Absolute path to a file containing environment variables used for gitlab-runner registrations with runner authentication tokens

Absolute path to a file with environment variables used for gitlab-runner registration with runner registration tokens

GitLab host name

GitLab database name.

GitLab database user.

User to run gitlab and all related services.

Extra configuration to merge into shell-config.yml

Group to run gitlab and all related services.

Whether gitlab prints URLs with https as scheme.

GitLab server port for copy-paste URLs, e.g. 80 or 443 if you're service over https.

Redis URL for all GitLab services.

Additional environment variables for the GitLab environment.

Enable the gitlab service.

Extra options to be added under production in config/gitlab.yml, as a nix attribute set

Extra configuration in config/database.yml.

GitLab state directory

Absolute path to a file with environment variables used for gitlab-runner registration

Extra configuration to be placed in config/extra-gitlab.rb

Database connection pool size.

File containing the initial password of the root account if this is a new install

File containing the GitLab database user password

Initial email address of the root account if this is a new install.

GitLab database hostname

Tag list.

Tag list

Limit how many jobs can be handled concurrently by this service. 0 (default) simply means don't limit.

Limit how many jobs can be handled concurrently by this service. 0 (default) simply means don't limit.

Overwrite the URL for the GitLab instance

Overwrite the URL for the GitLab instance

Whether a database should be automatically created on the local host

Absolute path to a directory where builds will be stored in context of selected executor (Locally, Docker, SSH).

Absolute path to a directory where builds will be stored in context of selected executor (Locally, Docker, SSH).

Docker image to be used.

Docker image to be used.

Runner-specific command script executed before code is pulled.

Runner-specific command script executed after code is pulled, just before build executes.

Runner-specific command script executed after code is pulled, just before build executes.

Runner-specific command script executed after code is pulled and just after build executes.

Runner-specific command script executed after code is pulled and just after build executes.

Select executor, eg. shell, docker, etc

Select executor, eg. shell, docker, etc

Path to a file containing a registration token for the PeerTube instance

Register to run untagged builds; defaults to true when tagList is empty.

Add a custom host-to-IP mapping.

Add a custom host-to-IP mapping.

Default pull-policy for Docker images

Register to run untagged builds; defaults to true when tagList is empty

Bind-mount a volume and create it if it doesn't exist prior to mounting.

Bind-mount a volume and create it if it doesn't exist prior to mounting.

When set to true Runner will only run on pipelines triggered on protected branches.

When set to true Runner will only run on pipelines triggered on protected branches

Runner-specific command script executed before code is pulled.

Runner-specific command script executed after code is pulled.

What is the maximum timeout (in seconds) that will be set for job when using this Runner. 0 (default) simply means don't limit.

Disable all container caching.

Disable all container caching.

What is the maximum timeout (in seconds) that will be set for job when using this Runner. 0 (default) simply means don't limit

Name/description of the runner.

When set to true Runner will disable the possibility of using the CI_DEBUG_TRACE feature.

When set to true Runner will disable the possibility of using the CI_DEBUG_TRACE feature.

Whitelist allowed images.

Whitelist allowed images.

Data Source Name for tracking of all system level errors to Sentry.

Give extended privileges to container.

Give extended privileges to container.

Whitelist allowed services.

Whitelist allowed services.

Name of the runner to configure

Name of the runner to configure

The full path to a file which contains either

• a fine-grained personal access token (PAT),
• a classic PAT
• or a runner registration token

Changing this option or the tokenFile’s content triggers a new runner registration

Limit number of concurrent requests for new jobs from GitLab.

Limit number of concurrent requests for new jobs from GitLab.

Extra command-line flags passed to gitlab-runner register

Extra command-line flags passed to gitlab-runner register

The full path to a file which contains either

• a fine-grained personal access token (PAT),
• a classic PAT
• or a runner registration token

Changing this option or the tokenFile’s content triggers a new runner registration

Name of the UKI

Path to an environment file, containing the TOKEN environment variable, that holds a token to register at the configured Gitea/Forgejo instance.

Custom environment variables injected to build environment

Custom environment variables injected to build environment

The name of the service to run

The name of this nylon instance.

The name identifying the runner instance towards the Gitea/Forgejo instance.

Name of the runner group to add this runner to (defaults to the default runner group)

Name of the runner group to add this runner to (defaults to the default runner group)

The family name of the font within the package.

Name of the zone.

Sets the password(s) for WPA-PSK

Name of the PPP peer.

Sets the password for WPA-PSK

Path to the file containing rclone configuration

The name of the user account

The name of the user account

Path to the file which contains the actual base64 encoded key

Etcd unique node name.

Sets the password for WPA3-SAE

The name of the theme within the package.

The name of the group

The group's name

Replace any existing runner with the same name

Replace any existing runner with the same name

The password for this entry, read from the given file when starting hostapd

The endpoint name.

The endpoint name.

The family name of the font within the package.

The family name of the font within the package.

The family name of the font within the package.

Name i2pd appears in UPnP forwardings list.

The name of this systemd unit, including its extension

Username of the SMTP server for GitLab.

Text of the file

These lines go to the end of cgitrc verbatim.

The name of the user account

Name of the PAM service.

The name of the system used in the system.build.toplevel derivation

Name for the device

The name of this systemd unit, including its extension

Username for JSON-RPC connections.

The endpoint name.

The endpoint name.

Name of the worker

User under which to run the service

Specifies the Name of the Storage daemon.

Name of the redis server

The name of the theme within the package.

The name of the theme within the package.

The name of the theme within the package.

The name of the icon theme within the package.

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

Path of the authentication file.

When to run the job.

Basic Auth password file for a vhost

The endpoint name.

The endpoint name.

Path of the authentication file used to connect to registry.

The name of the group

Location of bitcoind pid file.

User under which to run the service

Mail "from" name.

Runner name declared to the PeerTube instance.

Name of modem device, will be searched for in /dev.

Extra zone config to be appended at the end of the zone section.

Repository to add the runner to

Repository to add the runner to

Adds try_files directive.

Group under which to run the service

The name of the node which is used as an identifier when communicating with the remote nodes in the mesh

The client name that must be used by the Director when connecting

Options for the Kimai PHP pool

The director name used by the system administrator

Text of the file

Text of the file

Working directory, available as $GITHUB_WORKSPACE during workflow runs and used as a default for repository checkouts

Profile name

The profile's name.

The theme name.

Working directory, available as $GITHUB_WORKSPACE during workflow runs and used as a default for repository checkouts

The name of the host

Database name.

The name of the theme within the package.

A program name specifying a Postfix service/daemon process

The name of the Helm chart

Text of the file.

The unique agent name.

Mail "reply-to" name.

Options for the Drupal PHP pool

Whether to enable GitHub Actions runner

Whether to enable GitHub Actions runner

Base URL of your Gitea/Forgejo instance.

A system user name for this client instance.

A system user name for this client instance.

Agent name, usually same as the hostname

Agent name, usually the same as the hostname.

The github-runner package to use.

The github-runner package to use.

Name of the redis server

Extra lines to add to the tinc service configuration file

Location of the dokuwiki acl rules

Whether the target path should be unconditionally replaced by the managed file source

The endpoint name.

Each attribute in this set specifies an option in the [Unit] section of the unit

Font name, as used by fontconfig.

Each attribute in this set specifies an option in the [Unit] section of the unit

Database name.

Path to target file relative to xdg.dataHome.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Group under which to run the service

Additional command line parameters

Extra configuration values that you want to insert into settings.php

Path to the SSH host public key.

Combined stdout and stderr log file for the Colima service.

Extra configuration to be appended to awstats.${name}.conf.

Whether this file should be generated

Extra lines that go into the pool configuration

Path to file containing local secret key in binary or hexadecimal form.

The name of the icon theme within the package.

The name of the icon theme within the package.

The name of the icon theme within the package.

Keyboard name.

The configuration file path to supply bitcoind.

Plain token to register at the configured Gitea/Forgejo instance.

If set, all sae password entries that have a non-wildcard MAC associated to them will additionally be used to populate the MAC allow list

The name to return in service discovery responses for the MUC service itself

Text of the file.

Akkoma frontend name.

The path to the xkb types file

The name of the Helm chart

Text of the file

Specifies a file containing the MAC addresses to deny if macAcl is set to "deny" or "radius"

Unique identifier of the account

The endpoint name.

Extra labels in addition to the default (unless disabled through the noDefaultLabels option)

Extra labels in addition to the default (unless disabled through the noDefaultLabels option)

The log file to be scanned

INI sections and values to populate the Image Quadlet.

INI sections and values to populate the Build Quadlet.

The type of the service

Type of token to use for runner registration

Name is referenced in logs

Whether to enable Gitea Actions Runner instance.

Path of the source file.

Name of the rule.

Name of the existing database.

Name of the machine when registering it at the central or local api.

Specifies a file containing the MAC addresses to allow if macAcl is set to "allow" or "radius"

The name of the instance.

Path to the SSH host private key.

Path to target file relative to xdg.cacheHome.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The path to the xkb compat file

The name of the agent as seen in the buildkite dashboard.

The name of the agent as seen in the buildkite dashboard.

Location of the dokuwiki users file

Whether the target path should be unconditionally replaced by the managed file source

Whether the target path should be unconditionally replaced by the managed file source

Whether this file should be generated

Each attribute in this set specifies an option in the [HierarchyTokenBucket] section of the unit

The name of the cursor theme within the package.

File that contains password

Path to target file relative to xdg.stateHome.

Additional configurations to be appended to bitcoin.conf.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Selects the authentication mode for this AP.

• "none": Don't configure any authentication

The database name

Arguments to pass to the command

File containing the password for the user.

File with password for the database.

Additional command line parameters

Whether this file should be generated

Whether this file should be generated

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

The endpoint name.

Basic Auth password file for a vhost

If this attribute is given with non-zero length, it will set the password identifier for this entry

List of Node.js runtimes the runner should support.

List of Node.js runtimes the runner should support.

Labels used to map jobs to their runtime environment

Specific name of the application.

Name of the user to ensure.

INI sections and values to populate the Volume Quadlet.

Path of the source file or directory

Adds try_files directive.

Name of the service.

Options for the DokuWiki PHP pool

The path to the xkb symbols file

The logical name of the Galera cluster

Additional entries to put verbatim into worker section of rspamd config file.

Database name.

Database name.

If this attribute is given, SAE-PK will be enabled for this connection

If this attribute is not included, or if is set to the wildcard address (ff:ff:ff:ff:ff:ff), the entry is available for any station (client) to use

Any additional text to be appended to the wp-config.php configuration file

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

Name of the image

The name of an existing user account under which the rsync process should run.

Sets the password for WPA-PSK that will be converted to the pre-shared key

Basic Auth password file for a vhost

Database name.

Each attribute in this set specifies an option in the [HierarchyTokenBucketClass] section of the unit

Name is used as a suffix for the service name, user, and group

These lines go to the end of the location verbatim.

The name of the service to run

Path of the source file.

The name of this gateway as shown in firezone

The name of the cookie that the oauth_proxy creates.

Path of the private RSA keyfile.

These lines go to the end of the vhost verbatim.

A Setup Key file path used for automated login of the machine.

A Setup Key file path used for automated login of the machine.

When to run the backup

Name of the beat

Name of the wiki.

Name of the server.

Server name to be used for this virtual host

Sets allowed passwords for WPA3-SAE

If this attribute is given, all clients using this entry will get tagged with the given VLAN ID.

Extra packages to add to PATH of the service to make them available to workflows.

Extra packages to add to PATH of the service to make them available to workflows.

This primary server will notify all given secondary servers about zone changes

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

When to run the backup

Name of this iscsi initiator

Database name, only used when the databse is created locally.

List of UIDs of all users for which this application is allowed location info access, Defaults to an empty string to allow it for all users.

Each attribute in this set specifies an option in the [Service] section of the unit

Shell commands to run when file has changed between generations

Additional lines of configuration appended to this virtual host in the automatically generated Caddyfile.

Name of the action.

Configuration for act_runner daemon

Each attribute in this set specifies an option in the [Service] section of the unit

Disables adding the default labels

Disables adding the default labels

The name of the server

Name of the redis server

These lines go to httpd.conf verbatim

URL of the PeerTube instance.

Name of ICMP pinging job.

Configuration for the rclone remote being used for backup

To enable SSL, specify path to the name of certificate files without extension

Read only representation of the final configuration.

Path to a file containing the password.

Read the repository password from a file.

A file containing the repository password.

Automatically wake up the service after the specified number of seconds

Name associated with the build

The path to the xkb keycodes file

Database name

This option provides a simple way to serve individual, static files.

Whether the application is a system component or not.

Extra configuration for bepasty server to be appended on the configuration. see https://bepasty-server.readthedocs.org/en/latest/quickstart.html#configuring-bepasty for all options.

INI sections and values to populate the Network Quadlet

The endpoint name.

Database name.

Database name.

Database name.

Path to target file relative to xdg.configHome.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Whether the service is chrooted to have only access to the services.postfix.queueDir and the closure of store paths specified by the program option.

The path to the xkb geometry file

Set of accepted cipher suites (encryption algorithms) for pairwise keys (unicast packets)

The name of an existing user group under which the rsync process should run.

Extra configuration to be passed in Device directive.

The name of the immich database.

Path of the source file or directory

Path of the source file or directory

Whether the target path should be unconditionally replaced by the managed file source

The name of the mailbox.

List of packages, that are available to actions, when the runner is configured with a host execution label.

The name of the database to use for Wakapi.

The location of the Drupal private files directory.

Options for the WordPress PHP pool

Database name.

Whether this file should be generated

existing configuration file

Basic Auth password file for a vhost

These lines go to the end of the location verbatim.

Database name.

These lines go to the end of the upstream verbatim.

The name of the cursor theme within the package.

The name of the cursor theme within the package.

The name of the cursor theme within the package.

User to run the cgit service as.

A file that contains the server secret for safe session cookies, must be set.

secretKeyFile takes precedence over secretKey

These lines go to httpd.conf verbatim

The name of the host in the network as well as the configuration for that host

The advertised name for zeroconf discovery.

The name of this client as shown in firezone

Adds try_files directive.

This option provides a simple way to serve individual, static files.

The path to the public key file for the host

List of the dokuwiki (un)loaded plugins.

TLS options for virtual host

Shell commands to run when file has changed between generations

Shell commands to run when file has changed between generations

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Desktop ID of the application.

Extra configuration that is appended to the end of the file. Do not write ids section here, use a separate option for it

name of the virtualhost

The password for this entry

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

A file containing the password corresponding to database.user.

When set to something distinct to null NSD is able to collect statistics per zone

The maximum number of processes to spawn for this service

Additional virtual host specific configuration

APIs to enable over WebSocket

The name of this authentication provider

Whether the service's sockets and storage directory is restricted to be only available via the mail system

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

Database name.

Database name.

String to be appended to the config verbatim

Read only representation of the final configuration.

GitLab container registry host name.

Whether the application will be allowed access to location information.

Basic Auth password file for a vhost

Additional configuration that will be added to the account configuration

Port number Go Ethereum will be listening on, both TCP and UDP.

Server name.

PostgreSQL database name

systemd timer configuration

These lines go to the end of the location verbatim.

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

Path to firmware config which is generated using klipper-genconf

The name of this gateway as shown in firezone

The name of the file (can be a raw device or a partition) that should be used as the decryption key for the encrypted device

These lines go to the end of the location verbatim.

Rename nodes to different name.

Adds try_files directive.

The config file

Name of the control, as it appears in alsamixer

Runner description declared to the PeerTube instance.

Port number of Go Ethereum HTTP API.

ACME options for virtual host.

HTTP options for virtual host

Database name.

Name of the existing database (has no effect if type is "sqlite").

If enabled, causes the following behavior:

• Passes the --ephemeral flag to the runner configuration script
• De-registers and stops the runner with GitHub after it has processed one job
• Restarts the service after its successful exit
• On start, wipes the state directory and configures a new runner

You should only enable this option if tokenFile points to a file which contains a personal access token (PAT)

Bind port for ‹name› endpoint.

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

A file containing the password corresponding to database.user.

Group to run the cgit service as.

The name of the device.

The name of the device.

Path of the source file or directory

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the vhost verbatim.

These lines go to the end of the location verbatim.

The name of this actor

The name of this group

Path of the private ed25519 keyfile.

Name of the game as it will appear in the game listing.

Bind port for ‹name› endpoint.

Adapter name that is used in the radicle-ci-broker configuration

The name of the watcher

Override the default TLS port for this virtual host.

If set the URL specified in bitcoin.rpc.url will get the content of this file added as an URL password, so http://user@example.com will turn into http://user:SOMESECRET@example.com

This is the target address is to match against

What port to listen for client requests, default is 1080.

If enabled, causes the following behavior:

• Passes the --ephemeral flag to the runner configuration script
• De-registers and stops the runner with GitHub after it has processed one job
• On stop, systemd wipes the runtime directory (this always happens, even without using the ephemeral option)
• Restarts the service after its successful exit
• On start, wipes the state directory and configures a new runner

You should only enable this option if tokenFile points to a file which contains a personal access token (PAT)

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

A path which will be scanned for repositories.

Path to key used for decryption of images.

The type of the device.

Name of the local AutoSSH session

Name of the local AutoSSH session

Extra lines to be added verbatim to the configuration file.

Extra lines to be added verbatim to the configuration file.

All of these scripts will be executed in lexicographical order before hostapd is started, right after the bss segment was generated and may dynamically append bss options to the generated configuration file

Modify the service

cgit repository settings, see cgitrc(5)

These lines go to the end of the location verbatim.

Securely pass environment variabels to Kimai

The name of the cask to install.

The name of the formula to install.

Shell commands to run when file has changed between generations

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Set the host address for this virtual host

Modify the systemd service

The name of the dawarich database.

MySQL database name.

Database name for FreshRSS.

Path(s) to additional configuration files that are then linked to the 'conf' directory.

Path to easytier config file

The name of services's user

Path to the file containing the repository location to backup to.

Override the default HTTP port for this virtual host.

The cursor name within the package.

Name of the satellite.

INI sections and values to populate the Container Quadlet.

This will contain the contents of cups-pdf.conf for this instance, derived from settings

The name of this relay group

Extra config for <FileSystem> section.

Format: [AXFR|UDP] <ip-address> <key-name | NOKEY>

Path to a file containing the repository location to backup to

The actual zone data

Name of the modifier.

The name of this server.

Whether to enable cgit.

Root directory for requests.

Basic Auth password file for a vhost

Location of the blockbook configuration file.

Blockchain garbage collection mode.

Whether to enable hub instance.

A script that produces a list of files to back up

Node name

These lines go to the end of the location verbatim.

The nickname of this Tahoe node.

Zone file resource records contain columns of data, separated by whitespace, that define the record.

Whether to enable Go Ethereum Node.

Additional arguments passed to Go Ethereum.

Extra environment variables to set for the runner, as an attrset.

Extra environment variables to set for the runner, as an attrset.

A script that produces a list of files to back up

Name of the beat

Each attribute of this option defines a systemd service that runs hans

Enables HTTP/3 over QUIC on the UDP port for TLS

Name of the model to download and use for speech synthesis

Whether to enable ‹name›.

Directory for the ACME challenge, which is public

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Multiple GitHub Runners

Alias directory for requests.

Adds index directive.

Database name.

VirtualHost to serve cgit on, defaults to the attribute name.

The unique name for THIS channel in THIS group

These lines go to httpd.conf verbatim

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

The family name of the font within the package.

This option provides a simple way to serve individual, static files.

Adds try_files directive.

Whether to enable ‹name›.

The name of this gateway group

Profile name

Listed primary servers are allowed to notify this secondary server

The path specifying a PEM encoded TLS CA certificate(s)

The path specifying a PEM encoded TLS CA certificate(s)

Whether to enable DNSSEC.

The specified name-string gives the system file name of the storage device managed by this storage daemon

The name of this resource

Application image to display in the WebUI

Whether to enable TLS support.

The account name

Whether to enable Go Ethereum HTTP API.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

Database name.

Database name.

Additionally enable the recommended set of pairwise ciphers

Username

The name of this systemd unit, including its extension

Profile name.

Proxy account name, without the possibility to include domain name ('at' sign is interpreted literally).

Discourse database name.

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

Name of this virtual host

Name of the symlink (relative to /var/lib/rancher/k3s/server/manifests)

The name of the network interface to match against.

Unique identifier of the account

Extra lines to be added verbatim to the vrrp_script section.

Whether git-http-backend should only export repositories that contain a git-daemon-export-ok file

Basic Auth password file for a vhost

Adds a return directive, for e.g. redirections.

Name of modem configuration file, will be searched for in config in the spooling area directory.

Database name.

These lines go to the end of the location verbatim.

file containing the credentials to access the repository, in the format of an EnvironmentFile as described by systemd.exec(5)

Database name.

The device to update.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

All of these scripts will be executed in lexicographical order before hostapd is started, right after the global segment was generated and may dynamically append global options the generated configuration file

The friendly name you give to the network device

The friendly name you give to the network device

Path to your JWT secret used during identity verificaton.

A file containing the password corresponding to database.user.

The language to use for personal names.

DNS full-qualified domain name of a database server

DNS full-qualified domain name of a database server

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Enables nylon as a running service upon activation.

The name of the first admin user.

Whether to enable this PPP peer.

Port to bind the TTS server to.

User account under which this pool runs.

Basic Auth protection for a vhost

SSID to be used in IEEE 802.11 management frames.

The port on which the tub will listen

The port on which the Web server will listen

File containing password of the RPC user

The filename of the generated settings file

These lines go to the end of the location verbatim.

Hostname of the XMPP server to connect to

Name of Google storage bucket

This library's name.

Master=false means slave server

Addresses who may request zone transfers.

Limit retry time for secondary zones.

Whether to enable this RAUC slot.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

A file containing the credentials to access the repository, in the format of an EnvironmentFile as described by systemd.exec(5)

The cgit package to use.

The geth package to use.

Uhub plugin configuration.

The name of this group for this account

Bind address for ‹name› endpoint.

The largest size (in bytes) file that may be created.

The largest size (in bytes) file that may be created.

Environment variables used for this PHP-FPM pool.

GitLab container registry service name.

Database name to use when connecting to an external or manually provisioned database; has no effect when a local database is automatically provisioned

The user's UID.

Adds try_files directive.

static: Immediately answer any Neighbor Solicitation Messages (if they match the IP rule). iface: Forward the Neighbor Solicitation Message through the specified interface and only respond if a matching Neighbor Advertisement Message is received. auto: Same as iface, but instead of manually specifying the outgoing interface, check for a matching route in /proc/net/ipv6_route.

Options for the InvoicePlane PHP pool

Set name to shared memory zone.

The name of this client as shown in firezone

Name of the remote read config, which if specified must be unique among remote read configs

When clone_target is unspecified, this is the name of a formula repository to tap from GitHub using HTTPS

Additional configurations to be appended to coin.conf

The largest size (in bytes) file that may be created.

The largest size (in bytes) file that may be created.

The name of the database to create.

Path to the directory storing the hooks

Path to the directory storing the hooks

Bind address for ‹name› endpoint.

The basic secret to use for this service

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Path] section of the unit

Profile name.

Tunnel type.

Members of this group can access the control socket for this interface.

Adds try_files directive.

Database name.

pppd configuration for this peer, see the pppd(8) man page.

Username used to connect to registry.

Each attribute of this option defines a systemd service that runs iodine

Adds try_files directive.

The user's primary group.

Pair of roots to synchronise.

The name of the Grafana database.

The full path to a file that contains the user's (clear text) password

The network to connect to

Whether the SSID is to be interpreted using UTF-8 encoding.

Path to your HMAC secret used to sign OIDC JWTs.

Port number of Go Ethereum metrics service.

Listen address of Go Ethereum HTTP API.

Interface to use when method is iface.

Group account under which this pool runs.

Keyset used for tunnel identity.

Name of the remote write config, which if specified must be unique among remote write configs

Tunnel type.

Text of the file.

Database name.

Database name.

Name of database.

Runner specific options

Name of the symlink (relative to /var/lib/rancher/rke2/server/manifests)

Text of the file

Port number of Go Ethereum Auth RPC API.

Whether to offload computation onto a CUDA compatible GPU.

FQIN of referenced Image when source is a file or directory archive.

Name of the PostgreSQL database.

The name of the Linkwarden database.

Verify peer certificate

Verify peer certificate

The largest size (in bytes) file that may be created.

The largest size (in bytes) file that may be created.

Each attribute in this set specifies an option in the [Path] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Name of the user to ensure.

Name of the user to ensure.

add will additionally listen for TLS connections. only will disable TLS connections. force will redirect non-TLS traffic to the TLS connection.

Local Mattermost database name.

Shell commands executed to stop the service.

Local secret key in hexadecimal form.

A system group name for this client instance.

A system group name for this client instance.

The ID of your hook

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

Keyset used for tunnel identity.

Source directories.

This optional key can be used to request that the service be registered with the mDNSResponder(8)

Backup type as described in: https://pgbackrest.org/command.html#command-backup/category-command/option-type

The name of the host in the network as well as the configuration for that host

The name of the plugin.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Location of hardware kiss tnc for this interface.

Enable logging, default is no logging.

Name of the homebridge UI platform

GVPE node name

Shell commands executed to stop the service.

Name of the MySQL database that holds EPGStation's data.

Name of the beat

Whether to ask Let’s Encrypt to sign a certificate for this virtual host

The path to the file containing the value for backends.<name>.secret

This optional key can be used to request that the service be registered with the mDNSResponder(8)

Controls how long a valid or invalid entry remains in the cache, in milliseconds.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Start the specified units when this unit is started.

Service port

Path to a Containerfile which contains instructions to build the image.

The location of the Drupal files directory.

Root directory for requests.

The object to make available inside the initrd.

The port on which the SFTP server will listen

The token value

Order of this location block in relation to the others in the vhost

Extra lines to be added verbatim to the vrrp_instance section.

A system group name for this client instance.

A system group name for this client instance.

Specifies the path to a file containing the clear text password for the user.

Server name to verify the hostname on the returned gRPC certificates

Videobridges use the same XMPP account and need to be distinguished by the nickname (aka resource part of the JID)

The location of the Drupal site state directory.

Start the specified units when this unit is started.

Extra configuration lines to add to THIS channel's configuration.

The domain name to collect stats for.

Output DPI configuration.

Units that want (i.e. depend on) this unit

Enable unlocking and mounting of encrypted ZFS home dataset at login.

Name of the font to use for regreet.

Path to world folder containing the dimension to render

List of servers for inclusion in stub and secondary zones.

The IP interface to bind to. null means "all interfaces".

The serial port speed of this interface.

Unique identifier of the contact account

Contents of the PAM service file.

Image to pull.

Limit retry time for secondary zones

Specify the log file name

Packages added to the service's PATH environment variable

Each attribute in this set specifies an option in the [Exec] section of this unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Remote public key in hexadecimal form.

Name of the site.

Levels (minimum value for logged events): 0 = verbose debugging 1 = debugging 2 = informational messages 3 = notification 4 = warning

If the specified units are started at the same time as this unit, delay this unit until they have started.

Packages added to the service's PATH environment variable

Which local IP to bind the UDP socket to.

Output resolution.

Output framerate.

Name of the tun device

The name of the plugin.

The user's home directory.

Name of the tmux window;

Units that want (i.e. depend on) this unit

Specifies the MAC addresses to deny if macAcl is set to "deny" or "radius"

Path to your session secret

Adds index directive.

Alias directory for requests.

Instance name.

This optional key can be used to request that the service be registered with the mDNSResponder(8)

Specifies the number of retries for failed notifies

If the specified units are started at the same time as this unit, delay this unit until they have started.

File containing the password for the user.

The address on which to accept FastCGI requests.

Shell commands executed after the service's main process has exited.

Password for the user

Password HMAC-SHA-256 for JSON-RPC connections

Name of the GNOME Shell theme.

IP of the Redis master

The user as which to run bitcoind.

Blockchain sync mode.

Maximum peers to connect to.

An existing Let’s Encrypt certificate to use for this virtual host

Output video display controller.

DNS full-qualified domain name of a database server

Marks the server as a backup server

Environment file to be passed to the systemd service

Environment file to be passed to the systemd service

Label to use for the name of the config file.

Vertical scaling factor/pixels.

Horizontal scaling factor/pixels.

Override the default port on which to listen for JSON-RPC connections.

Shell commands executed after the service's main process has exited.

Whether to enable SFTP service.

Adds DirectoryIndex directive

Alias directory for requests

Name of this virtual host

Whether to enable Drupal web application.

Extra arguments to pass to the server commandline.

Whether to enable Coqui TTS server.

List of address ranges allowed to query this zone

The kimai package to use.

The tahoelafs package to use.

The path to repo in local machine

This optional key tells launchctl what type of socket to create

Guaranteed minimum hops for ‹name› tunnels.

Name of the voice model to use

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

If set to false the component will only be woken up if it is used

This optional key specifies the node to connect(2) or bind(2) to.

Isolate traffic between stations (clients) and prevent them from communicating with each other.

Path of certificates (*.{crt,cert,key}) used to connect to registry.

These lines go to the end of the location verbatim.

FastCGI parameters to override

Shell commands executed before the service's main process is started.

Override the default port on which to listen for connections.

Specifies the path to a file containing the clear text password for the MQTT user

Name of the homebridge

Guaranteed minimum hops for ‹name› tunnels.

File or block device to export.

Shell commands executed before the service's main process is started.

This optional key tells launchctl what type of socket to create

Specifies the MAC addresses to allow if macAcl is set to "allow" or "radius"

As which user the backup should run.

Output gamma configuration.

The TCP port to accept connections

cgit configuration, see cgitrc(5)

Configuration of uhub

This optional key specifies the node to connect(2) or bind(2) to.

Key / certificate pairs for the virtual host.

Key policy for zone signing keys

Key policy for key signing keys

If set, root doesn't need to authenticate (e.g. for the useradd service).

The database name.

Paths to files containing container environment variables.

Set maximum cache size

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

LiveKit key file holding one or multiple application secrets

This optional key implies SockFamily is set to "Unix"

When or how often the backup should run

Name of the theme to use for regreet.

The data directory for bitcoind.

How to name the created archives

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Name of directory from which to import ZFS device, this is passed to zpool import as the value of the -d option

The packaged Helm chart

The account UID

The group's GID.

Table name.

List of virtual hostnames from which to accept requests.

IP address of server running hans

The location for users to install Drupal themes.

Limit refresh time for secondary zones.

Limit on the number of simultaneous connections allowed.

Name of a file containing the spiped key

The name of the database to store data in.

Type of the file system

Run the rsync process with an inhibition lock taken; see systemd-inhibit(1) for a list of possible operations.

Each attribute in this set specifies an option in the [Slice] section of the unit

Each attribute in this set specifies an option in the [Files] section of this unit

Container name, e.g., shopping.

The size of the key file

Path to your private key file used to encrypt OIDC JWTs.

JID of the MUC to join

User part of the JID.

Name shown in the website title and on the front page.

Shell commands executed as the service's main process.

port of the Redis master

Adds a return directive, for e.g. redirections.

Name of the plugin.

Name of the plugin.

Unique identifier of the calendar

This optional key implies SockFamily is set to "Unix"

Whether to enable Go Ethereum prometheus metrics.

RPC user information for JSON-RPC connections.

IP and port to which this redis instance acts as a slave.

Shell commands executed as the service's main process.

The user ID owning the volume inside the container.

Adds DirectoryIndex directive

Alias directory for requests

Whether to show the message of the day.

This optional key specifies the mode of the socket

The serial port to which your UPS is connected. /dev/ttyS0 is usually the first port on Linux boxes, for example.

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Name of the iSCSI initiator to boot from

Domain name

Shell commands executed after the service's main process is started.

Shell commands executed when the service's main process is reloaded.

The group as which to run bitcoind.

The database engine name

Whether to enable Go Ethereum Auth RPC API.

Shell commands executed after the service's main process is started.

Shell commands executed when the service's main process is reloaded.

Filesystem type of Device. (used as -t in mount commands)

Whether to enable the filesystem mount.

These lines go to the end of the location verbatim.

File containing the password, either as MD5SUM or cleartext.

File containing the password, either as MD5SUM or cleartext.

If set, the OATH Toolkit will be used.

Location to serve cgit under.

Path of the source file.

Settings for this slot.

Address to which spiped should connect.

The labels to apply to the build.

Database name to connect to

The user's home directory mode in numeric format

Path to the unix socket file on which to accept FastCGI requests.

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

This optional key tells launchctl what type of socket to create

Allow these IPs and TSIG to transfer zones, addr TSIG|NOKEY|BLOCKED address range 192.0.2.0/24, 1.2.3.4&255.255.0.0, 3.0.2.20-3.0.2.40

A program name specifying a Postfix service/daemon process

If the specified units are started at the same time as this unit, delay them until this unit has started.

Each attribute in this set specifies an option in the [Slice] section of the unit

Whether to enable proxy for this bucket

Basic Auth password file for a vhost

This optional key specifies the mode of the socket

The name of an explicit dtb to be loaded, relative to the dtb base

If the specified units are started at the same time as this unit, delay them until this unit has started.

Copy content of the image located at the mountpoint of the volume on first run.

This optional key specifies the node to connect(2) or bind(2) to.

Whether to enable the output.

Output rotate configuration.

Each attribute in this set specifies an option in the [Timer] section of the unit

Name of the Docker context

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Whether to enable helper service.

The path to the file used for signing derivation data

The name of the plugin.

Whether to operate in tun (IP) or tap (Ethernet) mode.

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

Shell commands executed when the instance is starting.

The drupal package to use.

Key size in bits

Key size in bits

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

Profile name.

Common name attribute of allowed peer certificates

Common name attribute of allowed peer certificates

Set the execute bit

Specifies the BSSID for this BSS

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

The type of this worker

Whether to enable the HTTP/3 protocol

Here you can provide authelia with configuration files or directories

If set, the OTPW system will be used (if ~/.otpw exists).

Maximum number of items to keep in slow log.

If the file source is a directory, then this option determines whether the directory should be recursively linked to the target location

Address to bind on for UI connections

Environment variables to set for the kernel.

Enable logging to the system logger.

Whether to enable Redis server.

Number of worker instances to run

The path of the web root directory.

Path to the certificate authority certificate.

Username used in the machine image

Name of this virtual host

Manually specify the hostname

User name for RPC connections.

Basic Auth protection for a vhost

Guaranteed minimum hops for ‹name› tunnels.

Each attribute in this set specifies an option in the [Timer] section of the unit

This optional key implies SockFamily is set to "Unix"

Domain part of JID of the XMPP user, if it is different from hostName.

File containing the password for the user.

Container name, e.g., shopping.

Whether users can log in with passwords defined in /etc/shadow.

Specify the server verbosity level, options: debug, verbose, notice, warning.

Domain part of the web interface URL (no web interface for this domain if null)

Specifies if TLS should be enabled

Specifies if TLS should be enabled

Public address for p2p connections from peers (if TCP is used)

Whether to start the build on boot

Whether to pull the image on boot

TCP Port to bind on for UI connections

Authentication algorithm for this key.

A file containing the password corresponding to database.user.

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Configuration for this host

Network interface to bind to.

Name that will be shown to the user.

Root directory for requests.

Output scaling method.

The specified name-string names the type of media supported by this device, for example, DLT7000

The name of the module

Source ZFS dataset

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Guaranteed minimum hops for ‹name› tunnels.

The user's primary group.

Turns on or off the router flag for Neighbor Advertisement Messages.

The group ID owning the volume inside the container.

Aliases of that unit.

Path to target file relative to HOME.

Override the default database cache size in MiB.

Whether to enable this PAM service.

Path or reference to the host key.

Event type.

Aliases of that unit.

Label for this destination

Keep this unit running as long as the listed units are running

This optional key specifies the mode of the socket

Enable PAM mount (pam_mount) system to mount filesystems on user login.

The furl for a Tahoe helper node

List of paths files that follows systemd environmentfile structure

If set, keys listed in ~/.ssh/authorized_keys and ~/.eid/authorized_certificates can be used to log in with the associated PKCS#11 tokens.

This is a rule that the target address is to match against

Keep this unit running as long as the listed units are running

DNS server to use as an intermediate relay to the iodined server

Specifies the image the volume is based on when Driver is set to the image.

Page or namespace to restrict

The location of the Drupal config sync directory.

The type of log being collected.

Default window size for this interface.

Path to plugin file.

Protocol names to hide in summary tables (RE2 syntax),

The amount of time in seconds for a keyFile to appear before timing out and trying passwords.

The name of private PKCS #8 key file for this policy to be found in the baseDirectory, or the absolute path to the key file

User account under which this instance of redis-server runs.

Name of the class implementing the check

Whether this file locals should be generated

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

Automatically start this unit at the given date/time, which must be in the format described in systemd.time(7)

Basic Auth password file for a vhost

Optional PKCS#11 module name.

Name of the interface.

Device identifiers, as shown by keyd(1).

If given, sets the SO_MARK option on the TCP socket.

If given, sets the SO_MARK option on the TCP socket.

Require HTTPS and verification of certificates when contacting registries.

Require HTTPS and verification of certificates when contacting registries.

Specifies the path to a file containing the clear text password for the account

Attrset to be transformed into YAML for host config

The name of your network of sr.ht-based sites.

Command and arguments to start the kernel.

TLS Options for the Director in this Configuration.

Bind address to be used for this server.

TLS Options for the Director in this Configuration.

Port the NetBird client listens on.

Port the NetBird client listens on.

Whether to enable Enables the axport interface.

Default maximum packet size for this interface.

Database user.

Disables scan for overlapping BSSs in HT40+/- mode

Station MAC address -based authentication

Check for locally modified files

Public URL of the API address of the reverse proxy/tls terminator

Automatically start this unit at the given date/time, which must be in the format described in systemd.time(7)

Path to the yaml registration file of the appservice.

The name of the Stash Box

Whether output should be marked as primary

Name of the icon theme to use for regreet.

Port to bind on for p2p connections from peers (both TCP and UDP)

Address to bind on for p2p connections from peers (both TCP and UDP)

The location for users to install Drupal modules.

I2P nodes that are allowed to connect to this service.

Shell commands executed when the instance is shutting down.

URL where this inbox can be accessed over HTTP.

File containing environment variables to substitute when copying the configuration out of Nix store to the services.mautrix-meta.dataDir

Alias directory for requests.

Adds index directive.

APIs to enable over WebSocket

Path to the host certificate.

Legacy RSA public key of the host in PEM format, including start and end markers

The name of a .desktop file in the directory specified in the 'package' option.

Database host address.

Database host port.

Local UDP port.

Name shown in the server list.

These lines go to the end of the location verbatim.

Settings that should be passed to rsync via long options

Language of the environment

The schedule in which data is persisted to disk, represented as a list of lists where the first element represent the amount of seconds and the second the number of changes

Adds try_files directive.

Configuration for MPD

Set the execute bit

Set the execute bit

Listen address of Go Ethereum metrics service.

Options for PHP's php.ini file for this Drupal site.

Whether to enable this proxy cache path entry.

See torrc manual.

The repo of the Helm chart

If set, the calling user's SSH agent is used to authenticate against the configured keys

Owner's name.

The name of the user for this authelia instance.

The name the camera will show up as.

DDNS server name.

The address of the proxy.

Whether to support proxying websocket connections with HTTP/1.1.

A list of host names and/or IP numbers used for accessing the host's ssh service

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

Whether to enable watching for repo.

Optional url of remote repository

Optional branch in remote repository

Whether to enable Bitcoin daemon.

Extra configuration append to unit

The packaged Helm chart

Specifies the frequency band to use, possible values are 2g for 2.4 GHz, 5g for 5 GHz, 6g for 6 GHz and 60g for 60 GHz.

Address to bind on for API connections relied by the reverse proxy/tls terminator.

Port to bind on for API connections relied by the reverse proxy/tls terminator.

Path to key file

Optional PKCS#11 module name.

Structural Kimai's local.yaml configuration

Listen address of Go Ethereum Auth RPC API.

Whether to run the check command with the provided checkOpts options.

The PHP package to use for running this PHP-FPM pool.

The hash of the packaged Helm chart

Errbot backend name.

The offset of the key file

If the file source is a directory, then this option determines whether the directory should be recursively linked to the target location

If the file source is a directory, then this option determines whether the directory should be recursively linked to the target location

IP Address of a database server

IP Address of a database server

Set size to shared memory zone.

Number of simultaneous ‹name› tunnels.

Canonical hostname for the server.

Canonical hostname for the server.

The URL at which to fetch the feed.

The path to the socket to bind to.

The volume driver to use.

The labels to apply to the volume.

Username for this DDNS provider.

Hostname alias(es).

Specifies the path to a file containing the hashed password for the MQTT user

A file containing a the client secret for an openid_connect adapter

This optional key specifies the service on the node to connect(2) or bind(2) to.

The path of a PEM encoded TLS private key

The path of a PEM encoded TLS private key

Limit refresh time for secondary zones

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

Whether this file should be generated

File to load environment variables from

If set, the pam_mysql module will be used to authenticate users against a MySQL/MariaDB database.

Additional names of virtual hosts served by this virtual host configuration.

Keeps the specified running while this unit is running

Credential file

The number of shares required to store a file.

Whether to enable storage service.

URI to bind the wyoming server to.

Port number of Go Ethereum WebSocket API.

Each attribute in this set specifies an option in the [Link] section of the unit

Whether to run the rspamd worker.

Location of the DokuWiki state directory.

Hostname of server running iodined

A list of options for 'restic check'.

The path of a device which is mounted for the volume.

Whether to create the volume on boot.

Listen for any Neighbor Solicitation messages on this interface, and respond to them according to a set of rules

Custom name of this poller.

Whether to try to create home directories for users with $HOMEs pointing to nonexistent locations on session login.

Keeps the specified running while this unit is running

This optional key specifies the service on the node to connect(2) or bind(2) to.

Number of simultaneous ‹name› tunnels.

The username to store inside the credentials file.

The subnets which this tinc daemon will serve

Number of ElGamal/AES tags to send.

Name of the interface

TTL for dnssec records

User or group to restrict

Path to the directory where the pastes will be saved to

Clevis JWE file used to decrypt the device at boot, in concert with the chosen pin (one of TPM2, Tang server, or SSS).

When or how often the backup should run

Your yandex.com login name.

The znapzend backup plan to use for the source

Whether to enable the QUIC transport protocol

Check for modified files on the remote side

Path to a file containing the password

Group account under which this instance of redis-server runs.

Additional TLS/SSL-related configuration options

The number of distinct storage nodes required to store a file.

Whether to run 'restic check' with the provided checkOpts options

Each attribute in this set specifies an option for a key in the plist. https://developer.apple.com/legacy/library/documentation/Darwin/Reference/ManPages/man5/launchd.plist.5.html

The specified name-string must be the generic SCSI device name of the autochanger that corresponds to the normal read/write Archive Device specified in the Device resource

Determines how multiple values are joined to create the claim value

The delay time (in microseconds) on failure.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Swap size in MB for the machine

Number of CPUs to allocate to the machine

URL of the accounts server.

Type of this limit

Name of the class implementing the check

Output position

"Options appended to the PHP configuration file php.ini used for this PHP-FPM pool."

Print global archive statistics upon completion

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

Kissattach parameters for this interface.

Number of ElGamal/AES tags to send.

(optional) name your peer has for you

(optional) name your peer has for you

The job name assigned to scraped metrics by default.

Path to the key file.

Adds a return directive, for e.g. redirections.

Apache configuration can be done by adapting services.httpd.virtualHosts.

A list of options for 'restic check'

Output scale configuration

The name of the group for this authelia instance.

Item this limit applies to

Set the logcheck level.

Number of daily snapshots.

Whether to enable this source.

Dataset name to send snapshots to.

Attribute set of NetBird client daemons, by default each one will:

1. be manageable using dedicated tooling:

• netbird-<name> script,
• NetBird - netbird-<name> graphical interface when appropriate (see ui.enable),

2. run as a netbird-<name>.service,
3. listen for incoming remote connections on the port 51820 (openFirewall by default),
4. manage the netbird-<name> wireguard interface,
5. use the /var/lib/netbird-/config.json configuration file,
6. override /var/lib/netbird-/config.json with values from /etc/netbird-/config.d/*.json,
7. (hardened) be locally manageable by netbird-<name> system group,

With following caveats:

• multiple daemons will interfere with each other's DNS resolution of netbird.cloud, but should remain fully operational otherwise

Name of the profile.

Require TLS or TLS-PSK encryption

Require TLS or TLS-PSK encryption

Each attribute in this set specifies an option for a key in the plist. https://developer.apple.com/legacy/library/documentation/Darwin/Reference/ManPages/man5/launchd.plist.5.html

The input type

The group GID

Run specified command or script after the tunnel device has been opened.

If set, users listed in $XDG_CONFIG_HOME/Yubico/u2f_keys (or $HOME/.config/Yubico/u2f_keys if XDG variable is not set) are able to log in with the associated U2F key

Database user.

Whether to enable HTTPS in addition to plain HTTP

Whether to enable HTTPS in addition to plain HTTP

This optional key specifies the protocol to be passed to socket(2)

The maximum number of open files for this process

The maximum number of open files for this process

Whether to update /var/log/wtmp.

Enables TCP_NODELAY on the TCP socket.

Whitelists the given rrl-types.

The IP and port to forward all traffic to.

The IP and port to forward all traffic to.

Enables TCP_NODELAY on the TCP socket.

Arguments passed to date to create a timestamp suffix for the archive name.

The maximum number of open files for this process

The maximum number of open files for this process

Arguments passed to the main process script

Attribute set describing resource limits

Optional PKCS#11 module name.

Optional slot number of the token that stores the certificate.

The external location that the node should listen on

Domain name for a http_file_share service.

Don't send the password immediately after login, but store for PAM session.

Name of the database user to initialise the database with

This optional key specifies what nice(3) value should be applied to the daemon.

Adds try_files directive.

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

If enabled, checks all masters for the last zone version

Database host address.

Database host port.

Path to a list of ini file containing confidential settings such as credentials

Text of the file.

This optional key specifies the protocol to be passed to socket(2)

If enabled, the pam_umask module will be loaded.

Shell commands to execute when the event is triggered.

Regex specifying which log lines to ignore.

User that runs the cronjob.

Paths to SSL files

Whether this node is a relay.

Denied client IP ranges, these gets evaluated after the allowed IP ranges, defaults to all IPv4 addresses: [ "0.0.0.0/0" ] To block all other access than the allowed.

Whether the target path should be unconditionally replaced by the managed file source

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Arguments passed to the main process script

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

Path to the accounts file.

This optional key specifies the service on the node to connect(2) or bind(2) to.

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

Name of the wrapper that is installed into PATH

Location where the file system will be mounted

Permission level to restrict the actor(s) to

Path to the working directory (used for config and pidfile)

Take encrypted connections from the source socket and send unencrypted connections to the target socket.

Take unencrypted connections from the source socket and send encrypted connections to the target socket.

Shell commands to run after borg create

Access Control Lists: see https://www.dokuwiki.org/acl Mutually exclusive with services.dokuwiki.aclFile Set this to a value other than null to take precedence over aclFile option

If set, fingerprint reader will be used (if exists and your fingerprints are enrolled).

(optional) human-readable name for peer

(optional) human-readable name for peer

Remote UDP port

The ax25-tools package to use.

Enable verbose output, default is to not be verbose.

Whether the delay after typing a wrong password should be disabled.

Log level of the NetBird daemon.

Log level of the NetBird daemon.

Whether to enable HTTPS and reject plain HTTP connections

Whether to enable HTTPS and reject plain HTTP connections

PostgreSQL host for operating remotely.

Each attribute of this option defines a systemd service that runs an OpenVPN instance

Extra lines to append to this profile's config.

The package to use for this runner, nix will try to find the executable for this package

Path to the certificate file.

Directory for the acme challenge which is PUBLIC, don't put certs or keys in here

Directory for the ACME challenge, which is public

Path to your storage encryption key.

Set the execute bit

A state directory used by NetBird client to store config.json, state.json & resolv.conf.

A state directory used by NetBird client to store config.json, state.json & resolv.conf.

Name of the heat source.

Whether to enable kTLS support

Controls how long to wait for a Neighbor Advertisement Message before invalidating the entry, in milliseconds.

Path to host the API on and forward to the daemon's api port

Whether the PPP session is automatically started at boot time.

E-mail address of the server administrator.

Each attribute in this set specifies an option in the [Network] section of this unit

Each attribute in this set specifies an option in the [Socket] section of the unit

Whether to enable frp.

Akkoma frontend reference.

The tinc_pre package to use.

Change permissions for the socket

Basic Auth protection for a vhost

The number of shares required to reconstitute a file.

How frequently to change keys

How frequently to change keys

Commands executed after the profile is successfully applied

The user as which to run blockbook-frontend-‹name›.

Container name, e.g., shopping.

Enable or disable TTY auditing for specified users

If set to false, this unit will be a symlink to /dev/null

By default data is only periodically persisted to disk, enable this option to use an append-only file for improved persistence.

Timeout, in seconds, after which an attempt to connect to the target or a protocol handshake will be aborted (and the connection dropped) if not completed

Optional slot number of the token that stores the certificate.

The frp consists of client and server

Whether to enable ‹name›.

Name of user to run the script under.

The address that Anubis listens to

Public domain of the API address of the reverse proxy/tls terminator.

Bootable image to use for the machine

If set, users with an SSH certificate containing an authorized principal in their SSH agent are able to log in

The external address where the host can be reached

Absolute path to the certificate to load

This optional key specifies what nice(3) value should be applied to the daemon.

Extra parameters to append to redis-server invocation

Which paths to backup, in addition to ones specified via dynamicFilesFrom

Name to match.

Value of this limit

Path of the source .yaml file.

Whether this manifest file should be generated.

The bitcoind package to use.

Whether to propagate the legacy options under services.znc.confOptions.* to the znc config

Number of simultaneous ‹name› tunnels.

If the file source is a directory, then this option determines whether the directory should be recursively linked to the target location

Email address to which to send feed items

Controls presence of netbird-ui wrapper for this NetBird client.

Controls presence of netbird-ui wrapper for this NetBird client.

Extra configuration options to put at the end of this BSS's defintion in the hostapd.conf for the associated interface

Unique identifier of the boxxy rule

Each attribute in this set specifies an option in the [Socket] section of the unit

The hostname the web service appears under.

Name of the theme to use for the lightdm-gtk-greeter.

Canonical hostname for the server.

Alias directory for requests

Adds DirectoryIndex directive

Drive name without the full path.

Name of the network interface managed by this client.

Name of the network interface managed by this client.

If set, users listed in ~/.yubico/authorized_yubikeys are able to log in with the associated Yubikey tokens.

This required key uniquely identifies the job to launchd.

The server name.

Name of the font to use.

Name (relative to the root of the filesystem) of the subvolume where the hash table will be stored.

How often to fsync the append-only log, options: no, always, everysec.

Short description for the zone.

Rich rules for the zone.

Ports to allow in the zone.

The restic package to use.

The restic package to use.

Settings passed directly to lutris for this runner's config at XDG_CONFIG/lutris/runners.

IPv4 interface to bind to.

IPv6 interface to bind to.

HTTP status used by globalRedirect & forceSSL

Whether to accelerate the underlying onnxruntime library with CUDA.

The content of /etc/asusd/aura_.ron

Order of this location block in relation to the others in the vhost

The piper-tts package to use.

The client authentication stance for this policy.

If set to false, this unit will be a symlink to /dev/null

Allow client if common name appears in the list.

Specify the program to run to talk to this UPS. apcsmart, bestups, and sec are some examples.

Number of simultaneous ‹name› tunnels.

Key of taint.

The port where the host can be reached

Makes this policy trust all remote parties

The maximum number of open files for this process

The maximum number of open files for this process

Disk size in GB for the machine

Maps kanidm groups to values for the claim.

IP to listen on. 0.0.0.0 for IPv4 only, * for all.

Path to 64x64 logo png.

Path to 32x32 logo png.

Enable SSL.

Text of the file.

This optional key specifies the protocol to be passed to socket(2)

Name of the user to log in

Whether to use HTTPS for this DDNS provider.

Whether to use the testnet instead of mainnet.

Full legal name

Allow client if organizational unit name appears in the list.

Root directory for requests.

Root directory for requests.

Root directory for requests.

Account certificate file, necessary to create, delete and manage tunnels

The account type

Paths to back up, alongside those defined by the dynamicFilesFrom option

The user's home directory.

Sets the number of worker threads to use

Paths for public-inbox-watch(1) to monitor for new mail.

NNTP group name for the inbox.

Name of symlink

The user's home directory mode in numeric format

Whether this OpenVPN instance should be started automatically.

Domain name of this Gemini server, enables checking hostname and port in requests. (multiple occurrences means basic vhosts)

Number of hourly snapshots.

Number of yearly snapshots.

Enable or disable this network.

The network driver to use.

The labels to apply to the network.

The subnet to use for the network.

Children zones inherit all options of their parents

Name of the theme to use for the lightdm-enso-os-greeter

Command that is executed when this service is started.

Absolute path to the certificate to load

Specify delay (in seconds) before sending snaps to the destination

Database name.

Set the TTY audit flag when opening the session, but do not restore it when closing the session

Location of blockbook-frontend-‹name› data directory.

Set the login uid of the process (/proc/self/loginuid) for auditing purposes

This optional key is a variant of SockPathName

Each attribute in this set specifies an option in the [Match] section of the unit

Name of the cursor theme to use for regreet.

The OAuth2 server's authentication URI.

This required key uniquely identifies the job to launchd.

The levels parameter defines structure of subdirectories in cache: from 1 to 3, each level accepts values 1 or 2

Port number to listen on.

Root directory for requests.

IP address to listen on.

IRC server port.

This optional key is a variant of SockPathName

Name of the platform

Whether to enable fedimintd.

The group as which to run blockbook-frontend-‹name›.

If set, the calling user's SSH agent is used to authenticate against the keys in the calling user's ~/.ssh/authorized_keys

Whether to enable the HTTP/3 protocol

Wait for DNS

Whether to enable HTTPS in addition to plain HTTP

Whether to enable the Howdy PAM module

FastCGI parameters to override

Each attribute in this set specifies an option for a key in the plist. https://developer.apple.com/legacy/library/documentation/Darwin/Reference/ManPages/man5/launchd.plist.5.html

Allow client if URI subject alternative name appears in the list.

Allow client if DNS subject alternative name appears in the list.

If NSD as secondary server should be allowed to AXFR if the primary server does not allow IXFR.

This setting configures the name of a mailbox for which administrator scripts are configured

Extra configuration to be passed in Autochanger directive.

Whether to enable SSL (https) support.

Patterns to exclude when backing up

The repo of the Helm chart

Whether to automatically start this machine on login.

Path to the unix socket file to use for authentication.

This option sets the PAM "control" used for this module.

The dokuwiki package to use.

The dataset to use for this source.

The openssh package to use.

This feed account's name.

Nginx first writes files that are destined for the cache to a temporary storage area, and the use_temp_path=off directive instructs Nginx to write them to the same directories where they will be cached

Name of the default administrator user

Optional slot number of the token that stores the certificate.

Verbatim contents of the config file

The flake reference from is rewritten to.

The flake reference to which from> is to be rewritten.

Name of the icon theme to use for the lightdm-gtk-greeter.

Program to execute, possibly with arguments.

Basic Auth protection for a vhost

This optional key specifies that launchd should adjust its log mask temporarily to LOG_DEBUG while dealing with this job.

Host to use for the destination dataset

Use this as the SNI while connecting via TLS

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

Filesystem type

Name of the theme to use for the lightdm-slick-greeter.

The hash of the packaged Helm chart

Whether to enable Go Ethereum WebSocket API.

An application timeout on receiving data from the TCP socket.

An application timeout on receiving data from the TCP socket.

List of IPs of relays that this node should allow traffic from.

Extra arguments to pass to the podman build command.

Indicates the priority over identical Subnets owned by different nodes

Remote or local repository to back up to.

Port to listen on

Listen address.

Environment files for this instance

The full path to a file containing the password from upsd.users for accessing this UPS

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Whether to enable HTTP 2

Refer to xrandr(1) for the documentation of the transform matrix.

The amount of debugging information to add to the log. 0 means little logging while 5 is the most logging. man tincd for more details.

How long in advance to publish new keys

How long in advance to publish new keys

UUID of the stratis pool that the fs is located in

This is only relevant if you are using stratis.

Each attribute in this set specifies an option in the [Tap] section of the unit

Each attribute in this set specifies an option in the [Tun] section of the unit

This optional key is used to control whether your job is launched once at the time the job is loaded

TLS key to use instead of the hardcoded on in case of HTTPS connections

Public URL of the API address of the reverse proxy/tls terminator

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Hostname alias(es).

Username for this DDNS provider.

The preferred method to use when switching from an old to a new version of this service.

This optional key specifies what nice(3) value should be applied to the daemon.

Whether to use SSL to connect to the IRC server.

Whether to enable HTTPS and reject plain HTTP connections

Extra arguments to pass to the podman image pull command.