"Agent" hooks to install

Path to the directory storing the hooks

Path to the directory storing the hooks

The pre-exit hook will run just before your build job finishes

The command hook script will replace the default implementation of running the build command.

The pre-command hook will run just before your build command runs

The post-command hook will run after the bootstrap script has run your build commands

The pre-artifact hook will run just before artifacts are uploaded

The checkout hook script will replace the default checkout routine of the bootstrap.sh script

The pre-checkout hook will run just before your projects source code is checked out from your SCM provider

The post-artifact hook will run just after artifacts are uploaded

The post-checkout hook will run after the bootstrap script has checked out your projects source code.

The environment hook will run before all other commands, and can be used to set up secrets, data, etc

Custom hooks for Claude Code

The name of the agent as seen in the buildkite dashboard.

The name of the agent as seen in the buildkite dashboard.

The ID of your hook

Whether to enable ‹name›.

The name of the hook

The token from your Buildkite "Agents" page

The token from your Buildkite "Agents" page

Packages added to the service's PATH environment variable

Tags for the agent.

Tags for the agent.

The workdir for the agent

The workdir for the agent

Shell commands executed as the service's main process.

Attribute set of buildkite agents

Attribute set of buildkite agents

Define a launchd job

Command that buildkite-agent 3 will execute when it spawns a shell.

Command that buildkite-agent 3 will execute when it spawns a shell.

Packages added to the service's PATH environment variable

Whether to enable this buildkite agent

Whether to enable this buildkite agent

Command executed as the service's main process.

Custom agents for Claude Code

Shell commands executed as the service's main process.

Additional packages that should be added to the agent's PATH

The command that should be executed when the hook is triggered.

Whether to enable this Woodpecker-Agent

The buildkite-agent package to use.

Which buildkite-agent derivation to use

This optional key specifies what nice(3) value should be applied to the daemon.

Profile hook scripts.

This required key uniquely identifies the job to launchd.

Groups the user for this buildkite agent should belong to

Extra lines to be added verbatim to the configuration file.

Extra lines to be added verbatim to the configuration file.

Command executed as the service's main process.

The woodpecker-agent package to use.

Additional groups for the systemd service.

This optional key specifies that launchd should adjust its log mask temporarily to LOG_DEBUG while dealing with this job.

Extra commands to run before starting buildkite.

This optional key is used to control whether your job is launched once at the time the job is loaded

This optional key specifies the user to run the job as

OpenSSH private key

A run-time path to the key file, which is supposed to be provisioned outside of Nix store.

OpenSSH private key

A run-time path to the key file, which is supposed to be provisioned outside of Nix store.

The recommended idle time out (in seconds) to pass to the job

Profile hook scripts.

Each attribute in this set specifies an option for a key in the plist. https://developer.apple.com/legacy/library/documentation/Darwin/Reference/ManPages/man5/launchd.plist.5.html

This optional key causes the job to be started if any one of the listed paths are modified.

The amount of time launchd waits before sending a SIGKILL signal

This optional key causes the job to be started every time a filesystem is mounted.

This optional key specifies what value should be passed to umask(2) before running the job

This optional key specifies the node to connect(2) or bind(2) to.

Each attribute in this set specifies an option for a key in the plist. https://developer.apple.com/legacy/library/documentation/Darwin/Reference/ManPages/man5/launchd.plist.5.html

Add programs to the buildkite-agent environment

Add programs to the buildkite-agent environment

This optional key specifies what nice(3) value should be applied to the daemon.

This optional key tells launchctl what type of socket to create

This optional key specifies the group to run the job as

This required key uniquely identifies the job to launchd.

This optional key implies SockFamily is set to "Unix"

This optional key can be used to request that the service be registered with the mDNSResponder(8)

Extra settings.

Custom agents for opencode

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

This optional key specifies the mode of the socket

This optional key specifies whether the job participates in advanced communication with launchd

This optional key specifies whether initgroups(3) should be called before running the job

This configuration file only applies to the hosts listed with this key

This key was used in Mac OS X 10.4 to control whether a job was kept alive or not

This optional key specifies what nice(3) value should be applied to the daemon.

This optional key specifies that launchd should adjust its log mask temporarily to LOG_DEBUG while dealing with this job.

Preswitch hook executed before mode switch.

List of hooks to enable when generating the CDI specification

This optional key is used to control whether your job is launched once at the time the job is loaded

This optional key specifies the user to run the job as

Predetect hook executed before autorandr attempts to run xrandr.

This required key uniquely identifies the job to launchd.

This optional key specifies whether the job can only be run once and only once

This key maps to the first argument of execvp(3)

This configuration file only applies to hosts NOT listed with this key

woodpecker-agent config environment variables, for other options read the documentation

This optional key specifies whether the kernel should consider this daemon to be low priority when doing file system I/O.

This optional key specifies the service on the node to connect(2) or bind(2) to.

The recommended idle time out (in seconds) to pass to the job

List of hooks to disable when generating the CDI specification

This optional key specifies what file should be used for data being supplied to stdin when using stdio(3).

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

This optional key specifies what file should be used for data being sent to stdout when using stdio(3).

This optional key specifies that launchd should adjust its log mask temporarily to LOG_DEBUG while dealing with this job.

Postswitch hook executed after mode switch.

This optional key causes the job to be started if any one of the listed paths are modified.

Environment variables passed to the service's processes.

This optional key is used to control whether your job is launched once at the time the job is loaded

This optional key specifies the user to run the job as

The amount of time launchd waits before sending a SIGKILL signal

This optional key causes the job to be started every time a filesystem is mounted.

This optional key specifies the node to connect(2) or bind(2) to.

This optional key specifies what value should be passed to umask(2) before running the job

This optional key specifies that launchd should instruct the kernel to have the job wait for a debugger to attach before any code in the job is executed.

File to load environment variables from

This optional key specifies the protocol to be passed to socket(2)

This optional key tells launchctl what type of socket to create

This optional key is used to specify a directory to chroot(2) to before running the job.

This key specifies that the job should be spawned into a new security audit session rather than the default session for the context is belongs to

The recommended idle time out (in seconds) to pass to the job

This optional key can be used to request that the service be registered with the mDNSResponder(8)

This optional key implies SockFamily is set to "Unix"

This optional key specifies what file should be used for data being sent to stderr when using stdio(3).

This flag causes launchd to use the glob(3) mechanism to update the program arguments before invocation.

This optional key causes the job to be started if any one of the listed paths are modified.

This configuration file only applies to sessions of the type specified

This optional key specifies the node to connect(2) or bind(2) to.

Environment variables passed to the service's processes.

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

This optional key specifies the mode of the socket

This optional key specifies the group to run the job as

The amount of time launchd waits before sending a SIGKILL signal

Preswitch hook executed before mode switch.

This optional key causes the job to be started every time a filesystem is mounted.

This optional key specifies what value should be passed to umask(2) before running the job

This optional key tells launchctl what type of socket to create

Predetect hook executed before autorandr attempts to run xrandr.

This optional key can be used to request that the service be registered with the mDNSResponder(8)

This optional key implies SockFamily is set to "Unix"

The maximum amount of cpu time (in seconds) to be used by each process.

The maximum amount of cpu time (in seconds) to be used by each process.

This optional key specifies whether the job participates in advanced communication with launchd

This optional key is a variant of SockPathName

Resource limits to be imposed on the job

Resource limits to be imposed on the job

This configuration file only applies to the hosts listed with this key

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

This optional key specifies whether initgroups(3) should be called before running the job

This key was used in Mac OS X 10.4 to control whether a job was kept alive or not

This optional key specifies the mode of the socket

The largest size (in bytes) core file that may be created.

The largest size (in bytes) core file that may be created.

This optional key specifies the group to run the job as

This optional key specifies the service on the node to connect(2) or bind(2) to.

This optional key is used to specify Mach services to be registered with the Mach bootstrap sub-system

Postswitch hook executed after mode switch.

This optional key specifies whether the job can only be run once and only once

This key maps to the first argument of execvp(3)

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

This configuration file only applies to hosts NOT listed with this key

This optional key specifies whether the kernel should consider this daemon to be low priority when doing file system I/O.

The largest size (in bytes) file that may be created.

The largest size (in bytes) file that may be created.

When a job dies, launchd kills any remaining processes with the same process group ID as the job

This optional key specifies whether the job participates in advanced communication with launchd

This optional key specifies what file should be used for data being supplied to stdin when using stdio(3).

This optional key is used to specify a directory to chdir(2) to before running the job.

This configuration file only applies to the hosts listed with this key

This optional key specifies whether initgroups(3) should be called before running the job

This key was used in Mac OS X 10.4 to control whether a job was kept alive or not

This optional key specifies the protocol to be passed to socket(2)

This optional key specifies what file should be used for data being sent to stdout when using stdio(3).

This optional key causes the job to be started every N seconds

This optional key specifies the service on the node to connect(2) or bind(2) to.

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

This optional key specifies that launchd should instruct the kernel to have the job wait for a debugger to attach before any code in the job is executed.

This optional key specifies whether the job can only be run once and only once

This key maps to the first argument of execvp(3)

The maximum size (in bytes) of the data segment for a process; this defines how far a program may extend its break with the sbrk(2) system call.

The maximum size (in bytes) of the data segment for a process; this defines how far a program may extend its break with the sbrk(2) system call.

This configuration file only applies to hosts NOT listed with this key

This optional key specifies whether the kernel should consider this daemon to be low priority when doing file system I/O.

This optional key is used to specify a directory to chroot(2) to before running the job.

This key specifies that the job should be spawned into a new security audit session rather than the default session for the context is belongs to

This optional key specifies what file should be used for data being supplied to stdin when using stdio(3).

This optional key specifies the protocol to be passed to socket(2)

This optional key specifies what file should be used for data being sent to stderr when using stdio(3).

This flag causes launchd to use the glob(3) mechanism to update the program arguments before invocation.

This optional key specifies what file should be used for data being sent to stdout when using stdio(3).

This configuration file only applies to sessions of the type specified

This optional key specifies that launchd should instruct the kernel to have the job wait for a debugger to attach before any code in the job is executed.

The maximum size (in bytes) of the stack segment for a process; this defines how far a program's stack segment may be extended

The maximum size (in bytes) of the stack segment for a process; this defines how far a program's stack segment may be extended

This optional key is a variant of SockPathName

This optional key is used to specify a directory to chroot(2) to before running the job.

The maximum amount of cpu time (in seconds) to be used by each process.

The maximum amount of cpu time (in seconds) to be used by each process.

This key specifies that the job should be spawned into a new security audit session rather than the default session for the context is belongs to

The maximum size (in bytes) which a process may lock into memory using the mlock(2) function.

The maximum size (in bytes) which a process may lock into memory using the mlock(2) function.

Specifies higher-level event types to be used as launch-on-demand event sources

Resource limits to be imposed on the job

Resource limits to be imposed on the job

This key maps to the second argument of execvp(3)

This flag causes launchd to use the glob(3) mechanism to update the program arguments before invocation.

This optional key specifies what file should be used for data being sent to stderr when using stdio(3).

This configuration file only applies to sessions of the type specified

The largest size (in bytes) core file that may be created.

The largest size (in bytes) core file that may be created.

This optional key can be used to request that the datagram socket join a multicast group

This optional key is a variant of SockPathName

This optional key is used to specify Mach services to be registered with the Mach bootstrap sub-system

The largest size (in bytes) file that may be created.

The largest size (in bytes) file that may be created.

The maximum amount of cpu time (in seconds) to be used by each process.

The maximum amount of cpu time (in seconds) to be used by each process.

Much like the WatchPaths option, this key will watch the paths for modifications

When a job dies, launchd kills any remaining processes with the same process group ID as the job

Resource limits to be imposed on the job

Resource limits to be imposed on the job

This optional key is used to specify a directory to chdir(2) to before running the job.

The largest size (in bytes) core file that may be created.

The largest size (in bytes) core file that may be created.

This optional key is used to specify Mach services to be registered with the Mach bootstrap sub-system

This optional key is used to control whether your job is to be kept continuously running or to let demand and conditions control the invocation

This optional key causes the job to be started every N seconds

The maximum size (in bytes) of the data segment for a process; this defines how far a program may extend its break with the sbrk(2) system call.

The maximum size (in bytes) of the data segment for a process; this defines how far a program may extend its break with the sbrk(2) system call.

The largest size (in bytes) file that may be created.

The largest size (in bytes) file that may be created.

When a job dies, launchd kills any remaining processes with the same process group ID as the job

This optional key is used to specify a directory to chdir(2) to before running the job.

This optional key causes the job to be started every N seconds

This key lets one override the default throttling policy imposed on jobs by launchd

The maximum size (in bytes) of the stack segment for a process; this defines how far a program's stack segment may be extended

The maximum size (in bytes) of the stack segment for a process; this defines how far a program's stack segment may be extended

The maximum number of open files for this process

The maximum number of open files for this process

This optional key specifies whether the kernel should consider this daemon to be low priority when doing file system I/O when the process is throttled with the Darwin-background classification.

The maximum size (in bytes) of the data segment for a process; this defines how far a program may extend its break with the sbrk(2) system call.

The maximum size (in bytes) of the data segment for a process; this defines how far a program may extend its break with the sbrk(2) system call.

This optional key can be used to request that the datagram socket join a multicast group

The maximum size (in bytes) which a process may lock into memory using the mlock(2) function.

The maximum size (in bytes) which a process may lock into memory using the mlock(2) function.

Specifies higher-level event types to be used as launch-on-demand event sources

This key maps to the second argument of execvp(3)

The presence of this key specifies that the daemon expects to be run as if it were launched from inetd.

The maximum size (in bytes) of the stack segment for a process; this defines how far a program's stack segment may be extended

The maximum size (in bytes) of the stack segment for a process; this defines how far a program's stack segment may be extended

This optional key can be used to request that the datagram socket join a multicast group

This optional key is used to specify launch on demand sockets that can be used to let launchd know when to run the job

Much like the WatchPaths option, this key will watch the paths for modifications

The maximum size (in bytes) which a process may lock into memory using the mlock(2) function.

The maximum size (in bytes) which a process may lock into memory using the mlock(2) function.

This optional key is used to specify additional environment variables to be set before running the job.

Specifies higher-level event types to be used as launch-on-demand event sources

This key maps to the second argument of execvp(3)

This optional key is used to control whether your job is to be kept continuously running or to let demand and conditions control the invocation

Much like the WatchPaths option, this key will watch the paths for modifications

This flag instructs launchd that the job promises to use vproc_transaction_begin(3) and vproc_transaction_end(3) to track outstanding transactions that need to be reconciled before the process can safely terminate

The maximum size (in bytes) to which a process's resident set size may grow

The maximum size (in bytes) to which a process's resident set size may grow

Content of the hooks file.

This key lets one override the default throttling policy imposed on jobs by launchd

This optional key is used to control whether your job is to be kept continuously running or to let demand and conditions control the invocation

The maximum number of open files for this process

The maximum number of open files for this process

This optional key specifies whether the kernel should consider this daemon to be low priority when doing file system I/O when the process is throttled with the Darwin-background classification.

This optional key describes, at a high level, the intended purpose of the job

Configuration helper for Git hooks

This key lets one override the default throttling policy imposed on jobs by launchd

The presence of this key specifies that the daemon expects to be run as if it were launched from inetd.

The maximum number of open files for this process

The maximum number of open files for this process

This optional key specifies whether the kernel should consider this daemon to be low priority when doing file system I/O when the process is throttled with the Darwin-background classification.

The maximum number of simultaneous processes for this user id

The maximum number of simultaneous processes for this user id

This optional key is used to specify additional environment variables to be set before running the job.

This optional key is used to specify launch on demand sockets that can be used to let launchd know when to run the job

This flag corresponds to the "wait" or "nowait" option of inetd

The presence of this key specifies that the daemon expects to be run as if it were launched from inetd.

This optional key is used to specify additional environment variables to be set before running the job.

This optional key is used as a hint to launchctl(1) that it should not submit this job to launchd when loading a job or jobs

This optional key is used to specify launch on demand sockets that can be used to let launchd know when to run the job

This flag instructs launchd that the job promises to use vproc_transaction_begin(3) and vproc_transaction_end(3) to track outstanding transactions that need to be reconciled before the process can safely terminate

The maximum size (in bytes) to which a process's resident set size may grow

The maximum size (in bytes) to which a process's resident set size may grow

This optional key causes the job to be started every calendar interval as specified

This flag instructs launchd that the job promises to use vproc_transaction_begin(3) and vproc_transaction_end(3) to track outstanding transactions that need to be reconciled before the process can safely terminate

The maximum size (in bytes) to which a process's resident set size may grow

The maximum size (in bytes) to which a process's resident set size may grow

This optional key describes, at a high level, the intended purpose of the job

The maximum number of simultaneous processes for this user id

The maximum number of simultaneous processes for this user id

This optional key describes, at a high level, the intended purpose of the job

This flag corresponds to the "wait" or "nowait" option of inetd

The maximum number of simultaneous processes for this user id

The maximum number of simultaneous processes for this user id

This flag corresponds to the "wait" or "nowait" option of inetd

This optional key is used as a hint to launchctl(1) that it should not submit this job to launchd when loading a job or jobs

This optional key causes the job to be started every calendar interval as specified

This optional key is used as a hint to launchctl(1) that it should not submit this job to launchd when loading a job or jobs

This optional key causes the job to be started every calendar interval as specified

The actual configuration of which hooks will be served

Define LaunchAgents.

Global hook scripts

Global hooks

woodpecker-agents configurations

Each attribute in this option names an apcupsd event and the string value it contains will be executed in a shell, in response to that event (prior to the default action)

Definition of per-user launchd agents

Definition of per-user launchd agents

Bash statements run before scanning or importing new messages into the database.

Path to a directory containing hook files for Claude Code

Same as hooks, but these hooks are specified as literal strings instead of Nix values, and hence can include template syntax which might not be representable as JSON

Bash statements run after new messages have been imported into the database and initial tags have been applied.

Global hook scripts

Remove the hook after running it once.

Agents to add.

Scripts to run upon the detection of a new certificate

Bash statements run after a message has been inserted into the database and initial tags have been applied.

Add the hook to the named group.

Preswitch hook executed before mode switch.

An attrset of events and commands to run upon each event

Predetect hook executed before autorandr attempts to run xrandr.

Additional option to pass to the hook.

Agent-specific configurations

Postswitch hook executed after mode switch.

Hooks that will be placed under /var/lib/libvirt/hooks/lxc.d/ and called for lxc domains begin/end events

Hooks that will be placed under /var/lib/libvirt/hooks/qemu.d/ and called for qemu domains begin/end/migrate events

Hooks that will be placed under /var/lib/libvirt/hooks/libxl.d/ and called for libxl-handled xen domains begin/end events

Commands to run when the hook is activated.

Hooks that will be placed under /var/lib/libvirt/hooks/daemon.d/ and called for daemon start/shutdown/SIGHUP events

Hooks related options.

Hooks that will be placed under /var/lib/libvirt/hooks/network.d/ and called for networks begin/end events

Preswitch hook executed before mode switch.

Path to a directory containing agent files for Claude Code

Predetect hook executed before autorandr attempts to run xrandr.

Postswitch hook executed after mode switch.

A list of custom git hooks that get copied to ~/.gitolite/hooks/common.

Name of the UKI

Whether to enable matrix-hookshot, a bridge between Matrix and project management services.

The matrix-hookshot package to use.

The family name of the font within the package.

The name of the user account

The name of the user account

The name of this nylon instance.

config.yml configuration as a Nix attribute set

The name of the theme within the package.

The name of the group

The group's name

Extra arguments passed to the Celery responsible for webhooks.

Extra arguments passed to the Celery responsible for webhooks.

Name of the zone.

Name of the PPP peer.

Extra arguments passed to the Celery responsible for webhooks.

Extra arguments passed to the Celery responsible for webhooks.

A passkey used to encrypt tokens stored inside the bridge

Packages providing systemd units and hooks.

Extra arguments passed to the Celery responsible for webhooks.

The IP webhook should serve hooks on

The name of the user account

The family name of the font within the package.

The family name of the font within the package.

The family name of the font within the package.

Shell code that will be run after all other hooks

The name of the system used in the system.build.toplevel derivation

Content of the celeryconfig.py used by the Celery responsible for webhooks.

Content of the celeryconfig.py used by the Celery responsible for webhooks.

The Redis connection used for the webhooks worker.

The Redis connection used for the webhooks worker.

Content of the celeryconfig.py used by the Celery responsible for webhooks.

Content of the celeryconfig.py used by the Celery responsible for webhooks.

The Redis connection used for the webhooks worker.

The Redis connection used for the webhooks worker.

The name of the group

Content of the celeryconfig.py used by the Celery responsible for webhooks.

Etcd unique node name.

The name of the theme within the package.

The name of the theme within the package.

The name of the theme within the package.

The name of the icon theme within the package.

The Redis connection used for the webhooks worker.

The endpoint name.

The URL path prefix to use for served hooks (protocol://yourserver:port/${prefix}/hook-id).

The endpoint name.

The name of this systemd unit, including its extension

Username for JSON-RPC connections.

Name of the PAM service.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Name of the worker

Name i2pd appears in UPnP forwardings list.

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

Appservice registration file

The name of the icon theme within the package.

The name of the icon theme within the package.

The name of the icon theme within the package.

Whether to enable Webhook, a server written in Go that allows you to create HTTP endpoints (hooks), which execute configured commands for any person or service that knows the URL .

The token from your Buildkite "Agents" page

Name for the device

Name of modem device, will be searched for in /dev.

Specifies the Name of the Storage daemon.

The name of the node which is used as an identifier when communicating with the remote nodes in the mesh

The endpoint name.

The endpoint name.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

An absolute file path (which should be outside the Nix-store) to a base64-encoded Ed25519 key for signing webhook payloads

Packages providing systemd units and hooks.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Profile name

The profile's name.

Specific name of the application.

Name of the redis server

List of Systemd services to require and wait for when starting the application service, such as the Matrix homeserver if it's running on the same host.

Name of the runner to configure

Name of the runner to configure

The name of the cursor theme within the package.

The endpoint name.

The endpoint name.

The client name that must be used by the Director when connecting

The director name used by the system administrator

Mail "from" name.

Database name.

The name of the Helm chart

Name of the action.

Name of the image

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

A system user name for this client instance.

A system user name for this client instance.

The name of the host

The theme name.

The k3s server to connect to

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The unique agent name.

Database name.

The name of the Helm chart

Keyboard name.

The name of the theme within the package.

Agent name, usually same as the hostname

Agent name, usually the same as the hostname.

Akkoma frontend name.

Whether to enable lifecycled, a daemon for responding to AWS AutoScaling Lifecycle Hooks.

The name of the service to run

Unique identifier of the account

Font name, as used by fontconfig.

Mail "reply-to" name.

Name of the redis server

The name of the instance.

The name of the cursor theme within the package.

The name of the cursor theme within the package.

The name of the cursor theme within the package.

The endpoint name.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The name to return in service discovery responses for the MUC service itself

File path containing the k3s token agents can use to connect to the server

Name is referenced in logs

Name of the rule.

Name of the control, as it appears in alsamixer

Name of the machine when registering it at the central or local api.

The endpoint name.

Name of the existing database.

File path containing the rke2 token agents can use to connect to the server

Name is used as a suffix for the service name, user, and group

Enable the generated hooks file to be parsed as a Go template

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

Whether to relax the security sandbox to allow running setuid binaries (e.g. sudo) in the dhcpcd hooks.

Name of the user to ensure.

The name of the service to run

The name of the cask to install.

The name of the formula to install.

The name of the mailbox.

The logical name of the Galera cluster

The name of the server

The k3s token agents can use to connect to the server

The endpoint name.

Database name.

Database name.

The database name

Name of the beat

Name of the wiki.

Name of the server.

Name of this iscsi initiator

Server name to be used for this virtual host

Database name.

Name of the service.

The cursor name within the package.

The name of this gateway as shown in firezone

The name of the cookie that the oauth_proxy creates.

The name of an existing user account under which the rsync process should run.

Name of ICMP pinging job.

This primary server will notify all given secondary servers about zone changes

Database name.

Database name, only used when the databse is created locally.

The rke2 token agents can use to connect to the server

The unique name for THIS channel in THIS group

Name associated with the build

Name of the redis server

The endpoint name.

Database name.

Database name.

Database name.

The name of this authentication provider

Database name

The advertised name for zeroconf discovery.

The name of the immich database.

The name of this systemd unit, including its extension

Profile name.

The name of an existing user group under which the rsync process should run.

The name of the database to use for Wakapi.

The name of the host in the network as well as the configuration for that host

The name of the network interface to match against.

Unique identifier of the account

The family name of the font within the package.

Database name.

The name of the watcher

name of the virtualhost

User to run the cgit service as.

The friendly name you give to the network device

The friendly name you give to the network device

The name of this client as shown in firezone

The name of this actor

The name of this group

This library's name.

The name of the device.

The name of the device.

The name of this group for this account

The user's UID.

The language to use for personal names.

The name identifying the runner instance towards the Gitea/Forgejo instance.

When clone_target is unspecified, this is the name of a formula repository to tap from GitHub using HTTPS

Database name.

Database name.

When set to something distinct to null NSD is able to collect statistics per zone

This is the target address is to match against

Profile name.

PostgreSQL database name

The name of this gateway as shown in firezone

The user's primary group.

Port number Go Ethereum will be listening on, both TCP and UDP.

Adapter name that is used in the radicle-ci-broker configuration

TLS options for virtual host

Server name.

Database name.

The name of this relay group

APIs to enable over WebSocket

Text of the file

Name of the existing database (has no effect if type is "sqlite").

Bind port for ‹name› endpoint.

Group to run the cgit service as.

The name of this server.

Name of the local AutoSSH session

Name of the local AutoSSH session

Name of the game as it will appear in the game listing.

Bind port for ‹name› endpoint.

A path which will be scanned for repositories.

The name of services's user

What port to listen for client requests, default is 1080.

ACME options for virtual host.

HTTP options for virtual host

Port number of Go Ethereum HTTP API.

The name of the plugin.

Name of the site.

cgit repository settings, see cgitrc(5)

Unique identifier of the contact account

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Rename nodes to different name.

The user's home directory.

Name of the tmux window;

The name of the dawarich database.

MySQL database name.

Database name for FreshRSS.

The name of this gateway group

Name of the satellite.

The type of the device.

The name of this resource

Text of the file

Node name

The name of the plugin.

Name of the modifier.

Format: [AXFR|UDP] <ip-address> <key-name | NOKEY>

Name of the font to use for regreet.

Name of the beat

The nickname of this Tahoe node.

Whether to enable cgit.

Override the default TLS port for this virtual host.

Container name, e.g., shopping.

Blockchain garbage collection mode.

Whether to enable hub instance.

Set the host address for this virtual host

The account name

Name of the GNOME Shell theme.

The account UID

The group's GID.

Table name.

Unique identifier of the calendar

Whether to enable Go Ethereum Node.

Additional arguments passed to Go Ethereum.

The specified name-string gives the system file name of the storage device managed by this storage daemon

Whether to enable ‹name›.

Database name.

Database name.

The user's home directory mode in numeric format

VirtualHost to serve cgit on, defaults to the attribute name.

Name of the model to download and use for speech synthesis

Username

Override the default HTTP port for this virtual host.

Whether to enable ‹name›.

The actual zone data

Name of directory from which to import ZFS device, this is passed to zpool import as the value of the -d option

Profile name

Name of this virtual host

Name of the plugin.

Name of the plugin.

SSID to be used in IEEE 802.11 management frames.

Name of the theme to use for regreet.

Container name, e.g., shopping.

Profile name.

Name of the iSCSI initiator to boot from

Database name.

Database name.

Name of the symlink (relative to /var/lib/rancher/k3s/server/manifests)

Whether to enable TLS support.

DNS full-qualified domain name of a database server

DNS full-qualified domain name of a database server

Discourse database name.

Listed primary servers are allowed to notify this secondary server

The serial port to which your UPS is connected. /dev/ttyS0 is usually the first port on Linux boxes, for example.

Name of the Docker context

The name of an explicit dtb to be loaded, relative to the dtb base

Zone file resource records contain columns of data, separated by whitespace, that define the record.

Name of the interface.

The user's primary group.

Path to target file relative to HOME.

Name of Google storage bucket

Replace any existing runner with the same name

Replace any existing runner with the same name

Whether to enable DNSSEC.

Name of modem configuration file, will be searched for in config in the spooling area directory.

The name of the plugin.

static: Immediately answer any Neighbor Solicitation Messages (if they match the IP rule). iface: Forward the Neighbor Solicitation Message through the specified interface and only respond if a matching Neighbor Advertisement Message is received. auto: Same as iface, but instead of manually specifying the outgoing interface, check for a matching route in /proc/net/ipv6_route.

Members of this group can access the control socket for this interface.

Text of the file

Text of the file

The name of the first admin user.

Whether to enable Go Ethereum HTTP API.

Database name.

Proxy account name, without the possibility to include domain name ('at' sign is interpreted literally).

Path to the file which contains the actual base64 encoded key

Name of the remote read config, which if specified must be unique among remote read configs

Name of the interface

Each attribute of this option defines a systemd service that runs hans

Directory for the ACME challenge, which is public

Enables nylon as a running service upon activation.

Whether the SSID is to be interpreted using UTF-8 encoding.

The name of the database to create.

Interface to use when method is iface.

Enables HTTP/3 over QUIC on the UDP port for TLS

The cgit package to use.

The geth package to use.

Uhub plugin configuration.

Bind address for ‹name› endpoint.

Name of the symlink (relative to /var/lib/rancher/rke2/server/manifests)

Whether this file should be generated

The name of this client as shown in firezone

The device to update.

Set name to shared memory zone.

Username used to connect to registry.

Backup type as described in: https://pgbackrest.org/command.html#command-backup/category-command/option-type

Bind address for ‹name› endpoint.

Name of the remote write config, which if specified must be unique among remote write configs

Database name to use when connecting to an external or manually provisioned database; has no effect when a local database is automatically provisioned

Whether to enable this PPP peer.

Port to bind the TTS server to.

User account under which this pool runs.

Local secret key in hexadecimal form.

Name of the icon theme to use for regreet.

Name of the user to ensure.

Name of the user to ensure.

Root directory for requests.

Master=false means slave server

Addresses who may request zone transfers.

Limit retry time for secondary zones.

Whether to enable this RAUC slot.

Name of the profile.

The group GID

Database name.

Database name.

Name of database.

Output DPI configuration.

The network to connect to

Environment variables used for this PHP-FPM pool.

Database name.

The name of the host in the network as well as the configuration for that host

Name of the PostgreSQL database.

The name of the Linkwarden database.

Path to target file relative to xdg.dataHome.

Whether the target path should be unconditionally replaced by the managed file source

The name of the Grafana database.

Container name, e.g., shopping.

Local Mattermost database name.

Output resolution.

Output framerate.

Tunnel type.

These lines go to the end of cgitrc verbatim.

Shell commands executed to stop the service.

Verify peer certificate

Verify peer certificate

Adds index directive.

Alias directory for requests.

The port on which the tub will listen

The port on which the Web server will listen

Levels (minimum value for logged events): 0 = verbose debugging 1 = debugging 2 = informational messages 3 = notification 4 = warning

Name of the homebridge UI platform

Enable logging, default is no logging.

Pair of roots to synchronise.

Whether this file should be generated

Output video display controller.

Name of the MySQL database that holds EPGStation's data.

Name of the beat

Location of hardware kiss tnc for this interface.

pppd configuration for this peer, see the pppd(8) man page.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Specifies the MAC addresses to deny if macAcl is set to "deny" or "radius"

Marks the server as a backup server

Adds DirectoryIndex directive

Alias directory for requests

Password HMAC-SHA-256 for JSON-RPC connections

Tunnel type.

Text of the file.

A program name specifying a Postfix service/daemon process

Keyset used for tunnel identity.

Group account under which this pool runs.

Start the specified units when this unit is started.

Remote public key in hexadecimal form.

Port number of Go Ethereum metrics service.

Listen address of Go Ethereum HTTP API.

Isolate traffic between stations (clients) and prevent them from communicating with each other.

Adds try_files directive.

A system group name for this client instance.

A system group name for this client instance.

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

Program to execute, possibly with arguments.

The user's home directory.

Instance name.

Port number of Go Ethereum Auth RPC API.

Whether to offload computation onto a CUDA compatible GPU.

FQIN of referenced Image when source is a file or directory archive.

The user's home directory mode in numeric format

The domain name to collect stats for.

Output gamma configuration.

Vertical scaling factor/pixels.

Horizontal scaling factor/pixels.

This feed account's name.

Source directories.

Keyset used for tunnel identity.

Unique identifier of the boxxy rule

The serial port speed of this interface.

Each attribute of this option defines a systemd service that runs iodine

Units that want (i.e. depend on) this unit

Specifies the MAC addresses to allow if macAcl is set to "allow" or "radius"

Shell commands executed to stop the service.

The flake reference from is rewritten to.

The flake reference to which from> is to be rewritten.

User name under which the buildkite-agent exporter shall be run.

Text of the file

Icon to display in file manager, menus, etc.

Specify the log file name

If the specified units are started at the same time as this unit, delay this unit until they have started.

A system group name for this client instance.

A system group name for this client instance.

Whether the target path should be unconditionally replaced by the managed file source

Specify the program to run to talk to this UPS. apcsmart, bestups, and sec are some examples.

Name of symlink

Packages added to the service's PATH environment variable

Drive name without the full path.

Server name to verify the hostname on the returned gRPC certificates

The user as which to run bitcoind.

Blockchain sync mode.

Maximum peers to connect to.

The location of the Drupal files directory.

Adds a return directive, for e.g. redirections.

Service port

Path to a Containerfile which contains instructions to build the image.

Units that want (i.e. depend on) this unit

Controls how long a valid or invalid entry remains in the cache, in milliseconds.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Path to target file relative to xdg.cacheHome.

Shell commands executed after the service's main process has exited.

DNS full-qualified domain name of a database server

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Name of this virtual host

The location of the Drupal site state directory.

Start the specified units when this unit is started.

The path to repo in local machine

How to name the created archives

The account UID

This profile's name.

When to run the job.

Image to pull.

Name of the tun device

GVPE node name

add will additionally listen for TLS connections. only will disable TLS connections. force will redirect non-TLS traffic to the TLS connection.

Contents of the PAM service file.

Whether to enable the output.

Output rotate configuration.

Path to world folder containing the dimension to render

List of servers for inclusion in stub and secondary zones.

The IP interface to bind to. null means "all interfaces".

Enable unlocking and mounting of encrypted ZFS home dataset at login.

Override the default port on which to listen for connections.

Name of the cursor theme to use for regreet.

Shell commands executed before the service's main process is started.

Path to target file relative to xdg.stateHome.

Adds DirectoryIndex directive

Alias directory for requests

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Which local IP to bind the UDP socket to.

Text of this systemd unit.

cgit configuration, see cgitrc(5)

Configuration of uhub

Optional PKCS#11 module name.

When or how often the backup should run

The address on which to accept FastCGI requests.

Guaranteed minimum hops for ‹name› tunnels.

Whether to ask Let’s Encrypt to sign a certificate for this virtual host

Name of the homebridge

The data directory for bitcoind.

Limit retry time for secondary zones

Specifies the number of retries for failed notifies

If the specified units are started at the same time as this unit, delay this unit until they have started.

Packages added to the service's PATH environment variable

The name of the database to store data in.

Label for this destination

Name of the voice model to use

Whether to make the user account hidden.

Basic Auth protection for a vhost

Whether this file should be generated

Whether this file should be generated

The kimai package to use.

The tahoelafs package to use.

Path of the authentication file.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Whether to enable Drupal web application.

Extra arguments to pass to the server commandline.

Whether to enable Coqui TTS server.

The port on which the SFTP server will listen

Configuration for this host

Override the default port on which to listen for JSON-RPC connections.

Shell commands executed after the service's main process has exited.

The packaged Helm chart

The database name.

Location of bitcoind pid file.

Guaranteed minimum hops for ‹name› tunnels.

Shell commands executed as the service's main process.

Specifies the BSSID for this BSS

Text of the file.

Desktop IDs (without the .desktop extension) of whitelisted agents.

Name of the plugin linked to $XDG_CONFIG_HOME/ranger/plugins/

Domain name

The group as which to run bitcoind.

Name of this overlay

Path of certificates (*.{crt,cert,key}) used to connect to registry.

List of address ranges allowed to query this zone

The user's primary group.

The flake reference to be rewritten.

The flake reference to be rewritten.

Optional PKCS#11 module name.

Path of the source file or directory

Shell commands executed after the service's main process is started.

Shell commands executed when the service's main process is reloaded.

IP of the Redis master

As which user the backup should run.

Name of symlink

The user's home directory

Name of a file containing the spiped key

Name shown in the website title and on the front page.

Extra zone config to be appended at the end of the zone section.

Shell commands executed before the service's main process is started.

Whether to enable proxy for this bucket

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Root directory for requests.

Output scaling method.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

A program name specifying a Postfix service/daemon process

Whether to enable SFTP service.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Set maximum cache size

Username used in the machine image

Path of the authentication file used to connect to registry.

Whether output should be marked as primary

If set, root doesn't need to authenticate (e.g. for the useradd service).

The database engine name

The TCP port to accept connections

Database name to connect to

Whether to operate in tun (IP) or tap (Ethernet) mode.

List of virtual hostnames from which to accept requests.

IP address of server running hans

The location for users to install Drupal themes.

Limit refresh time for secondary zones.

Limit on the number of simultaneous connections allowed.

The name of this systemd unit, including its extension

Lines which would be added inside ups.conf for handling this UPS.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Extra lines to add to the tinc service configuration file

File or block device to export.

Extra configuration to be appended to awstats.${name}.conf.

Whether to show the message of the day.

Whether the target path should be unconditionally replaced by the managed file source

Whether the target path should be unconditionally replaced by the managed file source

Legacy RSA public key of the host in PEM format, including start and end markers

Whether to enable Go Ethereum prometheus metrics.

RPC user information for JSON-RPC connections.

IP and port to which this redis instance acts as a slave.

Shell commands executed as the service's main process.

The user ID owning the volume inside the container.

Run the rsync process with an inhibition lock taken; see systemd-inhibit(1) for a list of possible operations.

Display name of the radio station.

Key / certificate pairs for the virtual host.

Key policy for zone signing keys

Key policy for key signing keys

Location to serve cgit under.

Path of the source file.

Settings for this slot.

Address to which spiped should connect.

The labels to apply to the build.

Specifies a file containing the MAC addresses to deny if macAcl is set to "deny" or "radius"

Specifies the real host name to log into.

Name of the class implementing the check

Alias directory for requests.

Adds index directive.

If set, the OATH Toolkit will be used.

Name that will be shown to the user.

Whether to enable Go Ethereum Auth RPC API.

Shell commands executed after the service's main process is started.

Shell commands executed when the service's main process is reloaded.

Filesystem type of Device. (used as -t in mount commands)

Aliases of that unit.

Station MAC address -based authentication

Optional PKCS#11 module name.

Options for the Kimai PHP pool

Name of symlink

Override the default database cache size in MiB.

The name of the module

Source ZFS dataset

Common name attribute of allowed peer certificates

Common name attribute of allowed peer certificates

An existing Let’s Encrypt certificate to use for this virtual host

Name of symlink

If the specified units are started at the same time as this unit, delay them until this unit has started.

Copy content of the image located at the mountpoint of the volume on first run.

Name used to derive peer unit name.

Path to the unix socket file on which to accept FastCGI requests.

Dataset name to send snapshots to.

Optional slot number of the token that stores the certificate.

port of the Redis master

When or how often the backup should run

Whether to enable the HTTP/3 protocol

Default window size for this interface.

Path to plugin file.

The drupal package to use.

Domain to fetch certificate for (defaults to the entry name).

Guaranteed minimum hops for ‹name› tunnels.

The packaged Helm chart

Shell commands executed when the instance is starting.

Adds try_files directive.

Path to target file relative to xdg.configHome.

Allow these IPs and TSIG to transfer zones, addr TSIG|NOKEY|BLOCKED address range 192.0.2.0/24, 1.2.3.4&255.255.0.0, 3.0.2.20-3.0.2.40

Keep this unit running as long as the listed units are running

Path of the source file or directory

Output position

Basic Auth password file for a vhost

The subnets which this tinc daemon will serve

The name of the Stash Box

Shell commands to run when file has changed between generations

Address to bind on for UI connections

Environment variables to set for the kernel.

Enable logging to the system logger.

Whether to enable Redis server.

Number of worker instances to run

The path of the web root directory.

Path to the certificate authority certificate.

Whether to enable Enables the axport interface.

Default maximum packet size for this interface.

Maximum number of items to keep in slow log.

Name of the runner group to add this runner to (defaults to the default runner group)

Name of the runner group to add this runner to (defaults to the default runner group)

If set, the OTPW system will be used (if ~/.otpw exists).

Specifies a file containing the MAC addresses to allow if macAcl is set to "allow" or "radius"

Create the home directory when creating the user.

The type of this worker

Guaranteed minimum hops for ‹name› tunnels.

Path to file containing local secret key in binary or hexadecimal form.

These lines go to the end of the location verbatim.

The group GID

Local UDP port.

Name shown in the server list.

The specified name-string must be the generic SCSI device name of the autochanger that corresponds to the normal read/write Archive Device specified in the Device resource

Authentication algorithm for this key.

The name of the wrapper program

TCP Port to bind on for UI connections

Language of the environment

Specifies if TLS should be enabled

Specifies if TLS should be enabled

Public address for p2p connections from peers (if TCP is used)

Whether to start the build on boot

Whether to pull the image on boot

Whether users can log in with passwords defined in /etc/shadow.

Specify the server verbosity level, options: debug, verbose, notice, warning.

The path to the user's shell

The address of the proxy.

Text of this systemd unit.

Whether to enable helper service.

Name of the snippet.

Optional slot number of the token that stores the certificate.

Alias of home.pointerCursor.name.

Event type.

Aliases of that unit.

The name of the user for this authelia instance.

The name the camera will show up as.

The specified name-string names the type of media supported by this device, for example, DLT7000

Whether to enable watching for repo.

Optional url of remote repository

Optional branch in remote repository

Whether to enable Bitcoin daemon.

Output scale configuration

Whether to enable this PAM service.

Path or reference to the host key.

Name of symlink (relative to /etc)

Turns on or off the router flag for Neighbor Advertisement Messages.

The group ID owning the volume inside the container.

Absolute path to the certificate to load

Errbot backend name.

Domain part of the web interface URL (no web interface for this domain if null)

The name of your network of sr.ht-based sites.

The flake reference from is rewritten to

If set to false, the user account will not be created

Automatically start this unit at the given date/time, which must be in the format described in systemd.time(7)

Adds a return directive, for e.g. redirections.

The type of log being collected.

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

Page or namespace to restrict

The location of the Drupal config sync directory.

PostgreSQL host for operating remotely.

Custom name of this poller.

Hostname alias(es).

Username for this DDNS provider.

DNS server to use as an intermediate relay to the iodined server

Specifies the image the volume is based on when Driver is set to the image.

Enable PAM mount (pam_mount) system to mount filesystems on user login.

Name of the class implementing the check

The name of private PKCS #8 key file for this policy to be found in the baseDirectory, or the absolute path to the key file

Keep this unit running as long as the listed units are running

Add the necessary actions for a upsmon process to work

Start the specified units when this unit is started.

Text of the file.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Whether this file should be generated

Command and arguments to start the kernel.

TLS Options for the Director in this Configuration.

Bind address to be used for this server.

TLS Options for the Director in this Configuration.

Port the NetBird client listens on.

Port the NetBird client listens on.

Device identifiers, as shown by keyd(1).

If given, sets the SO_MARK option on the TCP socket.

If given, sets the SO_MARK option on the TCP socket.

Require HTTPS and verification of certificates when contacting registries.

Require HTTPS and verification of certificates when contacting registries.

Attributes for user's entry in pam_mount.conf.xml

Owner's name.

Determines how multiple values are joined to create the claim value

Whether this file locals should be generated

Keeps the specified running while this unit is running

If set, keys listed in ~/.ssh/authorized_keys and ~/.eid/authorized_certificates can be used to log in with the associated PKCS#11 tokens.

This is a rule that the target address is to match against

The flake input from is rewritten to.

The flake input from is rewritten to.

The flake input to which from> is to be rewritten.

Listen for any Neighbor Solicitation messages on this interface, and respond to them according to a set of rules

DDNS server name.

Key size in bits

Key size in bits

The name of a .desktop file in the directory specified in the 'package' option.

The username to store inside the credentials file.

APIs to enable over WebSocket

Path to the host certificate.

The location for users to install Drupal modules.

I2P nodes that are allowed to connect to this service.

Shell commands executed when the instance is shutting down.

URL where this inbox can be accessed over HTTP.

A list of host names and/or IP numbers used for accessing the host's ssh service

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Port to bind on for p2p connections from peers (both TCP and UDP)

Address to bind on for p2p connections from peers (both TCP and UDP)

Absolute path to the certificate to load

Manually specify the hostname

The user's auxiliary groups.

Public URL of the API address of the reverse proxy/tls terminator

Options for the Drupal PHP pool

Number of simultaneous ‹name› tunnels.

The external address where the host can be reached

Disables scan for overlapping BSSs in HT40+/- mode

Attrset to be transformed into YAML for host config

Kissattach parameters for this interface.

User account under which this instance of redis-server runs.

Listen address of Go Ethereum metrics service.

Options for PHP's php.ini file for this Drupal site.

Whether to enable this proxy cache path entry.

Automatically start this unit at the given date/time, which must be in the format described in systemd.time(7)

The name of the group for this authelia instance.

Name of the user to log in

The name of the file or block device that should be used as header for the encrypted device.

Protocol names to hide in summary tables (RE2 syntax),

The user as which to run blockbook-frontend-‹name›.

Settings that should be passed to rsync via long options

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

The furl for a Tahoe helper node

The port where the host can be reached

Shell commands to run when file has changed between generations

Canonical hostname for the server.

Path of the source file.

Canonical hostname for the server.

The URL at which to fetch the feed.

The path to the socket to bind to.

The volume driver to use.

The labels to apply to the volume.

Each attribute in this set specifies an option in the [Unit] section of the unit

Optional slot number of the token that stores the certificate.

Number of simultaneous ‹name› tunnels.

IP Address of a database server

IP Address of a database server

Set size to shared memory zone.

Path to encrypted luks device that contains the user's home directory.

User name for RPC connections.

Basic Auth protection for a vhost

The path to the xkb types file

Extra configuration options to put at the end of this BSS's defintion in the hostapd.conf for the associated interface

Database user.

Set the log-level

Print global archive statistics upon completion

Structural Kimai's local.yaml configuration

Listen address of Go Ethereum Auth RPC API.

Whether to run the check command with the provided checkOpts options.

The PHP package to use for running this PHP-FPM pool.

Define custom guidance for the agents; this value is written to {file}~/.codex/AGENTS.md

Address to bind on for API connections relied by the reverse proxy/tls terminator.

Port to bind on for API connections relied by the reverse proxy/tls terminator.

Run specified command or script after the tunnel device has been opened.

Override for package "short name", used for generating configuration

The repo of the Helm chart

The name of the file (can be a raw device or a partition) that should be used as the decryption key for the encrypted device

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

Additional command line parameters

Location of the DokuWiki state directory.

Hostname of server running iodined

A list of options for 'restic check'.

Whether to run the rspamd worker.

The path of a device which is mounted for the volume.

Whether to create the volume on boot.

Arguments passed to date to create a timestamp suffix for the archive name.

Whether to enable this mount.

Adds DirectoryIndex directive

Alias directory for requests

Port number of Go Ethereum WebSocket API.

Database host address.

Database host port.

Additional names of virtual hosts served by this virtual host configuration.

Keeps the specified running while this unit is running

A short description of the user account, typically the user's full name

If set, the pam_mysql module will be used to authenticate users against a MySQL/MariaDB database.

Specifies the frequency band to use, possible values are 2g for 2.4 GHz, 5g for 5 GHz, 6g for 6 GHz and 60g for 60 GHz.

The hash of the packaged Helm chart

Where to mount this dataset.

The schedule in which data is persisted to disk, represented as a list of lists where the first element represent the amount of seconds and the second the number of changes

Remote UDP port

User or group to restrict

Path to the directory where the pastes will be saved to

(optional) name your peer has for you

(optional) name your peer has for you

If set, the calling user's SSH agent is used to authenticate against the configured keys

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

Whether to enable automatic mounting.

See torrc manual.

Order of this location block in relation to the others in the vhost

The ax25-tools package to use.

Enable verbose output, default is to not be verbose.

Limit refresh time for secondary zones

Name of the wrapper that is installed into PATH

Whether to try to create home directories for users with $HOMEs pointing to nonexistent locations on session login.

The group's members.

Path of the source file or directory

Path of the source file or directory

Whether the target path should be unconditionally replaced by the managed file source

This option provides a simple way to serve individual, static files.

Name of the heat source.

FastCGI parameters to override

Shell commands to run after borg create

Type of this limit

Arguments passed to the main process script

User under which to run the service

These lines go to the end of the location verbatim.

Denied client IP ranges, these gets evaluated after the allowed IP ranges, defaults to all IPv4 addresses: [ "0.0.0.0/0" ] To block all other access than the allowed.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Number of CPUs to allocate to the machine

Swap size in MB for the machine

If the specified units are started at the same time as this unit, delay this unit until they have started.

The flake reference to be rewritten

Whether to run 'restic check' with the provided checkOpts options

Path to key file

Host to use for the destination dataset

Each attribute in this set specifies an option in the [Unit] section of the unit

Whether to enable the QUIC transport protocol

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

Absolute path to the certificate to load

Location of blockbook-frontend-‹name› data directory.

Refer to xrandr(1) for the documentation of the transform matrix.

Set the logcheck level.

Number of daily snapshots.

Whether to enable this source.

The znapzend backup plan to use for the source

Name to match.

Name of user to run the script under.

Item this limit applies to

The bitcoind package to use.

Whether to enable storage service.

URI to bind the wyoming server to.

Apache configuration can be done by adapting services.httpd.virtualHosts.

A list of options for 'restic check'

The group as which to run blockbook-frontend-‹name›.

The configuration file path to supply bitcoind.

Whether to create the home directory and ensure ownership as well as permissions to match the user.

Extra configuration values that you want to insert into settings.php

"Options appended to the PHP configuration file php.ini used for this PHP-FPM pool."

The path of a PEM encoded TLS private key

The path of a PEM encoded TLS private key

Maps kanidm groups to values for the claim.

The account type

Name of the network interface managed by this client.

Name of the network interface managed by this client.

Enables TCP_NODELAY on the TCP socket.

Whitelists the given rrl-types.

The IP and port to forward all traffic to.

The IP and port to forward all traffic to.

Enables TCP_NODELAY on the TCP socket.

Name for where mail coming from the remote (far) mail server will end up locally

Require TLS or TLS-PSK encryption

Require TLS or TLS-PSK encryption

Indicates the priority over identical Subnets owned by different nodes

TTL for dnssec records

Whether to update /var/log/wtmp.

Number of ElGamal/AES tags to send.

Group account under which this instance of redis-server runs.

The hostname the web service appears under.

(optional) human-readable name for peer

(optional) human-readable name for peer

The input type

Extra lines that go into the pool configuration

S3 bucket name to use for HTTP-01 based challenges

Name (relative to the root of the filesystem) of the subvolume where the hash table will be stored.

Location of the dokuwiki acl rules

Your yandex.com login name.

User that runs the cronjob.

Paths to SSL files

Whether this node is a relay.

Allow client if common name appears in the list.

If enabled, the pam_umask module will be loaded.

Shell commands to execute when the event is triggered.

Regex specifying which log lines to ignore.

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

The delay time (in microseconds) on failure.

Combined stdout and stderr log file for the Colima service.

Target node name on the IBM TSM server.

Additional TLS/SSL-related configuration options

Whether to use the testnet instead of mainnet.

Whether to enable HTTPS in addition to plain HTTP

Whether to enable HTTPS in addition to plain HTTP

Attribute set describing resource limits

Arguments passed to the main process script

The type of the service

Allow client if organizational unit name appears in the list.

The address that Anubis listens to

Log level of the NetBird daemon.

Log level of the NetBird daemon.

The path to the xkb compat file

Path to the key file.

Network interface to bind to.

NNTP group name for the inbox.

The number of shares required to store a file.

Whether the delay after typing a wrong password should be disabled.

INI sections and values to populate the Image Quadlet.

INI sections and values to populate the Build Quadlet.

Number of ElGamal/AES tags to send.

Path to the SSH host public key.

If set, fingerprint reader will be used (if exists and your fingerprints are enrolled).

Number of simultaneous ‹name› tunnels.

Permission level to restrict the actor(s) to

Path to the working directory (used for config and pidfile)

Take unencrypted connections from the source socket and send encrypted connections to the target socket.

Take encrypted connections from the source socket and send unencrypted connections to the target socket.

Extra configuration lines to add to THIS channel's configuration.

If enabled, checks all masters for the last zone version

Whether to enable frp.

Akkoma frontend reference.

The tinc_pre package to use.

Change permissions for the socket

Database user.

If set, users listed in $XDG_CONFIG_HOME/Yubico/u2f_keys (or $HOME/.config/Yubico/u2f_keys if XDG variable is not set) are able to log in with the associated U2F key

E-mail address of the server administrator.

Name of the platform

Start the specified units when this unit is started.

The set of system-wide known SSH hosts

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Path to host the API on and forward to the daemon's api port

Whether the PPP session is automatically started at boot time.

Name of the PCM card to control (slave).

Whether to enable fedimintd.

This setting configures the name of a mailbox for which administrator scripts are configured

Controls how long to wait for a Neighbor Advertisement Message before invalidating the entry, in milliseconds.

Directory for the acme challenge which is PUBLIC, don't put certs or keys in here

Directory for the ACME challenge, which is public

Whether to enable HTTPS and reject plain HTTP connections

Whether to enable HTTPS and reject plain HTTP connections

Basic Auth password file for a vhost

URL of the accounts server.

Value of this limit

Path of the source .yaml file.

Whether this manifest file should be generated.

Database host address.

Database host port.

Number of simultaneous ‹name› tunnels.

Key of taint.

Tag list.

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

If set to false, this unit will be a symlink to /dev/null

The number of distinct storage nodes required to store a file.

Extra parameters to append to redis-server invocation

The prefix length of the subnet

Don't send the password immediately after login, but store for PAM session.

Allow client if URI subject alternative name appears in the list.

Allow client if DNS subject alternative name appears in the list.

Public domain of the API address of the reverse proxy/tls terminator.

Bootable image to use for the machine

Full legal name

Start the specified units when this unit is started.

Start the specified units when this unit is started.

By default data is only periodically persisted to disk, enable this option to use an append-only file for improved persistence.

Timeout, in seconds, after which an attempt to connect to the target or a protocol handshake will be aborted (and the connection dropped) if not completed

Group under which to run the service

Commands executed after the profile is successfully applied

Short description for the zone.

Rich rules for the zone.

Ports to allow in the zone.

The restic package to use.

The restic package to use.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

The plugin.

The email address used to authenticate as this account

Shell commands to run when file has changed between generations

Shell commands to run when file has changed between generations

Access Control Lists: see https://www.dokuwiki.org/acl Mutually exclusive with services.dokuwiki.aclFile Set this to a value other than null to take precedence over aclFile option

Configuration for MPD

How often to fsync the append-only log, options: no, always, everysec.

Allow the user to do certain things with upsd

Any additional text to be appended to the wp-config.php configuration file

The external location that the node should listen on

Whether to enable kTLS support

If set, users listed in ~/.yubico/authorized_yubikeys are able to log in with the associated Yubikey tokens.

A local file path specifying the location of the mount point.

The frp consists of client and server

Text of the file.

The znapzend backup plan to use for the source

Email address to which to send feed items

Additional configurations to be appended to bitcoin.conf.

The repo of the Helm chart

User under which to run the service

The auth adapter type

Path to the certificate file.

Path to 64x64 logo png.

Path to 32x32 logo png.

Enable SSL.

Generic name of the application.

IP to listen on. 0.0.0.0 for IPv4 only, * for all.

The nickname of this Tahoe introducer.

Disk size in GB for the machine

Hostname alias(es).

Username for this DDNS provider.

Name of group to run the script under

Which paths to backup, in addition to ones specified via dynamicFilesFrom

Database name.

The external IP address or hostname where the host can be reached.

The hash of the packaged Helm chart

Path of the source file.

Number of yearly snapshots.

Number of hourly snapshots.

Enable or disable this network.

The network driver to use.

The labels to apply to the network.

The subnet to use for the network.

This option provides a simple way to serve individual, static files.

If set to false, this unit will be a symlink to /dev/null

The path to the xkb symbols file

The location of the Drupal private files directory.

Whether this OpenVPN instance should be started automatically.

Order of this location block in relation to the others in the vhost

Enable or disable TTY auditing for specified users

If set, users with an SSH certificate containing an authorized principal in their SSH agent are able to log in

A state directory used by NetBird client to store config.json, state.json & resolv.conf.

A state directory used by NetBird client to store config.json, state.json & resolv.conf.

Paths for public-inbox-watch(1) to monitor for new mail.

Name of the theme to use for the lightdm-gtk-greeter.

Sets the number of worker threads to use

Allowed time window for first received packet in seconds (positive number allows packets from history)

Name of the font to use.

Path to the accounts file.

Interface name

Canonical hostname for the server.

Attribute set of NetBird client daemons, by default each one will:

1. be manageable using dedicated tooling:

• netbird-<name> script,
• NetBird - netbird-<name> graphical interface when appropriate (see ui.enable),

2. run as a netbird-<name>.service,
3. listen for incoming remote connections on the port 51820 (openFirewall by default),
4. manage the netbird-<name> wireguard interface,
5. use the /var/lib/netbird-/config.json configuration file,
6. override /var/lib/netbird-/config.json with values from /etc/netbird-/config.d/*.json,
7. (hardened) be locally manageable by netbird-<name> system group,

With following caveats:

• multiple daemons will interfere with each other's DNS resolution of netbird.cloud, but should remain fully operational otherwise

The OAuth2 server's authentication URI.

These lines go to the end of the location verbatim.

Tell nylon which interface to use as an uplink, default is "enp3s0f0".

Subordinate group ids that user is allowed to use

Subordinate user ids that user is allowed to use

How to display the tag when focused.

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Controls presence of netbird-ui wrapper for this NetBird client.

Controls presence of netbird-ui wrapper for this NetBird client.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

The server name.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Specify delay (in seconds) before sending snaps to the destination

The dokuwiki package to use.

The dataset to use for this source.

The openssh package to use.

The piper-tts package to use.

The client authentication stance for this policy.

Whether to accelerate the underlying onnxruntime library with CUDA.

Whether to automatically start this machine on login.

Name of the database user to initialise the database with

Whether to enable SSL (https) support.

Patterns to exclude when backing up

The name of the module

Paths to back up, alongside those defined by the dynamicFilesFrom option

If NSD as secondary server should be allowed to AXFR if the primary server does not allow IXFR.

If the specified units are started at the same time as this unit, delay this unit until they have started.

How frequently to change keys

How frequently to change keys

The number of shares required to reconstitute a file.

Optional text to use in as commit message; all occurrences of %d will be replaced by formatted date/time

Root directory for requests.

Root directory for requests.

Root directory for requests.

The callsign of the physical interface to bind to.

Settings specific to this plugin.

To enable SSL, specify path to the name of certificate files without extension

Whether to use HTTPS for this DDNS provider.

Remote or local repository to back up to.

Port to listen on

Additional command line parameters

Listen address.

Path to the data dir fedimintd will use to store its data

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

The user's shell

Interface name

Whether to enable Go Ethereum WebSocket API.

An application timeout on receiving data from the TCP socket.

An application timeout on receiving data from the TCP socket.

List of IPs of relays that this node should allow traffic from.

Extra arguments to pass to the podman build command.

Whether to enable the HTTP/3 protocol

Filesystem type

Name of the theme to use for the lightdm-enso-os-greeter

Which protocol to use.

Path to a certificate signing request to apply when fetching the certificate.

Use this as the SNI while connecting via TLS

Set the login uid of the process (/proc/self/loginuid) for auditing purposes

Basic Auth protection for a vhost

The levels parameter defines structure of subdirectories in cache: from 1 to 3, each level accepts values 1 or 2

If set, the calling user's SSH agent is used to authenticate against the keys in the calling user's ~/.ssh/authorized_keys

The log file to be scanned

The github-runner package to use.

The github-runner package to use.

Command that is executed when this service is started.

File that contains password

Makes this vhost the default.

Configure unit start rate limiting

Path of the source file or directory

Working directory, available as $GITHUB_WORKSPACE during workflow runs and used as a default for repository checkouts

Path to server SSL certificate key.

Allowed client IP ranges are evaluated first, defaults to ARIN IPv4 private ranges: [ "192.168.0.0/16" "127.0.0.0/8" "172.16.0.0/12" "10.0.0.0/8" ]

Optional hostname to add to /etc/hosts; prevents reverse lookup failures.

Optional hostname to add to /etc/hosts; prevents reverse lookup failures.

Makes this policy trust all remote parties

Extra arguments to pass to the podman image pull command.

Whether to start the network on boot (requires user lingering).

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

The user names of the group members, added to the /etc/group file.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Children zones inherit all options of their parents

Real name

TLS key to use instead of the hardcoded on in case of HTTPS connections

Public URL of the API address of the reverse proxy/tls terminator

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Whether to allow the remote address and port to change when properly encrypted packets are received.

Port number to listen on.

Root directory for requests.

IP address to listen on.

IRC server port.

The amount of debugging information to add to the log. 0 means little logging while 5 is the most logging. man tincd for more details.