Nginx configuration can be done by adapting services.nginx.virtualHosts.<name>

Whether to use nginx or caddy for virtual host management

Whether to enable nominatim

Whether to enable roundcube

Whether to use nginx or caddy for virtual host management

Whether to use nginx or caddy for virtual host management

Whether to use apache2 or nginx for virtual host management

Nginx configuration can be done by adapting services.nginx.virtualHosts.<name>

Whether to enable postfixadmin

The webserver used for the Sympa web interface

Whether to enable the HTTP/3 protocol

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Whether to enable the HTTP/3 protocol

Whether to enable the HTTP/3 protocol

Whether to enable the HTTP/3 protocol

Whether to enable the HTTP/3 protocol

Whether to enable the HTTP/3 protocol

Whether to enable the HTTP/3 protocol

Whether to enable the HTTP/3 protocol

Whether to enable the HTTP/3 protocol

Whether to enable the HTTP/3 protocol

Whether to enable the HTTP/3 protocol

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Whether to enable the HTTP/3 protocol

Whether to enable the HTTP/3 protocol

Whether to enable the HTTP/3 protocol

Whether to enable the HTTP/3 protocol

Whether to enable the HTTP/3 protocol

Whether to enable the HTTP/3 protocol

Whether to enable the HTTP/3 protocol

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Whether to enable the HTTP/3 protocol

Whether to enable the HTTP/3 protocol

Whether to enable the HTTP/3 protocol

Whether to enable the HTTP/3 protocol

Whether to enable the HTTP/3 protocol

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Whether to enable the HTTP/3 protocol

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Whether to enable the HTTP/3 protocol

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Whether to listen for and reject all HTTPS connections to this vhost

Whether to enable kTLS support

The path of the web root directory.

Whether to enable the QUIC transport protocol

Whether to enable HTTPS in addition to plain HTTP

Whether to enable HTTPS and reject plain HTTP connections

Whether to enable the HTTP/2 protocol

Directory for the ACME challenge, which is public

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

Name of this virtual host

Basic Auth protection for a vhost

A host of an existing Let's Encrypt certificate to use

Listen addresses and ports for this virtual host

Enable SSL.

Listen address.

Port number to listen on

Whether to ask Let's Encrypt to sign a certificate for this vhost

Basic Auth password file for a vhost

Makes this vhost the default.

These lines go to the end of the vhost verbatim.

Root directory for requests.

Adds index directive.

Alias directory for requests.

HTTP status used by globalRedirect and forceSSL

Additional names of virtual hosts served by this virtual host configuration.

Host which to proxy requests to if ACME challenge is not found

Adds try_files directive.

Declarative location config

Create an individual listening socket

Adds a return directive, for e.g. redirections.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Basic Auth protection for a vhost

If set, all requests for this host are redirected (defaults to 301, configurable with redirectCode) to the given hostname.

Basic Auth password file for a vhost

These lines go to the end of the location verbatim.

Enable PROXY protocol.

Listen addresses for this virtual host

Order of this location block in relation to the others in the vhost

FastCGI parameters to override

Path to server SSL certificate.

Path to server SSL certificate key.

name of the virtualhost

Extra parameters of this listen directive.

Whether to enable nginx virtual host management

Whether to support proxying websocket connections with HTTP/1.1.

Path to root SSL certificate for stapling and client certificates.

Whether to enable HTTPS in addition to plain HTTP

Whether to enable HTTPS and reject plain HTTP connections

Canonical hostname for the server.

Canonical hostname for the server.

Whether to enable HTTP 2

Directory for the acme challenge which is PUBLIC, don't put certs or keys in here

Whether to add a separate nginx server block that permanently redirects (301) all plain HTTP traffic to HTTPS

Path to the key file.

Paths to SSL files

E-mail address of the server administrator.

A host of an existing Let's Encrypt certificate to use

A host of an existing Let's Encrypt certificate to use

Listen addresses and ports for this virtual host.

IP to listen on. 0.0.0.0 for IPv4 only, * for all.

Path to the certificate file.

Whether to listen for and reject all HTTPS connections to this vhost

Whether to enable SSL (https) support.

Log format for Apache's log files

Configuration for HTTP request logging (also known as access logs)

Port to listen on

Path to server SSL certificate key.

This option provides a simple way to serve static directories.

Enable recommended uwsgi settings.

Enable recommended proxy settings.

Whether to ask Let's Encrypt to sign a certificate for this vhost

Domain name

This option provides a simple way to serve individual, static files.

Path to server SSL certificate.

Whether to enable serving ~/public_html as /~«username».

Additional lines of configuration appended to this virtual host in the automatically generated Caddyfile.

These lines go to httpd.conf verbatim

List of emails to allow access to this vhost, or null to allow all.

List of groups to allow access to this vhost, or null to allow all.

Path to server SSL chain file.

Adds DirectoryIndex directive

Alias directory for requests

Whether to enable the virtual host

VirtualHost to serve cgit on, defaults to the attribute name.

The path of Apache's document root directory

Additional virtual host specific configuration

Additional names of virtual hosts served by this virtual host configuration.

Specification of pages to be ignored by web crawlers

Additional names of virtual hosts served by this virtual host configuration.

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Declarative location config

Extra SSL configuration options.

If set, all requests for this host are redirected permanently to the given URL.

These lines go to the end of the location verbatim.

Order of this location block in relation to the others in the vhost

A list of host interfaces to bind to for this virtual host.

Listen addresses for this virtual host

List consisting of a virtual host name and a list of web applications to deploy on each virtual host

Whether to listen for and reject all HTTPS connections to this vhost

List of email domains to allow access to this vhost, or null to allow all.

Whether to enable nginx virtual host that will serve the javascript application and act as a proxy for the XMPP server

If you do not enable one of the rpc or httprpc plugins you need to expose an RPC mount through scgi using this option

Root directory for requests.

Alias directory for requests.

Adds index directive.

Adds try_files directive.

Adds a return directive, for e.g. redirections.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Basic Auth protection for a vhost

Basic Auth password file for a vhost

Domain to use for the virtual host

Domain to use for the virtual host

These lines go to the end of the location verbatim.

A list of host names and/or IP numbers used for accessing the host's ssh service

Whether to listen for and reject all HTTPS connections to this vhost

Order of this location block in relation to the others in the vhost

Root directory for requests.

FastCGI parameters to override

Adds index directive.

Alias directory for requests.

The public key data for the host

Adds try_files directive.

Adds a return directive, for e.g. redirections.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Basic Auth protection for a vhost

A list of additional host names and/or IP numbers used for accessing the host's ssh service

Basic Auth password file for a vhost

The path to the public key file for the host

These lines go to the end of the location verbatim.

Whether to support proxying websocket connections with HTTP/1.1.

Order of this location block in relation to the others in the vhost

FastCGI parameters to override

Name of this virtual host

The set of system-wide known SSH hosts

Whether to listen for and reject all HTTPS connections to this vhost

Whether to listen for and reject all HTTPS connections to this vhost

Whether to listen for and reject all HTTPS connections to this vhost

Add a custom host-to-IP mapping.

Add a custom host-to-IP mapping.

This public key is an SSH certificate authority, rather than an individual host's key.

Whether to listen for and reject all HTTPS connections to this vhost

A list of host names and/or IP numbers used for accessing the host's ssh service

Whether to support proxying websocket connections with HTTP/1.1.

Whether to listen for and reject all HTTPS connections to this vhost

Whether to listen for and reject all HTTPS connections to this vhost

Whether to listen for and reject all HTTPS connections to this vhost

Whether to listen for and reject all HTTPS connections to this vhost

Whether to listen for and reject all HTTPS connections to this vhost

Enable recommended uwsgi settings.

Enable recommended proxy settings.

Set maximum cache size

Set name to shared memory zone.

Apache configuration can be done by adapting services.httpd.virtualHosts.

Location to serve cgit under.

The public key data for the host

The public key data for the host

Name of the UKI

Whether to enable HTTPS in addition to plain HTTP

Whether to enable HTTPS and reject plain HTTP connections

Canonical hostname for the server.

Whether to enable this proxy cache path entry.

Directory for the acme challenge which is PUBLIC, don't put certs or keys in here

Whether to enable HTTP 2

Set size to shared memory zone.

A list of additional host names and/or IP numbers used for accessing the host's ssh service

A list of additional host names and/or IP numbers used for accessing the host's ssh service

Whether to listen for and reject all HTTPS connections to this vhost

Name of this virtual host

The family name of the font within the package.

This configuration file only applies to the hosts listed with this key

Nginx first writes files that are destined for the cache to a temporary storage area, and the use_temp_path=off directive instructs Nginx to write them to the same directories where they will be cached

E-mail address of the server administrator.

Enable recommended uwsgi settings.

Enable recommended proxy settings.

The path to the public key file for the host

The levels parameter defines structure of subdirectories in cache: from 1 to 3, each level accepts values 1 or 2

Whether to listen for and reject all HTTPS connections to this vhost

Whether to listen for and reject all HTTPS connections to this vhost

Whether to listen for and reject all HTTPS connections to this vhost

Whether to listen for and reject all HTTPS connections to this vhost

Whether to listen for and reject all HTTPS connections to this vhost

Whether to listen for and reject all HTTPS connections to this vhost

Whether to listen for and reject all HTTPS connections to this vhost

IP to listen on. 0.0.0.0 for IPv4 only, * for all.

Host which to proxy requests to if ACME challenge is not found

Whether to add a separate nginx server block that permanently redirects (301) all plain HTTP traffic to HTTPS

The path to the public key file for the host

Listen addresses and ports for this virtual host.

Adds DirectoryIndex directive

Alias directory for requests

Whether to enable SSL (https) support.

Path to host the API on and forward to the daemon's api port

Public domain of the API address of the reverse proxy/tls terminator.

Indicates that ssh(1) should hash host names and addresses when they are added to the known hosts file.

Log format for Apache's log files

A host of an existing Let's Encrypt certificate to use

This option provides a simple way to serve individual, static files.

This configuration file only applies to hosts NOT listed with this key

Hostnames of the XMPP servers to connect to.

Port to listen on

Path to server SSL certificate key.

This option provides a simple way to serve static directories.

Marks the server as a backup server

Root directory for requests.

Root directory for requests.

Root directory for requests.

Whether to ask Let's Encrypt to sign a certificate for this vhost

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Whether to listen for and reject all HTTPS connections to this vhost

Whether to configure nginx as a reverse proxy for Invidious

Path to server SSL certificate.

Root directory for requests.

Whether to enable serving ~/public_html as /~«username».

Whether to listen for and reject all HTTPS connections to this vhost

Name of this virtual host

These lines go to httpd.conf verbatim

The name of this nylon instance.

Specifies one or more files to use for the user host key database, separated by whitespace

Adds index directive.

Alias directory for requests.

Alias directory for requests.

Alias directory for requests.

Adds index directive.

Adds index directive.

Name of the zone.

Path to server SSL chain file.

Root directory for requests.

Root directory for requests.

Root directory for requests.

Root directory for requests.

Root directory for requests.

Alias directory for requests.

Adds index directive.

The path of the web root directory.

Name of the PPP peer.

Whether to configure nginx for fedimintd

These lines go to the end of the location verbatim.

Overrides to the nginx vhost section for api

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

Whether to enable the QUIC transport protocol

Adds try_files directive.

Cached data that has not been accessed for the time specified by the inactive parameter is removed from the cache, regardless of its freshness.

Whether to enable kTLS support

Whether to listen for and reject all HTTPS connections to this vhost

Whether to enable HTTPS in addition to plain HTTP

The name of the theme within the package.

Apache configuration can be done by adapting services.httpd.virtualHosts.

Adds index directive.

Adds index directive.

Alias directory for requests.

Adds index directive.

Alias directory for requests.

Alias directory for requests.

Alias directory for requests.

Adds index directive.

Alias directory for requests.

Adds index directive.

Whether to enable HTTPS in addition to plain HTTP

Adds a return directive, for e.g. redirections.

Adds a return directive, for e.g. redirections.

Adds a return directive, for e.g. redirections.

Root directory for requests.

Whether to enable HTTPS and reject plain HTTP connections

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds a return directive, for e.g. redirections.

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Order of this location block in relation to the others in the vhost

Whether to enable HTTPS and reject plain HTTP connections

Canonical hostname for the server.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

Directory for the ACME challenge, which is public

Basic Auth protection for a vhost

The name of the user account

The name of the user account

This public key is an SSH certificate authority, rather than an individual host's key.

This public key is an SSH certificate authority, rather than an individual host's key.

Adds DirectoryIndex directive

Alias directory for requests

Alias directory for requests.

Adds index directive.

Directory for the acme challenge which is PUBLIC, don't put certs or keys in here

The path of Apache's document root directory

Additional names of virtual hosts served by this virtual host configuration.

Specification of pages to be ignored by web crawlers

Whether to enable HTTP 2

Path to host the API on and forward to the daemon's api port

Path to host the built-in UI on and forward to the daemon's api port

Whether to enable the HTTP/2 protocol

Adds try_files directive.

Adds a return directive, for e.g. redirections.

Adds a return directive, for e.g. redirections.

Adds a return directive, for e.g. redirections.

Adds a return directive, for e.g. redirections.

Adds a return directive, for e.g. redirections.

Defines the address and other parameters of the upstream servers

Root directory for requests.

Alias directory for requests

Adds DirectoryIndex directive

Adds DirectoryIndex directive

Alias directory for requests

E-mail address of the server administrator.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Declarative location config

Etcd unique node name.

These lines go to the end of the upstream verbatim.

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

This configuration file only applies to the hosts listed with this key

IP to listen on. 0.0.0.0 for IPv4 only, * for all.

This configuration file only applies to the hosts listed with this key

Adds a return directive, for e.g. redirections.

Enable SSL.

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

Whether to add a separate nginx server block that permanently redirects (301) all plain HTTP traffic to HTTPS

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

This option provides a simple way to serve individual, static files.

Listen addresses and ports for this virtual host.

Whether to enable SSL (https) support.

The family name of the font within the package.

The family name of the font within the package.

The family name of the font within the package.

Basic Auth protection for a vhost

Listen addresses and ports for this virtual host

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

Basic Auth password file for a vhost

Log format for Apache's log files

Adds index directive.

Alias directory for requests.

A host of an existing Let's Encrypt certificate to use

Host which to proxy requests to if ACME challenge is not found

A host of an existing Let's Encrypt certificate to use

Root directory for requests.

Root directory for requests.

Root directory for requests.

Root directory for requests.

Root directory for requests.

Root directory for requests.

Root directory for requests.

Listen address.

These lines go to the end of the location verbatim.

Port to listen on

Path to server SSL certificate key.

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Adds DirectoryIndex directive

Alias directory for requests

If set, all requests for this host are redirected permanently to the given URL.

This option provides a simple way to serve static directories.

Makes this vhost the default.

This configuration file only applies to hosts NOT listed with this key

This configuration file only applies to hosts NOT listed with this key

Adds try_files directive.

Port number to listen on

Whether to ask Let's Encrypt to sign a certificate for this vhost

Whether to ask Let's Encrypt to sign a certificate for this vhost

Path to server SSL certificate.

These lines go to the end of the location verbatim.

Whether to enable serving ~/public_html as /~«username».

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Adds index directive.

Alias directory for requests.

Alias directory for requests.

Alias directory for requests.

Adds index directive.

Adds index directive.

Alias directory for requests.

Adds index directive.

Alias directory for requests.

Adds index directive.

Adds index directive.

Adds index directive.

Alias directory for requests.

Alias directory for requests.

Name i2pd appears in UPnP forwardings list.

Basic Auth password file for a vhost

These lines go to the end of the location verbatim.

This configuration file only applies to the hosts listed with this key

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the vhost verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

Adds a return directive, for e.g. redirections.

These lines go to httpd.conf verbatim

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

The name of the group

The group's name

Basic Auth protection for a vhost

Name for the device

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

Root directory for requests.

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

Path to server SSL chain file.

Order of this location block in relation to the others in the vhost

The endpoint name.

Order of this location block in relation to the others in the vhost

This configuration file only applies to hosts NOT listed with this key

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

Root directory for requests.

The endpoint name.

The endpoint name.

Adds a return directive, for e.g. redirections.

Adds a return directive, for e.g. redirections.

Adds a return directive, for e.g. redirections.

Adds a return directive, for e.g. redirections.

Adds a return directive, for e.g. redirections.

Adds a return directive, for e.g. redirections.

Adds a return directive, for e.g. redirections.

Order of this location block in relation to the others in the vhost

The endpoint name.

Listen addresses for this virtual host

Adds index directive.

Alias directory for requests.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Order of this location block in relation to the others in the vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

Basic Auth protection for a vhost

Order of this location block in relation to the others in the vhost

Basic Auth protection for a vhost

Order of this location block in relation to the others in the vhost

Basic Auth protection for a vhost

Basic Auth password file for a vhost

FastCGI parameters to override

FastCGI parameters to override

FastCGI parameters to override

Host which to proxy requests to if ACME challenge is not found

Adds try_files directive.

Alias directory for requests.

Adds index directive.

The name of this systemd unit, including its extension

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

The name of the theme within the package.

The name of the theme within the package.

The name of the theme within the package.

The name of the icon theme within the package.

The name of the system used in the system.build.toplevel derivation

Username for JSON-RPC connections.

FastCGI parameters to override

The name of this systemd unit, including its extension

Root directory for requests.

The endpoint name.

The endpoint name.

FastCGI parameters to override

Name of the redis server

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

Name of the PAM service.

The path of Apache's document root directory

Specification of pages to be ignored by web crawlers

Additional names of virtual hosts served by this virtual host configuration.

Adds try_files directive.

Adds a return directive, for e.g. redirections.

Additional names of virtual hosts served by this virtual host configuration.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Mail "from" name.

Declarative location config

Basic Auth protection for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

FastCGI parameters to override

FastCGI parameters to override

FastCGI parameters to override

FastCGI parameters to override

FastCGI parameters to override

Declarative location config

Alias directory for requests.

Adds index directive.

Adds a return directive, for e.g. redirections.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

HTTP status used by globalRedirect and forceSSL

The name of the user account

Adds DirectoryIndex directive

Alias directory for requests

Order of this location block in relation to the others in the vhost

Create an individual listening socket

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Order of this location block in relation to the others in the vhost

The name of the device to add the address to.

Basic Auth protection for a vhost

Each address may be tagged with a label string

Whether to listen for and reject all HTTPS connections to this vhost

Adds try_files directive.

Name of the worker

Specifies the Name of the Storage daemon.

If set, all requests for this host are redirected permanently to the given URL.

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Adds a return directive, for e.g. redirections.

Basic Auth password file for a vhost

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

If set, all requests for this host are redirected (defaults to 301, configurable with redirectCode) to the given hostname.

These lines go to the end of the location verbatim.

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

Basic Auth protection for a vhost

Name of modem device, will be searched for in /dev.

The name of the node which is used as an identifier when communicating with the remote nodes in the mesh

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

FastCGI parameters to override

Basic Auth password file for a vhost

Alias directory for requests

Adds DirectoryIndex directive

The set of system-wide known SSH hosts

The set of system-wide known SSH hosts

The client name that must be used by the Director when connecting

These lines go to the end of the location verbatim.

Adds DirectoryIndex directive

Alias directory for requests

Declarative vhost config

The director name used by the system administrator

Mail "reply-to" name.

The theme name.

Whether to support proxying websocket connections with HTTP/1.1.

These lines go to the end of the location verbatim.

Listen addresses for this virtual host

The name of the group

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Order of this location block in relation to the others in the vhost

The name of the theme within the package.

The broadcast address on the interface.

Basic Auth password file for a vhost

FastCGI parameters to override

FastCGI parameters to override

FastCGI parameters to override

FastCGI parameters to override

FastCGI parameters to override

FastCGI parameters to override

FastCGI parameters to override

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Database name.

Enable PROXY protocol.

These lines go to the end of the location verbatim.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

The endpoint name.

The name of the Helm chart

Order of this location block in relation to the others in the vhost

Profile name

The profile's name.

Whether to support proxying websocket connections with HTTP/1.1.

Name of the redis server

Listen addresses for this virtual host

IP address, optionally with a netmask: IPADDR[/MASK]

A system user name for this client instance.

A system user name for this client instance.

The name of the host

Order of this location block in relation to the others in the vhost

Name of this virtual host

Name of this virtual host

Name of this virtual host

The name of the icon theme within the package.

The name of the icon theme within the package.

The name of the icon theme within the package.

The scope of the area where this address is valid.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

FastCGI parameters to override

Name of the nginx virtualhost to use and setup

Order of this location block in relation to the others in the vhost

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

The unique agent name.

Name of this virtual host

Database name.

FastCGI parameters to override

Agent name, usually same as the hostname

Agent name, usually the same as the hostname.

Name of the nginx virtualhost to use and setup

The endpoint name.

Name of the runner to configure

Name of the runner to configure

Path to server SSL certificate.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Root directory for requests.

Arbitrary unique number 1..255

Font name, as used by fontconfig.

Whether to support proxying websocket connections with HTTP/1.1.

Path to server SSL certificate key.

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

FastCGI parameters to override

The database name

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Adds index directive.

Alias directory for requests.

The name to return in service discovery responses for the MUC service itself

Name of this virtual host

Name of this virtual host

Name of this virtual host

Name of this virtual host

Name of this virtual host

Adds try_files directive.

Keyboard name.

The name of the service to run

Unique identifier of the account

Akkoma frontend name.

Name of the existing database.

The name of the cursor theme within the package.

Adds a return directive, for e.g. redirections.

Extra parameters of this listen directive.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Name of the image

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

The endpoint name.

Basic Auth protection for a vhost

The name of the Helm chart

Name to display

Name of the machine when registering it at the central or local api.

The name of an existing user account under which the rsync process should run.

Name of the rule.

Enable recommended uwsgi settings.

Enable recommended proxy settings.

The name of the instance.

Whether to support proxying websocket connections with HTTP/1.1.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Basic Auth password file for a vhost

These lines go to the end of the location verbatim.

Name is referenced in logs

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

Whether to support proxying websocket connections with HTTP/1.1.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Database name.

Database name.

TLS options for virtual host

The name of the service to run

Path to root SSL certificate for stapling and client certificates.

The name of this gateway as shown in firezone

The name of the cookie that the oauth_proxy creates.

Name of the nginx virtualhost to use and setup

Name of the nginx virtual host to use and setup

Database name.

The domain name under which to set up the virtual host.

Name of the user to ensure.

This primary server will notify all given secondary servers about zone changes

The logical name of the Galera cluster

Order of this location block in relation to the others in the vhost

Database name, only used when the databse is created locally.

APIs to enable over WebSocket

Whether to support proxying websocket connections with HTTP/1.1.

Name of the redis server

The name of the agent as seen in the buildkite dashboard.

The name of the agent as seen in the buildkite dashboard.

The name of an existing user group under which the rsync process should run.

Override the default TLS port for this virtual host.

Server name to be used for this virtual host

Database name

Name of the service.

The name of the server

Port number of Go Ethereum HTTP API.

User to run the cgit service as.

Name of the nginx or caddy virtualhost to use and setup

Specific name of the application.

Name of this virtual host

ACME options for virtual host.

HTTP options for virtual host

Enable recommended proxy settings.

Enable recommended uwsgi settings.

Enable recommended proxy settings.

Enable recommended proxy settings.

Enable recommended uwsgi settings.

Enable recommended uwsgi settings.

FastCGI parameters to override

Name is used as a suffix for the service name, user, and group

Enable recommended uwsgi settings.

Enable recommended proxy settings.

The endpoint name.

Database name.

Database name.

Database name.

Name of the beat

Name of the wiki.

Name of the server.

The name of the immich database.

Name of this iscsi initiator

Name associated with the build

Override the default HTTP port for this virtual host.

The name of the database to use for Wakapi.

Name of ICMP pinging job.

Port number Go Ethereum will be listening on, both TCP and UDP.

The name of the cursor theme within the package.

The name of the cursor theme within the package.

The name of the cursor theme within the package.

The advertised name for zeroconf discovery.

Enable recommended uwsgi settings.

Enable recommended uwsgi settings.

Enable recommended uwsgi settings.

Enable recommended proxy settings.

Enable recommended proxy settings.

Enable recommended proxy settings.

Enable recommended proxy settings.

Enable recommended uwsgi settings.

Enable recommended proxy settings.

Enable recommended uwsgi settings.

When set to something distinct to null NSD is able to collect statistics per zone

Database name.

Enables HTTP/3 over QUIC on the UDP port for TLS

Name of this virtual host

Name of this virtual host

Name of this virtual host

Name of this virtual host

Name of this virtual host

Name of this virtual host

Name of this virtual host

Set the host address for this virtual host

The type of the device.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Database name.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Apache configuration can be done by adapting services.httpd.virtualHosts.<name>

Configures name servers used to resolve names of upstream servers into addresses

The domain name under which to set up the virtual host.

Directory for the ACME challenge, which is public

The name of this client as shown in firezone

The actual zone data

Enable recommended uwsgi settings.

Enable recommended proxy settings.

Name of the action.

Server name.

The name of this authentication provider

Group to run the cgit service as.

Path to the file which contains the actual base64 encoded key

Rename nodes to different name.

What port to listen for client requests, default is 1080.

Database name.

Database name.

Zone file resource records contain columns of data, separated by whitespace, that define the record.

The name of the host in the network as well as the configuration for that host

cgit repository settings, see cgitrc(5)

PostgreSQL database name

Bind port for ‹name› endpoint.

A path which will be scanned for repositories.

The name of this gateway as shown in firezone

Whether to support proxying websocket connections with HTTP/1.1.

Enable recommended proxy settings.

Enable recommended uwsgi settings.

Enable recommended proxy settings.

Enable recommended uwsgi settings.

Enable recommended proxy settings.

Enable recommended uwsgi settings.

Enable recommended proxy settings.

Enable recommended uwsgi settings.

Enable recommended proxy settings.

Enable recommended uwsgi settings.

Enable recommended uwsgi settings.

Enable recommended proxy settings.

Enable recommended uwsgi settings.

Enable recommended proxy settings.

The name of the mailbox.

Name of this virtual host

This is the target address is to match against

Name of the existing database (has no effect if type is "sqlite").

Name of the game as it will appear in the game listing.

Bind port for ‹name› endpoint.

Adapter name that is used in the radicle-ci-broker configuration

The name of this actor

The name of this group

Database name.

The port on which the tub will listen

The port on which the Web server will listen

The name of the device.

The name of the device.

Name of this virtual host

Name of the caddy/nginx virtualhost to use and setup.

Enable recommended proxy settings.

Enable recommended uwsgi settings.

Text of the file

Name of the nginx virtualhost to use and setup

Name of the nginx virtualhost to use and setup

The type of interface to create

Name of the nginx virtual host to use and setup

Name of the control, as it appears in alsamixer

Whether to enable Go Ethereum HTTP API.

Whether to enable DNSSEC.

Enable recommended proxy settings.

Enable recommended uwsgi settings.

The nickname of this Tahoe node.

Format: [AXFR|UDP] <ip-address> <key-name | NOKEY>

Whether to enable cgit.

Interface name

Blockchain garbage collection mode.

Whether to enable hub instance.

Name of the model to download and use for speech synthesis

The name of this relay group

Enable recommended proxy settings.

Enable recommended uwsgi settings.

Whether to enable Go Ethereum Node.

Additional arguments passed to Go Ethereum.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

The serial port to which your UPS is connected. /dev/ttyS0 is usually the first port on Linux boxes, for example.

The name identifying the runner instance towards the Gitea/Forgejo instance.

add will additionally listen for TLS connections. only will disable TLS connections. force will redirect non-TLS traffic to the TLS connection.

The name of the dawarich database.

MySQL database name.

Database name for FreshRSS.

Interface name

Name of the local AutoSSH session

Name of the local AutoSSH session

Name of this virtual host

The user's UID.

Name of the satellite.

The cursor name within the package.

The device to update.

The family name of the font within the package.

A name for the drive

An existing Let’s Encrypt certificate to use for this virtual host

Whether to enable this PPP peer.

Port to bind the TTS server to.

User account under which this pool runs.

Listed primary servers are allowed to notify this secondary server

Name of the modifier.

Master=false means slave server

Addresses who may request zone transfers.

Limit retry time for secondary zones.

Whether to enable this RAUC slot.

Username

This option provides a simple way to serve individual, static files.

This option provides a simple way to serve individual, static files.

The user's primary group.

static: Immediately answer any Neighbor Solicitation Messages (if they match the IP rule). iface: Forward the Neighbor Solicitation Message through the specified interface and only respond if a matching Neighbor Advertisement Message is received. auto: Same as iface, but instead of manually specifying the outgoing interface, check for a matching route in /proc/net/ipv6_route.

Whether to ask Let’s Encrypt to sign a certificate for this virtual host

Environment variables used for this PHP-FPM pool.

Whether to enable ‹name›.

Whether to enable TLS support.

The language to use for personal names.

The name of services's user

The port on which the SFTP server will listen

pppd configuration for this peer, see the pppd(8) man page.

Text of the file

Whether to enable ‹name›.

Whether this interface is virtual and should be created by tunctl

The name of this gateway group

Name of modem configuration file, will be searched for in config in the spooling area directory.

The account name

The name of the cask to install.

The name of the formula to install.

Tunnel type.

Database name.

The name of this server.

The name of the watcher

Port number of Go Ethereum metrics service.

Listen address of Go Ethereum HTTP API.

Style to use for Qt5/Qt6 applications

SSID to be used in IEEE 802.11 management frames.

The name of this resource

Pair of roots to synchronise.

Enables nylon as a running service upon activation.

Port number of Go Ethereum Auth RPC API.

Whether to offload computation onto a CUDA compatible GPU.

FQIN of referenced Image when source is a file or directory archive.

Profile name

Keyset used for tunnel identity.

Group account under which this pool runs.

The ID of your hook

This option provides a simple way to serve individual, static files.

Database name.

Host which to proxy requests to if ACME challenge is not found

Host which to proxy requests to if ACME challenge is not found

Host which to proxy requests to if ACME challenge is not found

Node name

Tunnel type.

Text of the file.

The unique name for THIS channel in THIS group

Enable recommended proxy settings.

Enable recommended uwsgi settings.

Limit retry time for secondary zones

Database name.

Database name.

The cgit package to use.

The geth package to use.

Uhub plugin configuration.

Keyset used for tunnel identity.

Discourse database name.

Host which to proxy requests to if ACME challenge is not found

Controls how long a valid or invalid entry remains in the cache, in milliseconds.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Username used to connect to registry.

Name of the beat

Shell commands executed to stop the service.

Database name to use when connecting to an external or manually provisioned database; has no effect when a local database is automatically provisioned

Unique identifier of the account

Source directories.

DNS full-qualified domain name of a database server

DNS full-qualified domain name of a database server

Name of directory from which to import ZFS device, this is passed to zpool import as the value of the -d option

The account UID

Service port

Path to a Containerfile which contains instructions to build the image.

Members of this group can access the control socket for this interface.

IP of the Redis master

The user's home directory.

Packages added to the service's PATH environment variable

The location of the Drupal files directory.

Whether to enable SFTP service.

Name of the symlink (relative to /var/lib/rancher/k3s/server/manifests)

The name of this group for this account

The name of this systemd unit, including its extension

Profile name.

The name of the network interface to match against.

Enable unlocking and mounting of encrypted ZFS home dataset at login.

The location of the Drupal site state directory.

Start the specified units when this unit is started.

Whether the SSID is to be interpreted using UTF-8 encoding.

Bind address for ‹name› endpoint.

The network to connect to

In case of a virtual device, the user who owns it. null will not set owner, allowing access to any user.

Database name.

Proxy account name, without the possibility to include domain name ('at' sign is interpreted literally).

Path to world folder containing the dimension to render

List of servers for inclusion in stub and secondary zones.

The IP interface to bind to. null means "all interfaces".

The name of the first admin user.

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

List of address ranges allowed to query this zone

File or block device to export.

Interface to use when method is iface.

Contents of the PAM service file.

A system group name for this client instance.

A system group name for this client instance.

Specifies the number of retries for failed notifies

If the specified units are started at the same time as this unit, delay this unit until they have started.

Key / certificate pairs for the virtual host.

Key policy for zone signing keys

Key policy for key signing keys

Bind address for ‹name› endpoint.

The specified name-string gives the system file name of the storage device managed by this storage daemon

Which local IP to bind the UDP socket to.

When to run the job.

Image to pull.

Host which to proxy requests to if ACME challenge is not found

Host which to proxy requests to if ACME challenge is not found

Host which to proxy requests to if ACME challenge is not found

Host which to proxy requests to if ACME challenge is not found

Host which to proxy requests to if ACME challenge is not found

Database name.

The name of the Grafana database.

When clone_target is unspecified, this is the name of a formula repository to tap from GitHub using HTTPS

Override the default port on which to listen for JSON-RPC connections.

Shell commands executed after the service's main process has exited.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

The address on which to accept FastCGI requests.

These lines go to the end of cgitrc verbatim.

Shell commands executed to stop the service.

Key size in bits

Key size in bits

The name of this client as shown in firezone

Backup type as described in: https://pgbackrest.org/command.html#command-backup/category-command/option-type

Path of certificates (*.{crt,cert,key}) used to connect to registry.

Units that want (i.e. depend on) this unit

The TCP port to accept connections

Whether to enable Drupal web application.

Extra arguments to pass to the server commandline.

Whether to enable Coqui TTS server.

Server name to verify the hostname on the returned gRPC certificates

Location of hardware kiss tnc for this interface.

port of the Redis master

Specifies the MAC addresses to deny if macAcl is set to "deny" or "radius"

A system group name for this client instance.

A system group name for this client instance.

The friendly name you give to the network device

The friendly name you give to the network device

This library's name.

The kimai package to use.

The tahoelafs package to use.

Path of the authentication file.

Packages added to the service's PATH environment variable

Enable logging, default is no logging.

Verify peer certificate

Verify peer certificate

Run the rsync process with an inhibition lock taken; see systemd-inhibit(1) for a list of possible operations.

Extra zone config to be appended at the end of the zone section.

Shell commands executed before the service's main process is started.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Levels (minimum value for logged events): 0 = verbose debugging 1 = debugging 2 = informational messages 3 = notification 4 = warning

Start the specified units when this unit is started.

The group's GID.

List of virtual mailboxes using Notmuch queries

If set, root doesn't need to authenticate (e.g. for the useradd service).

Password HMAC-SHA-256 for JSON-RPC connections

Text of the file

Text of the file

DNS full-qualified domain name of a database server

Name of Google storage bucket

Text of the file.

Vertical scaling factor/pixels.

Horizontal scaling factor/pixels.

Whether the target path should be unconditionally replaced by the managed file source

Path of the authentication file used to connect to registry.

Allow these IPs and TSIG to transfer zones, addr TSIG|NOKEY|BLOCKED address range 192.0.2.0/24, 1.2.3.4&255.255.0.0, 3.0.2.20-3.0.2.40

Name of the tun device

Whether to enable helper service.

As which user the backup should run.

Output DPI configuration.

Apache configuration can be done by adapting services.httpd.virtualHosts.<name>

Options for the Kimai PHP pool

GVPE node name

If the specified units are started at the same time as this unit, delay this unit until they have started.

The serial port speed of this interface.

List of virtual hostnames from which to accept requests.

IP address of server running hans

The location for users to install Drupal themes.

Limit refresh time for secondary zones.

Limit on the number of simultaneous connections allowed.

Apache configuration can be done by adapting services.httpd.virtualHosts.<name>

Path to the unix socket file on which to accept FastCGI requests.

Profile name.

Database name.

Database name.

Name of database.

Network interface to bind to.

Name of the voice model to use

Specifies the MAC addresses to allow if macAcl is set to "allow" or "radius"

Path to target file relative to HOME.

Name of the remote read config, which if specified must be unique among remote read configs

Whether to enable Go Ethereum prometheus metrics.

RPC user information for JSON-RPC connections.

IP and port to which this redis instance acts as a slave.

Shell commands executed as the service's main process.

The user ID owning the volume inside the container.

Name of the PostgreSQL database.

The name of the Linkwarden database.

Specify the log file name

The name of the database to create.

Name of the font to use for regreet.

Output resolution.

Output framerate.

Local Mattermost database name.

Whether to enable Go Ethereum Auth RPC API.

Shell commands executed after the service's main process is started.

Shell commands executed when the service's main process is reloaded.

Filesystem type of Device. (used as -t in mount commands)

The furl for a Tahoe helper node

Guaranteed minimum hops for ‹name› tunnels.

Whether to show the message of the day.

Shell commands executed after the service's main process has exited.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Copy content of the image located at the mountpoint of the volume on first run.

Output video display controller.

If set, the OATH Toolkit will be used.

User account under which this instance of redis-server runs.

Reads all matching messages or whole-threads

Domain part of the web interface URL (no web interface for this domain if null)

Name of the MySQL database that holds EPGStation's data.

Name of the beat

The domain name to collect stats for.

The user's home directory mode in numeric format

Name of the homebridge UI platform

Specify the program to run to talk to this UPS. apcsmart, bestups, and sec are some examples.

Path of the source file.

Settings for this slot.

Address to which spiped should connect.

The labels to apply to the build.

Guaranteed minimum hops for ‹name› tunnels.

Protocol names to hide in summary tables (RE2 syntax),

Isolate traffic between stations (clients) and prevent them from communicating with each other.

The type of this worker

The user as which to run bitcoind.

Blockchain sync mode.

Maximum peers to connect to.

Automatically start this unit at the given date/time, which must be in the format described in systemd.time(7)

Name of the GNOME Shell theme.

The number of shares required to store a file.

The schedule in which data is persisted to disk, represented as a list of lists where the first element represent the amount of seconds and the second the number of changes

Specifies the BSSID for this BSS

The name of the plugin.

Whether this file should be generated

Notmuch query

Shell commands executed before the service's main process is started.

The user's primary group.

If set, the OTPW system will be used (if ~/.otpw exists).

The path to repo in local machine

Shell commands executed when the instance is starting.

Units that want (i.e. depend on) this unit

The number of distinct storage nodes required to store a file.

If set, keys listed in ~/.ssh/authorized_keys and ~/.eid/authorized_certificates can be used to log in with the associated PKCS#11 tokens.

This is a rule that the target address is to match against

Restricts number of messages/threads in the result.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Host which to proxy requests to if ACME challenge is not found

Whether users can log in with passwords defined in /etc/shadow.

Specify the server verbosity level, options: debug, verbose, notice, warning.

If set, the calling user's SSH agent is used to authenticate against the configured keys

Override the default port on which to listen for connections.

Name of the remote write config, which if specified must be unique among remote write configs

Maximum number of items to keep in slow log.

The drupal package to use.

Name of a file containing the spiped key

Database user.

Station MAC address -based authentication

The name of the host in the network as well as the configuration for that host

Replace any existing runner with the same name

Replace any existing runner with the same name

Public address for p2p connections from peers (if TCP is used)

Whether to start the build on boot

Whether to pull the image on boot

Output gamma configuration.

cgit configuration, see cgitrc(5)

Configuration of uhub

Name of the user to ensure.

Name of the user to ensure.

The path of a PEM encoded TLS private key

The path of a PEM encoded TLS private key

Database host address.

Database host port.

Address to bind on for UI connections

Environment variables to set for the kernel.

Enable logging to the system logger.

Whether to enable Redis server.

Number of worker instances to run

Path to the certificate authority certificate.

Keep this unit running as long as the listed units are running

URL of the accounts server.

Attrset to be transformed into YAML for host config

Path to key file

See torrc manual.

TCP Port to bind on for UI connections

Unique identifier of the contact account

Enable PAM mount (pam_mount) system to mount filesystems on user login.

The specified name-string names the type of media supported by this device, for example, DLT7000

Turns on or off the router flag for Neighbor Advertisement Messages.

The group ID owning the volume inside the container.

Disables scan for overlapping BSSs in HT40+/- mode

Authentication algorithm for this key.

A name for the drive

Whether this file locals should be generated

Specifies if TLS should be enabled

Specifies if TLS should be enabled

DNS server to use as an intermediate relay to the iodined server

Specifies the image the volume is based on when Driver is set to the image.

Specifies the frequency band to use, possible values are 2g for 2.4 GHz, 5g for 5 GHz, 6g for 6 GHz and 60g for 60 GHz.

Whether to enable this PAM service.

Path or reference to the host key.

Name of the homebridge

Public URL of the API address of the reverse proxy/tls terminator

Options for the Drupal PHP pool

Local secret key in hexadecimal form.

Shell commands executed as the service's main process.

Whether the target path should be unconditionally replaced by the managed file source

The data directory for bitcoind.

The repo of the Helm chart

Whether to enable storage service.

URI to bind the wyoming server to.

Limit refresh time for secondary zones

Name of the theme to use for regreet.

The group GID

Page or namespace to restrict

The location of the Drupal config sync directory.

Additional TLS/SSL-related configuration options

Settings that should be passed to rsync via long options

Event type.

Aliases of that unit.

Group account under which this instance of redis-server runs.

The packaged Helm chart

The hash of the packaged Helm chart

The external location that the node should listen on

Number of ElGamal/AES tags to send.

Remote public key in hexadecimal form.

Specifies a file containing the MAC addresses to deny if macAcl is set to "deny" or "radius"

Shell commands executed after the service's main process is started.

Shell commands executed when the service's main process is reloaded.

Location of bitcoind pid file.

This option provides a simple way to serve individual, static files.

A program name specifying a Postfix service/daemon process

Device identifiers, as shown by keyd(1).

If given, sets the SO_MARK option on the TCP socket.

If given, sets the SO_MARK option on the TCP socket.

Require HTTPS and verification of certificates when contacting registries.

Require HTTPS and verification of certificates when contacting registries.

The name of the plugin.

Username used in the machine image

The database name.

Name of the symlink (relative to /var/lib/rancher/rke2/server/manifests)

The type of log being collected.

Path to the accounts file.

TTL for dnssec records

If the specified units are started at the same time as this unit, delay them until this unit has started.

Port to bind on for p2p connections from peers (both TCP and UDP)

Address to bind on for p2p connections from peers (both TCP and UDP)

User name for RPC connections.

Name shown in the website title and on the front page.

Command and arguments to start the kernel.

TLS Options for the Director in this Configuration.

Bind address to be used for this server.

TLS Options for the Director in this Configuration.

Port the NetBird client listens on.

Port the NetBird client listens on.

Output scaling method.

Path to the directory storing the hooks

Path to the directory storing the hooks

Name of the tmux window;

Common name attribute of allowed peer certificates

Common name attribute of allowed peer certificates

The delay time (in microseconds) on failure.

If set, users listed in $XDG_CONFIG_HOME/Yubico/u2f_keys (or $HOME/.config/Yubico/u2f_keys if XDG variable is not set) are able to log in with the associated U2F key

The name of private PKCS #8 key file for this policy to be found in the baseDirectory, or the absolute path to the key file

The number of shares required to reconstitute a file.

The group as which to run bitcoind.

The location for users to install Drupal modules.

I2P nodes that are allowed to connect to this service.

Shell commands executed when the instance is shutting down.

URL where this inbox can be accessed over HTTP.

Number of ElGamal/AES tags to send.

Path to the SSH host public key.

Text of the file.

Name of this virtual host

Whether to enable the output.

Output rotate configuration.

HTTP status used by globalRedirect & forceSSL

Address to bind on for API connections relied by the reverse proxy/tls terminator.

Port to bind on for API connections relied by the reverse proxy/tls terminator.

The name of an explicit dtb to be loaded, relative to the dtb base

The znapzend backup plan to use for the source

The domain name under which to set up the virtual host.

Guaranteed minimum hops for ‹name› tunnels.

Listen address of Go Ethereum metrics service.

Options for PHP's php.ini file for this Drupal site.

Whether to operate in tun (IP) or tap (Ethernet) mode.

The database engine name

How frequently to change keys

How frequently to change keys

Whether to try to create home directories for users with $HOMEs pointing to nonexistent locations on session login.

Path to target file relative to xdg.dataHome.

Whether to enable proxy for this bucket

APIs to enable over WebSocket

Path to the host certificate.

When or how often the backup should run

If set, the pam_mysql module will be used to authenticate users against a MySQL/MariaDB database.

Extra lines to add to the tinc service configuration file

Name of the site.

Don't send the password immediately after login, but store for PAM session.

Automatically start this unit at the given date/time, which must be in the format described in systemd.time(7)

Structural Kimai's local.yaml configuration

Listen address of Go Ethereum Auth RPC API.

Whether to run the check command with the provided checkOpts options.

The PHP package to use for running this PHP-FPM pool.

Host which to proxy requests to if ACME challenge is not found

Host which to proxy requests to if ACME challenge is not found

Host which to proxy requests to if ACME challenge is not found

Host which to proxy requests to if ACME challenge is not found

Host which to proxy requests to if ACME challenge is not found

Host which to proxy requests to if ACME challenge is not found

Host which to proxy requests to if ACME challenge is not found

UUID(s) of VGPU device

Access Control Lists: see https://www.dokuwiki.org/acl Mutually exclusive with services.dokuwiki.aclFile Set this to a value other than null to take precedence over aclFile option

Database name to connect to

Additional names of virtual hosts served by this virtual host configuration.

Keeps the specified running while this unit is running

A state directory used by NetBird client to store config.json, state.json & resolv.conf.

A state directory used by NetBird client to store config.json, state.json & resolv.conf.

IP Address of a database server

IP Address of a database server

Determines how multiple values are joined to create the claim value

Database user.

Each attribute in this set specifies an option in the [Unit] section of the unit

Manually specify the hostname

Hostname alias(es).

Username for this DDNS provider.

Specifies a file containing the MAC addresses to allow if macAcl is set to "allow" or "radius"

Guaranteed minimum hops for ‹name› tunnels.

Whether this file should be generated

Name of the iSCSI initiator to boot from

Legacy RSA public key of the host in PEM format, including start and end markers

The name of the plugin.

Name of the nginx virtualhost to use and setup

If set to false, this unit will be a symlink to /dev/null

Port number of Go Ethereum WebSocket API.

Database host address.

Database host port.

Path of the source file.

The URL at which to fetch the feed.

The path to the socket to bind to.

The volume driver to use.

The labels to apply to the volume.

Makes this policy trust all remote parties

Configuration for this host

Instance name.

Whether to run 'restic check' with the provided checkOpts options

The username to store inside the credentials file.

Location of the dokuwiki acl rules

If enabled, checks all masters for the last zone version

Additional command line parameters

Location of the DokuWiki state directory.

Hostname of server running iodined

A list of options for 'restic check'.

Whether to run the rspamd worker.

The path of a device which is mounted for the volume.

Whether to create the volume on boot.

Keep this unit running as long as the listed units are running

Extra configuration values that you want to insert into settings.php

"Options appended to the PHP configuration file php.ini used for this PHP-FPM pool."

The name of the database to store data in.

If set, users with an SSH certificate containing an authorized principal in their SSH agent are able to log in

Attribute set describing resource limits

Arguments passed to the main process script

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Number of CPUs to allocate to the machine

Swap size in MB for the machine

User or group to restrict

Path to the directory where the pastes will be saved to

The path to the xkb types file

Extra lines that go into the pool configuration

A program name specifying a Postfix service/daemon process

Enable or disable TTY auditing for specified users

Override the default database cache size in MiB.

Set the TTY audit flag when opening the session, but do not restore it when closing the session

The name of your network of sr.ht-based sites.

Controls presence of netbird-ui wrapper for this NetBird client.

Controls presence of netbird-ui wrapper for this NetBird client.

Children zones inherit all options of their parents

The user's home directory

Wait for DNS

The input type

The subnets which this tinc daemon will serve

A list of options for 'restic check'

IPv4 interface to bind to.

IPv6 interface to bind to.

Which paths to backup, in addition to ones specified via dynamicFilesFrom

Type of this limit

Unique identifier of the calendar

Text of the file

Extra configuration to be appended to awstats.${name}.conf.

The name of a .desktop file in the directory specified in the 'package' option.

The frp consists of client and server

Aliases of that unit.

Item this limit applies to

Default window size for this interface.

Path to plugin file.

Whether to enable the Howdy PAM module

Whether to accelerate the underlying onnxruntime library with CUDA.

The name of the module

Source ZFS dataset

Name of the plugin.

Name of the plugin.

How long in advance to publish new keys

How long in advance to publish new keys

Whether to update /var/log/wtmp.

Path of the source file or directory

Set the logcheck level.

Number of daily snapshots.

Whether to enable this source.

Require TLS or TLS-PSK encryption

Require TLS or TLS-PSK encryption

Whether to enable Enables the axport interface.

Default maximum packet size for this interface.

The piper-tts package to use.

The client authentication stance for this policy.

Table name.

Paths to back up, alongside those defined by the dynamicFilesFrom option

Whether output should be marked as primary

Permission level to restrict the actor(s) to

Path to the working directory (used for config and pidfile)

Take unencrypted connections from the source socket and send encrypted connections to the target socket.

Take encrypted connections from the source socket and send unencrypted connections to the target socket.

Output scale configuration

Combined stdout and stderr log file for the Colima service.

Commands executed after the profile is successfully applied

DDNS server name.

Whether to use HTTPS for this DDNS provider.

Enables TCP_NODELAY on the TCP socket.

Whitelists the given rrl-types.

The IP and port to forward all traffic to.

The IP and port to forward all traffic to.

Enables TCP_NODELAY on the TCP socket.

Path where to store the data files of the hidden service

Container name, e.g., shopping.

Lines which would be added inside ups.conf for handling this UPS.

Name that will be shown to the user.

Owner's name.

Email address to which to send feed items

If set, fingerprint reader will be used (if exists and your fingerprints are enrolled).

Number of simultaneous ‹name› tunnels.

If enabled, the pam_umask module will be loaded.

Shell commands to execute when the event is triggered.

Regex specifying which log lines to ignore.

By default data is only periodically persisted to disk, enable this option to use an append-only file for improved persistence.

Timeout, in seconds, after which an attempt to connect to the target or a protocol handshake will be aborted (and the connection dropped) if not completed

This option provides a simple way to serve individual, static files.

Name of the icon theme to use for regreet.

Set the login uid of the process (/proc/self/loginuid) for auditing purposes