List of TCP ports on which incoming connections are accepted.

Whether to open the UDP port used for multicast peer discovery

A range of TCP ports on which incoming connections are accepted.

List of open UDP ports.

Interface-specific open ports.

addr:port to listen on for HTTPS clients

Range of open UDP ports.

List of IP addresses associated with this peer.

List of IP (v4 or v6) addresses with CIDR masks from which this peer is allowed to send incoming traffic and to which outgoing traffic for this peer is directed

Name of the interface.

List of IP (v4 or v6) addresses with CIDR masks from which this peer is allowed to send incoming traffic and to which outgoing traffic for this peer is directed

Determines whether to add allowed IPs as routes or not.

Name of the UKI

Name of the interface

The family name of the font within the package.

The name of the user account

The name of the user account

Name used to derive peer unit name.

The name of the theme within the package.

The name of the group

The group's name

The family name of the font within the package.

The family name of the font within the package.

The family name of the font within the package.

Source ports to allow in the zone.

The name of the user account

The name of the system used in the system.build.toplevel derivation

Whether this interface should be configured with DHCP

Ports to forward in the zone.

The name of the theme within the package.

The name of the theme within the package.

The name of the theme within the package.

The name of the icon theme within the package.

MTU size for packets leaving the interface

The name of the group

Vlan tag to apply to interface

Openvswitch type to assign to interface

Destination IP address.

The interfaces to bond together

List of DNS servers for this interface.

The IP addresses of DNS servers to configure.

MTU to set for this interface, automatically set if not specified

Commands called at the start of the interface setup.

List of commands to run before interface setup.

16-bit port for listening

The type of interface to create

The type of the interface

Commands called after the interface setup.

Source ports for the service.

List of commands to run after interface setup.

Command called before the interface is taken down.

List of commands to run before interface shutdown.

Peers linked to the interface.

If not specified, the MTU is automatically determined from the endpoint addresses or the system default route, which is usually a sane choice

List of peers associated with this interface.

Command called after the interface is taken down.

List of commands to run after interface shutdown

Whether to enable wol on this interface.

The physical network interfaces connected by the bridge.

List of extra IPv6 static routes that will be assigned to the interface.

The name of this nylon instance.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Controls the routing table to which routes are added

IPv4 address of the next hop.

IPv6 address of the next hop.

The name of the icon theme within the package.

The name of the icon theme within the package.

The name of the icon theme within the package.

The kernel routing table to add this interface's associated routes to

MAC address of the interface

Whether this interface is virtual and should be created by tunctl

Table name.

Port to listen on, randomly selected if not specified.

The IP addresses of the interface.

List of IP addresses for this interface.

Turn on proxy_arp for this device

The Wake-on-LAN policy to set for the device

Name of the zone.

Name of the PPP peer.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The public key for this peer.

List of extra IPv4 static routes that will be assigned to the interface.

If you want consistency between the two implementations, set the scope of the route manually with networking.interfaces.eth0.ipv4.routes = [{ options.scope = "global"; }] for example.

The base64 public key to the peer.

In case of a virtual device, the user who owns it. null will not set owner, allowing access to any user.

The name of the cursor theme within the package.

wg-quick .conf file, describing the interface

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

16-bit port for listening

Type of the route

Type of the route

Base64 private key generated by wg genkey

Path to file containing this interface's private key.

The IP addresses of the interface.

Private key file as generated by wg genkey.

Specific name of the application.

Interfaces to bind.

The physical network interfaces connected by the vSwitch.

Extra options to append to the interface section

The type of the interface

Name of the image

IPv4 address of the network.

IPv6 address of the network.

Peers linked to the interface.

When IPv6 is enabled with SLAAC, this option controls the use of temporary address (aka privacy extensions) on this interface

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Name of the action.

Whether to bring up this interface automatically during boot.

Whether to bring up this interface automatically during boot.

IP and port to connect to this peer at.

List of IPv6 addresses that will be statically assigned to the interface.

List of IPv4 addresses that will be statically assigned to the interface.

Set the maximum transmission unit in bytes for the wireguard interface

Commands called at the start of the interface setup.

Endpoint IP or hostname of the peer, followed by a colon, and then a port number of the peer.

Commands called at the end of the interface setup.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Set the metric of routes related to this Wireguard interface.

Mark all wireguard packets originating from this interface with the given firewall mark

Other route options

Other route options

The kernel routing table to add this interface's associated routes to

Subnet mask of the network, specified as the number of bits in the prefix (24).

Subnet mask of the network, specified as the number of bits in the prefix (64).

The name of the cursor theme within the package.

The name of the cursor theme within the package.

The name of the cursor theme within the package.

Common name attribute of allowed peer certificates

Common name attribute of allowed peer certificates

Etcd unique node name.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The endpoint name.

Username to authenticate with.

The base64 public key of the peer.

The endpoint name.

Base64 private key generated by wg genkey

Optional, path to file containing the pre-shared key for this peer.

Private key file as generated by wg genkey.

Name of the control, as it appears in alsamixer

Allowed client IP ranges are evaluated first, defaults to ARIN IPv4 private ranges: [ "192.168.0.0/16" "127.0.0.0/8" "172.16.0.0/12" "10.0.0.0/8" ]

Commands called before shutting down the interface.

Automatically generate a private key with wg genkey, at the privateKeyFile location.

Endpoint IP or hostname of the peer, followed by a colon, and then a port number of the peer

Extra options to append to the interface section

The name of this systemd unit, including its extension

Commands called after shutting down the interface.

Base64 preshared key generated by wg genpsk

IPv4 address of the interface

IPv6 address of the interface

Name of the PAM service.

File pointing to preshared key as generated by wg genpsk

Whether this VPN connection should be started automatically.

Username for JSON-RPC connections.

The name of the cask to install.

The name of the formula to install.

The underlying network device on which the tunnel resides.

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

The name of this systemd unit, including its extension

Name of the worker

The time-to-live of the connection to the remote tunnel endpoint.

Gateway server to connect to.

The vlan identifier

Subnet mask of the interface, specified as the number of bits in the prefix (24).

Subnet mask of the interface, specified as the number of bits in the prefix (64).

The cursor name within the package.

Private key to authenticate with.

Name i2pd appears in UPnP forwardings list.

Interface name

Protocol to use.

The underlying network device on which the tunnel resides.

The time-to-live of the connection to the remote tunnel endpoint.

Name of modem device, will be searched for in /dev.

The unique name for THIS channel in THIS group

The endpoint name.

The endpoint name.

The family name of the font within the package.

Specifies the Name of the Storage daemon.

The name of the node which is used as an identifier when communicating with the remote nodes in the mesh

File containing the password to authenticate with

The name of this systemd unit, including its extension

Profile name.

Profile name

The profile's name.

The pre-existing network namespace in which the WireGuard interface is created, and which retains the socket even if the interface is moved via interfaceNamespace

Automatically generate a private key with wg genkey, at the privateKeyFile location.

The name of the network interface to match against.

Unique identifier of the account

Extra config to be appended to the interface config

The address of the local endpoint which the remote side should send packets to.

Local port of the encapsulation UDP socket.

Base64 preshared key generated by wg genpsk

The endpoint name.

The endpoint name.

File pointing to preshared key as generated by wg genpsk

Name of the redis server

The friendly name you give to the network device

The friendly name you give to the network device

Database name.

The language to use for personal names.

Name for the device

Mail "from" name.

This library's name.

Name of the runner to configure

Name of the runner to configure

Network device to bind to.

Interval in seconds to send keepalive packets

The name of this group for this account

The director name used by the system administrator

The client name that must be used by the Director when connecting

When clone_target is unspecified, this is the name of a formula repository to tap from GitHub using HTTPS

The user's UID.

The address of the local endpoint which the remote side should send packets to.

A system user name for this client instance.

A system user name for this client instance.

The address of the remote endpoint to forward traffic over.

Profile name.

The name of the Helm chart

The theme name.

The name of the host

Database name.

Local address (and optionally device) to bind to using the given port.

The user's primary group.

The unique agent name.

Keyboard name.

The name of the theme within the package.

Akkoma frontend name.

Text of the file

The pre-existing network namespace the WireGuard interface is moved to

Certificate to authenticate with.

DEPRECATED, use driverOptions

Agent name, usually same as the hostname

Agent name, usually the same as the hostname.

The name of the plugin.

The address of the remote endpoint to forward traffic over.

This is optional and is by default off, because most users will not need it

The name of the service to run

Mail "reply-to" name.

The name of the Helm chart

Unique identifier of the account

Unique identifier of the contact account

Font name, as used by fontconfig.

Name of the font to use for regreet.

The name of the agent as seen in the buildkite dashboard.

The name of the agent as seen in the buildkite dashboard.

Whether the bridge interface should enable rstp.

The underlying network device on which the tunnel resides.

Name of the site.

The name of the instance.

Name of the redis server

The name of the plugin.

The endpoint name.

Name of the tmux window;

The time-to-live/hoplimit of the connection to the remote tunnel endpoint.

The user's home directory.

Name of the GNOME Shell theme.

Name is referenced in logs

Local address to bind to

Text of the file

The name to return in service discovery responses for the MUC service itself

Periodically refresh the endpoint hostname or address for all peers

Name of the theme to use for regreet.

Definitions of SIIT instances of Jool

Container name, e.g., shopping.

The endpoint name.

Name of the rule.

Name of the plugin.

Name of the plugin.

The group's GID.

Unique identifier of the calendar

Name of directory from which to import ZFS device, this is passed to zpool import as the value of the -d option

The account UID

Whether the tunnel routes layer 2 (tap) or layer 3 (tun) traffic.

Name is used as a suffix for the service name, user, and group

Name of the iSCSI initiator to boot from

Name of the machine when registering it at the central or local api.

Name of the existing database.

Name of the Docker context

The mode of the macvlan device.

The user's home directory mode in numeric format

The name of an explicit dtb to be loaded, relative to the dtb base

DEPRECATED, use driverOptions

Optional configuration string for this interface.

The serial port to which your UPS is connected. /dev/ttyS0 is usually the first port on Linux boxes, for example.

The name of the plugin.

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

Profile name.

The address of the local endpoint which the remote side should send packets to.

Definitions of NAT64 instances of Jool

The logical name of the Galera cluster

This is optional and is by default off, because most users will not need it

The name of the service to run

Container name, e.g., shopping.

Periodically re-execute the wg utility every this many seconds in order to let WireGuard notice DNS / hostname changes

Name of the user to ensure.

The name of the server

The user's primary group.

The name of the mailbox.

Path to target file relative to HOME.

The database name

The prefix used for embedding IPv4 into IPv6 addresses

The endpoint name.

Database name.

Database name.

Name of the icon theme to use for regreet.

The address of the remote endpoint to forward traffic over.

Name of the bridge interface that wpa_supplicant should listen at.

Name of the beat

Name of the wiki.

Name of the server.

A list of glob patterns, indicating which paths to expose to the sandbox

Text of the file

Text of the file

Database name.

Name of this iscsi initiator

The name of this gateway as shown in firezone

The name of the cookie that the oauth_proxy creates.

Database name.

Whether this file should be generated

When the dynamic endpoint refresh that is configured via dynamicEndpointRefreshSeconds exits (likely due to a failure), restart that service after this many seconds

Server name to be used for this virtual host

Name of ICMP pinging job.

Database name, only used when the databse is created locally.

Name of the profile.

The name of this authentication provider

The name of the watcher

Name of the redis server

The name of the underlying hardware WLAN device as assigned by udev.

The endpoint name.

Database name.

Database name.

Database name.

The group GID

The advertised name for zeroconf discovery.

Path to target file relative to xdg.dataHome.

Name associated with the build

The name of the immich database.

Container name, e.g., shopping.

This primary server will notify all given secondary servers about zone changes

Whether the target path should be unconditionally replaced by the managed file source

Whether to enable ‹name›.

Short description for the zone.

Rich rules for the zone.

Ports to allow in the zone.

Database name

Options for the bonding driver

The name of the database to use for Wakapi.

Protocol number of the encapsulated packets

Drive name without the full path.

The name of the host in the network as well as the configuration for that host

Unique identifier of the boxxy rule

Database name.

Whether this file should be generated

The name of this actor

The name of this group

The name of an existing user account under which the rsync process should run.

The interface the vlan will transmit packets through.

Name of the service.

Name of symlink

The user's home directory.

The user's home directory mode in numeric format

Specify the program to run to talk to this UPS. apcsmart, bestups, and sec are some examples.

Name of the cursor theme to use for regreet.

name of the virtualhost

The name of this client as shown in firezone

The name of the device.

The name of the device.

This feed account's name.

Program to execute, possibly with arguments.

The framework to use for attaching Jool's translation to the exist kernel packet processing rules

The flake reference from is rewritten to.

The flake reference to which from> is to be rewritten.

Text of the file

Adapter name that is used in the radicle-ci-broker configuration

The name of the hook

Enable this table.

Table family.

Each attribute of this option defines a systemd service that runs hans

Database name.

Database name.

The name identifying the runner instance towards the Gitea/Forgejo instance.

Path to target file relative to xdg.cacheHome.

Which requiredSystemFeatures should trigger relaxation of the sandbox

This profile's name.

Whether the target path should be unconditionally replaced by the managed file source

Action for packets that doesn't match any rules.

Icon to display in file manager, menus, etc.

PostgreSQL database name

Source port of the external interface on host

DEPRECATED, use driverOptions

List of forwarded ports from host to container

The account UID

The name of this relay group

The name of an existing user group under which the rsync process should run.

Server name.

Name of this overlay

Name of the plugin linked to $XDG_CONFIG_HOME/ranger/plugins/

The name of this gateway as shown in firezone

Path to target file relative to xdg.stateHome.

The framework to use for attaching Jool's translation to the exist kernel packet processing rules

Name of symlink

Text of this systemd unit.

Database name.

Either the raw pre-shared key in hexadecimal format or the name of the secret (as defined inside networking.wireless.secretsFile and prefixed with ext:) containing the network pre-shared key.

Whether to make the user account hidden.

Whether this file should be generated

Whether this file should be generated

The name of this server.

Name of the existing database (has no effect if type is "sqlite").

Firewall rules for inbound traffic.

Lines which would be added inside ups.conf for handling this UPS.

The user's primary group.

The flake reference to be rewritten.

The flake reference to be rewritten.

The table content.

Version of the zone.

ICMP types to block in the zone.

Name of the local AutoSSH session

Name of the local AutoSSH session

Display name of the radio station.

This is the target address is to match against

Path of the source file or directory

The name of this systemd unit, including its extension

The user's home directory

Name of symlink

This optional key can be used to request that the service be registered with the mDNSResponder(8)

Specifies the real host name to log into.

MeshID of interface with type mesh.

The name of this gateway group

Domain to fetch certificate for (defaults to the entry name).

Name of symlink

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

When set to something distinct to null NSD is able to collect statistics per zone

The name of this resource

The type of the WLAN interface

Whether the target path should be unconditionally replaced by the managed file source

Whether the target path should be unconditionally replaced by the managed file source

The name of the dawarich database.

MySQL database name.

Database name for FreshRSS.

Source addresses, address ranges, MAC addresses or ipsets to bind.

A MAC address.

Name of the satellite.

Force a specific wpa_supplicant driver.

Flags for interface of type monitor.

Alias of home.pointerCursor.name.

Text of this systemd unit.

OpenFlow rules to insert into the Open vSwitch

Bind port for ‹name› endpoint.

Each attribute of this option defines a systemd service that runs iodine

Name of the snippet.

The name of the wrapper program

This option allows you to define vlan devices that tag packets on top of a physical interface

Path to target file relative to xdg.configHome.

Firewall rules for outbound traffic.

If set, this network block is used only when associating with the AP using the configured BSSID.

Path of the source file or directory

Create the home directory when creating the user.

Name of the modifier.

Add the necessary actions for a upsmon process to work

Name of symlink (relative to /etc)

The name of the file or block device that should be used as header for the encrypted device.

Node name

The group GID

Name of the game as it will appear in the game listing.

Bind port for ‹name› endpoint.

Shell commands to run when file has changed between generations

See torrc manual.

User to run the cgit service as.

Name of the beat

The account name

Whether to enable 4-address mode with type managed.

The name of the file (can be a raw device or a partition) that should be used as the decryption key for the encrypted device

MAC address to use for the device

Ports of the service.

Command line arguments to add when executing wpa_supplicant.

The path to the user's shell

The user-friendly name for the system, set in System Preferences > Sharing > Computer Name

Set this to true if the SSID of the network is hidden.

This option allows you to define bond devices that aggregate multiple, underlying networking interfaces together

The interface the macvlan will transmit packets through.

The name of services's user

Services to allow in the zone.

Short description for the service.

The flake reference from is rewritten to

If set to false, the user account will not be created

Start the specified units when this unit is started.

The network's pre-shared key in plaintext defaulting to being a network without any authentication.

Override for package "short name", used for generating configuration

The specified name-string gives the system file name of the storage device managed by this storage daemon

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Whether this file should be generated

Database name.

Database name.

The flake input from is rewritten to.

The flake input from is rewritten to.

The flake input to which from> is to be rewritten.

An ipset.

Whether to enable intra-zone forwarding

Attributes for user's entry in pam_mount.conf.xml

The system domain name

The user's auxiliary groups.

You could use this field to override the network's ssid

The fully qualified domain name (FQDN) of this host

The fully qualified domain name (FQDN) of this host

The protocol specifier for port forwarding between host and container

This optional key specifies the node to connect(2) or bind(2) to.

TLS options for virtual host

Creating multiple WLAN interfaces on top of one physical WLAN device (NIC)

A short description of the user account, typically the user's full name

Set the log-level

Profile name

Path to encrypted luks device that contains the user's home directory.

APIs to enable over WebSocket

This optional key tells launchctl what type of socket to create

Shell commands to run when file has changed between generations

Rename nodes to different name.

Whether to enable this mount.

Database name.

Database name.

Version of OpenFlow protocol to use when communicating with the switch internally (e.g. with openFlowRules).

Where to mount this dataset.

S3 bucket name to use for HTTP-01 based challenges

Whether to enable automatic mounting.

Discourse database name.

Name of this virtual host

The group's members.

Format: [AXFR|UDP] <ip-address> <key-name | NOKEY>

Use this option to configure advanced authentication methods like EAP

External wpa_supplicant.conf configuration file

Path of the source file or directory

Path of the source file or directory

Whether the target path should be unconditionally replaced by the managed file source

Port number Go Ethereum will be listening on, both TCP and UDP.

If the specified units are started at the same time as this unit, delay this unit until they have started.

This optional key implies SockFamily is set to "Unix"

The flake reference to be rewritten

Group to run the cgit service as.

Configuration options for wpa_supplicant.conf

The set of system-wide known SSH hosts

Name of the PCM card to control (slave).

Whether to enable Instructs the hook to mount the symlink targets as well, when any of the paths contain symlinks

Path to the directory storing the hooks

Path to the directory storing the hooks

Target node name on the IBM TSM server.

Name for where mail coming from the remote (far) mail server will end up locally

Start the specified units when this unit is started.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Whether to create the home directory and ensure ownership as well as permissions to match the user.

Commands to manipulate the Open vSwitch database

Name of the symlink (relative to /var/lib/rancher/k3s/server/manifests)

Whether to enable ‹name›.

ACME options for virtual host.

HTTP options for virtual host

Database name.

The nickname of this Tahoe node.

Port number of Go Ethereum HTTP API.

Protocols to allow in the zone.

Allow the user to do certain things with upsd

The name of the first admin user.

Common name attribute of allowed peer certificates

Common name attribute of allowed peer certificates

This optional key specifies the mode of the socket

A path which will be scanned for repositories.

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

Extra configuration lines to add to THIS channel's configuration.

The plugin.

Whether to enable ‹name›.

VirtualHost to serve cgit on, defaults to the attribute name.

Name of the remote read config, which if specified must be unique among remote read configs

DNS full-qualified domain name of a database server

DNS full-qualified domain name of a database server

What port to listen for client requests, default is 1080.

Replace any existing runner with the same name

Replace any existing runner with the same name

The name of the database to create.

Version of the service.

Helpers for the service.

Common name attribute of allowed peer certificates

Extra configuration lines appended to the network block

The type of the device.

How to display the tag when focused.

VLAN to which the network interface is connected.

Start the specified units when this unit is started.

Start the specified units when this unit is started.

This optional key can be used to request that the service be registered with the mDNSResponder(8)

Generic name of the application.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Target port of container

The name of this client as shown in firezone

The local hostname, or local network name, is displayed beneath the computer's name at the top of the Sharing preferences pane

A local file path specifying the location of the mount point.

Proxy account name, without the possibility to include domain name ('at' sign is interpreted literally).

SSID to be used in IEEE 802.11 management frames.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Shell commands to run when file has changed between generations

Shell commands to run when file has changed between generations

cgit repository settings, see cgitrc(5)

Either the fully qualified domain name (FQDN), or just the host name if it does not exists

Username

Path to a certificate signing request to apply when fetching the certificate.

This optional key can be used to request that the service be registered with the mDNSResponder(8)

Real name

Either the fully qualified domain name (FQDN), or just the host name if it does not exist

Name of the remote write config, which if specified must be unique among remote write configs

Name of the model to download and use for speech synthesis

Override the default TLS port for this virtual host.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Subordinate group ids that user is allowed to use

Subordinate user ids that user is allowed to use

Specify the bind mode that the bind is used in

Name of Google storage bucket

Database name.

Name of the user to ensure.

Name of the user to ensure.

Database name.

Database name.

Name of database.

Whether to enable cgit.

Listed primary servers are allowed to notify this secondary server

Custom skills for Claude Code

Name of the symlink (relative to /var/lib/rancher/rke2/server/manifests)

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Name of the kernel module that provides the card.

The name of the Grafana database.

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Name of the PostgreSQL database.

The name of the Linkwarden database.

ID of the user in initrd.

This option allows you to define Ethernet bridge devices that connect physical networks together

Packages added to the service's PATH environment variable

Interface name

Name that will be shown.

Priority for outbound traffic

Name of modem configuration file, will be searched for in config in the spooling area directory.

This optional key can be used to request that the service be registered with the mDNSResponder(8)

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

The user names of the group members, added to the /etc/group file.

If the specified units are started at the same time as this unit, delay this unit until they have started.

The user's shell

Path of the source file or directory

Start the specified units when this unit is started.

Start the specified units when this unit is started.

Blockchain garbage collection mode.

Whether to enable hub instance.

Local Mattermost database name.

Members of this group can access the control socket for this interface.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Database name to use when connecting to an external or manually provisioned database; has no effect when a local database is automatically provisioned

The type of the desktop entry.

Path to the private key to the matching certificate signing request.

Custom skills for Codex

Instead of synchronizing just the mailboxes that match the farPattern, use it as a prefix which is not matched against the patterns, and is not affected by mailbox list overrides.

Automatically allocate subordinate user and group ids for this user

Bind address for ‹name› endpoint.

Name displayed when sending mails.

Set the host address for this virtual host

Interface to use when method is iface.

Whether to join this channel on connect.

Name of symlink

Count of subordinate user ids

Count of subordinate group ids

Whether the SSID is to be interpreted using UTF-8 encoding.

Aliases of that unit.

Aliases of that unit.

Name of the homebridge UI platform

Whether the luksOpen will be attempted before LVM scan or after it.

Override the default HTTP port for this virtual host.

The name of the host in the network as well as the configuration for that host

The path to the user's shell

Services to include for the service.

If set to false, the user account will not be created

Whether to enable Go Ethereum Node.

Additional arguments passed to Go Ethereum.

This optional key specifies the service on the node to connect(2) or bind(2) to.

Name of the MySQL database that holds EPGStation's data.

Name of the beat

The relationship with upsd

Name of consistency check to run.

Name of the PCM device to control (slave).

Set name to shared memory zone.

Whether to enable masquerading in the zone.

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

Program to execute, possibly with arguments.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Bind address for ‹name› endpoint.

Name to display

Style to use for Qt5/Qt6 applications

Local secret key in hexadecimal form.

Group running the ACME client.

Whether to enable remove bind.

The user's auxiliary groups.

Verify peer certificate

Verify peer certificate

Attributes for user's entry in pam_mount.conf.xml

Backup type as described in: https://pgbackrest.org/command.html#command-backup/category-command/option-type

Automatically assign an IP address to the network interface using the same scheme as virtualisation.vlans.

Whether the configuration file at configFile.path should be written to by wpa_supplicant.

List of forwarded ports from host to container

The node name of the device

The node name of the device

Packages added to the service's PATH environment variable

IMAP4 patterns for which mailboxes on the remote mail server to sync

A list of device nodes to which the containers has access to.

Destination port when using UDP encapsulation.

The object to make available inside the initrd.

Instance name.

Configures the type of encapsulation.

Path to encrypted luks device that contains the user's home directory.

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Root directory for requests.

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Whether to enable TLS support.

A program name specifying a Postfix service/daemon process

Username from upsd.users for accessing this UPS

Source port of the external interface on host

Name for the filter.

Priority for inbound traffic

Name of the printer / printer queue

The actual zone data

Shell commands to run when file has changed between generations

Username used to connect to registry.

This optional key specifies the node to connect(2) or bind(2) to.

static: Immediately answer any Neighbor Solicitation Messages (if they match the IP rule). iface: Forward the Neighbor Solicitation Message through the specified interface and only respond if a matching Neighbor Advertisement Message is received. auto: Same as iface, but instead of manually specifying the outgoing interface, check for a matching route in /proc/net/ipv6_route.

Whether to enable DNSSEC.

Shell commands executed as the service's main process.

Icon to display in file manager, menus, etc.

Output DPI configuration.

Output DPI configuration.

Aliases of that unit.

Aliases of that unit.

Name of symlink

Start the specified units when this unit is started.

Start the specified units when this unit is started.

How to display the tag when unfocused

Change current mode after bind is executed

This optional key specifies the protocol to be passed to socket(2)

Zone file resource records contain columns of data, separated by whitespace, that define the record.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

This optional key tells launchctl what type of socket to create

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Whether the from reference needs to match exactly

Whether the from reference needs to match exactly

Whether the from reference needs to match exactly

Output resolution.

Output framerate.

Output resolution.

Output framerate.

ID of the group in initrd.

This optional key specifies the node to connect(2) or bind(2) to.

An IP address or a network IP address with a mask for IPv4 or IPv6

Whether to create the home directory and ensure ownership as well as permissions to match the user.

The list of authentication protocols accepted by this network

The server username of this account

Whether to enable Go Ethereum HTTP API.

Path of the source file.

Adds index directive.

Alias directory for requests.

How to name the created archives

Name of this virtual host

Whether to set the machine hostname based on the information received from the DHCP server.

This can be set as a global variable above your first UPS definition and it can also be set in a UPS section

Protocols for the service.

This optional key tells launchctl what type of socket to create

A system group name for this client instance.

A system group name for this client instance.

This optional key implies SockFamily is set to "Unix"

Output video display controller.

Output video display controller.

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Define a launchd job

The set of packages that should be made available to the user

The set of packages that should be made availabe to the user

Directory for the ACME challenge, which is public

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

Name of the homebridge

If true, the user's shell will be set to users.defaultUserShell.

Whether to invert the icmp block handling

Adds DirectoryIndex directive

Alias directory for requests

The cgit package to use.

The geth package to use.

Uhub plugin configuration.

The device to update.

Path to device node

Use a different name as mailbox name

Shell commands executed as the service's main process.

The domain name to collect stats for.

Enables nylon as a running service upon activation.

Adds try_files directive.

Start URL of the site.

Aliases of that unit.

Aliases of that unit.

Isolate traffic between stations (clients) and prevent them from communicating with each other.

Marks the server as a backup server

Start the specified units when this unit is started.

Start the specified units when this unit is started.

The database name.

The name of the database to store data in.

Levels (minimum value for logged events): 0 = verbose debugging 1 = debugging 2 = informational messages 3 = notification 4 = warning

This optional key implies SockFamily is set to "Unix"

Description for the zone.

The path to the user's shell in initrd.

Group the user belongs to in initrd.

Packages added to the service's PATH environment variable

Vertical scaling factor/pixels.

Horizontal scaling factor/pixels.

Horizontal scaling factor/pixels.

Vertical scaling factor/pixels.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

DNS full-qualified domain name of a database server

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Optional PKCS#11 module name.

This optional key specifies the node to connect(2) or bind(2) to.

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Keeps the specified running while this unit is running

Name of symlink

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Whether to enable this PPP peer.

Port to bind the TTS server to.

User account under which this pool runs.

Whether to enable Operate silently.

This optional key specifies the mode of the socket

Output gamma configuration.

Output gamma configuration.

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

Configuration for MPD

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Enables HTTP/3 over QUIC on the UDP port for TLS

Specify the controller targets

A system group name for this client instance.

A system group name for this client instance.

By default, all networks will get same priority group (0)

Attribute set of NetBird client daemons, by default each one will:

1. be manageable using dedicated tooling:

• netbird-<name> script,
• NetBird - netbird-<name> graphical interface when appropriate (see ui.enable),

2. run as a netbird-<name>.service,
3. listen for incoming remote connections on the port 51820 (openFirewall by default),
4. manage the netbird-<name> wireguard interface,
5. use the /var/lib/netbird-/config.json configuration file,
6. override /var/lib/netbird-/config.json with values from /etc/netbird-/config.d/*.json,
7. (hardened) be locally manageable by netbird-<name> system group,

With following caveats:

• multiple daemons will interfere with each other's DNS resolution of netbird.cloud, but should remain fully operational otherwise

Start of the range of subordinate user ids that user is allowed to use.

Start of the range of subordinate group ids that user is allowed to use.

Label of the unlocked encrypted device

Local name of the IBM TSM server, must not contain space or more than 64 chars.

This optional key tells launchctl what type of socket to create

Text of the file.

Text of the file.

The hotkey.

Name of symlink

Server name to verify the hostname on the returned gRPC certificates

Remote public key in hexadecimal form.

Master=false means slave server

Addresses who may request zone transfers.

Limit retry time for secondary zones.

Whether to enable this RAUC slot.

Password HMAC-SHA-256 for JSON-RPC connections

Label to use for the name of the config file.

Specifies the MAC addresses to deny if macAcl is set to "deny" or "radius"

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

This optional key specifies what nice(3) value should be applied to the daemon.

The MIME type(s) supported by this application.

Name shown in the website title and on the front page.

This optional key specifies the mode of the socket

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

For an IPv6-based tunnel, the maximum number of nested encapsulation to allow. 0 means no nesting, "none" unlimited.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Members of this group can control wpa_supplicant.

Location of the host path to be mounted.

Optional PKCS#11 module name.

Database name to connect to

Path to the file which contains the actual base64 encoded key

Subordinate user ids that user is allowed to use

Subordinate group ids that user is allowed to use

Specifies the user to log in as.

Path of the underlying encrypted block device.

Label for this destination

Adds a return directive, for e.g. redirections.

User name of file owner

The database engine name

Environment variables used for this PHP-FPM pool.

Name of the tun device

Specify the log file name

This optional key implies SockFamily is set to "Unix"

Tunnel type.

Aliases of that unit.

Aliases of that unit.

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Keeps the specified running while this unit is running

Key type to use for private keys

Command executed as the service's main process.

A program name specifying a Postfix service/daemon process

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Path] section of the unit

This optional key is a variant of SockPathName

Each attribute of this option defines a systemd service that runs an OpenVPN instance

The user names of the group members, added to the /etc/group file.

Whether to enable the output.

Output rotate configuration.

Whether to enable the output.

Output rotate configuration.

Adds DirectoryIndex directive

Alias directory for requests

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

When or how often the backup should run

Container icon.

The ID of the sound card

Pair of roots to synchronise.

Guaranteed minimum hops for ‹name› tunnels.

The network to connect to

Specifies the MAC addresses to allow if macAcl is set to "allow" or "radius"

This required key uniquely identifies the job to launchd.

Commands to run after new certificates go live

Source port when using UDP encapsulation

Tunnel type.

Text of the file.

GVPE node name

Automatically allocate subordinate user and group ids for this user

Count of subordinate group ids

Count of subordinate user ids

Shell commands executed as the service's main process.

This optional key specifies the mode of the socket

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

Minimum remaining validity before renewal in days.

Environment variables and their value to send to the server.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of host names and/or IP numbers used for accessing the host's ssh service

An attribute set of option values passed to rclone mount

Email address for account creation and correspondence from the CA

Interpolation method to be used for scaling the output.

These lines go to the end of cgitrc verbatim.

Shell commands executed to stop the service.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Name of the voice model to use

Keyset used for tunnel identity.

Group account under which this pool runs.

Guaranteed minimum hops for ‹name› tunnels.

Select the encapsulation type:

• 6in4: the IPv6 packets are encapsulated using the 6in4 protocol (formerly known as SIT, RFC 4213);

• gue: the IPv6 packets are encapsulated in UDP packets using the Generic UDP Encapsulation (GUE) scheme;

• foo: the IPv6 packets are encapsulated in UDP packets using the Foo over UDP (FOU) scheme.

Container ID

Enable logging, default is no logging.

The port on which the tub will listen

The port on which the Web server will listen

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Optional PKCS#11 module name.

The name of the column that contains a unix login name.

Domain name

Port number of Go Ethereum metrics service.

Listen address of Go Ethereum HTTP API.

Specifies port number to connect on remote host.

Directory of sockets for controlling wpa_supplicant.

pppd configuration for this peer, see the pppd(8) man page.

Whether to enable enable the bind

The specified name-string must be the generic SCSI device name of the autochanger that corresponds to the normal read/write Archive Device specified in the Device resource

Each attribute in this set specifies an option in the [Path] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Source directories.

Group name of file owner

Disable running fsck on this filesystem.

Command executed as the service's main process.

Units that want (i.e. depend on) this unit

Location of hardware kiss tnc for this interface.

Set the date on which the user's account will no longer be accessible

This option allows you to define Open vSwitches that connect physical networks together

User name

Container color.

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Configuration for this host

Name of the class implementing the check

Keyset used for tunnel identity.

List of configuration directives for this UPS.

The name of the Stash Box

Start the specified units when this unit is started.

This optional key specifies the service on the node to connect(2) or bind(2) to.

The packaged Helm chart

The option to use this LUKS device with a GPG encrypted luks password by the GPG Smartcard

Units that want (i.e. depend on) this unit

A short description of the user account, typically the user's full name

Port number of Go Ethereum Auth RPC API.

Whether to offload computation onto a CUDA compatible GPU.

FQIN of referenced Image when source is a file or directory archive.

Basic Auth protection for a vhost

Select the encapsulation type:

• ipip to create an IPv4 within IPv4 tunnel (RFC 2003).

• 4in6 to create a 4in6 tunnel (RFC 2473);

• ip6ip6 to create an IPv6 within IPv6 tunnel (RFC 2473);

The full path to a file that contains the user's (clear text) password

Keeps the specified running while this unit is running

Keeps the specified running while this unit is running

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

command that will be execute

Name shown in the server list.

Root directory for requests.

Output scaling method.

Output scaling method.

Text of the file.

Determine whether the mounted path will be accessed in read-only mode.

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Shell commands executed to stop the service.

This optional key specifies the service on the node to connect(2) or bind(2) to.

Aliases of that unit.

Aliases of that unit.

The ID of your hook

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Source of the custom plugin

Container icon.

Path of the source file or directory.

The font name, null to use system default.

Supported versions to enable on this switch.

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

Dataset name to send snapshots to.

Source of the plugin package or path

The location of the Drupal files directory.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

The serial port speed of this interface.

List of emails to allow access to this vhost, or null to allow all.

List of groups to allow access to this vhost, or null to allow all.

Whether output should be marked as primary

Whether output should be marked as primary

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Path to target relative to the vault's directory.

Optional slot number of the token that stores the certificate.

Custom name of this poller.

Let the user initiate specific instant commands

Service port

Environment variables to send from the local host to the server.

Path to a Containerfile which contains instructions to build the image.

The ‹name› package to use.

The list of nameservers

When to run the job.

Image to pull.

Identifier of the UPS to monitor, in this form: <upsname>[@<hostname>[:<port>]] See upsmon.conf for details.

The user as which to run bitcoind.

Blockchain sync mode.

Maximum peers to connect to.

Extra configuration to be appended to awstats.${name}.conf.

The location of the Drupal site state directory.

Start the specified units when this unit is started.

Operate on preset bindings or user bindings

Whether to enable redraw prompt after command.

The user's username.

Indicates whether this is an account for a “real” user

Container ID

Controls how long a valid or invalid entry remains in the cache, in milliseconds.

Keeps the specified running while this unit is running

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Keeps the specified running while this unit is running

The name of a .desktop file in the directory specified in the 'package' option.

A name for the drive

This optional key specifies that launchd should adjust its log mask temporarily to LOG_DEBUG while dealing with this job.

Name that will be shown to the user.

Contents of the PAM service file.

Environment Variables to set in session.

UUID of the stratis pool that the fs is located in

This is only relevant if you are using stratis.

Alias directory for requests.

Adds index directive.

When you have multiple UPSes on your system, you usually need to turn them off in a certain order. upsdrvctl shuts down all the 0s, then the 1s, 2s, and so on

Each attribute in this set specifies an option in the [Exec] section of this unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

This optional key specifies the protocol to be passed to socket(2)

Mount point on the container file system.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Indicates if the user is a system user or not

The path to repo in local machine

Path to world folder containing the dimension to render

List of servers for inclusion in stub and secondary zones.

The IP interface to bind to. null means "all interfaces".

Container color.

Allow normal users to control wpa_supplicant through wpa_gui or wpa_cli

Guaranteed minimum hops for ‹name› tunnels.

Name of a file containing the spiped key

The set of packages that should be made available to the user

Aliases of that unit.

Aliases of that unit.

This optional key is used to control whether your job is launched once at the time the job is loaded

Path to the Public Key.

Shell commands executed after the service's main process has exited.

If true, the user's shell will be set to users.defaultUserShell.

Extra lines to append to this profile's config.

This optional key specifies the service on the node to connect(2) or bind(2) to.

Which local IP to bind the UDP socket to.

Extra lines to add to the tinc service configuration file

Optional slot number of the token that stores the certificate.

Enable unlocking and mounting of encrypted ZFS home dataset at login.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Name of the class implementing the check

Username used in the machine image

This optional key specifies the user to run the job as

This optional key specifies the protocol to be passed to socket(2)

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

Tooltip for the entry.

The list of interfaces to be moved into the container.

The address on which to accept FastCGI requests.

The protocol specifier for port forwarding between host and container

Adds try_files directive.

The name of the module

Source ZFS dataset

IPv4 destination.

IPv6 destination.

The certificate profile to choose if the CA offers multiple profiles.

Name of the user to log in

Override the default port on which to listen for connections.

Command executed as the service's main process.

Guaranteed minimum hops for ‹name› tunnels.

Specifies the BSSID for this BSS

Primary nickname.

The kimai package to use.

The tahoelafs package to use.

Path of the authentication file.

Destinations for the service.

Description for the service.

Absolute path to the certificate to load

Which slot on the YubiKey to challenge.

Text of the file.

Text of the file.

The host to connect to.

The username to authenticate with.

The port to connect to.

GPG configuration.

User name for authentication.

Output position

Output position

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

add will additionally listen for TLS connections. only will disable TLS connections. force will redirect non-TLS traffic to the TLS connection.

IP of the Redis master

Whether to enable Drupal web application.

Extra arguments to pass to the server commandline.

Whether to enable Coqui TTS server.

Shell commands executed before the service's main process is started.

Packages added to the service's PATH environment variable

The data directory for bitcoind.

When or how often the backup should run

Number of power supplies that the UPS feeds on this system

Specifies the number of retries for failed notifies

If the specified units are started at the same time as this unit, delay this unit until they have started.

These lines go to the end of the location verbatim.

Start of the range of subordinate group ids that user is allowed to use.

Start of the range of subordinate user ids that user is allowed to use.

The Flake URI of the NixOS configuration to use for the container

Legacy RSA public key of the host in PEM format, including start and end markers

Language of the environment

cgit configuration, see cgitrc(5)

Configuration of uhub

List of channels that should be grouped together into this group

The name of your network of sr.ht-based sites.

Override the default port on which to listen for JSON-RPC connections.

Shell commands executed after the service's main process has exited.

The name of the user for this authelia instance.

The name the camera will show up as.

Whether to enable the filesystem mount.

As which user the backup should run.

Path of the source file.

Errbot backend name.

Whether to enable SFTP service.

Whether to ask Let’s Encrypt to sign a certificate for this virtual host

Additional global flags to pass to all lego commands.

The name of the machine

Name of the heat source.

The packaged Helm chart

Location of bitcoind pid file.

Name of the snippet.

Owner's name.

Interfaces for which to start wpa_supplicant

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

The port on which the SFTP server will listen

Commands to execute after the tmux-session is destroyed.

The group of the wrapper program.

The group as which to run bitcoind.

The owner of the wrapper program.

Path of certificates (*.{crt,cert,key}) used to connect to registry.

Adds a return directive, for e.g. redirections.

Absolute path to the certificate to load

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

The recommended idle time out (in seconds) to pass to the job

This optional key specifies the protocol to be passed to socket(2)

DDNS server name.

Packages added to the service's PATH environment variable

This is the absolute path to the plugin executable.

Set maximum cache size

Name to match.

Basic Auth password file for a vhost

Specifies the clear text password for the account

Shell commands executed as the service's main process.

Text of the file.

Text of the file.

Extra zone config to be appended at the end of the zone section.

Shell commands executed before the service's main process is started.

The theme.conf file of the theme

Optional slot number of the token that stores the certificate.

Specifies if TLS should be enabled

Specifies if TLS should be enabled

The distinguished name of the search base.

File or block device to export.

Path of the authentication file used to connect to registry.

Each attribute in this set specifies an option in the [Slice] section of the unit

Each attribute in this set specifies an option in the [Files] section of this unit

PostgreSQL host for operating remotely.

Number of simultaneous ‹name› tunnels.

Name of the runner group to add this runner to (defaults to the default runner group)

A short description of the user account, typically the user's full name

Name of the runner group to add this runner to (defaults to the default runner group)

Type of the network.

Nickname in that network.

Keeps the specified running while this unit is running

Keeps the specified running while this unit is running

Limit retry time for secondary zones

Whether to enable the filesystem mount.

Whether to enable proxy for this bucket

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

Additional flags to pass to lego run.

List of virtual hostnames from which to accept requests.

IP address of server running hans

The location for users to install Drupal themes.

Limit refresh time for secondary zones.

Limit on the number of simultaneous connections allowed.

The proxy host to use to connect to the server.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

If set, root doesn't need to authenticate (e.g. for the useradd service).

Shell commands executed after the service's main process is started.

Shell commands executed when the service's main process is reloaded.

Determines how multiple values are joined to create the claim value

Text of the file.

Path to file containing local secret key in binary or hexadecimal form.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

Specifies a file containing the MAC addresses to deny if macAcl is set to "deny" or "radius"

Key / certificate pairs for the virtual host.

Key policy for zone signing keys

Key policy for key signing keys

List of address ranges allowed to query this zone

Whether to show the message of the day.

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

The subnets which this tinc daemon will serve

Name resolution of a backends host name is done at start up, or configuration reload

Custom ordering of accounts and local folders in Thunderbird's folder pane

The set of actions made available to application launchers.

The name of private PKCS #8 key file for this policy to be found in the baseDirectory, or the absolute path to the key file

Number of simultaneous ‹name› tunnels.

Location to serve cgit under.

Path of the source file.

Settings for this slot.

Address to which spiped should connect.

The labels to apply to the build.

Hostname alias(es).

Username for this DDNS provider.

Whether to enable the HTTP/3 protocol

The name of the group for this authelia instance.

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

Listen for any Neighbor Solicitation messages on this interface, and respond to them according to a set of rules

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Whether to enable Go Ethereum prometheus metrics.

RPC user information for JSON-RPC connections.

IP and port to which this redis instance acts as a slave.

Shell commands executed as the service's main process.

The user ID owning the volume inside the container.

This optional key is a variant of SockPathName

port of the Redis master

Configuration for secure connections.

Configuration for secure connections.

The TCP port to accept connections

Each attribute in this set specifies an option in the [Slice] section of the unit

Configure unit start rate limiting

If the specified units are started at the same time as this unit, delay them until this unit has started.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

If set, the OATH Toolkit will be used.

Name of the platform

Keeps the specified running while this unit is running

Keeps the specified running while this unit is running

Whether to operate in tun (IP) or tap (Ethernet) mode.

This optional key is a variant of SockPathName

Whether to enable this .link unit

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

The JMAP configuration to use for this account.

The SMTP configuration to use for this account.

The IMAP configuration to use for this account.

(optional) name your peer has for you

(optional) name your peer has for you

Whether to enable Go Ethereum Auth RPC API.

Shell commands executed after the service's main process is started.

Shell commands executed when the service's main process is reloaded.

Filesystem type of Device. (used as -t in mount commands)

The user as which to run blockbook-frontend-‹name›.

Aliases of that unit.

Put the host-side of the veth-pair into the named bridge

The drupal package to use.

This optional key specifies what value should be passed to umask(2) before running the job

The key to use as listed in gpg --list-keys.

The username to store inside the credentials file.

The options to use for this LUKS device in YubiKey-PBA

Output scale configuration

Output scale configuration

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

Absolute path to the certificate to load

User name for RPC connections.

Adds DirectoryIndex directive

Alias directory for requests

Description of the UPS.

This optional key causes the job to be started if any one of the listed paths are modified.

Basic Auth protection for a vhost

ACME Directory Resource URI

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

The external address where the host can be reached

Specifies a file containing the MAC addresses to allow if macAcl is set to "allow" or "radius"

Set the date on which the user's account will no longer be accessible

Station MAC address -based authentication

Host pattern used by this conditional block

Configure unit start rate limiting

The amount of time launchd waits before sending a SIGKILL signal

Arguments passed to date to create a timestamp suffix for the archive name.

Type of the file system

Each attribute in this set specifies an option in the [Timer] section of the unit

Set the execute bit

Settings for this site

Whether to enable debug logging for this certificate.

Shell commands executed when the instance is starting.

Database name.

Location of the backing encrypted device.

The port where the host can be reached

User name for authentication.

The path to the xkb types file

Container icon.

Name of the font to use.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Whether this file should be generated

Path to the SSH key to use for authentication

Copy content of the image located at the mountpoint of the volume on first run.

The prompt that will be sent to the Gemini model when the command is executed

Name of the theme to use for the lightdm-gtk-greeter.

Options for the Kimai PHP pool

Custom agent skills for opencode

URL of the site's web app manifest.

Run the rsync process with an inhibition lock taken; see systemd-inhibit(1) for a list of possible operations.

Address to bind on for UI connections

Environment variables to set for the kernel.

Enable logging to the system logger.

Whether to enable Redis server.

Number of worker instances to run

The path of the web root directory.

Path to the certificate authority certificate.

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

Print global archive statistics upon completion

Secondary nickname.

Configuration for the specific plugin, written to $XDG_CONFIG_HOME/streamlink/config. (linux) or Library/Application Support/streamlink/config. (darwin).

Check the host IP address in the known_hosts file.

The title of the boot menu entry.

Whether to enable helper service.

The IPv4 address assigned to the host interface. (Not used when hostBridge is set.)

Override the default database cache size in MiB.

Authentication algorithm for this key.

Path of the source file.

The authentication method to use.

This optional key can be used to request that the datagram socket join a multicast group

Icon to display in file manager, menus, etc.

Name of the wrapper that is installed into PATH

Maximum number of items to keep in slow log.

Hostname of IMAP server.

Hostname of SMTP server.

Time in seconds to wait for the GPG Smartcard.

GID of created file

UID of created file

These lines go to the end of the location verbatim.

Name of user to run the script under.

Default window size for this interface.

Path to plugin file.

Event type.

Aliases of that unit.

This optional key causes the job to be started every time a filesystem is mounted.

Order of this location block in relation to the others in the vhost

Path to the unix socket file on which to accept FastCGI requests.

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Container ID

Each attribute in this set specifies an option in the [Timer] section of the unit

The account type

TCP Port to bind on for UI connections

Shell commands to run after borg create

Manually specify the hostname

(optional) human-readable name for peer

(optional) human-readable name for peer

Maps kanidm groups to values for the claim.

If set, the OTPW system will be used (if ~/.otpw exists).

Root path in filesystem of the smug project

The IPv6 address assigned to the host interface. (Not used when hostBridge is set.)

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Whether to enable this PAM service.

Path or reference to the host key.

Extra configuration append to unit

Interface and port to listen on to solve HTTP challenges in the form [INTERFACE]:PORT

Key size in bits

Key size in bits

If the specified units are started, then this unit is stopped and vice versa.

Whether to enable the wrapper.

Local UDP port.

Name of the network interface managed by this client.

Name of the network interface managed by this client.

Folder display name

Public address for p2p connections from peers (if TCP is used)

Whether to start the build on boot

Whether to pull the image on boot

This optional key is a variant of SockPathName

The address that Anubis listens to

The specified name-string names the type of media supported by this device, for example, DLT7000

The type of this worker

Whether to enable this plugin

The type of log being collected.

Name of the theme to use for the lightdm-enso-os-greeter

The address of the proxy.

Refer to xrandr(1) for the documentation of the transform matrix.

Refer to xrandr(1) for the documentation of the transform matrix.

Location of blockbook-frontend-‹name› data directory.

A list of host names and/or IP numbers used for accessing the host's ssh service

Whether to enable Enables the axport interface.

Default maximum packet size for this interface.

Container color.

Turns on or off the router flag for Neighbor Advertisement Messages.

The group ID owning the volume inside the container.

Host to use for the destination dataset

FastCGI parameters to override

The group as which to run blockbook-frontend-‹name›.

Target port of container

Units that require (i.e. depend on and need to go down with) this unit

Units that require (i.e. depend on and need to go down with) this unit

Text of the file.

Profile path.

Whether users can log in with passwords defined in /etc/shadow.

Specify the server verbosity level, options: debug, verbose, notice, warning.

Allow client if common name appears in the list.

Turns on the OCSP Must-Staple TLS extension

Indicates whether this is an account for a “real” user

Number of simultaneous ‹name› tunnels.

Page or namespace to restrict

The location of the Drupal config sync directory.

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

Name (relative to the root of the filesystem) of the subvolume where the hash table will be stored.

Set the execute bit

Whether to enable watching for repo.

Optional url of remote repository

The absolute path to the program to be wrapped.

Optional branch in remote repository

Whether to enable Bitcoin daemon.

The amount of time in seconds for a keyFile to appear before timing out and trying passwords.

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

NNTP group name for the inbox.

Command and arguments to start the kernel.

TLS Options for the Director in this Configuration.

Bind address to be used for this server.

TLS Options for the Director in this Configuration.

Port the NetBird client listens on.

Port the NetBird client listens on.

Path to the SVG of the panel.

Allow these IPs and TSIG to transfer zones, addr TSIG|NOKEY|BLOCKED address range 192.0.2.0/24, 1.2.3.4&255.255.0.0, 3.0.2.20-3.0.2.40

Keep this unit running as long as the listed units are running