List of public keys used to sign binary caches

List of public keys used to sign binary caches

If enabled (the default), Nix will only download binaries from binary caches if they are cryptographically signed with any of the keys listed in nix.settings.trusted-public-keys

If enabled (the default), Nix will only download binaries from binary caches if they are cryptographically signed with any of the keys listed in nix.settings.trusted-public-keys

A list of SSH public keys allowed to access the binary cache via SSH.

Path to the file containing the KSK public key

List of public key files that will be imported by gpg.

A list of public keys to be imported into GnuPG

A list of public keys of upstream caches in the format host[-[0-9]*]:public-key

A list of verbatim OpenSSH public keys that should be added to the user's authorized keys

A list of verbatim OpenSSH public keys that should be added to the user's authorized keys

The path to the public key file for the host

A list of verbatim OpenSSH public keys that should be added to the user's authorized keys

A list of public keys of upstream caches in the format host[-[0-9]*]:public-key

The path to the public key file for the host

Path to the file containing the ZSK public key

Whether to add nix-ssh to the nix.settings.trusted-users

Whether to enable exposing OpenSSH public keys defined in userdb

The amount of trust you have in the key ownership and the care the owner puts into signing other keys

Public key for Stripe

List of raw public key candidates to use for authentication

Directory for the ACME challenge, which is public

Directory for the ACME challenge, which is public

Directory for the ACME challenge, which is public

Directory for the ACME challenge, which is public

Directory for the ACME challenge, which is public

Directory for the ACME challenge, which is public

Directory for the ACME challenge, which is public

Directory for the ACME challenge, which is public

Directory for the ACME challenge, which is public

Directory for the ACME challenge, which is public

Directory for the ACME challenge, which is public

Path to a file containing the public key of the local Rosenpass peer

List of raw public keys to accept for authentication

Directory for the ACME challenge, which is public

Directory for the ACME challenge, which is public

Directory for the ACME challenge, which is public

Directory for the ACME challenge, which is public

Directory for the ACME challenge, which is public

Directory for the ACME challenge, which is public

Directory for the ACME challenge, which is public

Directory for the ACME challenge, which is public

Directory for the acme challenge which is PUBLIC, don't put certs or keys in here

Directory for the acme challenge which is PUBLIC, don't put certs or keys in here

Directory for the ACME challenge, which is public

Directory for the ACME challenge, which is public

Directory for the acme challenge which is PUBLIC, don't put certs or keys in here

Directory for the ACME challenge, which is public

Directory for the ACME challenge, which is public

List of public signing keys of users that can access the admin panel

A list of files each containing one OpenSSH public key that should be added to the user's authorized keys

A list of files each containing one OpenSSH public key that should be added to the user's authorized keys

Directory for the ACME challenge, which is public

Directory for the acme challenge which is PUBLIC, don't put certs or keys in here

Directory for the ACME challenge, which is public

A list of files each containing one OpenSSH public key that should be added to the user's authorized keys

Directory for the acme challenge which is PUBLIC, don't put certs or keys in here

Installing a public key allows firmware signed with a matching private key to be recognized as trusted, which may require less authentication to install than for untrusted files

Whether to generate signing keys in /etc/guix which are required to initialize a substitute server

Public SSH keys that are given full write access to this repository

Directory for the ACME challenge, which is public

Serve BorgBackup repositories to given public SSH keys, restricting their access to the repository only

Allows the generation of a private key and associated self-signed certificate

Define your TSIG keys here.

Path-prefrix for the CA-certificate to be used for cfssl signing

Directory for the acme challenge which is PUBLIC, don't put certs or keys in here

Directory for the acme challenge which is PUBLIC, don't put certs or keys in here

Directory for the acme challenge which is PUBLIC, don't put certs or keys in here

List of peer public keys to allow incoming peering connections from

Directory for the acme challenge which is PUBLIC, don't put certs or keys in here

Directory for the ACME challenge, which is public

The Public share directory.

Filesystem location where Nexus should store the bank public keys.

Specifies a program to be used to look up the user's public keys

File containing PEM-encoded x509 RSA or ECDSA private or public keys, used to verify ServiceAccount tokens

Directory for the ACME challenge, which is public

A list of names of users (separated by whitespace) that are allowed to connect to the Nix daemon

A list of names of users (separated by whitespace) that are allowed to connect to the Nix daemon

Path to file with trusted public keys in OpenSSH's authorized_keys format

The username to log in as on the remote host

The username to log in as on the remote host

The username to log in as on the remote host

Servers listed here will be used to gather public keys of other servers (notary trusted key servers)

The (base64-encoded) public host key of this builder

The (base64-encoded) public host key of this builder

The (base64-encoded) public host key of this builder

Additional packages to place in the path of public-inbox-mda, public-inbox-watch, etc.

Public SSH keys that can only be used to append new data (archives) to the repository

Keys to add to keychain.

Path to the file where DHT keys are stored.

File to persist HTTPPROXY keys.

The public key data for the host

The public key data for the host

Settings for the public-inbox config file.

Servers listed here will be used to gather public keys of other servers (notary trusted key servers)

Text of an OpenPGP public key.

File to persist SOCKSPROXY keys.

Path to store SSH host & client keys.

Command-line arguments to pass to public-inbox-mda(1).

Path to TLS key to use for connections to public-inbox-nntpd(1).

Path to TLS key to use for connections to public-inbox-imapd(1).

The path to the public key file for the host

Command-line arguments to pass to public-inbox-nntpd(1).

Command-line arguments to pass to public-inbox-httpd(1).

Command-line arguments to pass to public-inbox-imapd(1).

Path of an OpenPGP public key file.

Whether to enable the public-inbox mail archiver.

Path to TLS certificate to use for connections to public-inbox-imapd(1).

Path to TLS certificate to use for connections to public-inbox-nntpd(1).

The public key data for the host

public inboxes

Whether to enable the public-inbox Mail Delivery Agent.

The public-inbox package to use.

Keyboard shortcuts configuration for Fluxbox, written to ~/.fluxbox/keys

An SSH public key (as an absolute file path or directly as a string), usually generated by rad auth.

Whether to enable the public-inbox NNTP server.

Whether to enable the public-inbox HTTP server.

Whether to enable the public-inbox IMAP server.

Game will be published on the official Factorio matching server.

If you're running a self hosted instance and wish to serve public links, set this to the URL where your albums web app is running.

Directory containing ssh keys, defaulting to auto-generation

Path to the file which contains the actual base64 encoded key

Mapping of keypad keys to remap

Path to the Public Key.

Keyset used for tunnel identity.

Listening port

Listening port

Keyset used for tunnel identity.

Maximum number of returned keys in keys command. keys is a dangerous command

Root paths or URLs that public-inbox will be served on

Make your The Lounge instance public

Whether to enable Immich Public Proxy.

The public ipv4 address of this relay

The public ipv6 address of this relay

Allows loading of public environment variables, these are emitted to the log so it shouldn't contain secrets.

The immich-public-proxy package to use.

A comma-separated list of subnets that will be used as public networks in the cluster.

List of keycodes to match.

Remote public key in hexadecimal form.

Configuration for IPP

Public http server binding [address]:port.

Authentication algorithm for this key.

The local path name of a CSS file for the PSGI web interface.

Mapping of keyboard keys to remap

Path to the file containing the KSK private key.

Paths for public-inbox-watch(1) to monitor for new mail.

The fully qualified, publicly accessible URL

SpamAssassin configuration specific to public-inbox.

NNTP URLs to this public-inbox instance

POP3 URLs to this public-inbox instance

IMAP URLs to this public-inbox instance

Path to the file containing the ZSK private key.

The email addresses of the public-inbox.

Controls which lists (if any) are listed for when the root public-inbox URL is accessed over HTTP.

IP accessible by other nodes for inter-host communication

The port that IPP will listen on.

code repositories

Inboxes to configure, where attribute names are inbox names.

A key list specifying a host switch combination.

A list of key names is available in https://github.com/htrefil/rkvm/blob/master/switch-keys.md.

Whether this is a public client (enforces PKCE, doesn't use a basic secret)

The absolute path to the directory which hosts the public-inbox.

Listening port or systemd's ListenStream= entry to be used as a reverse proxy, eg. in nginx: locations."/inbox".proxyPass = "http://unix:${config.services.public-inbox.http.port}:/inbox"; Set to null and use systemd.sockets.public-inbox-httpd.listenStreams if you need a more advanced listening.

Path to a git repository

Whether to enable macOS key remapping service.

URL of a cgit instance

URL of the Immich instance

URL where this inbox can be accessed over HTTP.

Whether to enable access from anywhere (rather than just localhost).

HTTPS URL pattern used to generate links to view content on Radicle via the browser.

If set to spamc, public-inbox-watch(1) will filter spam using SpamAssassin.

Whether to enable the integration into Postfix.

Public key at the opposite end of the tunnel.

Public key at the opposite end of the tunnel.

Whether to enable opening the firewall when using a port option.

Specify SSH host keys to import into the initrd

List of keys to match

Public address to assume when running behind NAT.

Set name to shared memory zone.

Set size to shared memory zone.

If set to spamc, public-inbox-watch(1) will filter spam using SpamAssassin.

The name of public X.509 certificate (chain) file in PEM format for this policy to be found in the baseDirectory, or the absolute path to the certificate file

The public key for this peer.

The base64 public key to the peer.

Whether to open the IPP port in the firewall

Node key file.

Public base URL where the server is visible.

If specified, public-inbox-watch(1) will only process mail containing a matching header.

Whether to enable public mode.

Nicknames of a 'coderepo' section associated with the inbox.

Which GPG keys (by keygrip) to expose as SSH keys.

NNTP group name for the inbox.

If set, mail in this maildir will be trained as spam and deleted from all watched inboxes

URL under which the media proxy is publicly acccessible.

The base64 public key of the peer.

Whether to use sign the limine binary with sbctl.

Path to a file containing the public key of the remote Rosenpass peer.

Key server from which to fetch and update keys

Whether to enable the Mopidy OSX Media Keys support daemon.

Public information about clouds

Configuration options to set in the GitLab Pages config file

User-visible description for the repository.

Publicly visible IP address of the process

If set to true, you may manage trust as a user using the gpg command

Controls whether the server will be publicly listed.

Whether to enable logkeys, a keylogger service.

The hosts config to be merged with the settings

The public-facing base URL for the client API (not including _matrix/...)

The key sequence that should be remapped

Use the given device as keyboard input event device instead of /dev/input/eventX default.

Public-facing endpoint that can receive webhooks.

Path to directory of X.509 certificates in PEM format for trusted parties

The key sequence that should be output when the input sequence is entered

Hotkeys to configure.

Initial administrative public key for Gitolite

The path to the file used for signing derivation data

Key bindings mapping keys to commands in different modes

Configuration for yggdrasil, as a structured Nix attribute set

The hotkey.

Your role in Tor network

If set to true, you may manage your keyring as a user using the gpg command

Keys to bind

The key sequence that should be output when the input key is tapped

If set, the calling user's SSH agent is used to authenticate against the configured keys

A file for storing secrets

The wshowkeys package to use.

Define new verbs

The key that should be remapped

The key sequence that should be output when the input key is held

Hotkeys settings specific to each lexer.

Hotkeys for Cudatext

The frp consists of client and server

This setting can be used to map keys to other keys

GnuPG configuration options

Java KeyStore file containing the certificates.

Whether to generate SSH host keys

Alternative path to storage of i2pd data (RI, keys, peer profiles, ...)

Keys to bind to command line commands which can only be one of the builtin commands

Enable automatic generation of account keys

Whether to enable wshowkeys (displays keypresses on screen on supported Wayland compositors)

Skydns path of TLS client certificate - public key.

Whether to enable brightness control with keyboard keys

This is a small wrapper over systemd's LoadCredential

Settings for customizing the keybinding to integrate your shell with intelli-shell

Skydns path of TLS certificate authority public key.

The string to prefix to keys.

Full public URL of gitea server.

Content of the Stubby configuration file

config.yaml for evdevremapkeys

Build veilid-server.conf with nix expression

The selector to use for DKIM key identification

Hotkey configuration written to $XDG_CONFIG_HOME/superfile/hotkeys.toml (linux) or Library/Application Support/superfile/hotkeys.toml (darwin), See https://superfile.netlify.app/configure/custom-hotkeys/ for supported values.

This option specifies the mediakeys package to use.

The group under which NNCP files shall be owned

The length of time to ensure that keys will be correct; no action will be taken to create new keys to be activated after this time.

Whether to enable Lightweight selfhosted Firefox Send alternative without public upload.

The hotkey modifiers.

Settings for MaryTTS

Wait for a keystroke before hiding the cursor

Path of the directory to look for TPM sealed keys in, defaults to $HOME/.ssh if unset

The public URL of the server, for password reset links.

The config directory, for the access keys and other settings.

Whether to enable automatic generation and persistence of keys

SSH public key allowed to login as user btrbk to run remote backups.

By default pam-ussh reads the trusted user CA keys from /etc/ssh/trusted_user_ca

Whether to make use of --to-code in keybindings.

Polybar configuration

Use F1, F2, etc. keys as standard function keys.

Public facing base URL of the service

This setting is required for any of the following features:

• attachments (to return a download URL)
• e-mail sending (for the topic URL in the email footer)
• iOS push notifications for self-hosted servers (to calculate the Firebase poll_request topic)
• Matrix Push Gateway (to validate that the pushkey is correct)

Full public URL of Forgejo server.

Use Tailscale Funnel to make tsidp available on the public internet so it works with SaaS products.

Servers trusted with signing server keys.

Configuration options for the Default Terminal Execution Specification

Load public posts

SSH keys that should be able to make or push snapshots on this system remotely with btrbk

Configuration options for the Default Terminal Execution Specification

The location of the system persistent storage file

Which port the sks-keyserver is listening on.

If enabled, pam_gnupg will attempt to automatically unlock the user's GPG keys with the login password via gpg-agent

Defines new command keys.

Passkeys required to access the periphery API

Public GitLab server URL.

Select whether rathole needs to be run as a client or a server

The path to load the secretKey for signing narinfos

Legacy RSA public key of the host in PEM format, including start and end markers

JSON file containing secret keys

Email domains handled by this instance

Web interface root public URL, including scheme and port (if non-default).

Whether to run searx in uWSGI as a "vassal", instead of using its built-in HTTP server

Enables P11 PAM (pam_p11) module

Defines new line-editing keys.

WireGuard public key corresponding to the remote Rosenpass peer.

Color configuration

OpenPGP public key.

Public network interface

How long to keep the private keys in memory

Whether to enable pgpkeyserver-lite on a nginx vHost proxying to a gpg keyserver.

Kafka broker configuration server.properties

List of peers to exchange keys with.

If using a Cloudfront/Cloudflare distribution or similar it can be set using this option

Authorized clients for a v3 onion service, as a list of public key, in the format:

descriptor:x25519:<base32-public-key>

See torrc manual.

The pgpkeyserver-lite package to use.

Configure nginx as a reverse proxy for mastodon

The public facing domain name used to access grafana from a browser

Path to the server's public key.

Whether to filter IPv6 traffic with 6to4 destination addresses that correspond to IPv4 addresses that should not be routed over the public internet.

List of peers to connect to, in the formats:

• quic://[2001:0db8::1]:9651
• quic://192.0.2.1:9651
• tcp://[2001:0db8::1]:9651
• tcp://192.0.2.1:9651

If addHostedPublicNodes is set to true, the hosted public nodes will also be added.

Key type to use for private keys

Whether to enable nginx or not

      Hotkeys to configure

Public address for p2p connections from peers (if TCP is used)

Whether to enable Kanidm SSH keys login.

Which IP address the sks-keyserver is listening on.

The hotkey.

The hostname part of the public URL used as base for all frontend requests

Configuration files to load besides the immutable one defined by the NixOS module

Whether to start the OpenSSH agent when you log in

The pass environment variables dictionary

The public websocket URL for livekit

The value has the grammar Key[|OtherKey]

Attribute set of environment variables.

https://github.com/Glimesh/broadcast-box#environment-variables

Files containing SSH host keys to set as global known hosts. /etc/ssh/ssh_known_hosts (which is generated by programs.ssh.knownHosts) is always included.

Influences logging

Which hostname to set the vHost to that is proxying to sks.

Public URL of the API address of the reverse proxy/tls terminator

The path that opendkim should put its generated private keys into

Settings serialized into config.yml before build

Paths to the signing keys to use for signing the cache

The path to the TLS key.

  nix-shell -p dendrite --command "generate-keys --tls-cert server.crt --tls-key server.key"

Wireguard public key of this peer.

Enables or disables the laptop keyboard's Function (Fn) lock at boot

Prefix for all Redis lock keys (only used when Redis is configured).

Where to bind the PostgREST web server.

The public URIs of the TURN server to give to clients

Specifies the key lib.types that will be used for public key authentication.

A list of files containing additional configuration to be included using the include directive

The maximum expiry delay in seconds to force in public mode.

Public server registration name, and also the name of the Root channel

Whether to enable authenticating using a signature performed by the ssh-agent

Path to TLS certificate

Path to the SSH host public key.

The public-facing port that PeerTube will be accessible at (likely 80 or 443 if running behind a reverse proxy)

The path to the TLS certificate.

  nix-shell -p dendrite --command "generate-keys --tls-cert server.crt --tls-key server.key"

Key policy for zone signing keys

Key policy for key signing keys

NixOS can automatically generate SSH host keys

Whether to enable Seahorse, a GNOME application for managing encryption keys and passwords in the GNOME Keyring.

Public domain of the API address of the reverse proxy/tls terminator.

Metadata keys that should be synchronized when vdirsyncer metasync is executed.

The public host name to serve.

Path to keystore (combined PEM with cert/key, or PKCS12 keystore)

Key type to use for private keys

Public URL where plausible is available

Whether to use the GnuPG key agent for SSH keys.

The trusted servers to download signing keys from.

Your factorio.com login credentials

Your factorio.com login credentials

The key to use as listed in gpg --list-keys.

Key size in bits to use when generating new keys.

Configuration for filebeat

ActivityPub public key

Whether to enable evdevremapkeys, a daemon to remap events on linux input devices.

Allow leaving config.boot.initrd.network.ssh.hostKeys empty, to deploy ssh host keys out of band.

Addresses of public STUN services to use to automatically find the public and local addresses of this Jitsi-Videobridge instance without the need for manual configuration

If set, the MUC rooms will be public by default.

Path to the file containing the secret keys.

Set the time a cache entry used for SSH keys is valid to the given number of seconds.

Set a specific keyfile for this archive

Rule configuration

Public URL of the API address of the reverse proxy/tls terminator

The frp consists of client and server

Enable Git daemon, which allows public hosting of git repositories without any access controls

Configuration for one or more device IDs

By default pam-u2f module reads the keys from $XDG_CONFIG_HOME/Yubico/u2f_keys (or $HOME/.config/Yubico/u2f_keys if XDG variable is not set)

Emit escape sequences for extra keys, like the modifyOtherKeys resource for xterm(1).

Set the maximum time a cache entry used for SSH keys is valid to n seconds

Configuration, except ids section, that is written to /etc/keyd/.conf

Configuration options corresponding to parameters set in conf/keycloak.conf

Base URL of the Matrix homeserver that provides the Client-Server API.

The changes the principal is allowed to make.

If set, keys listed in ~/.ssh/authorized_keys and ~/.eid/authorized_certificates can be used to log in with the associated PKCS#11 tokens.

Whether the server registers as a public server in the global server list

If set, the MUC rooms will display the public JIDs by default.

systemd-boot orders the menu entries by their sort keys, so if you want something to appear after all the NixOS entries, it should start with o or onwards

This public key is an SSH certificate authority, rather than an individual host's key.

This public key is an SSH certificate authority, rather than an individual host's key.

The public IP address to which packets from the local network are to be rewritten

Public base URL of the Matrix homeserver that provides the Client-Server API when using the Draupnir's Report forwarding feature.

The path where the settings and keys will exist.

Secret keys used for signing and verification.

Whether to enable basic access authentication for Suwayomi-Server

The hotkey modifiers.

An attribute set that will be used to substitute variables when building the dashboard

The public IPv6 address to which packets from the local network are to be rewritten

LiveKit key file holding one or multiple application secrets

Automatically setup x509 certificates and keys for the entire cluster.

your public network interface (wlp3s0, wlan0, eth0, ...)

The order of the sections in programs.rust-motd.settings

Whether to run searx in uWSGI as a "vassal", instead of using its built-in HTTP server

How frequently to change keys

How frequently to change keys

Public server registry password, used authenticate your server to the registry to prevent impersonation; required for subsequent registry updates.

List of list addresses that should be handled by Schleuder

Path to the private key file on the host system

Do minification on public static files which reduces the size of assets — saving data for the server & users as well as offering a performance improvement

Path to a JSON file containing binary cache secret keys

Path to a JSON file containing binary cache secret keys

Prefix for all PostgreSQL advisory lock keys (only used when PostgreSQL is configured as lock backend).

systemd-boot orders the menu entries by their sort keys, so if you want something to appear after all the NixOS entries, it should start with o or onwards

Configuration parameters to set in parsedmarc.ini

The bit size for generated keys.

Whether to enable the actkbd key mapping daemon

Commands that should be run right before we try to mount our LUKS device

The state directory where keys and data are stored.

Authorized keys for the root user on initrd

How long in advance to publish new keys

How long in advance to publish new keys

This key must be set to enable the Active Record Encryption feature within Rails that Mastodon uses to encrypt and decrypt some database attributes

Method for the initial state transfer (wsrep_sst_method) when a node joins the cluster

If set, the rooms will display the public JIDs by default.

Path to a file containing the secret key of the local Rosenpass peer

The public client ID of your Spotify application

Enable the cloud-init service

If set, the calling user's SSH agent is used to authenticate against the keys in the calling user's ~/.ssh/authorized_keys

Additional files that will be saved in ~/.xmonad/lib/ and included in the configuration build

Snipe-IT configuration options to set in the .env file

Whether X authentication keys should be passed from the calling user to the target user (e.g. for su)

An absolute file path (which should be outside the Nix-store) to a key used for encrypting session cookies

Defines the name of the claim that contains group memberships or role assignments in the provider's userinfo endpoint

Public IPs for NAT reflection; for connections to loopbackip:sourcePort from the host itself and from other hosts behind NAT

A list of host names and/or IP numbers used for accessing the host's ssh service

config.yaml configuration as a Nix attribute set

Secret key of the onion service

This public key is an SSH certificate authority, rather than an individual host's key.

An absolute file path (which should be outside the Nix-store) to a secret key for Stripe

Filesystem location where Nexus should store the subscriber private keys.

geoipupdate configuration options

TLS certificates are obtained by modules called "certificate loaders"

Whether to enable public registration.

The sequence of keys to be mapped.

A file containing the secret used to encrypt session keys

Opens up firewall port for communication between NetBird peers directly over LAN or public IP, without using (internet-hosted) TURN servers as intermediaries.

Opens up firewall port for communication between NetBird peers directly over LAN or public IP, without using (internet-hosted) TURN servers as intermediaries.

Authorized keys taken from files for the root user on initrd

Unless enabled, encryption keys can be easily recovered by an attacker with physical access to any machine with PCMCIA, ExpressCard, ThunderBolt or FireWire port

Routes that Stargazer should server

Path to file containing the public key used for Web Push Voluntary Application Server Identification

systemd-boot orders the menu entries by their sort keys, so if you want something to appear after all the NixOS entries, it should start with o or onwards

Pleroma public configuration

Seahub public URL.

Attribute set of options for each extension

Whether to enable The tuxedo-drivers driver enables access to the following on TUXEDO notebooks:

• Driver for Fn-keys
• SysFS control of brightness/color/mode for most TUXEDO keyboards
• Hardware I/O driver for TUXEDO Control Center

For more inforation it is best to check at the source code description: https://gitlab.com/tuxedocomputers/development/packages/tuxedo-drivers .

Environment variables for configuring the beszel-agent service

base64-encoded public ECDH key.

Amount by which shifted function keys are offset

List of paths that should be mounted before this one

Path to keystore (combined PEM with cert/key, or PKCS12 keystore)

Resource limits to be imposed on the job

Resource limits to be imposed on the job

Override feh's default keybindings

The path to the signing private key file, used to sign requests and events.

  nix-shell -p dendrite --command "generate-keys --private-key matrix_key.pem"

Options to be added to config.php, as a nix attribute set

Apple menu > System Preferences > Keyboard

If you press and hold certain keyboard keys when in a text area, the key’s character begins to repeat

Attribute set of options for each extension

The environment the ECS agent should run with

Environment file (see systemd.exec(5) "EnvironmentFile=" section for the syntax) to define variables for dex

monica configuration options to set in the .env file

YAML file to merge into the schleuder config at runtime

Extra options to be added under production in config/gitlab.yml, as a nix attribute set

systemd-boot orders the menu entries by their sort keys, so if you want something to appear after all the NixOS entries, it should start with o or onwards

LiveKit key file holding one or multiple application secrets

The path to the xkb types file

This key must be set to enable the Active Record Encryption feature within Rails that Mastodon uses to encrypt and decrypt some database attributes

Base64-encoded public key for the node, used as the node's ID.

Defines the path to the data directory

If set the URL specified in bitcoin.rpc.url will get the content of this file added as an URL password, so http://user@example.com will turn into http://user:SOMESECRET@example.com

Timeout for detecting the public IP address.

Whether to enable provisioning functionality in the agent

Environment file (see systemd.exec(5) "EnvironmentFile=" section for the syntax) to define variables for Searx

Extra config files to include

A list of host names and/or IP numbers used for accessing the host's ssh service

Configure nginx as a reverse proxy for dawarich

A list of attribute sets containing paths to TLS certificates and keys

Defines the name of the claim that contains group memberships or role assignments in the provider's userinfo endpoint

The hash algorithm to use for passwords and API keys

Whether to enable Google OS Login

Attribute set of profile options

When set to true, attempts to discover the host's public IP via STUN

List of paths that should be mounted before this one

Attribute set of options for each extension

If enabled srun will accept the option "--x11" to allow for X11 forwarding from within an interactive session or a batch job

Configuration for all Datadog checks

The realm(s) to serve keys for.

Sensitive configuration values such as passwords, API keys, and tokens

When opening a new LUKS device try reusing last successful passphrase

List of FIDO2 credential IDs

Set the 'all targets ports' flag when registering keys with mpathpersist

Agorakit configuration options to set in the .env file

BookStack configuration options to set in the .env file

An optional path to an environment file that will be used in the web and workers services

Modifier key or keys that can be used to drag floating windows.

IP address on which nebula lighthouse should serve DNS. 'localhost' is a good default to ensure the service does not listen on public interfaces; use a Nebula address like 10.0.0.5 to make DNS resolution available to nebula hosts only.

Resource limits to be imposed on the job

Resource limits to be imposed on the job

Group under which the postfix exporter shall be run

This key must be set to enable the Active Record Encryption feature within Rails that Mastodon uses to encrypt and decrypt some database attributes

Additional Munin plugins to activate

Resource limits to be imposed on the job

Resource limits to be imposed on the job

Modifier key or keys that can be used to drag floating windows.

Apple menu > System Preferences > Keyboard

If you press and hold certain keyboard keys when in a text area, the key’s character begins to repeat

Whether to enable keys to run shell commands.

Resource limits to be imposed on the job

Resource limits to be imposed on the job

Enables the use of the ~/.ssh/authorized_keys file

Specifies the user under whose account the AuthorizedKeysCommand is run

Configuration options to add to Workhorse's configuration file

Attribute set of site options for this profile

Specify the rules for which files to read on the host

This optional key is used to control whether your job is to be kept continuously running or to let demand and conditions control the invocation

Whether to enable the API keys database.

Path to the file with your personal ecoflow app login email address

Metadata keys that should be synchronized when vdirsyncer metasync is executed.

Whether to make sshd look up authorized keys from SSS

When set to true, attempts to discover the host's public IP via STUN

Path to the file with your personal api secret string from the Ecoflow development website https://developer-eu.ecoflow.com

Path to the file with your personal api access string from the Ecoflow development website https://developer-eu.ecoflow.com

Path to the service's config file

A list of paths to files in OpenSSH's authorized_keys format, containing the keys that will be trusted by the pam_ssh_agent_auth module

If true on import encryption keys or passwords for all encrypted datasets are requested

The sort key used for the NixOS bootloader entries

Metadata keys that should be synchronized when vdirsyncer metasync is executed.

Allow using external GPG keys with GPGME.

Map of incoming traffic patterns to local targets

Note: when using ntfy.sh and other public instances it is recommended to set this option to an empty string and set the actual topic via services.prometheus.alertmanager-ntfy.extraConfigFiles since the topic in ntfy.sh is essentially a password

A list of signing keys for each substitute server to be authorized as a source of substitutes

File pointing to preshared key as generated by wg genpsk

Path to the file with your personal ecoflow app login email password

This optional key is used to specify launch on demand sockets that can be used to let launchd know when to run the job

An attribute set where the keys name the organisation and the values are a set of lists of users and groups.

This optional key is used to control whether your job is to be kept continuously running or to let demand and conditions control the invocation

This optional key is used to control whether your job is to be kept continuously running or to let demand and conditions control the invocation

Base64 preshared key generated by wg genpsk

Allow localhost redirects

Discourse site settings

This optional key is used to control whether your job is to be kept continuously running or to let demand and conditions control the invocation

Path of the PEM-encoded private key for this account

Disable PKCE on this oauth2 resource server to work around insecure clients that may not support it

If provided this is the full path to a file that contains the key to enable [server-side encryption with customer-provided keys][1] (SSE-C)

The availability of the endpoint to connect to

File must contain one line, example: R3300000,R3400000,NC430000,...

Whether to enable arrow keys when scrolling in alternate screen mode.

Authentication to perform locally.

• The default pubkey uses public key authentication using a private key associated to a usable certificate.
• psk uses pre-shared key authentication.
• The IKEv1 specific xauth is used for XAuth or Hybrid authentication,
• while the IKEv2 specific eap keyword defines EAP authentication.
• For xauth, a specific backend name may be appended, separated by a dash

File mapping user names to pre-shared keys (passwords).

This optional key is used to specify launch on demand sockets that can be used to let launchd know when to run the job

This optional key is used to specify launch on demand sockets that can be used to let launchd know when to run the job

File pointing to preshared key as generated by wg genpsk

Path to the service's environment file

This optional key is used to specify launch on demand sockets that can be used to let launchd know when to run the job

Base64 preshared key generated by wg genpsk

List of paths that should be mounted before this one

The port to scrape metrics from

The port to scrape metrics from

Slightly higher value for typing keys, to prevent unexpected hold effect.

File must contain one line, example: {"R3300000":"Delta 2","R3400000":"Delta Pro",...} The key/value map of custom names for your devices

Specifies the (clear text) password for the user

Configures the syscall filter for postgresql.service

List of paths to the server private keys and certificates.

https://www.postfix.org/postconf.5.html#smtpd_tls_chain_files

Specifies the (clear text) password for the user

Learn more at https://docs.stashapp.cc/networking/authentication-required-when-accessing-stash-from-the-internet/

If this attribute is given, SAE-PK will be enabled for this connection

Path to the service's config file

The port to scrape metrics from

AWS Role ARN, an alternative to using AWS API keys.

Web Push Notifications configuration

Public port number to try to redirect to this machine's Wireguard daemon using UPnP IGD.

The port to scrape metrics from

The port to scrape metrics from

Set of accepted cipher suites (encryption algorithms) for pairwise keys (unicast packets)

Authentication to expect from remote

Learn more at https://docs.stashapp.cc/networking/authentication-required-when-accessing-stash-from-the-internet/

AWS Role ARN, an alternative to using AWS API keys.

The AWS API keys

The AWS API keys

ESP proposals to offer for the CHILD_SA