) to get temperature from

Can also use command substitution to automatically grab all matching drives; such as all scsi (sas) drives

Reads all matching messages or whole-threads

Unless the flag --locked is set, the command will not be run when a screen locking program is active

Products with the given vendor matching this string are blacklisted

Action to perform based on regex matching

Sets allowed passwords for WPA3-SAE

Action to perform for this CHILD_SA on DPD timeout

Sets the password(s) for WPA-PSK

Action to perform based on regex matching

Action to perform after loading the configuration.

• The default of none loads the connection only, which then can be manually initiated or used as a responder configuration.
• The value trap installs a trap policy, which triggers the tunnel as soon as matching traffic has been detected.
• The value start initiates the connection actively.
• Since version 5.9.6 two modes above can be combined with trap|start, to immediately initiate a connection for which trap policies have been installed

Action to perform based on regex matching

Optional label and field selectors to limit the discovery process to a subset of available resources