Remote CFSSL server.

The address of the remote endpoint to forward traffic over.

Optional url of remote repository

The address of the remote endpoint to forward traffic over.

Remote SSH host to synchronize with.

Whether to begin the synchronisation by running notmuch new on the remote side.

The address of the remote endpoint to forward traffic over.

Header to trust for remote IP, if present

Port number for remote control operations (uses TLS over TCP).

Remote configuration for the contacts.

Name of the remote read config, which if specified must be unique among remote read configs

Remote UDP port

IP address or hostname of the remote end (use 0.0.0.0 for a floating/dynamic remote endpoint).

Name of the remote write config, which if specified must be unique among remote write configs

Remote configuration for the calendar.

Whether to enable remote control via nsd-control.

Configuration in the journal-remote configuration file

The port to listen to

Which protocol to listen to.

IDEs accessible to the JetBrains remote development system.

Timeout for requests to the remote read endpoint.

The location of the output journal

Whether to allow the remote address and port to change when properly encrypted packets are received.

An attribute set of remote configurations

Whether to enable receiving systemd journals from the network.

Timeout for requests to the remote write endpoint.

Open ports in the firewall for Steam Remote Play.

Cassandra ships with JMX accessible only from localhost

Whether to enable JetBrains remote development system.

Whether to enable Remote Desktop support using Pipewire.

Remote store extra configuration.

The URL of the storage.

Endpoint for prometheus compatible remote_write

The type of the storage.

Specify remote port forwardings

Endpoint for the victorialogs instance

Specifies the path to muchsync on the server

Check for modified files on the remote side

The URL of the storage.

Listen on remote and forwards traffic from local

User name for authentication.

The type of the storage.

Which interfaces NSD should bind to for remote control.

Address to listen on for remote write requests

User name for authentication.

Custom HTTP headers to be sent along with each remote read request

An attribute set mapping remote file paths to their corresponding mount point configurations

Set the class A subnet number to use for the internal remote DNS mapping, uses the reserved 224.x.x.x range by default.

Custom HTTP headers to be sent along with each remote write request

Periodically sign the data in the journal using Forward Secure Sealing.

Section for a remote authentication round

Path to the server private key, which is used by the server but not by nsd-control

Parameters of the endpoints to query from

Path to the server self signed certificate, which is used by the server but and by nsd-control

A path to a SSL secret key file in PEM format

ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1

Whether to enable modification of share contents through the web ui.

Extra configuration options to add to the remote account section.

Path to the client private key, which is used by nsd-control but not by the server

Parameters of the endpoints to send samples to

ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1

With "host", a separate output file is used, based on the hostname of the other endpoint of a connection

Configures the remote read request's TLS settings.

Path to the client certificate signed with the server certificate

Configures the remote write request's TLS settings.

Host port binding options

Local port binding options

A command that prints the password to standard output.

Sets the Authorization header on every remote read request with the configured username and password. password and password_file are mutually exclusive.

Configures AWS Signature Version 4 settings.

The maximum file-based buffer size in bytes

Sets the Authorization header on every remote write request with the configured username and password. password and password_file are mutually exclusive.

Remote ZFS filesystem where snapshots should be sent.

A command that prints the password to standard output.

Basic Auth username used to connect to remote_write endpoint

Basic Auth username used to connect to remote_write endpoint

Specifies port number to bind to.

Specifies port number to forward to.

Whether to propagate local changes to the remote.

A list of remote servers to which to send each message

The AWS region.

File that contains the Basic Auth password used to connect to remote_write endpoint

File that contains the Basic Auth password used to connect to remote_write endpoint

Configures the queue used to write to remote storage.

Sets the Authorization header on every remote read request with the configured bearer token

The address to forward to.

The address to bind to.

Sets the Authorization header on every remote write request with the configured bearer token

The named AWS profile used to authenticate.

Optional Proxy URL.

Path to the remotes control file

Optional Proxy URL.

The AWS role ARN.

Whether to enable writing to the Nix store as a remote store via SSH

Identity in CA certificate to accept for authentication

Authentication to expect from remote

The Access Key ID.

The Secret Access Key.

A path to a SSL certificate file in PEM format

Whether reads should be made for queries for time ranges that the local storage should have complete data for.

Number of samples to buffer per shard before we block reading of more samples from the WAL

Muchsync remotes to synchronise with.

Section for a certificate candidate to use for authentication

IKE identity to expect for authentication round

Optional slot number of the token that stores the certificate.

Whether metric metadata is sent to remote storage or not.

Configures the sending of series metadata to remote storage

List of certificates to accept for authentication

Optional numeric identifier by which authentication rounds are sorted

A path to a SSL CA certificate file in PEM format, or all

CA certificate to validate API server certificate with.

Section for a CA certificate to accept for authentication

Identity to use as peer identity during EAP authentication

Absolute path to the certificate to load

Optional PKCS#11 module name.

CA certificate to validate API server certificate with.

HTTP username

HTTP password

Optional slot number of the token that stores the certificate.

Key file for client cert authentication to the server.

List of CA certificates to accept for authentication

HTTP password

HTTP username

List of raw public keys to accept for authentication

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

Absolute path to the certificate to load

Authorization group memberships to require

Optional PKCS#11 module name.

Key file for client cert authentication to the server.

The hostname of your system, as visible from the command line and used by local and remote networks when connecting through SSH and Remote Login

Certificate file for client cert authentication to the server.

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

Whether to enable serving the Nix store as a remote store via SSH.

An optional list of equality matchers which have to be present in a selector to query the remote read endpoint.

Certificate file for client cert authentication to the server.

Sets the Authorization header on every remote read request with the bearer token read from the configured file

Sets the Authorization header on every remote write request with the bearer token read from the configured file

List of certificate policy OIDs the peer's certificate must have

Whether to enable RustDesk, a remote access and remote control software, allowing maintenance of computers and other devices.

ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1

ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1

Set the log-level

Network hosts that should be probed for remote scanners.

Certificate revocation policy for CRL or OCSP revocation.

• A strict revocation policy fails if no revocation information is available, i.e. the certificate is not known to be unrevoked.
• ifuri fails only if a CRL/OCSP URI is available, but certificate revocation checking fails, i.e. there should be revocation information available, but it could not be obtained.
• The default revocation policy relaxed fails only if a certificate is revoked, i.e. it is explicitly known that it is bad

Whether to enable this mount.

Whether to enable automatic mounting.

Maximum number of shards, i.e. amount of concurrency.

Minimum number of shards, i.e. amount of concurrency.

How frequently metric metadata is sent to remote storage.

HTTP password file

A local file path specifying the location of the mount point.

Maximum retry delay.

HTTP password file

Initial retry delay

Whether to begin the synchronisation by running notmuch new locally.

Sensitive configuration values such as passwords, API keys, and tokens

Remote UDP port for IKE communication

Whether to symlink the Zed's remote server binary to the expected location

Whether to enable xrdp, the Remote Desktop Protocol server.

Specifies a command line to pass to /bin/sh to execute a command on another machine

List of remote write relabel configurations.

Permissions granted for the services.syncoid.user user for local target datasets

Specifies whether sshd(8) should look up the remote host name, and to check that the resolved host name for the remote IP address maps back to the very same IP address

Regular configuration options as described in rclone's documentation https://rclone.org/docs/

Remote address(es) to use for IKE communication

Enable D-Bus remote control

Set Gmail labels to ignore when syncing from remote labels to local tags (before translations).

CAs to trust for remote TLS requests.

How often to run muchsync

An attribute set of option values passed to rclone mount

List of remote selectors to include in CHILD_SA

When not set to null this option defines the path at which the unbound remote control socket should be created at

The time-to-live of the connection to the remote tunnel endpoint.

Login shell of the remote user

SSH private key file to use to login to the remote system

Whether to enable sendRaw feature which adds the options -w to the zfs send command

Message to display to the remote user before authentication is allowed.

The time-to-live of the connection to the remote tunnel endpoint.

SSH public key allowed to login as user btrbk to run remote backups.

User to use when no root privileges are required

Specifies port number to connect on remote host.

Permissions granted for the services.syncoid.user user for local target datasets

The address of the local endpoint which the remote side should send packets to.

Data directory relative to /var/lib in which to cache remote blocks.

Whether to enable the OpenSSH secure shell daemon, which allows secure remote logins.

The username to log in as on the remote host

This option lists the machines to be used if distributed builds are enabled (see nix.distributedBuilds)

Enable saned network daemon for remote connection to scanners.

saned would be run from scanner user; to allow access to hardware that doesn't have scanner group you should add needed groups to this user.

The username to log in as on the remote host

This option lists the machines to be used if distributed builds are enabled (see nix.distributedBuilds)

This option lists the machines to be used if distributed builds are enabled (see nix.distributedBuilds)

The username to log in as on the remote host

Configuration for the rclone remote being used for backup

The address of the local endpoint which the remote side should send packets to.

Enable a remote shell server which Neo4j Shell clients can log in to

Whether the configuration file specifies a remote mongo instance

Arguments to be passed to AutoSSH and retransmitted to SSH process

Arguments to be passed to AutoSSH and retransmitted to SSH process

Optional branch in remote repository

Niceness for local instances of btrbk

Automatically login user on remote or other kind of externally supplied authentication, otherwise redirect to login form as normal

Regular expression against which the extracted value is matched

Check for locally modified files

Whether to enable ‘oidentd’, an implementation of the Ident protocol (RFC 1413)

Disable validation of the server certificate.

Action to perform based on regex matching

Mutual TLS - client certificate to call remote instance requiring client certs.

Modulus to take of the hash of the source label values.

Disable validation of the server certificate.

Mutual TLS - client key to call remote instance requiring client certs

Whether to enable authenticating using a signature performed by the ssh-agent

The time-to-live/hoplimit of the connection to the remote tunnel endpoint.

Maximum time a sample will wait in buffer.

The name of the column in the log table to which the name of the remote host that initiates the session is stored

Binary cache URL to connect to

Separator placed between concatenated source label values

User to run the icecream daemon as

The remote path to mount.

Maximum number of samples per send.

The address of the local endpoint which the remote side should send packets to.

Set the expiration time for data in the remote machine information directory in days.

Remote public key in hexadecimal form.

If set to true, any remote host can connect to and control this BOINC client (subject to password authentication)

Whether to enable uploading the systemd journal to a remote server.

Whether to enable the Thanos receiver which accept Prometheus remote write API requests and write to local tsdb.

Whether or not to open the minimum required ports on the firewall

The protocol used for communicating with the build machine

Allow the specified IPs to act as a proxy

The path on the current machine where the remote path would be mounted.

Replacement value against which a regex replace is performed if the regular expression matches

Remote or local repository to back up to.

Start SSH service during initrd boot

Label to which the resulting value is written in a replace action

Enable the shairport-sync daemon

Whether the connection to the authentication agent (if any) will be forwarded to the remote machine.

The protocol used for communicating with the build machine

Whether to enable the CUPS Remote Printer Discovery (browsed) daemon.

The name of the node which is used as an identifier when communicating with the remote nodes in the mesh

The protocol used for communicating with the build machine

The protocol used for communicating with the build machine

The source labels select values from existing labels

SSH private key file to use to login to the remote system

This directory is used to download fonts from a remote location, e.g. to host google fonts locally.

If set, the calling user's SSH agent is used to authenticate against the keys in the calling user's ~/.ssh/authorized_keys

How often to remove remote media

Configuration for the rclone remote being used for backup

Source ZFS dataset

Repeat interval for syncing the blocks between local and remote view

Makes this policy trust all remote parties

Password to access the remote console

Remote host where snapshots should be sent. lz4 is expected to be installed on this host.

How old remote media needs to be in order to be removed.

Listen on local and forwards traffic from remote.

Whether to add the boot.binfmt.emulatedSystems to nix.settings.extra-platforms

Target ZFS dataset

Whether to set this profile as:

• active docker context
• active kubernetes context
• active incus remote Exactly one or zero profiles should have this option set.

Automatically remove remote media attachments and preview cards older than the configured amount of days

GitLab automatic upload specification

IO scheduling class for btrbk (see ionice(1) for a quick description)

Specifies whether remote X11 clients will have full access to the original X11 display.

WireGuard public key corresponding to the remote Rosenpass peer.

Run only quick synchronizations

Specify the number of seconds the SCSI layer will wait after a problem has been detected on a FC remote port before failing I/O to devices on that remote port

Specifies whether remote hosts are allowed to connect to ports forwarded for the client

Some servers have invalid or self-signed certificates

Open ports in the firewall for Mirakurun.

Remote endpoint, I2P hostname or b32.i2p address.

The buildmaster will listen on a TCP port of your choosing for connections from workers

Remote endpoint, I2P hostname or b32.i2p address.

Remove remote snapshots that don't have a local correspondent.

Username used by SSH to login to remote host.

Any remote cjdns nodes that offer these passwords on connection will be allowed to route through this node.

Path to the file containing rclone configuration

Remote endpoints for the bridge.

The path to the desktop picture/wallpaper to set

The URI of the remote to be synchronized

Path to the postgres socket directory

TCP port for external connections, like remote control via amule-gui

Whether to request X11 forwarding on outgoing connections by default

Open ports in the firewall for the EPGStation web interface.

Endpoint of the remote Rosenpass peer.

What to do in case of a conflict between the storages

Disable remote shell access through Periphery.

Port of the remote MQTT broker.

Whether to always trust remote cfssl server upon initial PKI bootstrap.

Disable remote container shell access through Periphery.

The password to connect to the remote InfluxDB server

The username to connect to the remote InfluxDB server

Whether to enable the headless Transmission BitTorrent daemon

Connection uniqueness policy to enforce

Address of the remote MQTT broker.

List of trusted remote SMTP clients, that are allowed to relay mail

Path to a file containing the public key of the remote Rosenpass peer.

File containing CA certificates of root CAs trusted to sign either remote SMTP server certificates or intermediate CA certificates

Whether to enable presence tracking

Whether to enable proxying of remote media through the instance's proxy.

SSL key in PEM format

The domain name of the server, with optional explicit port

The time to wait for a remote module listed above to complete sending a message before killing it and trying again, in seconds

The domain name of the server, with optional explicit port

Whether or not the remote IP of a WireGuard peer should be exposed via prometheus.

Set labels to ignore when syncing from local tags to remote labels (after translations).

Path to the file containing rclone configuration

Attribute set of NetBird client daemons, by default each one will:

1. be manageable using dedicated tooling:

• netbird-<name> script,
• NetBird - netbird-<name> graphical interface when appropriate (see ui.enable),

2. run as a netbird-<name>.service,
3. listen for incoming remote connections on the port 51820 (openFirewall by default),
4. manage the netbird-<name> wireguard interface,
5. use the /var/lib/netbird-/config.json configuration file,
6. override /var/lib/netbird-/config.json with values from /etc/netbird-/config.d/*.json,
7. (hardened) be locally manageable by netbird-<name> system group,

With following caveats:

• multiple daemons will interfere with each other's DNS resolution of netbird.cloud, but should remain fully operational otherwise

IMAP4 patterns for which mailboxes on the remote mail server to sync

Name for where mail coming from the remote (far) mail server will end up locally

List of local or remote repositories with paths and optional labels.

Command to run before sending the snapshot to the destination

Extra directives that should be added under this accounts remote storage directive

Defines the database mode of operation

Host for the api or remote transport

Path to the socket for local or remote transports

Port to connect to for the api or remote transport

Command to run after sending the snapshot to the destination

Extra directives that should be added under this accounts remote storage directive

SSL CA certificate in PEM format

Install the SPICE USB redirection helper with setuid privileges

SSL CA certificate

Specify the number of seconds the SCSI layer will wait after a problem has been detected on a FC remote port before removing it from the system

What to do in case of a conflict between the storages

A required list of local or remote repositories with paths and optional labels (which can be used with the --repository flag to select a repository)

Username for the api or remote transport

SSH identity resource for the remote transport

What to do in case of a conflict between the storages

The labels to add to any time series or alerts when communicating with external systems (federation, remote storage, Alertmanager).

Local tag to which the remote Gmail 'TRASH' label is translated.

Compress the btrfs send stream before transferring it from/to remote locations using a compression command.

Which mode to use for sending mail

A required list of local or remote repositories with paths and optional labels (which can be used with the --repository flag to select a repository)

Identity under which the peer is registered at the mediation server, that is, the IKE identity the other end of this connection uses as its local identity on its connection to the mediation server

Specifies the hashed password for the user

Specifies the hashed password for the user

Remove local messages that have been deleted on the remote.

Specifies the initial hashed password for the user, i.e. the hashed password assigned if the user does not already exist

Specifies the initial hashed password for the user, i.e. the hashed password assigned if the user does not already exist

Authentication to perform locally.

• The default pubkey uses public key authentication using a private key associated to a usable certificate.
• psk uses pre-shared key authentication.
• The IKEv1 specific xauth is used for XAuth or Hybrid authentication,
• while the IKEv2 specific eap keyword defines EAP authentication.
• For xauth, a specific backend name may be appended, separated by a dash

Enables extra remotes in fwupd

SSH keys that should be able to make or push snapshots on this system remotely with btrbk

Repository host when operating remotely

Starts an OpenVPN client during initrd boot

Enable the automatic git maintenance

Repository to backup to

PostgreSQL host for operating remotely.

The read permissions to include for this token

The read permissions to include for this token