List of IPv4 addresses that will be statically assigned to the interface.

IPv4 address of the interface

Whether this interface should be configured with DHCP

Subnet mask of the interface, specified as the number of bits in the prefix (24).

The pool of IPv4 addresses which are used for translation.

By default, nginx will look up both IPv4 and IPv6 addresses while resolving

List of IP (v4 or v6) addresses with CIDR masks from which this peer is allowed to send incoming traffic and to which outgoing traffic for this peer is directed

The subnet of this host

Whether to enable IPv6 Privacy Extensions for interfaces not configured explicitly in networking.interfaces._name_.tempAddress

Denied client IP ranges, these gets evaluated after the allowed IP ranges, defaults to all IPv4 addresses: [ "0.0.0.0/0" ] To block all other access than the allowed.

List of IP (v4 or v6) addresses with CIDR masks from which this peer is allowed to send incoming traffic and to which outgoing traffic for this peer is directed

The prefix used for embedding IPv4 into IPv6 addresses

IPv4 address of the next hop.

List of extra IPv4 static routes that will be assigned to the interface.

If you want consistency between the two implementations, set the scope of the route manually with networking.interfaces.eth0.ipv4.routes = [{ options.scope = "global"; }] for example.

IPv4 address of the network.

Addresses to listen on, IP:PORT, if you haven't disabled forwarding only set IPv4.

Type of the route

List of IPv6 addresses that will be statically assigned to the interface.

Subnet mask of the network, specified as the number of bits in the prefix (24).

Whether to enable the mDNS NSS (Name Service Switch) plug-in for IPv6

Other route options

Do not send VRRP adverts over VRRP multicast group

Specifies a list (comma-separated) of addresses where to listen for TCP connections

IPv4 prefix length

IPv4/IPv6 addresses to advertise for node.

IPv4/IPv6 addresses to advertise for node.

IPv6 address of the interface

Subnet mask of the interface, specified as the number of bits in the prefix (64).

The addresses of all replicas in the cluster

When IPv6 is enabled with SLAAC, this option controls the use of temporary address (aka privacy extensions) on this interface

IPv4 cidr address of this peer in the virtual network

Whether to use DHCP to obtain an IP address and other configuration for all network interfaces that do not have any manually configured IPv4 addresses.

Local address(es) to use for IKE communication

Remote address(es) to use for IKE communication

IPv4 destination.

By default, nginx will look up both IPv4 and IPv6 addresses while resolving

Domain names, IPv4 and/or IPv6 addresses to listen on for HKP requests.

Deprecated: Use consul.forceAddrFamily instead

Email addresses to be associated with this account

Email addresses to be associated with this account

A list of address sections to be added to the unit

Strip N bits from IPv4 addresses if lookupBySubnet is true

Recent versions of glibc will issue both ipv4 (A) and ipv6 (AAAA) address queries at the same time, from the same port

Whether to bind ipv4/ipv6 or both kind of addresses.

Remote endpoints for the bridge.

By default, the Drone RPC server will listen on all interfaces and local IPv4 addresses for incoming connections from clients

The external address where the host can be reached

The port where the host can be reached

IP Addresses to bind to

Port of the remote MQTT broker.

Whether to filter IPv6 traffic with 6to4 destination addresses that correspond to IPv4 addresses that should not be routed over the public internet.

The external IP address or hostname where the host can be reached.

Address of the remote MQTT broker.

Whether to listen on IPv4 connections.

Addresses (IPv4 or IPv6) to listen on for connections by the reverse proxy/tls terminator

The IP addresses of DNS servers to configure.

Listen addresses and ports for this virtual host

Select the encapsulation type:

• ipip to create an IPv4 within IPv4 tunnel (RFC 2003).

• 4in6 to create a 4in6 tunnel (RFC 2473);

• ip6ip6 to create an IPv6 within IPv6 tunnel (RFC 2473);

Whether to use IPv4.

IPv4-specific configuration.

Listener IP addresses of relay server

IPv4 interface to bind to.

If not specified, the MTU is automatically determined from the endpoint addresses or the system default route, which is usually a sane choice

IPv4 address to bind to

This primary server will notify all given secondary servers about zone changes

The IP addresses of the interface.

List of IP addresses for this interface.

A list of IPv4 and IPv6 addresses to use as the fallback DNS servers

The IP addresses of the interface.

Listen addresses and ports for this virtual host

List of IP addresses associated with this peer.

Turn on proxy_arp for this device

Addresses (IPv4 or IPv6) to listen on for connections by the reverse proxy/tls terminator

List of ipv4 addresses on which to listen for DNS queries.

Listen addresses and ports for this virtual host.

Source addresses, address ranges, MAC addresses or ipsets to bind.

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

An IP address or a network IP address with a mask for IPv4 or IPv6

The IPv4 address assigned to the host interface. (Not used when hostBridge is set.)

The IPv4 address assigned to the host interface. (Not used when hostBridge is set.)

Addresses who may request zone transfers.

Addresses allocated in pool

Only use ipv4, even if the host supports ipv6.

The configuration for each network interface

IP to listen on. 0.0.0.0 for IPv4 only, * for all.

Listen addresses and ports for this virtual host.

Preferred EDNS buffer size for IPv4.

Allow the specified IPs to act as a proxy

The static host map defines a set of hosts with fixed IP addresses on the internet (or any network)

Allowed client IP ranges are evaluated first, defaults to ARIN IPv4 private ranges: [ "192.168.0.0/16" "127.0.0.0/8" "172.16.0.0/12" "10.0.0.0/8" ]

The source IPv4 address of the TAYGA server.

Set an IPv4 address for the container.

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

Definitions of SIIT instances of Jool

This is the target address is to match against

The IPv4 address assigned to the interface in the container

IPv4 address.

Listed primary servers are allowed to notify this secondary server

Definitions of NAT64 instances of Jool

IP to listen on. 0.0.0.0 for IPv4 only, * for all.

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

Listen addresses for this virtual host

The IPv4 address assigned to the interface in the container

Listen addresses for this virtual host

Listen addresses and ports for this virtual host.

Periodically refresh the endpoint hostname or address for all peers

Listen addresses for this virtual host

Whether to enable the mDNS NSS (Name Service Switch) plug-in for IPv4

This is a rule that the target address is to match against

The IPv4 address of the router.

MAC address to use for the device

Specifies the IP address version (IPv4 or IPv6) used to establish a connection between cloudflared and the Cloudflare global network

Indicates that ssh(1) should hash host names and addresses when they are added to the known hosts file.

IP to listen on. 0.0.0.0 for IPv4 only, * for all.

Listen addresses for this virtual host

This optional key can be used to request that the datagram socket join a multicast group

Listen only on IPv4 when strting the server.

The email addresses of the public-inbox.

Specifies the MAC addresses to deny if macAcl is set to "deny" or "radius"

Listen addresses for this virtual host

Configures name servers used to resolve names of upstream servers into addresses

Specifies the MAC addresses to allow if macAcl is set to "allow" or "radius"

This address will be used for zone-transfer requests if configured as a secondary server or notifications in case of a primary server

A list of addresses to be added to the network section of the unit

Automatically determine the IPv4 address of this peer based on existing peers on network.

Whether to enable setting IPv4 A records.

This optional key can be used to request that the datagram socket join a multicast group

List of additional peer IP addresses to connect to.

This optional key can be used to request that the datagram socket join a multicast group

This optional key can be used to request that the datagram socket join a multicast group

Specifies the BSSID for this BSS

Wait for DNS

Subnet mask of the interface, specified as the number of bits in the prefix ("24").

If given an IP address, it can be a host name ("localhost"), an IPv4 dotted-quad ("127.0.0.1") or an IPv6 address enclosed in square brackets ("[::1]").

(VCL4.1 and higher) If given an absolute Path ("/path/to/listen.sock") or "@" followed by the name of an abstract socket ("@myvarnishd") accept connections on a Unix domain socket

Specifies a file containing the MAC addresses to deny if macAcl is set to "deny" or "radius"

Set name cache size for IPv4.

IP detection provider for IPv4

Specifies a file containing the MAC addresses to allow if macAcl is set to "allow" or "radius"

List of the only peer IP addresses to connect to

List of virtual IPs to request in IKEv2 configuration payloads or IKEv1 Mode Config

Specifies whether sshd(8) should look up the remote host name, and to check that the resolved host name for the remote IP address maps back to the very same IP address

The hostname that clients should use to connect to this server

IP addresses to bind the listener to.

Name of the interface.

Disable the “happy eyeballs” algorithm for IPv4/IPv6 fallback if your local network has misconfigured one of the protocols.

Whether to copy the DF bit to the outer IPv4 header in tunnel mode

Mail addresses

Whether to register mDNS address records for all local IP addresses.

Line-separated email addresses that are allowed to authenticate.

List of named IP pools to allocate virtual IP addresses and other configuration attributes from

Addresses of statically configured query API servers

List of domains that will be redirected by the DNSmasq.

Name of the interface

Listener addresses to accept connections from other peers

A list of host:port for the Redis servers that are part of a cluster

Database host name. localhost is treated specially and inserts systemd dependencies, other hostnames or IP addresses of the local machine do not.

List of resolvers to use

This option specifies when the dhcpcd service will fork to background

Name used to derive peer unit name.

IPsec Mode to establish CHILD_SA with.

• tunnel negotiates the CHILD_SA in IPsec Tunnel Mode,
• whereas transport uses IPsec Transport Mode.
• transport_proxy signifying the special Mobile IPv6 Transport Proxy Mode.
• beet is the Bound End to End Tunnel mixture mode, working with fixed inner addresses without the need to include them in each packet.
• Both transport and beet modes are subject to mode negotiation; tunnel mode is negotiated if the preferred mode is not available.
• pass and drop are used to install shunt policies which explicitly bypass the defined traffic from IPsec processing or drop it, respectively

MTU size for packets leaving the interface

If set, all recipients to users at either "localhost" (the literal string) or the canonical host name (from the me control attribute) are remapped to this address

The interfaces to bond together

List of DNS servers for this interface.

MTU to set for this interface, automatically set if not specified

Vlan tag to apply to interface

Openvswitch type to assign to interface

Commands called at the start of the interface setup.

List of commands to run before interface setup.

The type of the interface

The type of interface to create

Commands called after the interface setup.

List of commands to run after interface setup.

Command called before the interface is taken down.

List of commands to run before interface shutdown.

16-bit port for listening

Peers linked to the interface.

List of peers associated with this interface.

Command called after the interface is taken down.

List of commands to run after interface shutdown

List of extra IPv6 static routes that will be assigned to the interface.

The physical network interfaces connected by the bridge.

Whether to enable wol on this interface.

Controls the routing table to which routes are added

IPv6 address of the next hop.

Whether this interface is virtual and should be created by tunctl

The kernel routing table to add this interface's associated routes to

MAC address of the interface

The Wake-on-LAN policy to set for the device

Port to listen on, randomly selected if not specified.

Name of the UKI

Type of the route

In case of a virtual device, the user who owns it. null will not set owner, allowing access to any user.

wg-quick .conf file, describing the interface

This option allows you to define interfaces encapsulating IPv6 packets within IPv4 packets; which should be automatically created.

The public key for this peer.

The base64 public key to the peer.

Base64 private key generated by wg genkey

Path to file containing this interface's private key.

Private key file as generated by wg genkey.

The physical network interfaces connected by the vSwitch.

Extra options to append to the interface section

IPv6 address of the network.

16-bit port for listening

The type of the interface

Specify address family of backend connections

Peers linked to the interface.

The family name of the font within the package.

Set the maximum transmission unit in bytes for the wireguard interface

Whether to bring up this interface automatically during boot.

Whether to bring up this interface automatically during boot.

Whether to enable Jool, an Open Source implementation of IPv4/IPv6 translation on Linux

IP and port to connect to this peer at.

Other route options

Commands called at the start of the interface setup.

Endpoint IP or hostname of the peer, followed by a colon, and then a port number of the peer.

Listen addresses and ports for this virtual host

Listen addresses and ports for this virtual host

Listen addresses and ports for this virtual host

The name of the user account

The name of the user account

Mark all wireguard packets originating from this interface with the given firewall mark

Listen addresses and ports for this virtual host

Commands called at the end of the interface setup.

Subnet mask of the network, specified as the number of bits in the prefix (64).

Set the metric of routes related to this Wireguard interface.

The kernel routing table to add this interface's associated routes to

Listen addresses and ports for this virtual host

Listen addresses and ports for this virtual host

Listen addresses and ports for this virtual host

Listen addresses and ports for this virtual host

Listen addresses and ports for this virtual host

List of open UDP ports.

List of TCP ports on which incoming connections are accepted.

The base64 public key of the peer.

Username to authenticate with.

The name of the theme within the package.

Base64 private key generated by wg genkey

The name of the group

The group's name

Optional, path to file containing the pre-shared key for this peer.

Private key file as generated by wg genkey.

The shell (/bin/sh) command executed to obtain the DHCP DNS server address

Base64 preshared key generated by wg genpsk

Commands called before shutting down the interface.

Automatically generate a private key with wg genkey, at the privateKeyFile location.

Extra options to append to the interface section

File pointing to preshared key as generated by wg genpsk

Commands called after shutting down the interface.

Range of open UDP ports.

Endpoint IP or hostname of the peer, followed by a colon, and then a port number of the peer

A range of TCP ports on which incoming connections are accepted.

Whether this VPN connection should be started automatically.

Determines whether to add allowed IPs as routes or not.

Locally defined maps of hostnames to IP addresses.

Listen addresses and ports for this virtual host

Listen addresses and ports for this virtual host

Listen addresses and ports for this virtual host

Listen addresses and ports for this virtual host

Listen addresses and ports for this virtual host

Listen addresses and ports for this virtual host

Listen addresses and ports for this virtual host

Gateway server to connect to.

The name of the user account

Private key to authenticate with.

The family name of the font within the package.

The family name of the font within the package.

The family name of the font within the package.

Listen addresses and ports for this virtual host

Table name.

The name of the system used in the system.build.toplevel derivation

Protocol to use.

Listen addresses and ports for this virtual host

Listen addresses and ports for this virtual host

The pre-existing network namespace in which the WireGuard interface is created, and which retains the socket even if the interface is moved via interfaceNamespace

File containing the password to authenticate with

Extra config to be appended to the interface config

Base64 preshared key generated by wg genpsk

Automatically generate a private key with wg genkey, at the privateKeyFile location.

The name of the group

Tor hidden sites do not have real IP addresses

File pointing to preshared key as generated by wg genpsk

Explicit list of domains to manage only for IPv4

Whether to enable IPv4 connectivity.

The name of the theme within the package.

The name of the theme within the package.

The name of the theme within the package.

The name of the icon theme within the package.

What addresses the server should listen to.

Listen addresses and ports for this virtual host

Listen addresses and ports for this virtual host

Interval in seconds to send keepalive packets

The bind address used by seafile fileserver

The IPv4 address to deploy the service to.

This is optional and is by default off, because most users will not need it

The pre-existing network namespace the WireGuard interface is moved to

Certificate to authenticate with.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The name of this nylon instance.

The underlying network device on which the tunnel resides.

List of IP addresses or network addresses that may connect to Polipo.

The time-to-live of the connection to the remote tunnel endpoint.

The vlan identifier

The name of the icon theme within the package.

The name of the icon theme within the package.

The name of the icon theme within the package.

The underlying network device on which the tunnel resides.

Name of the zone.

This is optional and is by default off, because most users will not need it

The time-to-live of the connection to the remote tunnel endpoint.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Periodically re-execute the wg utility every this many seconds in order to let WireGuard notice DNS / hostname changes

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Interface name

Depending on the local firewall/NAT rules, you might need to force Miredo to use a fixed UDP port and or IPv4 address.

Name of the PPP peer.

Static IPv4 -> IPv6 host mappings.

"ignoreIP" can be a list of IP addresses, CIDR masks or DNS hosts

Specific name of the application.

Listen addresses and ports for this virtual host

The name of the cursor theme within the package.

The address of the local endpoint which the remote side should send packets to.

Local port of the encapsulation UDP socket.

Name of the action.

Listen addresses and ports for this virtual host.

Listen addresses and ports for this virtual host.

When the dynamic endpoint refresh that is configured via dynamicEndpointRefreshSeconds exits (likely due to a failure), restart that service after this many seconds

The IP address ranges for which to perform NAT

Name of the image

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The address of the local endpoint which the remote side should send packets to.

The IPv6 address ranges for which to perform NAT

The address of the remote endpoint to forward traffic over.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Network device to bind to.

Method to determine the IPv4 address to send to the dynamic DNS provider

IPv4 network in CIDR format to use for the entire flannel network

Local address (and optionally device) to bind to using the given port.

Listen addresses and ports for this virtual host

https_dns_proxy will by default use IPv6 and fail if it is not available

DEPRECATED, use driverOptions

Address to bind to

The address of the remote endpoint to forward traffic over.

IPv4 address to listen on

The IPv4 address that the server will use on the network

Listen addresses for this virtual host

Listen addresses for this virtual host

Listen addresses for this virtual host

The pool of IPv6 addresses which are used for translation.

Listen addresses for this virtual host

The name of the cursor theme within the package.

The name of the cursor theme within the package.

The name of the cursor theme within the package.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Whether the bridge interface should enable rstp.

The underlying network device on which the tunnel resides.

Listen addresses and ports for this virtual host.

The endpoint name.

Enable restrictions on the use of the well-known prefix (64:ff9b::/96) - prevents translation of non-global IPv4 ranges when using the well-known prefix

Etcd unique node name.

Depending on the local firewall/NAT rules, you might need to force Miredo to use a fixed UDP port and or IPv4 address.

The time-to-live/hoplimit of the connection to the remote tunnel endpoint.

The endpoint name.

Listen addresses for this virtual host

Listen addresses for this virtual host

Listen addresses for this virtual host

Listen addresses for this virtual host

Listen addresses for this virtual host

The language to use for addresses.

Adds custom rules to the IPv4 scope table

The name of this systemd unit, including its extension

Name of the control, as it appears in alsamixer

Host to bind to

Relay address (the local IP address that will be used to relay the packets to the peer)

The public ipv4 address of this relay

Optional configuration string for this interface.

Whether the tunnel routes layer 2 (tap) or layer 3 (tun) traffic.

DEPRECATED, use driverOptions

Username for JSON-RPC connections.

Local address to bind to

Name of the PAM service.

IP to listen on. 0.0.0.0 for IPv4 only, * for all.

IP to listen on. 0.0.0.0 for IPv4 only, * for all.

The mode of the macvlan device.

The address of the local endpoint which the remote side should send packets to.

The name of the cask to install.

The name of the formula to install.

The name of this systemd unit, including its extension

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

Name of the worker

Listen addresses for this virtual host

Listen addresses for this virtual host

Listen addresses for this virtual host

Listen addresses for this virtual host

Listen addresses for this virtual host

Listen addresses for this virtual host

Listen addresses for this virtual host

Listen addresses for this virtual host

Listen addresses for this virtual host

IP addresses to bind the listener to.

The cursor name within the package.

The address of the remote endpoint to forward traffic over.

List of hostname shortnames/IP addresses of the initial monitors.

Set UDP listening port range used by DHT(IPv4, IPv6) and UDP tracker.

Listen addresses for this virtual host

Listen addresses and ports for this virtual host.

Listen addresses and ports for this virtual host.

Name i2pd appears in UPnP forwardings list.

The address (IPv4, IPv6 or DNS) to listen on.

The unique name for THIS channel in THIS group

Name of modem device, will be searched for in /dev.

An internet socket address to listen on, either IPv4 or IPv6.

Listen addresses for this virtual host

Name of the bridge interface that wpa_supplicant should listen at.

An RKVM server's internet socket address, either IPv4 or IPv6.

The name of the node which is used as an identifier when communicating with the remote nodes in the mesh

Listen addresses for this virtual host

Whether to enable Shorewall IPv4 Firewall.

The name of this systemd unit, including its extension

Profile name.

Profile name

The profile's name.

The IPv4 network that the server will use to allocate IPs on the network

IP to listen on. 0.0.0.0 for IPv4 only, * for all.

Interfaces to bind.

Listen addresses for this virtual host

The name of the network interface to match against.

Specifies the Name of the Storage daemon.

Unique identifier of the account

Protocol number of the encapsulated packets

List of additional peer IP addresses to add to the local list.

Whether to bind to nonlocal addresses and interfaces that are down

The family name of the font within the package.

Accept for client requests on the specified listen addresses.

Options for the bonding driver

The hostname or primary IPv4 address of the Teredo server

The endpoint name.

The endpoint name.

The IP address to bind to for IPv4

Name of the runner to configure

Name of the runner to configure

The friendly name you give to the network device

The friendly name you give to the network device

Listen addresses for this virtual host

Listen addresses and ports for this virtual host.

The name of the underlying hardware WLAN device as assigned by udev.

The interface the vlan will transmit packets through.

Listen addresses for this virtual host

This library's name.

Database name.

The name of this group for this account

IP addresses of the other nodes.

The user's UID.

Name for the device

The language to use for personal names.

When clone_target is unspecified, this is the name of a formula repository to tap from GitHub using HTTPS

Addresses and ports on which kresd should provide DNS over TLS (see RFC 7858)

Name of the redis server

What addresses and ports the server should listen on

Whitelist a list of address prefixes

Strip N bits from IPv6 addresses if lookupBySubnet is true

The endpoint name.

The endpoint name.

Peer addresses to initialize with on first run.

The name of the Helm chart

Profile name.

The framework to use for attaching Jool's translation to the exist kernel packet processing rules

Addresses and ports on which kresd should provide DNS over HTTPS/2 (see RFC 8484)

DEPRECATED, use driverOptions

A system user name for this client instance.

A system user name for this client instance.

Addresses and/or ports on which tang should listen

The list of the email addresses of the listmasters (users authorized to perform global server commands).

The director name used by the system administrator

The user's primary group.

The client name that must be used by the Director when connecting

Host, IPv4 or IPv6 address to listen to.

Mail "from" name.

Text of the file

Enable this table.

Table family.

Log client IP addresses in the connection log.

Keyboard name.

Listen on all addresses rather than just loopback.

Address to bind to

List of comma delimited IP addresses that the agent should listen on.

Database name.

Akkoma frontend name.

The name of the host

The framework to use for attaching Jool's translation to the exist kernel packet processing rules

The name of the Helm chart

The theme name.

The unique agent name.

The name of the service to run

Either the raw pre-shared key in hexadecimal format or the name of the secret (as defined inside networking.wireless.secretsFile and prefixed with ext:) containing the network pre-shared key.

Unique identifier of the account

The name of the agent as seen in the buildkite dashboard.

The name of the agent as seen in the buildkite dashboard.

Agent name, usually same as the hostname

Agent name, usually the same as the hostname.

The name of the plugin.

Listen addresses for this virtual host

Listen addresses for this virtual host

Name of the site.

Unique identifier of the contact account

The name of the theme within the package.

This tells pgmanage whether or not to set the listening socket to local addresses only.

Client IP addresses (or prefixes) from which to accept connections.

The name of the instance.

MeshID of interface with type mesh.

The table content.

The user's home directory.

Name of the tmux window;

The type of the WLAN interface

TCP addresses to run TCP relay.

Path to file that contain addresses of query peers

Font name, as used by fontconfig.

OpenFlow rules to insert into the Open vSwitch

Text of the file

Force a specific wpa_supplicant driver.

Flags for interface of type monitor.

The name of the plugin.

Mail "reply-to" name.

IP to listen on. 0.0.0.0 for IPv4 only, * for all.

IP to listen on. 0.0.0.0 for IPv4 only, * for all.

Name of the font to use for regreet.

Name of the redis server

Container name, e.g., shopping.

Whether to enable the Router Advertisement Daemon (radvd), which provides link-local advertisements of IPv6 router addresses and prefixes using the Neighbor Discovery Protocol (NDP)

Name is referenced in logs

List of addresses and ports to listen on (ListenAddress directive in config)

Listen addresses for this virtual host

Whether to enable 4-address mode with type managed.

Name of the GNOME Shell theme.

The endpoint name.

The account UID

The group's GID.

List of comma delimited IP addresses that the trapper should listen on

Logs the IP addresses of incoming requests.

Command line arguments to add when executing wpa_supplicant.

If set, this network block is used only when associating with the AP using the configured BSSID.

Unique identifier of the calendar

The name to return in service discovery responses for the MUC service itself

The interface the macvlan will transmit packets through.

Name is used as a suffix for the service name, user, and group

Specific IPv4 address to listen to.

The user's home directory mode in numeric format

Path to files that contain addresses of store API servers

The network's pre-shared key in plaintext defaulting to being a network without any authentication.

Listen addresses for this virtual host

Name of directory from which to import ZFS device, this is passed to zpool import as the value of the -d option

Name of the rule.

Name of the plugin.

Name of the plugin.

Proxy listen address (IPv6 literal addresses need to be enclosed in "[" and "]" characters)

Set this to true if the SSID of the network is hidden.

List of domain names (FQDNs) to manage

Listening addresses or hostnames.

Name of the theme to use for regreet.

Container name, e.g., shopping.

Profile name.

Name of the iSCSI initiator to boot from

You could use this field to override the network's ssid

Name of the machine when registering it at the central or local api.

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

The serial port to which your UPS is connected. /dev/ttyS0 is usually the first port on Linux boxes, for example.

Name of the Docker context

The name of an explicit dtb to be loaded, relative to the dtb base

Version of OpenFlow protocol to use when communicating with the switch internally (e.g. with openFlowRules).

The name of the mailbox.

The endpoint name.

Configuration options for wpa_supplicant.conf

If vhosts do not specify listen, use these addresses by default

The user's primary group.

IP to listen on. 0.0.0.0 for IPv4 only, * for all.

List of comma delimited IP addresses that the trapper should listen on

Name of the existing database.

The name of the service to run

Path to target file relative to HOME.

List of peer IP addresses to connect to and attempt to keep the connection open.

Use this option to configure advanced authentication methods like EAP

VLAN to which the network interface is connected.

Commands to manipulate the Open vSwitch database

The name of the plugin.

The name of the server

Whether to get IPv6 addresses from interfaces.

Text of the file

Text of the file

The logical name of the Galera cluster

External wpa_supplicant.conf configuration file

Name of the user to ensure.

The prefix for MAC addresses to use, without the trailing ':'

The list of hostnames and/or IP addresses from which the Mailman Web UI will accept requests

Whether to export names and IP addresses defined in /etc/hosts.

Whether this file should be generated

Bind address

IP addresses Recursor DNS server will bind to.

The address for the daemon to listen on

The address for the daemon to listen on

Listen addresses for this virtual host

Name of the beat

Name of the wiki.

Name of the server.

The IP address that Meilisearch will listen on

Database name.

Database name.

Database name.

Name of the icon theme to use for regreet.

The endpoint name.

Alternative listening port for UDP and TCP listeners; default (or zero) value means "listening port plus one"

Name of this iscsi initiator

Strip the last N bits from IP addresses, determined by IPv4CIDR and IPv6CIDR

Allow binding to non local addresses.

The addresses for connecting the node to a cluster.

Name of the profile.

Extra configuration lines appended to the network block

The database name

Database name.

The group GID

The name of this authentication provider

The name of this gateway as shown in firezone

The name of the cookie that the oauth_proxy creates.

The name of the watcher

Log partial client IP addresses in the connection log.

The list of interfaces to be moved into the container.

Server name to be used for this virtual host

Path to target file relative to xdg.dataHome.

Whether the target path should be unconditionally replaced by the managed file source

Automatically assign an IP address to the network interface using the same scheme as virtualisation.vlans.

Name of ICMP pinging job.

Container name, e.g., shopping.

Addresses of public STUN services to use to automatically find the public and local addresses of this Jitsi-Videobridge instance without the need for manual configuration

First separator character in generated addresses

Whether to enable ‹name›.

Whether this file should be generated

Database name, only used when the databse is created locally.

List of peer IP addresses to connect to only

The advertised name for zeroconf discovery.

Whitelist a list of addresses, hostnames, or address blocks.

List of list addresses that should be handled by Schleuder

Name associated with the build

Name of the redis server

Whether to publish user services

The endpoint name.

Database name.

Database name.

Database name.

Program to execute, possibly with arguments.

The user's home directory.

The name of this actor

The name of this group

The user's home directory mode in numeric format

Each prefix consists of either an IPv4 or IPv6 address, and the associated prefix length, delimited by a slash

Each prefix consists of either an IPv4 or IPv6 address, and the associated prefix length, delimited by a slash

This feed account's name.

The name of the immich database.

Unique identifier of the boxxy rule

The name of the host in the network as well as the configuration for that host

This option allows you to define vlan devices that tag packets on top of a physical interface

The name of an existing user account under which the rsync process should run.

Whether to treat root servers (for @) as caching servers, requesting addresses the same way a client does

Database name

Name of the service.

The flake reference from is rewritten to.

The flake reference to which from> is to be rewritten.

Text of the file

The name of the database to use for Wakapi.

Icon to display in file manager, menus, etc.

Addresses to bind to and listen for inbound connections.

Configures the type of encapsulation.

Whether the target path should be unconditionally replaced by the managed file source

Specify the program to run to talk to this UPS. apcsmart, bestups, and sec are some examples.

Name of symlink

Drive name without the full path.

Database name.

Whether to set the machine hostname based on the information received from the DHCP server.

The name of the device.

The name of the device.

Path to target file relative to xdg.cacheHome.

name of the virtualhost

Whether the configuration file at configFile.path should be written to by wpa_supplicant.

The name identifying the runner instance towards the Gitea/Forgejo instance.

The account UID

This option allows you to define bond devices that aggregate multiple, underlying networking interfaces together

Destination port when using UDP encapsulation.

This profile's name.

Name of the cursor theme to use for regreet.

Path to target file relative to xdg.stateHome.

The name of this client as shown in firezone

Address to listen on

The fully qualified domain name (FQDN) of this host

The fully qualified domain name (FQDN) of this host

Text of this systemd unit.

The name of this relay group

The IPv4 address of the host.

Adapter name that is used in the radicle-ci-broker configuration

The user-friendly name for the system, set in System Preferences > Sharing > Computer Name

The system domain name

Whether to make the user account hidden.

Whether this file should be generated

Whether this file should be generated

IPv6 prefix length

The name of the hook

Database name.

Database name.

The list of authentication protocols accepted by this network

The name of an existing user group under which the rsync process should run.

Name of the plugin linked to $XDG_CONFIG_HOME/ranger/plugins/

Only listen to incoming requests on specific IP/host

Name of this overlay

The name of this server.

The port on which to listen and send IPv4 broadcast announcements to.

The port on which to listen and send IPv4 broadcast announcements to.

The user's primary group.

The flake reference to be rewritten.

The flake reference to be rewritten.

PostgreSQL database name

Path of the source file or directory

Specify the controller targets

Name of symlink

The user's home directory

By default, all networks will get same priority group (0)

The IPv4 address on the guest VLAN.

Configure listen addresses and ports for ftpd.

A list of addresses and ports on which to listen.

The name of this gateway as shown in firezone

Addresses of statically configured Thanos API servers (repeatable)

When using the SLiRP user networking (default), this option allows to forward ports to/from the host/guest.

Database name.

The relay server IP addresses or DNS names of the RustDesk relay.

Server name.

The name of this systemd unit, including its extension

Lines which would be added inside ups.conf for handling this UPS.

This optional key can be used to request that the service be registered with the mDNSResponder(8)

Creating multiple WLAN interfaces on top of one physical WLAN device (NIC)

Server CoAP listen address

Whether the target path should be unconditionally replaced by the managed file source

Whether the target path should be unconditionally replaced by the managed file source

IP addresses or subnets allowed to call the periphery API

Name of the existing database (has no effect if type is "sqlite").

Name of the local AutoSSH session

Name of the local AutoSSH session

Display name of the radio station.

For an IPv6-based tunnel, the maximum number of nested encapsulation to allow. 0 means no nesting, "none" unlimited.

Specifies the real host name to log into.

The name of this gateway group

Name of symlink

Configure listen addresses and ports for httpd.

Configure listen addresses and ports for sftpd.

Members of this group can control wpa_supplicant.

Name of symlink

The name of this resource

Domain to fetch certificate for (defaults to the entry name).

The addresses to send outgoing mail to.

The list of nameservers

Path to target file relative to xdg.configHome.

Path of the source file or directory

When set to something distinct to null NSD is able to collect statistics per zone

Select the encapsulation type:

• 6in4: the IPv6 packets are encapsulated using the 6in4 protocol (formerly known as SIT, RFC 4213);

• gue: the IPv6 packets are encapsulated in UDP packets using the Generic UDP Encapsulation (GUE) scheme;

• foo: the IPv6 packets are encapsulated in UDP packets using the Foo over UDP (FOU) scheme.

Shell commands to run when file has changed between generations

Each attribute of this option defines a systemd service that runs hans

List of IP addresses to query as recursive DNS resolvers.

Create the home directory when creating the user.

The group GID

Source port when using UDP encapsulation

The local hostname, or local network name, is displayed beneath the computer's name at the top of the Sharing preferences pane

The name of the wrapper program

A list of valid fully-qualified domain names (FQDNs) and/or IP addresses that can be used to reach the NetBox service.

Either the fully qualified domain name (FQDN), or just the host name if it does not exists

User to run the cgit service as.

The path to the user's shell

Text of this systemd unit.

Name of the snippet.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Alias of home.pointerCursor.name.

Name of symlink (relative to /etc)

You need to set it to the IP from which your reverse proxy sends requests to Mastodon's web process, otherwise Mastodon will record the reverse proxy's own IP as the IP of all requests, which would be bad because IP addresses are used for important rate limits and security functions.

Either the fully qualified domain name (FQDN), or just the host name if it does not exist

Bind port for ‹name› endpoint.

The flake reference from is rewritten to

If set to false, the user account will not be created

The name of the dawarich database.

MySQL database name.

Database name for FreshRSS.

Local addresses to which the server binds.

Name of the satellite.

Directory of sockets for controlling wpa_supplicant.

Add the necessary actions for a upsmon process to work

Start the specified units when this unit is started.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Whether this file should be generated

Supported versions to enable on this switch.

The name of services's user

Attributes for user's entry in pam_mount.conf.xml

IPv6 address to bind to

If vhosts do not specify listenAddresses, use these addresses by default

Name of the game as it will appear in the game listing.

Bind port for ‹name› endpoint.

The flake input from is rewritten to.

The flake input from is rewritten to.

The flake input to which from> is to be rewritten.

Node name

The account name

Name of the beat

Listen addresses for incoming connections

The user's auxiliary groups.

Upstream resolver(s) to use as fallback for non-loki addresses

This option allows you to define Ethernet bridge devices that connect physical networks together

This optional key specifies the node to connect(2) or bind(2) to.

Name of the modifier.

The name of the file or block device that should be used as header for the encrypted device.

Database name.

Frontend server interface binding specification as either a host:port pair or a unix domain docket

Shell commands to run when file has changed between generations

Path to encrypted luks device that contains the user's home directory.

Set the log-level

This optional key tells launchctl what type of socket to create

Override for package "short name", used for generating configuration

The name of the file (can be a raw device or a partition) that should be used as the decryption key for the encrypted device

The specified name-string gives the system file name of the storage device managed by this storage daemon

Whether to enable this mount.

A short description of the user account, typically the user's full name

Where to mount this dataset.

Allow normal users to control wpa_supplicant through wpa_gui or wpa_cli

Whether to enable automatic mounting.

The group's members.

Path of the source file or directory

Path of the source file or directory

Whether the target path should be unconditionally replaced by the managed file source

Action to take when a virus is detected

Configure listen addresses and ports for webdavd.

TLS options for virtual host

Port number Go Ethereum will be listening on, both TCP and UDP.

If the specified units are started at the same time as this unit, delay this unit until they have started.

The flake reference to be rewritten

Database name.

This optional key implies SockFamily is set to "Unix"

APIs to enable over WebSocket

Group to run the cgit service as.

Send the XCLIENT command to the receiving server, for forwarding client addresses and connection information if the receiving server supports this feature.

Whether to create the home directory and ensure ownership as well as permissions to match the user.

FROM address that overrides the built-in sharing-noreply and lostpassword-noreply FROM addresses

Name for where mail coming from the remote (far) mail server will end up locally

S3 bucket name to use for HTTP-01 based challenges

Profile name

Path to the directory storing the hooks

Path to the directory storing the hooks

Target node name on the IBM TSM server.

Format: [AXFR|UDP] <ip-address> <key-name | NOKEY>

Name of this virtual host

IP addresses or hostnames of all nodes in the cluster, including this node

Database name.

Database name.

This optional key specifies the mode of the socket

A path which will be scanned for repositories.

Each attribute of this option defines a systemd service that runs iodine

Extra configuration lines to add to THIS channel's configuration.

The nickname of this Tahoe node.

Start the specified units when this unit is started.

The set of system-wide known SSH hosts

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Discourse database name.

Name of the PCM card to control (slave).

Rename nodes to different name.

What port to listen for client requests, default is 1080.

ACME options for virtual host.

HTTP options for virtual host

The addresses of hosts designated as contact points in the cluster

Whether to enable ‹name›.

Name of the symlink (relative to /var/lib/rancher/k3s/server/manifests)

Start the specified units when this unit is started.

Start the specified units when this unit is started.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

The plugin.

Dedicated mail domain used for ephemeral SRS envelope addresses

Shell commands to run when file has changed between generations

Shell commands to run when file has changed between generations

Port number of Go Ethereum HTTP API.

This optional key can be used to request that the service be registered with the mDNSResponder(8)

Allow the user to do certain things with upsd

Replace any existing runner with the same name

Replace any existing runner with the same name

DNS full-qualified domain name of a database server

DNS full-qualified domain name of a database server

A local file path specifying the location of the mount point.

cgit repository settings, see cgitrc(5)

Generic name of the application.

SSID to be used in IEEE 802.11 management frames.

The upstream provider to use or custom in case you do not trust any of the predefined providers or just want to use your own

Whether to enable ‹name›.

VirtualHost to serve cgit on, defaults to the attribute name.

Name of the remote read config, which if specified must be unique among remote read configs

Username

The name of the first admin user.

Subordinate group ids that user is allowed to use

Subordinate user ids that user is allowed to use

The type of the device.

How to display the tag when focused.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Hash, with md5, client names and MAC addresses

The name of the database to create.

Database name.

If the specified units are started at the same time as this unit, delay this unit until they have started.

This optional key can be used to request that the service be registered with the mDNSResponder(8)

Whether to enable cgit.

SRS tag separator used in generated sender addresses

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Name of Google storage bucket

The user's shell

Interface name

Packages added to the service's PATH environment variable

Path to a certificate signing request to apply when fetching the certificate.

List of addresses, one for each ring.

Path of the source file or directory

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

The user names of the group members, added to the /etc/group file.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Name of the symlink (relative to /var/lib/rancher/rke2/server/manifests)

Real name

The name of this client as shown in firezone

Name of the model to download and use for speech synthesis

List of target IP ranges, use empty list for any

Blockchain garbage collection mode.

Whether to enable hub instance.

This optional key can be used to request that the service be registered with the mDNSResponder(8)

Name of the remote write config, which if specified must be unique among remote write configs

Members of this group can access the control socket for this interface.

A list of valid fully-qualified domain names (FQDNs) and/or IP addresses that can be used to reach the Froide-Govplan service.

Specify the bind mode that the bind is used in

Automatically allocate subordinate user and group ids for this user

The type of the desktop entry.

The path to the user's shell

Instead of synchronizing just the mailboxes that match the farPattern, use it as a prefix which is not matched against the patterns, and is not affected by mailbox list overrides.

Count of subordinate user ids

Count of subordinate group ids

Interface to use when method is iface.

Whether to join this channel on connect.

Proxy account name, without the possibility to include domain name ('at' sign is interpreted literally).

If set to false, the user account will not be created

If enabled, spacecookie will hide personal information of users like IP addresses from log output.

Whether the SSID is to be interpreted using UTF-8 encoding.

Aliases of that unit.

Aliases of that unit.

Name of the user to ensure.

Name of the user to ensure.

Override the default TLS port for this virtual host.

Whether to enable Go Ethereum Node.

Additional arguments passed to Go Ethereum.

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

This optional key specifies the service on the node to connect(2) or bind(2) to.

Name of the kernel module that provides the card.

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

Name of symlink

Program to execute, possibly with arguments.

Name that will be shown.

Name of modem configuration file, will be searched for in config in the spooling area directory.

Start the specified units when this unit is started.

Start the specified units when this unit is started.

Attributes for user's entry in pam_mount.conf.xml

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Database name.

Database name.

Name of database.

The user's auxiliary groups.

Backup type as described in: https://pgbackrest.org/command.html#command-backup/category-command/option-type

Path to the private key to the matching certificate signing request.

Set the host address for this virtual host

Local secret key in hexadecimal form.

Port to listen on (applies to all listen addresses).

Style to use for Qt5/Qt6 applications

ID of the user in initrd.

Name of the PostgreSQL database.

The name of the Linkwarden database.

Database name.

IMAP4 patterns for which mailboxes on the remote mail server to sync

Bind address for ‹name› endpoint.

Name displayed when sending mails.

Name of consistency check to run.

Path to encrypted luks device that contains the user's home directory.

The name of the host in the network as well as the configuration for that host

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Whether to enable TLS support.

Remove /etc/hosts entries for "127.0.0.2" and "::1" defined in nixos/modules/config/networking.nix Regionservers must be able to resolve their hostnames to their IP addresses, through PTR records or /etc/hosts entries.

Shell commands to run when file has changed between generations

Local Mattermost database name.

The name of the Grafana database.

Root directory for requests.

Database name to use when connecting to an external or manually provisioned database; has no effect when a local database is automatically provisioned

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

static: Immediately answer any Neighbor Solicitation Messages (if they match the IP rule). iface: Forward the Neighbor Solicitation Message through the specified interface and only respond if a matching Neighbor Advertisement Message is received. auto: Same as iface, but instead of manually specifying the outgoing interface, check for a matching route in /proc/net/ipv6_route.

Location of the host path to be mounted.

Name of the PCM device to control (slave).

Set name to shared memory zone.

The node name of the device

The node name of the device

A list of valid fully-qualified domain names (FQDNs) and/or IP addresses that can be used to reach the peering manager service.

Group running the ACME client.

Whether to enable remove bind.

Bind address for ‹name› endpoint.

Name to display

This optional key specifies the node to connect(2) or bind(2) to.

Shell commands executed as the service's main process.

Icon to display in file manager, menus, etc.

This option allows you to define Open vSwitches that connect physical networks together

Output DPI configuration.

Output DPI configuration.

Whether the luksOpen will be attempted before LVM scan or after it.

Override the default HTTP port for this virtual host.

Name of the homebridge UI platform

Start the specified units when this unit is started.

Start the specified units when this unit is started.

Packages added to the service's PATH environment variable

Whether the from reference needs to match exactly

Whether the from reference needs to match exactly

Whether the from reference needs to match exactly

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Username used to connect to registry.

This optional key specifies the protocol to be passed to socket(2)

The relationship with upsd

Name of the MySQL database that holds EPGStation's data.

Name of the beat

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

This optional key tells launchctl what type of socket to create

Name for the filter.

The object to make available inside the initrd.

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Wireguard address of this peer (a single IP address, multiple addresses or address ranges are not supported).

Output resolution.

Output framerate.

Output resolution.

Output framerate.

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Whether to create the home directory and ensure ownership as well as permissions to match the user.

Name of symlink

Instance name.

Verify peer certificate

Verify peer certificate

A list of email addresses to send certificate updates to.

The actual zone data

DEPRECATED, use driverOptions

A program name specifying a Postfix service/daemon process

Path of the source file.

Adds index directive.

Alias directory for requests.

Name of the printer / printer queue

Whether to enable DNSSEC.

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Define a launchd job

This optional key implies SockFamily is set to "Unix"

Aliases of that unit.

Aliases of that unit.

The set of packages that should be made available to the user

The set of packages that should be made availabe to the user

Output video display controller.

Output video display controller.

This optional key specifies the node to connect(2) or bind(2) to.

How to display the tag when unfocused

Change current mode after bind is executed

Zone file resource records contain columns of data, separated by whitespace, that define the record.

Username from upsd.users for accessing this UPS

If true, the user's shell will be set to users.defaultUserShell.

Disable running fsck on this filesystem.

The cgit package to use.

The geth package to use.

Uhub plugin configuration.

Adds DirectoryIndex directive

Alias directory for requests

The name of the machine

Enables nylon as a running service upon activation.

This optional key tells launchctl what type of socket to create

Aliases of that unit.

Aliases of that unit.

Adds try_files directive.

Start URL of the site.

Packages added to the service's PATH environment variable

Marks the server as a backup server

Levels (minimum value for logged events): 0 = verbose debugging 1 = debugging 2 = informational messages 3 = notification 4 = warning

Isolate traffic between stations (clients) and prevent them from communicating with each other.

Whether to enable Go Ethereum HTTP API.

This can be set as a global variable above your first UPS definition and it can also be set in a UPS section

The server username of this account

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Keeps the specified running while this unit is running

This optional key specifies the node to connect(2) or bind(2) to.

This optional key specifies the mode of the socket

How to name the created archives

Output gamma configuration.

Output gamma configuration.

Optional PKCS#11 module name.

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Determine whether the mounted path will be accessed in read-only mode.

Start of the range of subordinate user ids that user is allowed to use.

Start of the range of subordinate group ids that user is allowed to use.

Custom skills for Claude Code

ID of the group in initrd.

This optional key implies SockFamily is set to "Unix"

This optional key tells launchctl what type of socket to create

Vertical scaling factor/pixels.

Horizontal scaling factor/pixels.

Horizontal scaling factor/pixels.

Vertical scaling factor/pixels.

Name of symlink

The device to update.

Password HMAC-SHA-256 for JSON-RPC connections

Shell commands executed as the service's main process.

Label of the unlocked encrypted device

The MIME type(s) supported by this application.

This is the name that will be displayed by NetworkManager and GUIs.

Name of this virtual host

Remote public key in hexadecimal form.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

The domain name to collect stats for.

List of IP addresses this server is advertised under

Start the specified units when this unit is started.

Start the specified units when this unit is started.

Subordinate user ids that user is allowed to use

Subordinate group ids that user is allowed to use

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

A system group name for this client instance.

A system group name for this client instance.

Name of symlink

Local name of the IBM TSM server, must not contain space or more than 64 chars.

Whether to enable this PPP peer.

Port to bind the TTS server to.

User account under which this pool runs.

Whether to enable Operate silently.

Text of the file.

The hotkey.

Optional PKCS#11 module name.

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Directory for the ACME challenge, which is public

Adds a return directive, for e.g. redirections.

This optional key implies SockFamily is set to "Unix"

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

User name of file owner

This optional key specifies the mode of the socket

Label for this destination

Use a different name as mailbox name

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Path] section of the unit

Interfaces for which to start wpa_supplicant

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

This optional key is a variant of SockPathName

Command executed as the service's main process.

DNS full-qualified domain name of a database server

Custom skills for Codex

Mount point on the container file system.

Text of the file.

The user names of the group members, added to the /etc/group file.

Master=false means slave server

Limit retry time for secondary zones.

Whether to enable this RAUC slot.

The name of the database to store data in.

The path to the user's shell in initrd.

Group the user belongs to in initrd.

Name of the homebridge

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

This optional key specifies what nice(3) value should be applied to the daemon.

Whether to enable the output.

Output rotate configuration.

Whether to enable the output.

Output rotate configuration.

Label to use for the name of the config file.

The network to connect to

Container icon.

Performs reverse path filtering (RPF) on IPv6 packets as per RFC 3704

Path to the file which contains the actual base64 encoded key

Automatically allocate subordinate user and group ids for this user

Enables HTTP/3 over QUIC on the UDP port for TLS

A system group name for this client instance.

A system group name for this client instance.

Count of subordinate group ids

Count of subordinate user ids

Shell commands executed as the service's main process.

This optional key specifies the mode of the socket

Specifies the user to log in as.

The database name.

An attribute set of option values passed to rclone mount

Environment variables used for this PHP-FPM pool.

These lines go to the end of cgitrc verbatim.

Shell commands executed to stop the service.

Server name to verify the hostname on the returned gRPC certificates

Tunnel type.

Aliases of that unit.

Aliases of that unit.

Specify the log file name

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Interpolation method to be used for scaling the output.

Adds DirectoryIndex directive

Alias directory for requests

Container ID

Key type to use for private keys

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Keeps the specified running while this unit is running

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Enable logging, default is no logging.

Set the date on which the user's account will no longer be accessible

Whether to enable the filesystem mount.

Optional PKCS#11 module name.

The ID of the sound card

Pair of roots to synchronise.

Location of hardware kiss tnc for this interface.

Path of the underlying encrypted block device.

This required key uniquely identifies the job to launchd.

Address where Node exporter exposes its HTTP interface

Commands to run after new certificates go live

When or how often the backup should run

Name shown in the website title and on the front page.

Name of the tun device

Group name of file owner

Configuration for this host

Container color.

Tunnel type.

Text of the file.

Start the specified units when this unit is started.

This optional key specifies the service on the node to connect(2) or bind(2) to.

Minimum remaining validity before renewal in days.

Environment variables and their value to send to the server.

Basic Auth protection for a vhost

Keeps the specified running while this unit is running

Keeps the specified running while this unit is running

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Email address for account creation and correspondence from the CA

Units that want (i.e. depend on) this unit

The Flake URI of the NixOS configuration to use for the container

Database name to connect to

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

A list of host names and/or IP numbers used for accessing the host's ssh service

A program name specifying a Postfix service/daemon process

A short description of the user account, typically the user's full name

Keyset used for tunnel identity.

Group account under which this pool runs.

The database engine name

Guaranteed minimum hops for ‹name› tunnels.

Hash, with md5, client names and MAC addresses

Port number of Go Ethereum metrics service.

Listen address of Go Ethereum HTTP API.

Specifies port number to connect on remote host.

Aliases of that unit.

Aliases of that unit.

pppd configuration for this peer, see the pppd(8) man page.

Whether to enable enable the bind

Each attribute in this set specifies an option in the [Path] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Source directories.

Container icon.

Domain name

The serial port speed of this interface.

Command executed as the service's main process.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

Indicates whether this is an account for a “real” user

Units that want (i.e. depend on) this unit

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Whether output should be marked as primary

Whether output should be marked as primary

The specified name-string must be the generic SCSI device name of the autochanger that corresponds to the normal read/write Archive Device specified in the Device resource

Dataset name to send snapshots to.

Root directory for requests.

Output scaling method.

Output scaling method.

Optional slot number of the token that stores the certificate.

Keyset used for tunnel identity.

List of configuration directives for this UPS.

User name

Name of the voice model to use

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Guaranteed minimum hops for ‹name› tunnels.

Blacklist an attacker when its score exceeds threshold

Port number of Go Ethereum Auth RPC API.

Whether to offload computation onto a CUDA compatible GPU.

FQIN of referenced Image when source is a file or directory archive.

This optional key specifies the service on the node to connect(2) or bind(2) to.

The full path to a file that contains the user's (clear text) password

The packaged Helm chart

The user as which to run bitcoind.

Blockchain sync mode.

Maximum peers to connect to.

Name of the class implementing the check

The port on which the tub will listen

The port on which the Web server will listen

command that will be execute

GVPE node name

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

Path of the source file or directory.

Container ID

Indicates if the user is a system user or not

UUID of the stratis pool that the fs is located in

This is only relevant if you are using stratis.

Text of the file.

Each attribute in this set specifies an option in the [Exec] section of this unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Path to target relative to the vault's directory.

Shell commands executed to stop the service.

The ID of your hook

Put the host-side of the veth-pair into the named bridge

This optional key specifies the protocol to be passed to socket(2)

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

If the specified units are started at the same time as this unit, delay this unit until they have started.

The set of packages that should be made available to the user

The path to repo in local machine

Source of the plugin package or path

The location of the Drupal files directory.

The name of the Stash Box

The font name, null to use system default.

Source of the custom plugin

Container color.

The option to use this LUKS device with a GPG encrypted luks password by the GPG Smartcard

Shell commands executed after the service's main process has exited.

If true, the user's shell will be set to users.defaultUserShell.

This optional key specifies the service on the node to connect(2) or bind(2) to.

Let the user initiate specific instant commands

Extra lines to append to this profile's config.

Optional slot number of the token that stores the certificate.

Automatically retrieve listen addresses from the Yggdrasil router configuration

Service port

Environment variables to send from the local host to the server.

Path to a Containerfile which contains instructions to build the image.

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

Alias directory for requests.

Adds index directive.

Tooltip for the entry.

Name shown in the server list.

When to run the job.

Image to pull.

The ‹name› package to use.

Append Yggdrasil router configuration with listeners on loopback addresses (127.0.0.1) and preselected ports to support peering using client-server protocols like quic and tls

The location of the Drupal site state directory.

Start the specified units when this unit is started.

Operate on preset bindings or user bindings

Whether to enable redraw prompt after command.

The user's username.

Override the default port on which to listen for connections.

Command executed as the service's main process.

Controls how long a valid or invalid entry remains in the cache, in milliseconds.

Keeps the specified running while this unit is running

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Keeps the specified running while this unit is running

Extra configuration to be appended to awstats.${name}.conf.

This optional key specifies that launchd should adjust its log mask temporarily to LOG_DEBUG while dealing with this job.

Attribute set of NetBird client daemons, by default each one will:

1. be manageable using dedicated tooling:

• netbird-<name> script,
• NetBird - netbird-<name> graphical interface when appropriate (see ui.enable),

2. run as a netbird-<name>.service,
3. listen for incoming remote connections on the port 51820 (openFirewall by default),
4. manage the netbird-<name> wireguard interface,
5. use the /var/lib/netbird-/config.json configuration file,
6. override /var/lib/netbird-/config.json with values from /etc/netbird-/config.d/*.json,
7. (hardened) be locally manageable by netbird-<name> system group,

With following caveats:

• multiple daemons will interfere with each other's DNS resolution of netbird.cloud, but should remain fully operational otherwise

Configuration for MPD

Contents of the PAM service file.

Environment Variables to set in session.

Username used in the machine image

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Absolute path to the certificate to load

When you have multiple UPSes on your system, you usually need to turn them off in a certain order. upsdrvctl shuts down all the 0s, then the 1s, 2s, and so on

Packages added to the service's PATH environment variable

A name for the drive

Name that will be shown to the user.

Output position

Output position

Shell commands executed before the service's main process is started.

This optional key specifies the protocol to be passed to socket(2)

The data directory for bitcoind.

When or how often the backup should run

Start of the range of subordinate group ids that user is allowed to use.

Start of the range of subordinate user ids that user is allowed to use.

Legacy RSA public key of the host in PEM format, including start and end markers

Primary nickname.

Path to world folder containing the dimension to render

List of servers for inclusion in stub and secondary zones.

The IP interface to bind to. null means "all interfaces".

Custom name of this poller.

Adds try_files directive.

cgit configuration, see cgitrc(5)

Configuration of uhub

This optional key is used to control whether your job is launched once at the time the job is loaded

Aliases of that unit.

Aliases of that unit.

The IPv6 address assigned to the host interface. (Not used when hostBridge is set.)

Name of a file containing the spiped key

Identifier of the UPS to monitor, in this form: <upsname>[@<hostname>[:<port>]] See upsmon.conf for details.

Type of the file system

Name of the user to log in

Which local IP to bind the UDP socket to.

Enable unlocking and mounting of encrypted ZFS home dataset at login.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Extra lines to add to the tinc service configuration file

This optional key specifies the user to run the job as

The address on which to accept FastCGI requests.

Location of bitcoind pid file.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

The certificate profile to choose if the CA offers multiple profiles.

Name of the class implementing the check

These lines go to the end of the location verbatim.

The kimai package to use.

The tahoelafs package to use.

Path of the authentication file.

The name of the module

Source ZFS dataset

Common name attribute of allowed peer certificates

Common name attribute of allowed peer certificates

List of channels that should be grouped together into this group

The group of the wrapper program.

The group as which to run bitcoind.

The owner of the wrapper program.

The packaged Helm chart

Absolute path to the certificate to load

This optional key specifies the protocol to be passed to socket(2)

Basic Auth password file for a vhost

Shell commands executed as the service's main process.

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Text of the file.

Text of the file.

The host to connect to.

The username to authenticate with.

The port to connect to.

GPG configuration.

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

Text of the file.

Text of the file.

Guaranteed minimum hops for ‹name› tunnels.

Whether to enable Drupal web application.

Extra arguments to pass to the server commandline.

Whether to enable Coqui TTS server.

Optional slot number of the token that stores the certificate.

Each attribute in this set specifies an option in the [Slice] section of the unit

Each attribute in this set specifies an option in the [Files] section of this unit

Specifies the number of retries for failed notifies

If the specified units are started at the same time as this unit, delay this unit until they have started.

Each attribute of this option defines a systemd service that runs an OpenVPN instance

Keeps the specified running while this unit is running

Keeps the specified running while this unit is running

PostgreSQL host for operating remotely.

Whether to enable the filesystem mount.

Whether to enable proxy for this bucket

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Override the default port on which to listen for JSON-RPC connections.

Shell commands executed after the service's main process has exited.

Language of the environment

The name of a .desktop file in the directory specified in the 'package' option.

Adds a return directive, for e.g. redirections.

Shell commands executed after the service's main process is started.

Shell commands executed when the service's main process is reloaded.

As which user the backup should run.

Path of the source file.

Name of the runner group to add this runner to (defaults to the default runner group)

A short description of the user account, typically the user's full name

Name of the runner group to add this runner to (defaults to the default runner group)

Guaranteed minimum hops for ‹name› tunnels.

The subnets which this tinc daemon will serve

The name of the user for this authelia instance.

The name the camera will show up as.

Additional global flags to pass to all lego commands.

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

Errbot backend name.

The set of actions made available to application launchers.

Path to the Public Key.

Path to file containing local secret key in binary or hexadecimal form.

User name for authentication.

Commands to execute after the tmux-session is destroyed.

add will additionally listen for TLS connections. only will disable TLS connections. force will redirect non-TLS traffic to the TLS connection.