Path to the directory storing the hooks

Path to the directory storing the hooks

"Agent" hooks to install

The pre-exit hook will run just before your build job finishes

The command hook script will replace the default implementation of running the build command.

The pre-command hook will run just before your build command runs

The post-command hook will run after the bootstrap script has run your build commands

The pre-artifact hook will run just before artifacts are uploaded

The post-artifact hook will run just after artifacts are uploaded

The pre-checkout hook will run just before your projects source code is checked out from your SCM provider

The checkout hook script will replace the default checkout routine of the bootstrap.sh script

The post-checkout hook will run after the bootstrap script has checked out your projects source code.

The environment hook will run before all other commands, and can be used to set up secrets, data, etc

The name of the agent as seen in the buildkite dashboard.

The name of the agent as seen in the buildkite dashboard.

Whether to enable ‹name›.

The ID of your hook

Custom hooks for Claude Code

The name of the hook

Packages added to the service's PATH environment variable

Shell commands executed as the service's main process.

Define a launchd job

Packages added to the service's PATH environment variable

Command executed as the service's main process.

Tags for the agent.

Tags for the agent.

The token from your Buildkite "Agents" page

The token from your Buildkite "Agents" page

Shell commands executed as the service's main process.

The workdir for the agent

The workdir for the agent

This optional key specifies what nice(3) value should be applied to the daemon.

This required key uniquely identifies the job to launchd.

Command executed as the service's main process.

Command that buildkite-agent 3 will execute when it spawns a shell.

Command that buildkite-agent 3 will execute when it spawns a shell.

Whether to enable this buildkite agent

Whether to enable this buildkite agent

The command that should be executed when the hook is triggered.

Additional packages that should be added to the agent's PATH

This optional key specifies that launchd should adjust its log mask temporarily to LOG_DEBUG while dealing with this job.

Profile hook scripts.

This optional key is used to control whether your job is launched once at the time the job is loaded

This optional key specifies the user to run the job as

This optional key specifies the node to connect(2) or bind(2) to.

Whether to enable this Woodpecker-Agent

The buildkite-agent package to use.

Which buildkite-agent derivation to use

This optional key can be used to request that the service be registered with the mDNSResponder(8)

This optional key tells launchctl what type of socket to create

Each attribute in this set specifies an option for a key in the plist. https://developer.apple.com/legacy/library/documentation/Darwin/Reference/ManPages/man5/launchd.plist.5.html

This optional key implies SockFamily is set to "Unix"

Groups the user for this buildkite agent should belong to

The recommended idle time out (in seconds) to pass to the job

Extra lines to be added verbatim to the configuration file.

Extra lines to be added verbatim to the configuration file.

The woodpecker-agent package to use.

This optional key causes the job to be started if any one of the listed paths are modified.

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

This optional key specifies the mode of the socket

Custom agents for Claude Code

Attribute set of buildkite agents

Attribute set of buildkite agents

Additional groups for the systemd service.

This optional key causes the job to be started every time a filesystem is mounted.

The amount of time launchd waits before sending a SIGKILL signal

This optional key specifies what value should be passed to umask(2) before running the job

Profile hook scripts.

Extra commands to run before starting buildkite.

Each attribute in this set specifies an option for a key in the plist. https://developer.apple.com/legacy/library/documentation/Darwin/Reference/ManPages/man5/launchd.plist.5.html

This optional key specifies what nice(3) value should be applied to the daemon.

This optional key specifies the service on the node to connect(2) or bind(2) to.

This optional key specifies the group to run the job as

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

This required key uniquely identifies the job to launchd.

OpenSSH private key

A run-time path to the key file, which is supposed to be provisioned outside of Nix store.

OpenSSH private key

A run-time path to the key file, which is supposed to be provisioned outside of Nix store.

This optional key can be used to request that the service be registered with the mDNSResponder(8)

This optional key specifies the node to connect(2) or bind(2) to.

This optional key specifies the protocol to be passed to socket(2)

This optional key specifies whether the job participates in advanced communication with launchd

This optional key tells launchctl what type of socket to create

This configuration file only applies to the hosts listed with this key

This optional key specifies whether initgroups(3) should be called before running the job

This optional key implies SockFamily is set to "Unix"

This key was used in Mac OS X 10.4 to control whether a job was kept alive or not

This optional key specifies that launchd should adjust its log mask temporarily to LOG_DEBUG while dealing with this job.

This optional key specifies what nice(3) value should be applied to the daemon.

This optional key is used to control whether your job is launched once at the time the job is loaded

This optional key can be used to request that the service be registered with the mDNSResponder(8)

This optional key specifies the user to run the job as

Extra settings.

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

This optional key specifies the node to connect(2) or bind(2) to.

This required key uniquely identifies the job to launchd.

This optional key specifies the mode of the socket

This optional key specifies whether the job can only be run once and only once

This key maps to the first argument of execvp(3)

This configuration file only applies to hosts NOT listed with this key

Custom agents for opencode

This optional key specifies whether the kernel should consider this daemon to be low priority when doing file system I/O.

This optional key tells launchctl what type of socket to create

Add programs to the buildkite-agent environment

Add programs to the buildkite-agent environment

This optional key specifies what file should be used for data being supplied to stdin when using stdio(3).

The recommended idle time out (in seconds) to pass to the job

This optional key implies SockFamily is set to "Unix"

This optional key is a variant of SockPathName

Environment variables passed to the service's processes.

This optional key specifies what file should be used for data being sent to stdout when using stdio(3).

This optional key causes the job to be started if any one of the listed paths are modified.

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

This optional key specifies that launchd should adjust its log mask temporarily to LOG_DEBUG while dealing with this job.

This optional key specifies the mode of the socket

This optional key causes the job to be started every time a filesystem is mounted.

The amount of time launchd waits before sending a SIGKILL signal

This optional key is used to control whether your job is launched once at the time the job is loaded

This optional key specifies that launchd should instruct the kernel to have the job wait for a debugger to attach before any code in the job is executed.

This optional key specifies what value should be passed to umask(2) before running the job

This optional key specifies the service on the node to connect(2) or bind(2) to.

This optional key specifies the user to run the job as

Preswitch hook executed before mode switch.

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

Predetect hook executed before autorandr attempts to run xrandr.

This optional key is used to specify a directory to chroot(2) to before running the job.

This key specifies that the job should be spawned into a new security audit session rather than the default session for the context is belongs to

The recommended idle time out (in seconds) to pass to the job

This optional key specifies what file should be used for data being sent to stderr when using stdio(3).

This flag causes launchd to use the glob(3) mechanism to update the program arguments before invocation.

This optional key specifies the protocol to be passed to socket(2)

woodpecker-agent config environment variables, for other options read the documentation

This configuration file only applies to sessions of the type specified

Environment variables passed to the service's processes.

This optional key causes the job to be started if any one of the listed paths are modified.

This optional key specifies the service on the node to connect(2) or bind(2) to.

This optional key specifies the group to run the job as

List of hooks to enable when generating the CDI specification

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

This optional key causes the job to be started every time a filesystem is mounted.

The amount of time launchd waits before sending a SIGKILL signal

Postswitch hook executed after mode switch.

This optional key specifies what value should be passed to umask(2) before running the job

This optional key is used to specify Mach services to be registered with the Mach bootstrap sub-system

The maximum amount of cpu time (in seconds) to be used by each process.

The maximum amount of cpu time (in seconds) to be used by each process.

This optional key specifies whether the job participates in advanced communication with launchd

This optional key specifies the protocol to be passed to socket(2)

Resource limits to be imposed on the job

Resource limits to be imposed on the job

This configuration file only applies to the hosts listed with this key

This optional key specifies whether initgroups(3) should be called before running the job

List of hooks to disable when generating the CDI specification

File to load environment variables from

This key was used in Mac OS X 10.4 to control whether a job was kept alive or not

The largest size (in bytes) core file that may be created.

The largest size (in bytes) core file that may be created.

Preswitch hook executed before mode switch.

This optional key is a variant of SockPathName

This optional key specifies the group to run the job as

Predetect hook executed before autorandr attempts to run xrandr.

This optional key specifies whether the job can only be run once and only once

This key maps to the first argument of execvp(3)

This configuration file only applies to hosts NOT listed with this key

This optional key specifies whether the kernel should consider this daemon to be low priority when doing file system I/O.

When a job dies, launchd kills any remaining processes with the same process group ID as the job

The largest size (in bytes) file that may be created.

The largest size (in bytes) file that may be created.

This optional key specifies what file should be used for data being supplied to stdin when using stdio(3).

This optional key is used to specify a directory to chdir(2) to before running the job.

This optional key specifies whether the job participates in advanced communication with launchd

This optional key can be used to request that the datagram socket join a multicast group

This optional key specifies what file should be used for data being sent to stdout when using stdio(3).

This optional key is a variant of SockPathName

This configuration file only applies to the hosts listed with this key

This optional key specifies whether initgroups(3) should be called before running the job

This key was used in Mac OS X 10.4 to control whether a job was kept alive or not

This optional key causes the job to be started every N seconds

This optional key specifies that launchd should instruct the kernel to have the job wait for a debugger to attach before any code in the job is executed.

Postswitch hook executed after mode switch.

This optional key specifies whether the job can only be run once and only once

The maximum size (in bytes) of the data segment for a process; this defines how far a program may extend its break with the sbrk(2) system call.

The maximum size (in bytes) of the data segment for a process; this defines how far a program may extend its break with the sbrk(2) system call.

This key maps to the first argument of execvp(3)

This optional key is used to specify a directory to chroot(2) to before running the job.

This configuration file only applies to hosts NOT listed with this key

This optional key specifies whether the kernel should consider this daemon to be low priority when doing file system I/O.

This key specifies that the job should be spawned into a new security audit session rather than the default session for the context is belongs to

This optional key specifies what file should be used for data being supplied to stdin when using stdio(3).

This optional key specifies what file should be used for data being sent to stderr when using stdio(3).

This flag causes launchd to use the glob(3) mechanism to update the program arguments before invocation.

This configuration file only applies to sessions of the type specified

This optional key specifies what file should be used for data being sent to stdout when using stdio(3).

This optional key is used to specify Mach services to be registered with the Mach bootstrap sub-system

This optional key specifies that launchd should instruct the kernel to have the job wait for a debugger to attach before any code in the job is executed.

The maximum size (in bytes) of the stack segment for a process; this defines how far a program's stack segment may be extended

The maximum size (in bytes) of the stack segment for a process; this defines how far a program's stack segment may be extended

This optional key is used to specify a directory to chroot(2) to before running the job.

The maximum amount of cpu time (in seconds) to be used by each process.

The maximum amount of cpu time (in seconds) to be used by each process.

Resource limits to be imposed on the job

Resource limits to be imposed on the job

The maximum size (in bytes) which a process may lock into memory using the mlock(2) function.

The maximum size (in bytes) which a process may lock into memory using the mlock(2) function.

This key specifies that the job should be spawned into a new security audit session rather than the default session for the context is belongs to

This key maps to the second argument of execvp(3)

This flag causes launchd to use the glob(3) mechanism to update the program arguments before invocation.

This optional key specifies what file should be used for data being sent to stderr when using stdio(3).

Specifies higher-level event types to be used as launch-on-demand event sources

This optional key is used to specify Mach services to be registered with the Mach bootstrap sub-system

The largest size (in bytes) core file that may be created.

The largest size (in bytes) core file that may be created.

This configuration file only applies to sessions of the type specified

This optional key can be used to request that the datagram socket join a multicast group

Much like the WatchPaths option, this key will watch the paths for modifications

When a job dies, launchd kills any remaining processes with the same process group ID as the job

The largest size (in bytes) file that may be created.

The largest size (in bytes) file that may be created.

The maximum amount of cpu time (in seconds) to be used by each process.

This optional key is used to specify a directory to chdir(2) to before running the job.

The maximum amount of cpu time (in seconds) to be used by each process.

Resource limits to be imposed on the job

Resource limits to be imposed on the job

This optional key can be used to request that the datagram socket join a multicast group

This optional key causes the job to be started every N seconds

The largest size (in bytes) core file that may be created.

The largest size (in bytes) core file that may be created.

This optional key is used to control whether your job is to be kept continuously running or to let demand and conditions control the invocation

The maximum size (in bytes) of the data segment for a process; this defines how far a program may extend its break with the sbrk(2) system call.

The maximum size (in bytes) of the data segment for a process; this defines how far a program may extend its break with the sbrk(2) system call.

When a job dies, launchd kills any remaining processes with the same process group ID as the job

The largest size (in bytes) file that may be created.

The largest size (in bytes) file that may be created.

This optional key is used to specify a directory to chdir(2) to before running the job.

This key lets one override the default throttling policy imposed on jobs by launchd

This optional key causes the job to be started every N seconds

This optional key specifies whether the kernel should consider this daemon to be low priority when doing file system I/O when the process is throttled with the Darwin-background classification.

The maximum size (in bytes) of the stack segment for a process; this defines how far a program's stack segment may be extended

The maximum size (in bytes) of the stack segment for a process; this defines how far a program's stack segment may be extended

The maximum number of open files for this process

The maximum number of open files for this process

The maximum size (in bytes) of the data segment for a process; this defines how far a program may extend its break with the sbrk(2) system call.

The maximum size (in bytes) of the data segment for a process; this defines how far a program may extend its break with the sbrk(2) system call.

The maximum size (in bytes) which a process may lock into memory using the mlock(2) function.

The maximum size (in bytes) which a process may lock into memory using the mlock(2) function.

This key maps to the second argument of execvp(3)

Specifies higher-level event types to be used as launch-on-demand event sources

The presence of this key specifies that the daemon expects to be run as if it were launched from inetd.

The maximum size (in bytes) of the stack segment for a process; this defines how far a program's stack segment may be extended

The maximum size (in bytes) of the stack segment for a process; this defines how far a program's stack segment may be extended

This optional key is used to specify additional environment variables to be set before running the job.

Much like the WatchPaths option, this key will watch the paths for modifications

The maximum size (in bytes) which a process may lock into memory using the mlock(2) function.

The maximum size (in bytes) which a process may lock into memory using the mlock(2) function.

This key maps to the second argument of execvp(3)

This optional key is used to specify launch on demand sockets that can be used to let launchd know when to run the job

Specifies higher-level event types to be used as launch-on-demand event sources

Much like the WatchPaths option, this key will watch the paths for modifications

This optional key is used to control whether your job is to be kept continuously running or to let demand and conditions control the invocation

This flag instructs launchd that the job promises to use vproc_transaction_begin(3) and vproc_transaction_end(3) to track outstanding transactions that need to be reconciled before the process can safely terminate

The maximum size (in bytes) to which a process's resident set size may grow

The maximum size (in bytes) to which a process's resident set size may grow

This key lets one override the default throttling policy imposed on jobs by launchd

This optional key specifies whether the kernel should consider this daemon to be low priority when doing file system I/O when the process is throttled with the Darwin-background classification.

The maximum number of open files for this process

The maximum number of open files for this process

This optional key is used to control whether your job is to be kept continuously running or to let demand and conditions control the invocation

The presence of this key specifies that the daemon expects to be run as if it were launched from inetd.

This optional key describes, at a high level, the intended purpose of the job

This key lets one override the default throttling policy imposed on jobs by launchd

This optional key specifies whether the kernel should consider this daemon to be low priority when doing file system I/O when the process is throttled with the Darwin-background classification.

The maximum number of open files for this process

The maximum number of open files for this process

This optional key is used to specify additional environment variables to be set before running the job.

The maximum number of simultaneous processes for this user id

The maximum number of simultaneous processes for this user id

The presence of this key specifies that the daemon expects to be run as if it were launched from inetd.

This flag corresponds to the "wait" or "nowait" option of inetd

This optional key is used to specify launch on demand sockets that can be used to let launchd know when to run the job

This optional key is used to specify additional environment variables to be set before running the job.

This flag instructs launchd that the job promises to use vproc_transaction_begin(3) and vproc_transaction_end(3) to track outstanding transactions that need to be reconciled before the process can safely terminate

The maximum size (in bytes) to which a process's resident set size may grow

The maximum size (in bytes) to which a process's resident set size may grow

This optional key is used as a hint to launchctl(1) that it should not submit this job to launchd when loading a job or jobs

This optional key causes the job to be started every calendar interval as specified

This optional key is used to specify launch on demand sockets that can be used to let launchd know when to run the job

This flag instructs launchd that the job promises to use vproc_transaction_begin(3) and vproc_transaction_end(3) to track outstanding transactions that need to be reconciled before the process can safely terminate

The maximum size (in bytes) to which a process's resident set size may grow

The maximum size (in bytes) to which a process's resident set size may grow

Name of the UKI

This optional key describes, at a high level, the intended purpose of the job

The maximum number of simultaneous processes for this user id

The maximum number of simultaneous processes for this user id

This flag corresponds to the "wait" or "nowait" option of inetd

This optional key describes, at a high level, the intended purpose of the job

The maximum number of simultaneous processes for this user id

The maximum number of simultaneous processes for this user id

This flag corresponds to the "wait" or "nowait" option of inetd

This optional key causes the job to be started every calendar interval as specified

This optional key is used as a hint to launchctl(1) that it should not submit this job to launchd when loading a job or jobs

The name of the user account

The name of the user account

This optional key causes the job to be started every calendar interval as specified

This optional key is used as a hint to launchctl(1) that it should not submit this job to launchd when loading a job or jobs

The family name of the font within the package.

The name of the group

The group's name

The name of the theme within the package.

The name of the user account

The name of this nylon instance.

The name of the system used in the system.build.toplevel derivation

The family name of the font within the package.

The family name of the font within the package.

The family name of the font within the package.

The name of the group

Name of the zone.

The name of the theme within the package.

The name of the theme within the package.

The name of the theme within the package.

The name of the icon theme within the package.

Name of the PPP peer.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Specific name of the application.

The name of the icon theme within the package.

The name of the icon theme within the package.

The name of the icon theme within the package.

The endpoint name.

The name of this systemd unit, including its extension

Etcd unique node name.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The endpoint name.

Name of the action.

The name of the cursor theme within the package.

Username for JSON-RPC connections.

Name of the PAM service.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

Name of the worker

The name of this systemd unit, including its extension

Name of the image

Name of modem device, will be searched for in /dev.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The name of the node which is used as an identifier when communicating with the remote nodes in the mesh

The name of the cursor theme within the package.

The name of the cursor theme within the package.

The name of the cursor theme within the package.

Profile name

The profile's name.

Name of the runner to configure

Name of the runner to configure

Name i2pd appears in UPnP forwardings list.

Name of the control, as it appears in alsamixer

Specifies the Name of the Storage daemon.

The name of the cask to install.

The name of the formula to install.

Database name.

The name of the Helm chart

Name for the device

The endpoint name.

The endpoint name.

The name of the Helm chart

The director name used by the system administrator

The client name that must be used by the Director when connecting

Keyboard name.

A system user name for this client instance.

A system user name for this client instance.

Name of the redis server

Akkoma frontend name.

The name of the host

Database name.

The endpoint name.

The endpoint name.

The name of the service to run

The cursor name within the package.

The unique agent name.

The unique name for THIS channel in THIS group

Unique identifier of the account

Agent name, usually same as the hostname

Mail "from" name.

Agent name, usually the same as the hostname.

The theme name.

The name of the instance.

The name of this systemd unit, including its extension

Profile name.

Font name, as used by fontconfig.

The name of the theme within the package.

The name of the network interface to match against.

Unique identifier of the account

The friendly name you give to the network device

The friendly name you give to the network device

Name is referenced in logs

This library's name.

Name is used as a suffix for the service name, user, and group

The name to return in service discovery responses for the MUC service itself

Name of the redis server

The name of the mailbox.

The family name of the font within the package.

Mail "reply-to" name.

Name of the rule.

The name of this group for this account

When clone_target is unspecified, this is the name of a formula repository to tap from GitHub using HTTPS

Profile name.

Name of the machine when registering it at the central or local api.

The endpoint name.

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

The language to use for personal names.

The name of the service to run

The user's UID.

Name of the user to ensure.

The name of the server

Name of the existing database.

Name of the site.

The logical name of the Galera cluster

The endpoint name.

Name of the beat

Name of the wiki.

Name of the server.

The name of the plugin.

The user's primary group.

Unique identifier of the contact account

Name of the tmux window;

Name of this iscsi initiator

The name of the watcher

Database name.

Database name.

Database name.

Server name to be used for this virtual host

Name of ICMP pinging job.

Container name, e.g., shopping.

The name of the plugin.

Database name.

The name of this authentication provider

Table name.

Text of the file

The name of this gateway as shown in firezone

The name of the cookie that the oauth_proxy creates.

The endpoint name.

Name of the service.

Unique identifier of the calendar

Name associated with the build

The user's home directory.

Name of the font to use for regreet.

Name of the interface.

This primary server will notify all given secondary servers about zone changes

Database name, only used when the databse is created locally.

Container name, e.g., shopping.

The name of the host in the network as well as the configuration for that host

Name of the Docker context

The advertised name for zeroconf discovery.

The database name

Profile name.

The endpoint name.

Database name.

Database name.

Database name.

The name of this actor

The name of this group

Name of the GNOME Shell theme.

Name of the redis server

Name of the plugin.

Name of the plugin.

The name of an existing user account under which the rsync process should run.

The name identifying the runner instance towards the Gitea/Forgejo instance.

Name of the interface

Content of the hooks file.

The name of the immich database.

name of the virtualhost

The name of the device.

The name of the device.

The group's GID.

Name of the iSCSI initiator to boot from

The name of the database to use for Wakapi.

Database name

Database name.

The user's home directory mode in numeric format

Text of the file

Name of the theme to use for regreet.

The name of an explicit dtb to be loaded, relative to the dtb base

The account UID

Configuration helper for Git hooks

The name of this server.

The name of this client as shown in firezone

The name of this relay group

The name of an existing user group under which the rsync process should run.

The name of the plugin.

This is the target address is to match against

Database name.

Database name.

The user's primary group.

Adapter name that is used in the radicle-ci-broker configuration

Name of the profile.

PostgreSQL database name

Name of directory from which to import ZFS device, this is passed to zpool import as the value of the -d option

Path to target file relative to HOME.

Name of the local AutoSSH session

Name of the local AutoSSH session

Container name, e.g., shopping.

The name of this gateway as shown in firezone

Each attribute of this option defines a systemd service that runs hans

Database name.

User to run the cgit service as.

Name of the icon theme to use for regreet.

The name of this gateway group

The name of services's user

Name of the existing database (has no effect if type is "sqlite").

The name of this resource

Text of the file

Text of the file

Server name.

When set to something distinct to null NSD is able to collect statistics per zone

This feed account's name.

Whether this file should be generated

Bind port for ‹name› endpoint.

Program to execute, possibly with arguments.

Node name

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Name of the beat

Name of the game as it will appear in the game listing.

Bind port for ‹name› endpoint.

The serial port to which your UPS is connected. /dev/ttyS0 is usually the first port on Linux boxes, for example.

The name of the dawarich database.

MySQL database name.

Database name for FreshRSS.

The group GID

Name of the satellite.

Path to target file relative to xdg.dataHome.

Port number Go Ethereum will be listening on, both TCP and UDP.

This profile's name.

Icon to display in file manager, menus, etc.

The specified name-string gives the system file name of the storage device managed by this storage daemon

Name of symlink

Group to run the cgit service as.

The user's home directory mode in numeric format

Database name.

The account name

Name of the modifier.

The user's home directory.

Whether this file should be generated

Each attribute of this option defines a systemd service that runs iodine

A path which will be scanned for repositories.

Drive name without the full path.

Unique identifier of the boxxy rule

Location of the host path to be mounted.

What port to listen for client requests, default is 1080.

Replace any existing runner with the same name

Replace any existing runner with the same name

TLS options for virtual host

The flake reference from is rewritten to.

The flake reference to which from> is to be rewritten.

Whether the target path should be unconditionally replaced by the managed file source

Name of this virtual host

Database name.

Name of the cursor theme to use for regreet.

APIs to enable over WebSocket

Name of this overlay

The name of this systemd unit, including its extension

cgit repository settings, see cgitrc(5)

Format: [AXFR|UDP] <ip-address> <key-name | NOKEY>

Path to target file relative to xdg.cacheHome.

Name of symlink

Name of symlink

The nickname of this Tahoe node.

Text of the file

Profile name

Name of the symlink (relative to /var/lib/rancher/k3s/server/manifests)

Database name.

Database name.

Name of the plugin linked to $XDG_CONFIG_HOME/ranger/plugins/

Whether to enable ‹name›.

Name of Google storage bucket

Disable running fsck on this filesystem.

Text of this systemd unit.

DNS full-qualified domain name of a database server

DNS full-qualified domain name of a database server

Whether to enable cgit.

Name used to derive peer unit name.

The account UID

Rename nodes to different name.

Name of the symlink (relative to /var/lib/rancher/rke2/server/manifests)

SSID to be used in IEEE 802.11 management frames.

Discourse database name.

Path to target file relative to xdg.stateHome.

Name of the remote read config, which if specified must be unique among remote read configs

ACME options for virtual host.

HTTP options for virtual host

Whether to enable ‹name›.

The name of the wrapper program

The name of the database to create.

Display name of the radio station.

Whether to make the user account hidden.

Blockchain garbage collection mode.

Whether to enable hub instance.

VirtualHost to serve cgit on, defaults to the attribute name.

Determine whether the mounted path will be accessed in read-only mode.

The actual configuration of which hooks will be served

Port number of Go Ethereum HTTP API.

Username

Whether the target path should be unconditionally replaced by the managed file source

Name of symlink (relative to /etc)

The user's primary group.

The flake reference to be rewritten.

The flake reference to be rewritten.

Whether this file should be generated

Whether this file should be generated

Name of symlink

Whether to enable Go Ethereum Node.

Additional arguments passed to Go Ethereum.

Specifies the real host name to log into.

The type of the device.

The name of the first admin user.

Name of the remote write config, which if specified must be unique among remote write configs

Local secret key in hexadecimal form.

Specify the program to run to talk to this UPS. apcsmart, bestups, and sec are some examples.

Members of this group can access the control socket for this interface.

Mount point on the container file system.

Name of the user to ensure.

Name of the user to ensure.

Interface to use when method is iface.

Name of the model to download and use for speech synthesis

Whether the SSID is to be interpreted using UTF-8 encoding.

Whether to enable TLS support.

Proxy account name, without the possibility to include domain name ('at' sign is interpreted literally).

Name of the snippet.

The name of this client as shown in firezone

Database name.

Listed primary servers are allowed to notify this secondary server

Domain to fetch certificate for (defaults to the entry name).

Backup type as described in: https://pgbackrest.org/command.html#command-backup/category-command/option-type

Name of modem configuration file, will be searched for in config in the spooling area directory.

Whether to enable the filesystem mount.

A short description of the user account, typically the user's full name

Path of the source file or directory

The name of the host in the network as well as the configuration for that host

Alias of home.pointerCursor.name.

Bind address for ‹name› endpoint.

Root directory for requests.

Path to target file relative to xdg.configHome.

The user's home directory

Database name.

Database name.

Name of database.

Create the home directory when creating the user.

Set name to shared memory zone.

The Flake URI of the NixOS configuration to use for the container

Output DPI configuration.

Bind address for ‹name› endpoint.

Name of the PostgreSQL database.

The name of the Linkwarden database.

static: Immediately answer any Neighbor Solicitation Messages (if they match the IP rule). iface: Forward the Neighbor Solicitation Message through the specified interface and only respond if a matching Neighbor Advertisement Message is received. auto: Same as iface, but instead of manually specifying the outgoing interface, check for a matching route in /proc/net/ipv6_route.

Set the host address for this virtual host

Whether the target path should be unconditionally replaced by the managed file source

Whether the target path should be unconditionally replaced by the managed file source

The group GID

The cgit package to use.

The geth package to use.

Uhub plugin configuration.

Instance name.

Local Mattermost database name.

Lines which would be added inside ups.conf for handling this UPS.

Output resolution.

Output framerate.

Enables nylon as a running service upon activation.

Username used to connect to registry.

A program name specifying a Postfix service/daemon process

Adds index directive.

Alias directory for requests.

Start the specified units when this unit is started.

Override the default TLS port for this virtual host.

Database name to use when connecting to an external or manually provisioned database; has no effect when a local database is automatically provisioned

Name of the homebridge UI platform

The flake input from is rewritten to.

The flake input from is rewritten to.

The flake input to which from> is to be rewritten.

Database name.

Put the host-side of the veth-pair into the named bridge

Output video display controller.

The user's auxiliary groups.

Name of the MySQL database that holds EPGStation's data.

Name of the beat

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Whether this file should be generated

Path of the source file or directory

Remote public key in hexadecimal form.

The name of the Grafana database.

Adds DirectoryIndex directive

Alias directory for requests

Set the log-level

The flake reference from is rewritten to

If set to false, the user account will not be created

Whether to enable this mount.

Adds try_files directive.

Whether to enable DNSSEC.

Shell commands to run when file has changed between generations

Isolate traffic between stations (clients) and prevent them from communicating with each other.

Marks the server as a backup server

Interface name

How to name the created archives

Verify peer certificate

Verify peer certificate

The actual zone data

The IPv4 address assigned to the host interface. (Not used when hostBridge is set.)

Levels (minimum value for logged events): 0 = verbose debugging 1 = debugging 2 = informational messages 3 = notification 4 = warning

Text of this systemd unit.

Whether to enable automatic mounting.

Type of the file system

The path to the user's shell

Output gamma configuration.

Where to mount this dataset.

Path to encrypted luks device that contains the user's home directory.

The group's members.

Optional PKCS#11 module name.

Zone file resource records contain columns of data, separated by whitespace, that define the record.

The IPv6 address assigned to the host interface. (Not used when hostBridge is set.)

Override the default HTTP port for this virtual host.

Interface name

Attributes for user's entry in pam_mount.conf.xml

Custom skills for Claude Code

Name for where mail coming from the remote (far) mail server will end up locally

Target node name on the IBM TSM server.

Override for package "short name", used for generating configuration

Password HMAC-SHA-256 for JSON-RPC connections

Whether to enable Go Ethereum HTTP API.

The network to connect to

Specifies the MAC addresses to deny if macAcl is set to "deny" or "radius"

Generic name of the application.

The name of the file or block device that should be used as header for the encrypted device.

Label for this destination

The domain name to collect stats for.

Adds a return directive, for e.g. redirections.

These lines go to the end of cgitrc verbatim.

Shell commands executed to stop the service.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Optional PKCS#11 module name.

The device to update.

Enable logging, default is no logging.

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Vertical scaling factor/pixels.

Horizontal scaling factor/pixels.

Extra configuration lines to add to THIS channel's configuration.

The flake reference to be rewritten

Add the necessary actions for a upsmon process to work

Name of this virtual host

Whether to enable the output.

Output rotate configuration.

Location of hardware kiss tnc for this interface.

S3 bucket name to use for HTTP-01 based challenges

Shell commands to run when file has changed between generations

Whether to create the home directory and ensure ownership as well as permissions to match the user.

Name of the PCM card to control (slave).

Whether to enable this PPP peer.

Port to bind the TTS server to.

User account under which this pool runs.

Start the specified units when this unit is started.

Units that want (i.e. depend on) this unit

Specifies the MAC addresses to allow if macAcl is set to "allow" or "radius"

The name of the file (can be a raw device or a partition) that should be used as the decryption key for the encrypted device

The plugin.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Custom skills for Codex

The set of system-wide known SSH hosts

Name of symlink

Path of the source file or directory

Path of the source file or directory

Whether the target path should be unconditionally replaced by the managed file source

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

A system group name for this client instance.

A system group name for this client instance.

Define LaunchAgents.

Master=false means slave server

Addresses who may request zone transfers.

Limit retry time for secondary zones.

Whether to enable this RAUC slot.

The name of the database to store data in.

Specify the log file name

The serial port speed of this interface.

A local file path specifying the location of the mount point.

Start the specified units when this unit is started.

Start the specified units when this unit is started.

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

Optional PKCS#11 module name.

Configuration for this host

Environment variables used for this PHP-FPM pool.

The user as which to run bitcoind.

Blockchain sync mode.

Maximum peers to connect to.

Tunnel type.

When or how often the backup should run

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Real name

Basic Auth protection for a vhost

Path to the file which contains the actual base64 encoded key

Adds DirectoryIndex directive

Alias directory for requests

Name of the homebridge

DNS full-qualified domain name of a database server

A system group name for this client instance.

A system group name for this client instance.

The specified name-string must be the generic SCSI device name of the autochanger that corresponds to the normal read/write Archive Device specified in the Device resource

If the specified units are started at the same time as this unit, delay this unit until they have started.

The path to repo in local machine

Pair of roots to synchronise.

Dataset name to send snapshots to.

This optional key can be used to request that the service be registered with the mDNSResponder(8)

Name that will be shown.

Directory for the ACME challenge, which is public

Shell commands executed after the service's main process has exited.

Tunnel type.

Text of the file.

Server name to verify the hostname on the returned gRPC certificates

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

The database name.

Whether output should be marked as primary

Domain name

Name of symlink

Name of the class implementing the check

Override the default port on which to listen for connections.

Keyset used for tunnel identity.

Group account under which this pool runs.

woodpecker-agents configurations

A program name specifying a Postfix service/daemon process

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Start the specified units when this unit is started.

Attribute set of NetBird client daemons, by default each one will:

1. be manageable using dedicated tooling:

• netbird-<name> script,
• NetBird - netbird-<name> graphical interface when appropriate (see ui.enable),

2. run as a netbird-<name>.service,
3. listen for incoming remote connections on the port 51820 (openFirewall by default),
4. manage the netbird-<name> wireguard interface,
5. use the /var/lib/netbird-/config.json configuration file,
6. override /var/lib/netbird-/config.json with values from /etc/netbird-/config.d/*.json,
7. (hardened) be locally manageable by netbird-<name> system group,

With following caveats:

• multiple daemons will interfere with each other's DNS resolution of netbird.cloud, but should remain fully operational otherwise

Global hook scripts

Name of the tun device

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

The packaged Helm chart

Optional slot number of the token that stores the certificate.

Port number of Go Ethereum metrics service.

Listen address of Go Ethereum HTTP API.

Shell commands executed before the service's main process is started.

Packages added to the service's PATH environment variable

Units that want (i.e. depend on) this unit

The data directory for bitcoind.

Source directories.

Configuration for MPD

Source port of the external interface on host

Shell commands to run when file has changed between generations

Shell commands to run when file has changed between generations

pppd configuration for this peer, see the pppd(8) man page.

Whether to join this channel on connect.

cgit configuration, see cgitrc(5)

Configuration of uhub

Name shown in the website title and on the front page.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Subordinate group ids that user is allowed to use

Subordinate user ids that user is allowed to use

The type of the desktop entry.

Name of consistency check to run.

Enables HTTP/3 over QUIC on the UDP port for TLS

Instead of synchronizing just the mailboxes that match the farPattern, use it as a prefix which is not matched against the patterns, and is not affected by mailbox list overrides.

Keyset used for tunnel identity.

Aliases of that unit.

Aliases of that unit.

GVPE node name

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

The user names of the group members, added to the /etc/group file.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Database name to connect to

Root directory for requests.

Output scaling method.

The packaged Helm chart

Port number of Go Ethereum Auth RPC API.

Whether to offload computation onto a CUDA compatible GPU.

FQIN of referenced Image when source is a file or directory archive.

Name of the kernel module that provides the card.

Guaranteed minimum hops for ‹name› tunnels.

Location of bitcoind pid file.

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

The database engine name

The group as which to run bitcoind.

Count of subordinate user ids

Count of subordinate group ids

Shell commands executed to stop the service.

Shell commands executed as the service's main process.

Optional slot number of the token that stores the certificate.

Allow the user to do certain things with upsd

Specifies the BSSID for this BSS

How to display the tag when focused.

Program to execute, possibly with arguments.

Output position

Guaranteed minimum hops for ‹name› tunnels.

Extra configuration to be appended to awstats.${name}.conf.

Name of the user to log in

The location of the Drupal files directory.

Global hooks

Name of the voice model to use

The user's auxiliary groups.

Name of the runner group to add this runner to (defaults to the default runner group)

Name of the runner group to add this runner to (defaults to the default runner group)

When or how often the backup should run

The node name of the device

The node name of the device

The name of the Stash Box

Name displayed when sending mails.

Each attribute of this option defines a systemd service that runs an OpenVPN instance

Whether to enable proxy for this bucket

Name for the filter.

Name that will be shown to the user.

Username used in the machine image

Automatically allocate subordinate user and group ids for this user

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

List of forwarded ports from host to container

Legacy RSA public key of the host in PEM format, including start and end markers

Service port

Shell commands executed after the service's main process is started.

Shell commands executed when the service's main process is reloaded.

Path to a Containerfile which contains instructions to build the image.

When to run the job.

Image to pull.

Path to file containing local secret key in binary or hexadecimal form.

Path of the source file or directory

Absolute path to the certificate to load

Name of symlink

If set to false, the user account will not be created

Name to display

Name shown in the server list.

Alias directory for requests.

Adds index directive.

The location of the Drupal site state directory.

Start the specified units when this unit is started.

Name of the class implementing the check

Name of the printer / printer queue

Label of the device

The IPv4 address assigned to the interface in the container

Name of the PCM device to control (slave).

Controls how long a valid or invalid entry remains in the cache, in milliseconds.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Contents of the PAM service file.

IMAP4 patterns for which mailboxes on the remote mail server to sync

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Name of a file containing the spiped key

If the specified units are started at the same time as this unit, delay them until this unit has started.

Extra lines to add to the tinc service configuration file

Output DPI configuration.

Name of symlink

If the specified units are started at the same time as this unit, delay this unit until they have started.

Basic Auth password file for a vhost

The path to the user's shell

Path to world folder containing the dimension to render

List of servers for inclusion in stub and secondary zones.

Whether to operate in tun (IP) or tap (Ethernet) mode.

The IP interface to bind to. null means "all interfaces".

Custom name of this poller.

The name of the module

Source ZFS dataset

Path to a certificate signing request to apply when fetching the certificate.

Path to encrypted luks device that contains the user's home directory.

The IPv6 address assigned to the interface in the container

The user as which to run blockbook-frontend-‹name›.

Adds try_files directive.

PostgreSQL host for operating remotely.

Aliases of that unit.

Which local IP to bind the UDP socket to.

The port on which the tub will listen

The port on which the Web server will listen

Output resolution.

Output framerate.

Icon to display in file manager, menus, etc.

Specify the bind mode that the bind is used in

Enable unlocking and mounting of encrypted ZFS home dataset at login.

Absolute path to the certificate to load

The address on which to accept FastCGI requests.

Attributes for user's entry in pam_mount.conf.xml

Start the specified units when this unit is started.

Start the specified units when this unit is started.

The kimai package to use.

The tahoelafs package to use.

Path of the authentication file.

Optional slot number of the token that stores the certificate.

Language of the environment

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

The name of the user for this authelia instance.

The name the camera will show up as.

Path of the source file.

The subnets which this tinc daemon will serve

Text of the file.

Specifies a file containing the MAC addresses to deny if macAcl is set to "deny" or "radius"

These lines go to the end of the location verbatim.

Errbot backend name.

The user's shell

Whether to enable Drupal web application.

Override the default database cache size in MiB.

Extra arguments to pass to the server commandline.

Whether to enable Coqui TTS server.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Location where the file system will be mounted

Specifies the number of retries for failed notifies

If the specified units are started at the same time as this unit, delay this unit until they have started.

Output video display controller.

Default window size for this interface.

Path to plugin file.

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

Start the specified units when this unit is started.

Start the specified units when this unit is started.

Override the default port on which to listen for JSON-RPC connections.

Shell commands executed after the service's main process has exited.

As which user the backup should run.

Common name attribute of allowed peer certificates

Common name attribute of allowed peer certificates

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Label of the unlocked encrypted device

Local UDP port.

Adds a return directive, for e.g. redirections.

Whether to create the home directory and ensure ownership as well as permissions to match the user.

Guaranteed minimum hops for ‹name› tunnels.

Start URL of the site.

Shell commands to run when file has changed between generations

Location of blockbook-frontend-‹name› data directory.

The address of the proxy.

Output scale configuration

Whether to enable Enables the axport interface.

Default maximum packet size for this interface.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

The group as which to run blockbook-frontend-‹name›.

The external address where the host can be reached

Aliases of that unit.

Aliases of that unit.

Path of certificates (*.{crt,cert,key}) used to connect to registry.

The port where the host can be reached

Path to the private key to the matching certificate signing request.

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Set maximum cache size

Specifies a file containing the MAC addresses to allow if macAcl is set to "allow" or "radius"

Station MAC address -based authentication

If true, the user's shell will be set to users.defaultUserShell.

Extra zone config to be appended at the end of the zone section.

Shell commands executed before the service's main process is started.

Whether to enable watching for repo.

Optional url of remote repository

Optional branch in remote repository

Whether to enable Bitcoin daemon.

Packages added to the service's PATH environment variable

Whether the from reference needs to match exactly

Whether the from reference needs to match exactly

Whether the from reference needs to match exactly

Guaranteed minimum hops for ‹name› tunnels.

Output gamma configuration.

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

Absolute path to the certificate to load

Keep this unit running as long as the listed units are running

This optional key specifies the node to connect(2) or bind(2) to.

Path of the authentication file used to connect to registry.

The set of packages that should be made available to the user

The set of packages that should be made availabe to the user

The name of the group for this authelia instance.

Group running the ACME client.

Whether to enable remove bind.

The server username of this account

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Name of the heat source.

List of virtual hostnames from which to accept requests.

IP address of server running hans

The location for users to install Drupal themes.

Limit refresh time for secondary zones.

Limit on the number of simultaneous connections allowed.

Listen for any Neighbor Solicitation messages on this interface, and respond to them according to a set of rules

If set, root doesn't need to authenticate (e.g. for the useradd service).

Whether to show the message of the day.

Limit retry time for secondary zones

Local name of the IBM TSM server, must not contain space or more than 64 chars.

User name of file owner

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

The name of your network of sr.ht-based sites.

Whether to enable the HTTP/3 protocol

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Keeps the specified running while this unit is running

Location to serve cgit under.

Path of the source file.

Settings for this slot.

Address to which spiped should connect.

The labels to apply to the build.

Name to match.

List of address ranges allowed to query this zone

Refer to xrandr(1) for the documentation of the transform matrix.

Whether to enable Go Ethereum prometheus metrics.

RPC user information for JSON-RPC connections.

IP and port to which this redis instance acts as a slave.

Shell commands executed as the service's main process.

The user ID owning the volume inside the container.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Packages added to the service's PATH environment variable

Owner's name.

The object to make available inside the initrd.

This optional key tells launchctl what type of socket to create

Host to use for the destination dataset

FastCGI parameters to override

Use a different name as mailbox name

If set, the OATH Toolkit will be used.

ID of the user in initrd.

The MIME type(s) supported by this application.

The TCP port to accept connections

Arguments passed to date to create a timestamp suffix for the archive name.

The name of a .desktop file in the directory specified in the 'package' option.

IP of the Redis master

Start of the range of subordinate user ids that user is allowed to use.

Start of the range of subordinate group ids that user is allowed to use.

DDNS server name.

If the device does not currently contain a filesystem (as determined by blkid), then automatically format it with the filesystem type specified in fsType

Adds DirectoryIndex directive

Alias directory for requests

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Aliases of that unit.

Aliases of that unit.

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Whether to enable Go Ethereum Auth RPC API.

Shell commands executed after the service's main process is started.

Keeps the specified running while this unit is running

Shell commands executed when the service's main process is reloaded.

Filesystem type of Device. (used as -t in mount commands)

Kissattach parameters for this interface.

The drupal package to use.

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

Basic Auth protection for a vhost

Hostname alias(es).

Username for this DDNS provider.

Each attribute in this option names an apcupsd event and the string value it contains will be executed in a shell, in response to that event (prior to the default action)

The vlan identifier

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Print global archive statistics upon completion

This optional key implies SockFamily is set to "Unix"

Horizontal scaling factor/pixels.

Vertical scaling factor/pixels.

The filename of the generated settings file

Number of simultaneous ‹name› tunnels.

Extra configuration options to put at the end of this BSS's defintion in the hostapd.conf for the associated interface

Determines how multiple values are joined to create the claim value

Name of the wrapper that is installed into PATH

Name of user to run the script under.

Whether to enable the output.

Output rotate configuration.

add will additionally listen for TLS connections. only will disable TLS connections. force will redirect non-TLS traffic to the TLS connection.

Shell commands executed when the instance is starting.

Whether to enable SFTP service.

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

Container icon.

Specifies if TLS should be enabled

Specifies if TLS should be enabled

How to display the tag when unfocused

Change current mode after bind is executed

Label to use for the name of the config file.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Copy content of the image located at the mountpoint of the volume on first run.

Address to bind on for UI connections

Environment variables to set for the kernel.

Enable logging to the system logger.

Whether to enable Redis server.

Number of worker instances to run

The path of the web root directory.

Path to the certificate authority certificate.

The underlying network device on which the tunnel resides.

Name of the platform

Shell commands to run after borg create

These lines go to the end of the location verbatim.

Options for the Kimai PHP pool

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

Authentication algorithm for this key.

Run the rsync process with an inhibition lock taken; see systemd-inhibit(1) for a list of possible operations.

Number of simultaneous ‹name› tunnels.

Name of the network interface managed by this client.

Name of the network interface managed by this client.

Order of this location block in relation to the others in the vhost

Text of the file.

The hotkey.

The username to store inside the credentials file.

Whether to ask Let’s Encrypt to sign a certificate for this virtual host

Event type.

Remote UDP port

Aliases of that unit.

Run specified command or script after the tunnel device has been opened.

Maximum number of items to keep in slow log.

Subordinate user ids that user is allowed to use

Subordinate group ids that user is allowed to use

A short description of the user account, typically the user's full name

Group name of file owner

Whether the luksOpen will be attempted before LVM scan or after it.

The user names of the group members, added to the /etc/group file.

The protocol specifier for port forwarding between host and container

The port on which the SFTP server will listen

TCP Port to bind on for UI connections

File or block device to export.

The name of private PKCS #8 key file for this policy to be found in the baseDirectory, or the absolute path to the key file

Interpolation method to be used for scaling the output.

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

Path to the unix socket file on which to accept FastCGI requests.

The relationship with upsd

Allow client if common name appears in the list.

If set, the OTPW system will be used (if ~/.otpw exists).

Whether to enable this PAM service.

The ax25-tools package to use.

Enable verbose output, default is to not be verbose.

Path or reference to the host key.

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Path] section of the unit

The time-to-live of the connection to the remote tunnel endpoint.

Count of subordinate group ids

Count of subordinate user ids

Shell commands executed as the service's main process.

This optional key specifies the mode of the socket

Definition of per-user launchd agents

A list of host names and/or IP numbers used for accessing the host's ssh service

Automatically start this unit at the given date/time, which must be in the format described in systemd.time(7)

Container ID

Name (relative to the root of the filesystem) of the subvolume where the hash table will be stored.

This setting configures the name of a mailbox for which administrator scripts are configured

Each attribute in this set specifies an option in the [Unit] section of the unit

Indicates the priority over identical Subnets owned by different nodes

(optional) name your peer has for you

(optional) name your peer has for you

NNTP group name for the inbox.

Public address for p2p connections from peers (if TCP is used)

Whether to start the build on boot

Whether to pull the image on boot

The type of log being collected.

The specified name-string names the type of media supported by this device, for example, DLT7000

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

The type of this worker

Allow client if organizational unit name appears in the list.

The bitcoind package to use.

Text of the file.

Key / certificate pairs for the virtual host.

Key policy for zone signing keys

Key policy for key signing keys

Turns on or off the router flag for Neighbor Advertisement Messages.

The group ID owning the volume inside the container.

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Container color.

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Whether users can log in with passwords defined in /etc/shadow.

Specify the server verbosity level, options: debug, verbose, notice, warning.

Page or namespace to restrict

The location of the Drupal config sync directory.

The prefix length of the subnet

If set, the filesystem is grown to its maximum size before being mounted. (This is typically the size of the containing partition.) This is currently only supported for ext2/3/4 filesystems that are mounted during early boot.

Command and arguments to start the kernel.

TLS Options for the Director in this Configuration.

The configuration file path to supply bitcoind.

Bind address to be used for this server.

TLS Options for the Director in this Configuration.

port of the Redis master

Port the NetBird client listens on.

Port the NetBird client listens on.

This option provides a simple way to serve individual, static files.

Automatically allocate subordinate user and group ids for this user

DNS server to use as an intermediate relay to the iodined server

Specifies the image the volume is based on when Driver is set to the image.

APIs to enable over WebSocket

Path to the host certificate.

Start the specified units when this unit is started.

Start the specified units when this unit is started.

The external IP address or hostname where the host can be reached.

The path to the xkb types file

An attribute set of option values passed to rclone mount

The account type

Allow these IPs and TSIG to transfer zones, addr TSIG|NOKEY|BLOCKED address range 192.0.2.0/24, 1.2.3.4&255.255.0.0, 3.0.2.20-3.0.2.40

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Whether to enable Operate silently.

Device identifiers, as shown by keyd(1).

If given, sets the SO_MARK option on the TCP socket.

If given, sets the SO_MARK option on the TCP socket.

Require HTTPS and verification of certificates when contacting registries.

Require HTTPS and verification of certificates when contacting registries.

Maps kanidm groups to values for the claim.

To enable SSL, specify path to the name of certificate files without extension

Enable PAM mount (pam_mount) system to mount filesystems on user login.

Allow client if URI subject alternative name appears in the list.

Allow client if DNS subject alternative name appears in the list.

The location for users to install Drupal modules.

I2P nodes that are allowed to connect to this service.

Shell commands executed when the instance is shutting down.

URL where this inbox can be accessed over HTTP.

Text of the file.

Container icon.

The znapzend backup plan to use for the source

Username from upsd.users for accessing this UPS

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Manually specify the hostname

Whether to use the testnet instead of mainnet.

(optional) human-readable name for peer

(optional) human-readable name for peer

The name of the column that contains a unix login name.

Aliases of that unit.

Aliases of that unit.

Keeps the specified running while this unit is running

Keeps the specified running while this unit is running

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Keep this unit running as long as the listed units are running

Name resolution of a backends host name is done at start up, or configuration reload

Port to bind on for p2p connections from peers (both TCP and UDP)

Address to bind on for p2p connections from peers (both TCP and UDP)

Canonical hostname for the server.

Path of the source file.

Canonical hostname for the server.

The URL at which to fetch the feed.

The path to the socket to bind to.

The volume driver to use.

The labels to apply to the volume.

Whether output should be marked as primary

Arguments passed to the main process script

User under which to run the service

The address that Anubis listens to

Whether this file locals should be generated

Whether to enable fedimintd.

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Listen address of Go Ethereum metrics service.

Options for PHP's php.ini file for this Drupal site.

Whether to enable this proxy cache path entry.

Name of group to run the script under

The underlying network device on which the tunnel resides.

ID of the group in initrd.

Domain part of the web interface URL (no web interface for this domain if null)

Denied client IP ranges, these gets evaluated after the allowed IP ranges, defaults to all IPv4 addresses: [ "0.0.0.0/0" ] To block all other access than the allowed.

IP Address of a database server

IP Address of a database server

Whether to enable helper service.

Set size to shared memory zone.

User name

A name for the drive

The hostname the web service appears under.

Number of simultaneous ‹name› tunnels.

Specifies the user to log in as.

Definitions of SIIT instances of Jool

Additional command line parameters

Location of the DokuWiki state directory.

Hostname of server running iodined

A list of options for 'restic check'.

Whether to run the rspamd worker.

The path of a device which is mounted for the volume.

Whether to create the volume on boot.

Basic Auth password file for a vhost

Aliases of that unit.

Aliases of that unit.

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Public URL of the API address of the reverse proxy/tls terminator

Options for the Drupal PHP pool

Source of the custom plugin

Container ID

Your yandex.com login name.

The nickname of this Tahoe introducer.

Structural Kimai's local.yaml configuration

Listen address of Go Ethereum Auth RPC API.

Whether to run the check command with the provided checkOpts options.

The PHP package to use for running this PHP-FPM pool.

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Port number of Go Ethereum WebSocket API.

Whether to support proxying websocket connections with HTTP/1.1.

Disables scan for overlapping BSSs in HT40+/- mode

Number of simultaneous ‹name› tunnels.

Key of taint.

Container color.

Address to bind on for API connections relied by the reverse proxy/tls terminator.

Port to bind on for API connections relied by the reverse proxy/tls terminator.

These lines go to the end of the location verbatim.

If set, keys listed in ~/.ssh/authorized_keys and ~/.eid/authorized_certificates can be used to log in with the associated PKCS#11 tokens.

This is a rule that the target address is to match against

User or group to restrict

Path to the directory where the pastes will be saved to

The time-to-live of the connection to the remote tunnel endpoint.

Full legal name

User name for RPC connections.

The font name, null to use system default.

Settings that should be passed to rsync via long options

Order of this location block in relation to the others in the vhost

A specification of the desired configuration of this container, as a NixOS module.

Whether the container is automatically started at boot-time.

Additional names of virtual hosts served by this virtual host configuration.

Keeps the specified running while this unit is running

Additional configurations to be appended to bitcoin.conf.

Type of this limit

Attrset to be transformed into YAML for host config

Extra lines to append to this profile's config.

The email address used to authenticate as this account

The ID of the sound card

Database name.

Output scaling method.

The ‹name› package to use.

Set the logcheck level.

Number of daily snapshots.

Whether to enable this source.

Any additional text to be appended to the wp-config.php configuration file

The name of the module

This optional key specifies the service on the node to connect(2) or bind(2) to.

The auth adapter type

UUID of the stratis pool that the fs is located in

This is only relevant if you are using stratis.

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Keeps the specified running while this unit is running

If set, the pam_mysql module will be used to authenticate users against a MySQL/MariaDB database.

As an alternative to specifying config, you can specify the path to the evaluated NixOS system configuration, typically a symlink to a system profile.

A list of host names and/or IP numbers used for accessing the host's ssh service

Tooltip for the entry.

Set the date on which the user's account will no longer be accessible

Same as hooks, but these hooks are specified as literal strings instead of Nix values, and hence can include template syntax which might not be representable as JSON

Require TLS or TLS-PSK encryption

Require TLS or TLS-PSK encryption

Path of the source file or directory.

This can be set as a global variable above your first UPS definition and it can also be set in a UPS section

Item this limit applies to

If true, the user's shell will be set to users.defaultUserShell.

The path to the xkb compat file

Target port of container

Definitions of NAT64 instances of Jool

Output position

Each attribute in this set specifies an option in the [Exec] section of this unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Minimum remaining validity before renewal in days.

The path to the user's shell in initrd.

Group the user belongs to in initrd.

Environment variables and their value to send to the server.

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Number of CPUs to allocate to the machine

Swap size in MB for the machine

Enables TCP_NODELAY on the TCP socket.

Whitelists the given rrl-types.

The IP and port to forward all traffic to.

The IP and port to forward all traffic to.

Enables TCP_NODELAY on the TCP socket.

The repo of the Helm chart

Command executed as the service's main process.

The set of packages that should be made available to the user

Path to target relative to the vault's directory.

Database user.

User that runs the cronjob.

Paths to SSL files

Whether this node is a relay.

Apache configuration can be done by adapting services.httpd.virtualHosts.

A list of options for 'restic check'

Definition of per-user launchd agents

Group under which to run the service

Vlan tag to apply to interface

Openvswitch type to assign to interface

Whether to run 'restic check' with the provided checkOpts options

The type of the service

Key type to use for private keys

Whether to update /var/log/wtmp.

Protocol names to hide in summary tables (RE2 syntax),

Tell nylon which interface to use as an uplink, default is "enp3s0f0".

A short description of the user account, typically the user's full name

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Whether to try to create home directories for users with $HOMEs pointing to nonexistent locations on session login.

Bash statements run before scanning or importing new messages into the database.

Which protocol to use.

Custom agent skills for opencode

If enabled, the pam_umask module will be loaded.

Shell commands to execute when the event is triggered.

Regex specifying which log lines to ignore.

Hostname alias(es).

Username for this DDNS provider.

The hash of the packaged Helm chart

Automatically start this unit at the given date/time, which must be in the format described in systemd.time(7)

Each attribute in this set specifies an option in the [Unit] section of the unit

Path to a directory containing hook files for Claude Code

The callsign of the physical interface to bind to.

Database host address.

Database host port.

Log level of the NetBird daemon.

Log level of the NetBird daemon.

Settings specific to this plugin.

Specifies port number to connect on remote host.

The repo of the Helm chart

Specifies the frequency band to use, possible values are 2g for 2.4 GHz, 5g for 5 GHz, 6g for 6 GHz and 60g for 60 GHz.

Extra configuration values that you want to insert into settings.php

Allowed time window for first received packet in seconds (positive number allows packets from history)

"Options appended to the PHP configuration file php.ini used for this PHP-FPM pool."

Whether to enable frp.

Akkoma frontend reference.

The tinc_pre package to use.

Change permissions for the socket

The github-runner package to use.

The github-runner package to use.

Combined stdout and stderr log file for the Colima service.

User account under which this instance of redis-server runs.

Whether to enable the QUIC transport protocol

Custom ordering of accounts and local folders in Thunderbird's folder pane

Local port of the encapsulation UDP socket.

List of configuration directives for this UPS.

Keep this unit running as long as the listed units are running