Name of the UKI

The name of the user account

The name of the user account

The family name of the font within the package.

The name of the group

The group's name

The name of the theme within the package.

The name of the user account

The name of the system used in the system.build.toplevel derivation

The family name of the font within the package.

The family name of the font within the package.

The family name of the font within the package.

The name of the group

The name of the theme within the package.

The name of the theme within the package.

The name of the theme within the package.

The name of the icon theme within the package.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The name of this nylon instance.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Name of the zone.

Specific name of the application.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The name of the icon theme within the package.

The name of the icon theme within the package.

The name of the icon theme within the package.

Name of the PPP peer.

Name of the action.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The name of the cursor theme within the package.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Name of the image

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The endpoint name.

The endpoint name.

The name of the cursor theme within the package.

The name of the cursor theme within the package.

The name of the cursor theme within the package.

Username for JSON-RPC connections.

Name of the control, as it appears in alsamixer

Etcd unique node name.

Name of the PAM service.

The name of this systemd unit, including its extension

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

The name of the cask to install.

The name of the formula to install.

Name of the worker

The unique name for THIS channel in THIS group

Name of modem device, will be searched for in /dev.

The cursor name within the package.

The name of the node which is used as an identifier when communicating with the remote nodes in the mesh

Name of the runner to configure

Name of the runner to configure

The name of this systemd unit, including its extension

Profile name.

Profile name

The profile's name.

Unique identifier of the account

The name of the network interface to match against.

The friendly name you give to the network device

The friendly name you give to the network device

Name i2pd appears in UPnP forwardings list.

The user's UID.

The name of this group for this account

This library's name.

Specifies the Name of the Storage daemon.

When clone_target is unspecified, this is the name of a formula repository to tap from GitHub using HTTPS

The user's primary group.

The name of the Helm chart

Text of the file

Database name.

Profile name.

The name of the Helm chart

The family name of the font within the package.

The language to use for personal names.

Name for the device

A system user name for this client instance.

A system user name for this client instance.

Keyboard name.

The name of the agent as seen in the buildkite dashboard.

The name of the agent as seen in the buildkite dashboard.

Akkoma frontend name.

The endpoint name.

The endpoint name.

Name of the site.

The director name used by the system administrator

The name of the service to run

The client name that must be used by the Director when connecting

Database name.

Name of the redis server

Unique identifier of the account

The user's home directory.

Unique identifier of the contact account

Text of the file

The name of the instance.

The name of the host

Name of the tmux window;

The endpoint name.

The endpoint name.

The unique agent name.

Container name, e.g., shopping.

The account UID

Agent name, usually same as the hostname

Mail "from" name.

Agent name, usually the same as the hostname.

The name of the plugin.

The theme name.

The group's GID.

Table name.

The user's home directory mode in numeric format

Unique identifier of the calendar

Font name, as used by fontconfig.

The name of the theme within the package.

Container name, e.g., shopping.

The name of the plugin.

Name is used as a suffix for the service name, user, and group

The name of the mailbox.

Name of the interface.

Path to target file relative to HOME.

Profile name.

Name is referenced in logs

The user's primary group.

Name of the interface

Name of the font to use for regreet.

Text of the file

Text of the file

The name to return in service discovery responses for the MUC service itself

Name of the redis server

Name of directory from which to import ZFS device, this is passed to zpool import as the value of the -d option

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

Mail "reply-to" name.

Name of the GNOME Shell theme.

The serial port to which your UPS is connected. /dev/ttyS0 is usually the first port on Linux boxes, for example.

Name of the rule.

Name of the plugin.

Name of the plugin.

Whether this file should be generated

Name of the iSCSI initiator to boot from

The name of the service to run

Name of the machine when registering it at the central or local api.

The name of an explicit dtb to be loaded, relative to the dtb base

The endpoint name.

The name of the server

Name of the Docker context

Name of the theme to use for regreet.

Whether the target path should be unconditionally replaced by the managed file source

The group GID

Path to target file relative to xdg.dataHome.

Name of the user to ensure.

Container name, e.g., shopping.

Name of the existing database.

Name of the profile.

Program to execute, possibly with arguments.

Database name.

Whether this file should be generated

The name of the plugin.

The endpoint name.

The name of this authentication provider

The logical name of the Galera cluster

The name of the watcher

Name of the beat

Name of the wiki.

Name of the server.

Icon to display in file manager, menus, etc.

Whether to enable ‹name›.

The user's home directory.

Name of this iscsi initiator

This feed account's name.

The user's home directory mode in numeric format

Whether the target path should be unconditionally replaced by the managed file source

Text of the file

Database name.

Database name.

The flake reference from is rewritten to.

The flake reference to which from> is to be rewritten.

Server name to be used for this virtual host

Name of the icon theme to use for regreet.

Name of ICMP pinging job.

Path to target file relative to xdg.cacheHome.

Location of the host path to be mounted.

The name of this actor

The name of this group

Database name.

The account UID

The advertised name for zeroconf discovery.

The name of this gateway as shown in firezone

The name of the cookie that the oauth_proxy creates.

Path to target file relative to xdg.stateHome.

The endpoint name.

Name associated with the build

The name identifying the runner instance towards the Gitea/Forgejo instance.

This primary server will notify all given secondary servers about zone changes

Disable running fsck on this filesystem.

Text of this systemd unit.

This profile's name.

Unique identifier of the boxxy rule

Whether this file should be generated

Whether this file should be generated

Whether to make the user account hidden.

The name of the device.

The name of the device.

Database name, only used when the databse is created locally.

The name of an existing user account under which the rsync process should run.

Path of the source file or directory

Specify the program to run to talk to this UPS. apcsmart, bestups, and sec are some examples.

The user's home directory

The name of the host in the network as well as the configuration for that host

The database name

Name of the service.

Name of the redis server

The endpoint name.

Database name.

Database name.

Database name.

Determine whether the mounted path will be accessed in read-only mode.

The user's primary group.

The flake reference to be rewritten.

The flake reference to be rewritten.

Name of symlink

The name of this relay group

The name of the immich database.

name of the virtualhost

Whether the target path should be unconditionally replaced by the managed file source

Whether the target path should be unconditionally replaced by the managed file source

The name of this server.

This is the target address is to match against

Database name

The name of the database to use for Wakapi.

Drive name without the full path.

Database name.

This optional key can be used to request that the service be registered with the mDNSResponder(8)

Mount point on the container file system.

Path of the source file or directory

The name of this systemd unit, including its extension

Shell commands to run when file has changed between generations

The name of an existing user group under which the rsync process should run.

Adapter name that is used in the radicle-ci-broker configuration

Name of the cursor theme to use for regreet.

Name of the plugin linked to $XDG_CONFIG_HOME/ranger/plugins/

Whether to enable the filesystem mount.

Path to target file relative to xdg.configHome.

The name of this client as shown in firezone

Name of this overlay

The path to the user's shell

The group GID

Name of symlink

Create the home directory when creating the user.

Specifies the real host name to log into.

Name of symlink

The name of this gateway group

Name used to derive peer unit name.

Lines which would be added inside ups.conf for handling this UPS.

User to run the cgit service as.

The name of the hook

The flake reference from is rewritten to

If set to false, the user account will not be created

Database name.

Database name.

The name of this resource

Type of the file system

Attributes for user's entry in pam_mount.conf.xml

PostgreSQL database name

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Whether this file should be generated

Start the specified units when this unit is started.

The name of the wrapper program

Put the host-side of the veth-pair into the named bridge

Name of the local AutoSSH session

Name of the local AutoSSH session

Display name of the radio station.

The flake input from is rewritten to.

The flake input from is rewritten to.

The flake input to which from> is to be rewritten.

The name of this gateway as shown in firezone

Name of symlink (relative to /etc)

Shell commands to run when file has changed between generations

The user's auxiliary groups.

Database name.

Name of symlink

Domain to fetch certificate for (defaults to the entry name).

The name of services's user

This optional key specifies the node to connect(2) or bind(2) to.

Name of the snippet.

When set to something distinct to null NSD is able to collect statistics per zone

Path to encrypted luks device that contains the user's home directory.

This optional key tells launchctl what type of socket to create

Set the log-level

Name of the existing database (has no effect if type is "sqlite").

Text of this systemd unit.

The Flake URI of the NixOS configuration to use for the container

Path of the source file or directory

Path of the source file or directory

Whether the target path should be unconditionally replaced by the managed file source

Whether to enable this mount.

The IPv4 address assigned to the host interface. (Not used when hostBridge is set.)

Where to mount this dataset.

Server name.

Alias of home.pointerCursor.name.

Bind port for ‹name› endpoint.

The flake reference to be rewritten

Add the necessary actions for a upsmon process to work

Whether to enable automatic mounting.

The group's members.

Port number Go Ethereum will be listening on, both TCP and UDP.

If the specified units are started at the same time as this unit, delay this unit until they have started.

The IPv6 address assigned to the host interface. (Not used when hostBridge is set.)

This optional key implies SockFamily is set to "Unix"

Whether to create the home directory and ensure ownership as well as permissions to match the user.

Group to run the cgit service as.

A short description of the user account, typically the user's full name

Database name.

Name of the game as it will appear in the game listing.

Bind port for ‹name› endpoint.

Override for package "short name", used for generating configuration

Name for where mail coming from the remote (far) mail server will end up locally

Node name

The account name

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Name of the beat

This optional key specifies the mode of the socket

A path which will be scanned for repositories.

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

The name of the dawarich database.

MySQL database name.

Database name for FreshRSS.

Extra configuration lines to add to THIS channel's configuration.

Name of the satellite.

Shell commands to run when file has changed between generations

Shell commands to run when file has changed between generations

What port to listen for client requests, default is 1080.

The specified name-string gives the system file name of the storage device managed by this storage daemon

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

TLS options for virtual host

Start the specified units when this unit is started.

Start the specified units when this unit is started.

Path to the directory storing the hooks

Path to the directory storing the hooks

Subordinate group ids that user is allowed to use

Subordinate user ids that user is allowed to use

Target node name on the IBM TSM server.

APIs to enable over WebSocket

cgit repository settings, see cgitrc(5)

The nickname of this Tahoe node.

A local file path specifying the location of the mount point.

Name of the modifier.

The name of the file or block device that should be used as header for the encrypted device.

This optional key can be used to request that the service be registered with the mDNSResponder(8)

Interface name

SSID to be used in IEEE 802.11 management frames.

The user's shell

The name of the file (can be a raw device or a partition) that should be used as the decryption key for the encrypted device

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

S3 bucket name to use for HTTP-01 based challenges

Generic name of the application.

Replace any existing runner with the same name

Replace any existing runner with the same name

Label of the device

Interface name

Format: [AXFR|UDP] <ip-address> <key-name | NOKEY>

DNS full-qualified domain name of a database server

DNS full-qualified domain name of a database server

Packages added to the service's PATH environment variable

Path of the source file or directory

Whether to enable cgit.

The user names of the group members, added to the /etc/group file.

The plugin.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Name of this virtual host

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Start the specified units when this unit is started.

The set of system-wide known SSH hosts

Database name.

Each attribute of this option defines a systemd service that runs hans

ACME options for virtual host.

HTTP options for virtual host

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Name of the PCM card to control (slave).

Username

The path to the user's shell

Automatically allocate subordinate user and group ids for this user

Allow the user to do certain things with upsd

Blockchain garbage collection mode.

Whether to enable hub instance.

Port number of Go Ethereum HTTP API.

Whether to enable ‹name›.

Name of Google storage bucket

Members of this group can access the control socket for this interface.

Name of the symlink (relative to /var/lib/rancher/k3s/server/manifests)

If set to false, the user account will not be created

The type of the desktop entry.

This optional key can be used to request that the service be registered with the mDNSResponder(8)

Count of subordinate user ids

Count of subordinate group ids

Source port of the external interface on host

Instead of synchronizing just the mailboxes that match the farPattern, use it as a prefix which is not matched against the patterns, and is not affected by mailbox list overrides.

Profile name

Interface to use when method is iface.

Whether to join this channel on connect.

Whether the SSID is to be interpreted using UTF-8 encoding.

Aliases of that unit.

Aliases of that unit.

This optional key can be used to request that the service be registered with the mDNSResponder(8)

Whether to enable Go Ethereum Node.

Additional arguments passed to Go Ethereum.

Database name.

Database name.

Attributes for user's entry in pam_mount.conf.xml

Name of the symlink (relative to /var/lib/rancher/rke2/server/manifests)

This optional key specifies the service on the node to connect(2) or bind(2) to.

Whether to enable ‹name›.

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

List of forwarded ports from host to container

VirtualHost to serve cgit on, defaults to the attribute name.

The type of the device.

How to display the tag when focused.

Program to execute, possibly with arguments.

Discourse database name.

The IPv4 address assigned to the interface in the container

The user's auxiliary groups.

Name of the remote read config, which if specified must be unique among remote read configs

If the specified units are started at the same time as this unit, delay this unit until they have started.

Shell commands to run when file has changed between generations

Backup type as described in: https://pgbackrest.org/command.html#command-backup/category-command/option-type

IMAP4 patterns for which mailboxes on the remote mail server to sync

The name of the database to create.

Path to a certificate signing request to apply when fetching the certificate.

Path to encrypted luks device that contains the user's home directory.

The IPv6 address assigned to the interface in the container

static: Immediately answer any Neighbor Solicitation Messages (if they match the IP rule). iface: Forward the Neighbor Solicitation Message through the specified interface and only respond if a matching Neighbor Advertisement Message is received. auto: Same as iface, but instead of manually specifying the outgoing interface, check for a matching route in /proc/net/ipv6_route.

Location where the file system will be mounted

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Whether to enable TLS support.

Name of symlink

Root directory for requests.

Rename nodes to different name.

Name of the model to download and use for speech synthesis

Local secret key in hexadecimal form.

Style to use for Qt5/Qt6 applications

Whether the from reference needs to match exactly

Whether the from reference needs to match exactly

Whether the from reference needs to match exactly

Shell commands executed as the service's main process.

Icon to display in file manager, menus, etc.

Specify the bind mode that the bind is used in

This optional key specifies the node to connect(2) or bind(2) to.

Real name

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Start the specified units when this unit is started.

Start the specified units when this unit is started.

Output DPI configuration.

Output DPI configuration.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

The name of the first admin user.

Name of the remote write config, which if specified must be unique among remote write configs

This optional key specifies the protocol to be passed to socket(2)

This optional key tells launchctl what type of socket to create

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Whether to create the home directory and ensure ownership as well as permissions to match the user.

Listed primary servers are allowed to notify this secondary server

Output resolution.

Output framerate.

Output resolution.

Output framerate.

Name of the user to ensure.

Name of the user to ensure.

Start the specified units when this unit is started.

Start the specified units when this unit is started.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Name of the kernel module that provides the card.

The node name of the device

The node name of the device

Name of consistency check to run.

Name of modem configuration file, will be searched for in config in the spooling area directory.

Set the host address for this virtual host

The set of packages that should be made available to the user

The set of packages that should be made availabe to the user

Path of the source file.

Adds index directive.

Alias directory for requests.

Path to the private key to the matching certificate signing request.

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Define a launchd job

Username used to connect to registry.

This optional key implies SockFamily is set to "Unix"

The name of this client as shown in firezone

Name that will be shown.

Output video display controller.

Output video display controller.

If true, the user's shell will be set to users.defaultUserShell.

Database name.

If the device does not currently contain a filesystem (as determined by blkid), then automatically format it with the filesystem type specified in fsType

Bind address for ‹name› endpoint.

Name displayed when sending mails.

The cgit package to use.

The geth package to use.

Uhub plugin configuration.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Packages added to the service's PATH environment variable

Enables nylon as a running service upon activation.

Name of symlink

Adds DirectoryIndex directive

Alias directory for requests

Levels (minimum value for logged events): 0 = verbose debugging 1 = debugging 2 = informational messages 3 = notification 4 = warning

Aliases of that unit.

Aliases of that unit.

Each attribute of this option defines a systemd service that runs iodine

Marks the server as a backup server

Adds try_files directive.

Start URL of the site.

Group running the ACME client.

Whether to enable remove bind.

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Keeps the specified running while this unit is running

Override the default TLS port for this virtual host.

The name of the host in the network as well as the configuration for that host

Isolate traffic between stations (clients) and prevent them from communicating with each other.

Name for the filter.

Name of the PCM device to control (slave).

Set name to shared memory zone.

This optional key specifies the mode of the socket

Subordinate user ids that user is allowed to use

Subordinate group ids that user is allowed to use

This optional key specifies the node to connect(2) or bind(2) to.

Packages added to the service's PATH environment variable

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

Bind address for ‹name› endpoint.

Start of the range of subordinate user ids that user is allowed to use.

Start of the range of subordinate group ids that user is allowed to use.

Name to display

Output gamma configuration.

Output gamma configuration.

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

This optional key specifies the node to connect(2) or bind(2) to.

Database name.

Database name.

Name of database.

Specifies the MAC addresses to deny if macAcl is set to "deny" or "radius"

The object to make available inside the initrd.

This optional key tells launchctl what type of socket to create

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Password HMAC-SHA-256 for JSON-RPC connections

Optional PKCS#11 module name.

The actual zone data

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Proxy account name, without the possibility to include domain name ('at' sign is interpreted literally).

ID of the user in initrd.

The MIME type(s) supported by this application.

This optional key tells launchctl what type of socket to create

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Name of the PostgreSQL database.

The name of the Linkwarden database.

Whether to enable DNSSEC.

If set, the filesystem is grown to its maximum size before being mounted. (This is typically the size of the containing partition.) This is currently only supported for ext2/3/4 filesystems that are mounted during early boot.

Label of the unlocked encrypted device

Instance name.

Local Mattermost database name.

Database name to use when connecting to an external or manually provisioned database; has no effect when a local database is automatically provisioned

Aliases of that unit.

Aliases of that unit.

The user names of the group members, added to the /etc/group file.

A program name specifying a Postfix service/daemon process

Zone file resource records contain columns of data, separated by whitespace, that define the record.

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Path] section of the unit

This optional key implies SockFamily is set to "Unix"

Remote public key in hexadecimal form.

How to display the tag when unfocused

Change current mode after bind is executed

Adds a return directive, for e.g. redirections.

An attribute set of option values passed to rclone mount

Name of the printer / printer queue

This optional key is a variant of SockPathName

The vlan identifier

Optional PKCS#11 module name.

This can be set as a global variable above your first UPS definition and it can also be set in a UPS section

The underlying network device on which the tunnel resides.

Command executed as the service's main process.

This optional key implies SockFamily is set to "Unix"

Name of symlink

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Whether the luksOpen will be attempted before LVM scan or after it.

Override the default HTTP port for this virtual host.

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

User name of file owner

Name of the homebridge UI platform

Specifies the MAC addresses to allow if macAcl is set to "allow" or "radius"

Vertical scaling factor/pixels.

Horizontal scaling factor/pixels.

Horizontal scaling factor/pixels.

Vertical scaling factor/pixels.

Database name.

Label for this destination

Automatically allocate subordinate user and group ids for this user

Whether to enable Go Ethereum HTTP API.

The relationship with upsd

The network to connect to

Name of the MySQL database that holds EPGStation's data.

Name of the beat

Whether to enable the output.

Output rotate configuration.

Whether to enable the output.

Output rotate configuration.

Set the date on which the user's account will no longer be accessible

Name of symlink

Container icon.

The time-to-live of the connection to the remote tunnel endpoint.

Shell commands executed as the service's main process.

Count of subordinate group ids

Count of subordinate user ids

This optional key specifies the mode of the socket

The name of the Grafana database.

Local name of the IBM TSM server, must not contain space or more than 64 chars.

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

The server username of this account

Verify peer certificate

Verify peer certificate

Text of the file.

The hotkey.

These lines go to the end of cgitrc verbatim.

Shell commands executed to stop the service.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

This optional key specifies the mode of the socket

The protocol specifier for port forwarding between host and container

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

Interpolation method to be used for scaling the output.

Container ID

The device to update.

Enable logging, default is no logging.

How to name the created archives

Shell commands executed as the service's main process.

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Location of hardware kiss tnc for this interface.

Start the specified units when this unit is started.

Start the specified units when this unit is started.

Username from upsd.users for accessing this UPS

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

The domain name to collect stats for.

Start the specified units when this unit is started.

Whether to enable this PPP peer.

Port to bind the TTS server to.

User account under which this pool runs.

Whether to enable Operate silently.

Optional PKCS#11 module name.

Keeps the specified running while this unit is running

Keeps the specified running while this unit is running

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Configuration for this host

This optional key specifies the service on the node to connect(2) or bind(2) to.

Container color.

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Basic Auth protection for a vhost

Indicates whether this is an account for a “real” user

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

Group name of file owner

Units that want (i.e. depend on) this unit

Adds DirectoryIndex directive

Alias directory for requests

Text of the file.

Master=false means slave server

Addresses who may request zone transfers.

Limit retry time for secondary zones.

Whether to enable this RAUC slot.

Indicates if the user is a system user or not

This optional key specifies what nice(3) value should be applied to the daemon.

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Path to the file which contains the actual base64 encoded key

Aliases of that unit.

Aliases of that unit.

A short description of the user account, typically the user's full name

As an alternative to specifying config, you can specify the path to the evaluated NixOS system configuration, typically a symlink to a system profile.

The serial port speed of this interface.

The underlying network device on which the tunnel resides.

ID of the group in initrd.

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Container icon.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

Label to use for the name of the config file.

Specifies the user to log in as.

Whether output should be marked as primary

Whether output should be marked as primary

Environment variables used for this PHP-FPM pool.

Optional slot number of the token that stores the certificate.

Name of this virtual host

The user as which to run bitcoind.

Blockchain sync mode.

Maximum peers to connect to.

Tunnel type.

Aliases of that unit.

Aliases of that unit.

Key type to use for private keys

The time-to-live of the connection to the remote tunnel endpoint.

Each attribute in this set specifies an option in the [Exec] section of this unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

UUID of the stratis pool that the fs is located in

This is only relevant if you are using stratis.

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Keeps the specified running while this unit is running

Container ID

Dataset name to send snapshots to.

A system group name for this client instance.

A system group name for this client instance.

Specify the log file name

Directory for the ACME challenge, which is public

DNS full-qualified domain name of a database server

A specification of the desired configuration of this container, as a NixOS module.

Whether the container is automatically started at boot-time.

The set of packages that should be made available to the user

If the specified units are started at the same time as this unit, delay this unit until they have started.

This optional key specifies the protocol to be passed to socket(2)

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

Commands to run after new certificates go live

Specifies the BSSID for this BSS

The ID of the sound card

The path to repo in local machine

Pair of roots to synchronise.

Shell commands executed after the service's main process has exited.

If true, the user's shell will be set to users.defaultUserShell.

This required key uniquely identifies the job to launchd.

Use a different name as mailbox name

A list of host names and/or IP numbers used for accessing the host's ssh service

User name for RPC connections.

Tunnel type.

Text of the file.

This optional key specifies the service on the node to connect(2) or bind(2) to.

Container color.

Email address for account creation and correspondence from the CA

Extra lines to append to this profile's config.

Minimum remaining validity before renewal in days.

The path to the user's shell in initrd.

Group the user belongs to in initrd.

Environment variables and their value to send to the server.

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

The name of the database to store data in.

Optional slot number of the token that stores the certificate.

Root directory for requests.

Output scaling method.

Output scaling method.

When or how often the backup should run

Tooltip for the entry.

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

This optional key specifies the service on the node to connect(2) or bind(2) to.

Override the default port on which to listen for connections.

Keyset used for tunnel identity.

Group account under which this pool runs.

Command executed as the service's main process.

Packages added to the service's PATH environment variable

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Enables HTTP/3 over QUIC on the UDP port for TLS

Path of the source file or directory.

A system group name for this client instance.

A system group name for this client instance.

Absolute path to the certificate to load

Each attribute in this set specifies an option in the [Path] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Port number of Go Ethereum metrics service.

Listen address of Go Ethereum HTTP API.

Shell commands executed before the service's main process is started.

Specifies port number to connect on remote host.

Legacy RSA public key of the host in PEM format, including start and end markers

pppd configuration for this peer, see the pppd(8) man page.

Start of the range of subordinate group ids that user is allowed to use.

Start of the range of subordinate user ids that user is allowed to use.

Whether to enable enable the bind

Target port of container

Path to target relative to the vault's directory.

The data directory for bitcoind.

Source directories.

When or how often the backup should run

Output position

Output position

Server name to verify the hostname on the returned gRPC certificates

cgit configuration, see cgitrc(5)

Configuration of uhub

Command executed as the service's main process.

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

Units that want (i.e. depend on) this unit

Vlan tag to apply to interface

Openvswitch type to assign to interface

Keyset used for tunnel identity.

Local port of the encapsulation UDP socket.

List of configuration directives for this UPS.

Domain name

The full path to a file that contains the user's (clear text) password

Name of the homebridge

Port number of Go Ethereum Auth RPC API.

Whether to offload computation onto a CUDA compatible GPU.

FQIN of referenced Image when source is a file or directory archive.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Username used in the machine image

Location of bitcoind pid file.

Extra veth-pairs to be created for the container.

command that will be execute

Alias directory for requests.

Adds index directive.

User name

Path of the underlying encrypted block device.

The address of the local endpoint which the remote side should send packets to.

The packaged Helm chart

Name of the tun device

Basic Auth password file for a vhost

The specified name-string must be the generic SCSI device name of the autochanger that corresponds to the normal read/write Archive Device specified in the Device resource

The group of the wrapper program.

The group as which to run bitcoind.

The owner of the wrapper program.

Text of the file.

The database name.

This optional key specifies the protocol to be passed to socket(2)

Shell commands executed to stop the service.

Shell commands executed as the service's main process.

Absolute path to the certificate to load

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Each attribute in this set specifies an option in the [Slice] section of the unit

Each attribute in this set specifies an option in the [Files] section of this unit

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

The ID of your hook

Specifies a file containing the MAC addresses to deny if macAcl is set to "deny" or "radius"

Primary nickname.

Name of the class implementing the check

Text of the file.

Text of the file.

Let the user initiate specific instant commands

This optional key specifies the protocol to be passed to socket(2)

Source of the plugin package or path

The location of the Drupal files directory.

Keeps the specified running while this unit is running

Keeps the specified running while this unit is running

A program name specifying a Postfix service/daemon process

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Optional slot number of the token that stores the certificate.

The subnets which this tinc daemon will serve

The packaged Helm chart

Whether to enable the filesystem mount.

Whether to enable proxy for this bucket

An extra list of directories that is bound to the container.

Adds try_files directive.

PostgreSQL host for operating remotely.

Shell commands executed after the service's main process is started.

Shell commands executed when the service's main process is reloaded.

Service port

Environment variables to send from the local host to the server.

Path to a Containerfile which contains instructions to build the image.

Guaranteed minimum hops for ‹name› tunnels.

The font name, null to use system default.

Source of the custom plugin

When to run the job.

Image to pull.

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

Configure unit start rate limiting

The location of the Drupal site state directory.

Start the specified units when this unit is started.

The set of actions made available to application launchers.

Operate on preset bindings or user bindings

Whether to enable redraw prompt after command.

The user's username.

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

This optional key specifies that launchd should adjust its log mask temporarily to LOG_DEBUG while dealing with this job.

Controls how long a valid or invalid entry remains in the cache, in milliseconds.

Keeps the specified running while this unit is running

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Keeps the specified running while this unit is running

When you have multiple UPSes on your system, you usually need to turn them off in a certain order. upsdrvctl shuts down all the 0s, then the 1s, 2s, and so on

Name of the user to log in

Custom skills for Claude Code

Name shown in the website title and on the front page.

Set the date on which the user's account will no longer be accessible

Station MAC address -based authentication

This optional key is a variant of SockPathName

List of channels that should be grouped together into this group

Contents of the PAM service file.

Environment Variables to set in session.

The ‹name› package to use.

These lines go to the end of the location verbatim.

If the specified units are started at the same time as this unit, delay them until this unit has started.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Name of the runner group to add this runner to (defaults to the default runner group)

A short description of the user account, typically the user's full name

Name of the runner group to add this runner to (defaults to the default runner group)

Name of the voice model to use

Guaranteed minimum hops for ‹name› tunnels.

Extra configuration to be appended to awstats.${name}.conf.

Database name to connect to

Specifies a file containing the MAC addresses to allow if macAcl is set to "allow" or "radius"

The port on which the tub will listen

The port on which the Web server will listen

Output scale configuration

Output scale configuration

Path to world folder containing the dimension to render

List of servers for inclusion in stub and secondary zones.

Whether to operate in tun (IP) or tap (Ethernet) mode.

The IP interface to bind to. null means "all interfaces".

Path to file containing local secret key in binary or hexadecimal form.

This optional key is used to control whether your job is launched once at the time the job is loaded

The database engine name

The device as passed to mount

Name that will be shown to the user.

Aliases of that unit.

Aliases of that unit.

Which local IP to bind the UDP socket to.

Type of the file system

Each attribute in this set specifies an option in the [Timer] section of the unit

Set the execute bit

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Enable unlocking and mounting of encrypted ZFS home dataset at login.

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

This optional key specifies the user to run the job as

A name for the drive

Name of a file containing the spiped key

Aliases of that unit.

Whether to enable or disable lingering for this user

The address of the remote endpoint to forward traffic over.

The address on which to accept FastCGI requests.

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

Absolute path to the certificate to load

Adds a return directive, for e.g. redirections.

The external address where the host can be reached

The certificate profile to choose if the CA offers multiple profiles.

Extra lines to add to the tinc service configuration file

This optional key can be used to request that the datagram socket join a multicast group

The option to use this LUKS device with a GPG encrypted luks password by the GPG Smartcard

The name of the Stash Box

The kimai package to use.

Location of the backing encrypted device.

The tahoelafs package to use.

Path of the authentication file.

The port where the host can be reached

Settings for this site

The address of the local endpoint which the remote side should send packets to.

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Container icon.

Text of the file.

Text of the file.

The host to connect to.

The username to authenticate with.

The port to connect to.

GPG configuration.

The name of the module

Source ZFS dataset

Indicates whether this is an account for a “real” user

URL of the site's web app manifest.

Whether to enable Drupal web application.

Override the default database cache size in MiB.

Extra arguments to pass to the server commandline.

Whether to enable Coqui TTS server.

Name of the class implementing the check

Name shown in the server list.

GID of created file

UID of created file

Specifies the number of retries for failed notifies

If the specified units are started at the same time as this unit, delay this unit until they have started.

GVPE node name

Default window size for this interface.

Path to plugin file.

The user as which to run blockbook-frontend-‹name›.

Override the default port on which to listen for JSON-RPC connections.

Shell commands executed after the service's main process has exited.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Custom skills for Codex

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

Secondary nickname.

Indicates if the user is a system user or not

Container ID

Path of the source file.

As which user the backup should run.

Units that require (i.e. depend on and need to go down with) this unit

Units that require (i.e. depend on and need to go down with) this unit

If the specified units are started, then this unit is stopped and vice versa.

Additional global flags to pass to all lego commands.

This optional key is a variant of SockPathName

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Language of the environment

Whether to enable the wrapper.

Local UDP port.

The recommended idle time out (in seconds) to pass to the job

Custom name of this poller.

Whether to enable Enables the axport interface.

Default maximum packet size for this interface.

Commands to execute after the tmux-session is destroyed.

Packages added to the service's PATH environment variable

Set the execute bit

This optional key is a variant of SockPathName

Path of certificates (*.{crt,cert,key}) used to connect to registry.

The name of the user for this authelia instance.

The name the camera will show up as.

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Identifier of the UPS to monitor, in this form: <upsname>[@<hostname>[:<port>]] See upsmon.conf for details.

FastCGI parameters to override

The address of the proxy.

Refer to xrandr(1) for the documentation of the transform matrix.

Refer to xrandr(1) for the documentation of the transform matrix.

Errbot backend name.

Host to use for the destination dataset

This is the absolute path to the plugin executable.

Set maximum cache size

Extra configuration options to put at the end of this BSS's defintion in the hostapd.conf for the associated interface

Local address (and optionally device) to bind to using the given port.

Extra zone config to be appended at the end of the zone section.

Shell commands executed before the service's main process is started.

The theme.conf file of the theme

Container color.

Extra flags passed to the systemd-nspawn command

Keep this unit running as long as the listed units are running

Limit retry time for secondary zones

Whether to enable watching for repo.

Optional url of remote repository

The absolute path to the program to be wrapped.

Optional branch in remote repository

Whether to enable Bitcoin daemon.

Network device to bind to.

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

Path of the authentication file used to connect to registry.

Allows the container to create and setup tunnel interfaces by granting the NET_ADMIN capability and enabling access to /dev/net/tun.

Put the host-side of the veth-pair into the named bridge

Basic Auth protection for a vhost

Adds DirectoryIndex directive

Alias directory for requests

Common name attribute of allowed peer certificates

Common name attribute of allowed peer certificates

Type of the network.

Nickname in that network.

Additional flags to pass to lego run.

List of virtual hostnames from which to accept requests.

IP address of server running hans

The location for users to install Drupal themes.

Limit refresh time for secondary zones.

Limit on the number of simultaneous connections allowed.

The proxy host to use to connect to the server.

Mounts a set of tmpfs file systems into the container

List of address ranges allowed to query this zone

Configure unit start rate limiting

Configure unit start rate limiting

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

If set, root doesn't need to authenticate (e.g. for the useradd service).

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Determines how multiple values are joined to create the claim value

Guaranteed minimum hops for ‹name› tunnels.

Whether to show the message of the day.

The address of the remote endpoint to forward traffic over.

Location of blockbook-frontend-‹name› data directory.

The group as which to run blockbook-frontend-‹name›.

Location to serve cgit under.

Path of the source file.

Settings for this slot.

Address to which spiped should connect.

The labels to apply to the build.

Icon to display in file manager, menus, etc.

Shell commands executed as the service's main process.

Each attribute in this set specifies an option for a key in the plist. https://developer.apple.com/legacy/library/documentation/Darwin/Reference/ManPages/man5/launchd.plist.5.html

The user ID owning the volume inside the container.

Whether to enable Go Ethereum prometheus metrics.

RPC user information for JSON-RPC connections.

IP and port to which this redis instance acts as a slave.

Hostname alias(es).

Username for this DDNS provider.

The TCP port to accept connections

Each attribute in this set specifies an option in the [Slice] section of the unit

Whether to enable the HTTP/3 protocol

Order of this location block in relation to the others in the vhost

These lines go to the end of the location verbatim.

Guaranteed minimum hops for ‹name› tunnels.

Whether to add the setuid bit the wrapper program.

Whether to add the setgid bit the wrapper program.

If set, the OATH Toolkit will be used.

Keeps the specified running while this unit is running

Keeps the specified running while this unit is running

Indicates the priority over identical Subnets owned by different nodes

Whether to enable this .link unit

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Means "this application exists, but don't display it in the menus"

Listen for any Neighbor Solicitation messages on this interface, and respond to them according to a set of rules

add will additionally listen for TLS connections. only will disable TLS connections. force will redirect non-TLS traffic to the TLS connection.

This optional key specifies what value should be passed to umask(2) before running the job

The name of the group for this authelia instance.

User name for authentication.

IP of the Redis master

The JMAP configuration to use for this account.

The SMTP configuration to use for this account.

Whether the program runs in a terminal window.

The IMAP configuration to use for this account.

Options used to mount the file system

List of paths that should be mounted before this one

Whether to enable Go Ethereum Auth RPC API.

Shell commands executed after the service's main process is started.

Keeps the specified running while this unit is running

Shell commands executed when the service's main process is reloaded.

Filesystem type of Device. (used as -t in mount commands)

Similar to requires

If set to something else than symlink, the file is copied instead of symlinked, with the given file mode.

Number of power supplies that the UPS feeds on this system

ACME Directory Resource URI

Custom ordering of accounts and local folders in Thunderbird's folder pane

Kissattach parameters for this interface.

The drupal package to use.

Host pattern used by this conditional block

The username to store inside the credentials file.

Configure unit start rate limiting

The amount of time launchd waits before sending a SIGKILL signal

This optional key causes the job to be started if any one of the listed paths are modified.

The name of your network of sr.ht-based sites.

Description of the UPS.

If the file source is a directory, then this option determines whether the directory should be recursively linked to the target location

Whether to ask Let’s Encrypt to sign a certificate for this virtual host

Whether to enable debug logging for this certificate.

Shell commands executed when the instance is starting.

Whether to enable SFTP service.

Run the rsync process with an inhibition lock taken; see systemd-inhibit(1) for a list of possible operations.

Set the execute bit

Set the execute bit

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Whether this file should be generated

Path to the SSH key to use for authentication

Copy content of the image located at the mountpoint of the volume on first run.

Options for the Kimai PHP pool

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

The prefix length of the subnet

Name of the heat source.

The filename of the generated settings file

Address to bind on for UI connections

Whether the bridge interface should enable rstp.

Environment variables to set for the kernel.

The underlying network device on which the tunnel resides.

Enable logging to the system logger.

Whether to enable Redis server.

Number of worker instances to run

The path of the web root directory.

Path to the certificate authority certificate.

Owner's name.

The port on which the SFTP server will listen

Name of the snippet.

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

Check the host IP address in the known_hosts file.

If set, this file system will be mounted in the initial ramdisk

Automatically start this unit at the given date/time, which must be in the format described in systemd.time(7)

Arguments passed to date to create a timestamp suffix for the archive name.

The prompt that will be sent to the Gemini model when the command is executed

Authentication algorithm for this key.

Path of the source file.

The authentication method to use.

Run specified command or script after the tunnel device has been opened.

Maximum number of items to keep in slow log.

If the specified units are started, then this unit is stopped and vice versa.

The IPv4 address assigned to the host interface. (Not used when hostBridge is set.)

If the specified units are started, then this unit is stopped and vice versa.

DDNS server name.

Specifies the clear text password for the account

Units that require (i.e. depend on and need to go down with) this unit

Units that require (i.e. depend on and need to go down with) this unit

Each attribute in this set specifies an option in the [Timer] section of the unit

This optional key causes the job to be started every time a filesystem is mounted.

Path to the unix socket file on which to accept FastCGI requests.

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Print global archive statistics upon completion

Whether to give the container its own private virtual Ethernet interface

Name to match.

The specified name-string names the type of media supported by this device, for example, DLT7000

Path of the source file.

Event type.

Remote UDP port

Aliases of that unit.

Path of the source file.

The external IP address or hostname where the host can be reached.

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

Specifies if TLS should be enabled

Specifies if TLS should be enabled

TCP Port to bind on for UI connections

Path to the Public Key.

File or block device to export.

Interface and port to listen on to solve HTTP challenges in the form [INTERFACE]:PORT

If set, the OTPW system will be used (if ~/.otpw exists).

The znapzend backup plan to use for the source

Each attribute in this set specifies an option in the [Unit] section of the unit

Root path in filesystem of the smug project

The account type

The hotkey modifiers.

Maps kanidm groups to values for the claim.

A list of host names and/or IP numbers used for accessing the host's ssh service

Page or namespace to restrict

Name of the wrapper that is installed into PATH

Number of simultaneous ‹name› tunnels.

Configuration for the specific plugin, written to $XDG_CONFIG_HOME/streamlink/config. (linux) or Library/Application Support/streamlink/config. (darwin).

Whether to enable this PAM service.

The ax25-tools package to use.

Enable verbose output, default is to not be verbose.

Path or reference to the host key.

Extra configuration append to unit

Forcibly override any existing configuration for this extension.

Public address for p2p connections from peers (if TCP is used)

Whether to start the build on boot

Whether to pull the image on boot

The type of this worker

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Name of user to run the script under.

The name of a .desktop file in the directory specified in the 'package' option.

Shell commands to run after borg create

Whether to enable this plugin

Text of the file.

The type of log being collected.

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

The time-to-live/hoplimit of the connection to the remote tunnel endpoint.

Key / certificate pairs for the virtual host.

Key policy for zone signing keys

Key policy for key signing keys

Turns on or off the router flag for Neighbor Advertisement Messages.

The IPv6 address assigned to the host interface. (Not used when hostBridge is set.)

The group ID owning the volume inside the container.

Whether users can log in with passwords defined in /etc/shadow.

Specify the server verbosity level, options: debug, verbose, notice, warning.

Turns on the OCSP Must-Staple TLS extension

Whether to enable the desktop entry for this site.

Attribute set of NetBird client daemons, by default each one will:

1. be manageable using dedicated tooling:

• netbird-<name> script,
• NetBird - netbird-<name> graphical interface when appropriate (see ui.enable),

2. run as a netbird-<name>.service,
3. listen for incoming remote connections on the port 51820 (openFirewall by default),
4. manage the netbird-<name> wireguard interface,
5. use the /var/lib/netbird-/config.json configuration file,
6. override /var/lib/netbird-/config.json with values from /etc/netbird-/config.d/*.json,
7. (hardened) be locally manageable by netbird-<name> system group,

With following caveats:

• multiple daemons will interfere with each other's DNS resolution of netbird.cloud, but should remain fully operational otherwise

The bitcoind package to use.

Text of the file.

Profile path.

DEPRECATED, use driverOptions

The name of private PKCS #8 key file for this policy to be found in the baseDirectory, or the absolute path to the key file

Number of simultaneous ‹name› tunnels.

Name of the network interface managed by this client.

Name of the network interface managed by this client.