Path to the unix socket file on which to accept FastCGI requests.

Name of the web server user that forwards requests to services.phpfpm.pools.<name>.socket the fastcgi socket for Matomo if the nginx option is not used

PHP-FPM pools

Each attribute in this set specifies an option in the [Socket] section of the unit

Each attribute in this set specifies an option in the [Socket] section of the unit

Path to the unix socket file to use for authentication.

Path to the unix socket file to use for authentication.

The name of this systemd unit, including its extension

Socket address

The name of this systemd unit, including its extension

User to be set as owner of the UNIX socket.

Socket type: 'unix', 'tcp' or 'tcp6'.

Mode to be set on the UNIX socket

Group to be set as owner of the UNIX socket.

Path to the unix socket file to use for authentication.

The endpoint name.

For each item in this list, a ListenStream option in the [Socket] section will be created.

User account under which this pool runs.

Environment variables used for this PHP-FPM pool.

Start the specified units when this unit is started.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

For each item in this list, a ListenStream option in the [Socket] section will be created.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Group account under which this pool runs.

Start the specified units when this unit is started.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Take unencrypted connections from the source socket and send encrypted connections to the target socket.

Take encrypted connections from the source socket and send unencrypted connections to the target socket.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Aliases of that unit.

If the specified units are started at the same time as this unit, delay this unit until they have started.

The address on which to accept FastCGI requests.

For each item in this list, a ListenDatagram option in the [Socket] section will be created.

APIs to enable over WebSocket

For each item in this list, a ListenDatagram option in the [Socket] section will be created.

Keep this unit running as long as the listed units are running

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Port number of Go Ethereum WebSocket API.

Aliases of that unit.

Keeps the specified running while this unit is running

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Each attribute in this set specifies an option in the [Unit] section of the unit

Keep this unit running as long as the listed units are running

The PHP package to use for running this PHP-FPM pool.

If given, sets the SO_RCVBUF option on the TCP socket to the given number of bytes

If given, sets the SO_SNDBUF option on the TCP socket to the given number of bytes

If given, sets the SO_RCVBUF option on the TCP socket to the given number of bytes

If given, sets the SO_SNDBUF option on the TCP socket to the given number of bytes

"Options appended to the PHP configuration file php.ini used for this PHP-FPM pool."

Extra lines that go into the pool configuration

Keeps the specified running while this unit is running

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Whether to enable Go Ethereum WebSocket API.

Each attribute in this set specifies an option in the [Unit] section of the unit

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

PHP-FPM pool directives

Which local IP to bind the UDP socket to.

Listen address of Go Ethereum WebSocket API.

If given an IP address, it can be a host name ("localhost"), an IPv4 dotted-quad ("127.0.0.1") or an IPv6 address enclosed in square brackets ("[::1]").

(VCL4.1 and higher) If given an absolute Path ("/path/to/listen.sock") or "@" followed by the name of an abstract socket ("@myvarnishd") accept connections on a Unix domain socket

Configure unit start rate limiting

If set to false, this unit will be a symlink to /dev/null

If the specified units are started, then this unit is stopped and vice versa.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Units that want (i.e. depend on) this unit

Units that require (i.e. depend on and need to go down with) this unit

The TCP port to accept connections

Configure unit start rate limiting

If set to false, this unit will be a symlink to /dev/null

Local port of the encapsulation UDP socket.

Units that want (i.e. depend on) this unit

Similar to requires

If the specified units are started, then this unit is stopped and vice versa.

Units that require (i.e. depend on and need to go down with) this unit

If set, a changed unit is never assumed to be socket-activated on configuration switch, even if it might have associated socket units

If given, sets the SO_MARK option on the TCP socket.

If given, sets the SO_MARK option on the TCP socket.

The path to the socket to bind to.

Members of this group can access the control socket for this interface.

Similar to requires

This optional key tells launchctl what type of socket to create

If set, a changed unit is never assumed to be socket-activated on configuration switch, even if it might have associated socket units

The pre-existing network namespace in which the WireGuard interface is created, and which retains the socket even if the interface is moved via interfaceNamespace

Enables TCP_NODELAY on the TCP socket.

Enables TCP_NODELAY on the TCP socket.

This optional key can be used to request that the datagram socket join a multicast group

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

Change permissions for the socket

This optional key specifies the mode of the socket

Path at which the UNIX socket will be created.

An arbitrary list of items such as derivations

Directory of sockets for controlling wpa_supplicant.

An attribute set of Anubis instances

An arbitrary list of items such as derivations

An application timeout on receiving data from the TCP socket.

An application timeout on receiving data from the TCP socket.

Configure unit start rate limiting

An arbitrary list of items such as derivations

Description of this unit used in systemd messages and progress indicators.

Whether to enable socket activation for Erlang Port Mapper Daemon (epmd), which acts as a name server on all hosts involved in distributed Erlang computations.

An arbitrary list of items such as derivations

Whether to support proxying websocket connections with HTTP/1.1.

Configure unit start rate limiting

UNIX domain socket path to bind.

This optional key can be used to request that the datagram socket join a multicast group

Description of this unit used in systemd messages and progress indicators.

This optional key specifies the protocol to be passed to socket(2)

Specify path to the control socket used for connection sharing.

This optional key tells launchctl what type of socket to create

Port number to listen on

This optional key can be used to request that the datagram socket join a multicast group

A short human-readable label of the unit.

This optional key can be used to request that the datagram socket join a multicast group

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

This optional key specifies the mode of the socket

This optional key tells launchctl what type of socket to create

This optional key tells launchctl what type of socket to create

Resolution refresh time for the target socket, in seconds.

User name who owns the socket file.

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

This optional key specifies the mode of the socket

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

This optional key is a variant of SockPathName

Whether to support proxying websocket connections with HTTP/1.1.

This optional key specifies the mode of the socket

Wait for DNS

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Group name who owns the socket file.

Address on which spiped should listen for incoming connections

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Create an individual listening socket

Whether control socket should remain open in the background.

This optional key specifies the protocol to be passed to socket(2)

Frequency at which the client will send websocket ping to the server.

Frequency at which the client will send websocket ping to the server.

The agent's socket; interpreted as a suffix to $XDG_RUNTIME_DIR on Linux and $(getconf DARWIN_USER_TEMP_DIR) on macOS.

A list of URIs referencing documentation for this unit or its configuration.

Name of the user on the MySQL/MariaDB server

This optional key specifies the protocol to be passed to socket(2)

This optional key specifies the protocol to be passed to socket(2)

Defines how unit configuration is provided for systemd:

asDropinIfExists creates a unit file when no unit file is provided by the package otherwise it creates a drop-in file named overrides.conf.

asDropin creates a drop-in file named overrides.conf

A list of URIs referencing documentation for this unit or its configuration.

Port number to listen on

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Defines how unit configuration is provided for systemd:

asDropinIfExists creates a unit file when no unit file is provided by the package otherwise it creates a drop-in file named overrides.conf.

asDropin creates a drop-in file named overrides.conf

Whether to support proxying websocket connections with HTTP/1.1.

List of URIs referencing documentation for the unit.

Path to a socket (bind-addr will be ignored).

This optional key is a variant of SockPathName

Whether to support proxying websocket connections with HTTP/1.1.

This optional key is a variant of SockPathName

This optional key is a variant of SockPathName

Local UDP port for IKE communication

Whether to support proxying websocket connections with HTTP/1.1.

The agent's socket; interpreted as a suffix to $XDG_RUNTIME_DIR on Linux and $(getconf DARWIN_USER_TEMP_DIR) on macOS

Unix command socket that can be used to pass commands to Suricata

The TCP address or UNIX socket path to listen on.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Socket to bind to

Create an individual listening socket

You can use the following variables:

%1 : file name

%2 : server name

%3 : socket ID

See Customizing editor on the Astroid wiki.

Socket which is used for communication with OpenDKIM.

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Ensures that the specified users exist and have at least the ensured permissions

Whether to support proxying websocket connections with HTTP/1.1.

Path to the unix socket file to use for authentication.

Name of directory from which to import ZFS device, this is passed to zpool import as the value of the -d option

File mode of the socket.

Whether to support proxying websocket connections with HTTP/1.1.

Path to the unix socket file to use for authentication.

Arbitrary unique number 1..255

Path to the unix socket file to use for authentication.

Filename for unix-command socket.

The UNIX socket your Misskey server should listen on.

Path to the unix socket file to use for authentication.

Path to the unix socket file to use for authentication.

Path where the socket should be created when protocol=socket

If specified, creates a UNIX socket at the given path that Sharkey listens on.

Path to the unix socket file to use for authentication.

Default location for the Mattermost control socket used by mmctl.

The unix socket for the gancio server to listen on.

Path to the unix socket file to use for authentication.

User name under which the frr exporter shall be run

A unix socket to mysql, accessible by the librenms user

This flag corresponds to the "wait" or "nowait" option of inetd

Whether to enable Mattermost control socket.

Path to the Unix socket for connecting to postsrsd

Path to the socket for local or remote transports

Whether to enable Export socket control to system environment variables.

Socket to use for connecting to SNMP master agent

Path to the unix socket file to use for authentication.

Path of the socket listening to authorization requests.

This flag corresponds to the "wait" or "nowait" option of inetd

This flag corresponds to the "wait" or "nowait" option of inetd

Path to the unix socket file to use for authentication.

This flag corresponds to the "wait" or "nowait" option of inetd

User name under which the chrony exporter shall be run

Name of the UKI

File permissions on the UNIX domain socket.

Definition of systemd socket units; see systemd.socket(5).

If enabled Rsync will be socket-activated rather than run persistently.

Whether to enable TLS on the listener socket.

Definition of systemd per-user socket units.

Unix domain socket path to bind this listener to.

The family name of the font within the package.

Path to the UNIX domain-socket to communicate with postgres.

The path to a socket file for the server to listen to.

Whether to enable systemd socket activation for the Emacs service.

The name of the user account

The name of the user account

Automatically run PipeWire when connections are made to the PipeWire socket.

The name of the theme within the package.

Whether to enable socket activation for nncp-daemon.

The database (Postgres or MySQL) socket path.

Path to the unix socket file

Definition of systemd socket units.

Unix domain socket where to bind the PostgREST web server.

The name of the group

The group's name

Definition of systemd per-user socket units

Specifies a list (comma-separated) of addresses where to listen for TCP connections

Alias of services.tailscaleAuth.socketPath.

The name of this nylon instance.

The family name of the font within the package.

The family name of the font within the package.

The family name of the font within the package.

Name of the zone.

Socket path to use for notify_push

The name of the system used in the system.build.toplevel derivation

Name of the PPP peer.

The name of the user account

See torrc manual.

Permissions to the UNIX socket, if configured.

The name of the theme within the package.

The name of the theme within the package.

The name of the theme within the package.

The name of the icon theme within the package.

The name of the group

The PHP-FPM pool that serves SimpleSAMLphp instance.

Etcd unique node name.

Address or CIDR subnets

StrongSwan default: []

Address or CIDR subnets

StrongSwan default: []

Address or CIDR subnets

StrongSwan default: []

The endpoint name.

Path under which the stats socket is placed

Mode where the socket should be set when protocol=socket

The endpoint name.

GID where the socket should be set when protocol=socket

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The name of the icon theme within the package.

The name of the icon theme within the package.

The name of the icon theme within the package.

The name of this systemd unit, including its extension

Address or CIDR subnets

StrongSwan default: []

Address or CIDR subnets

StrongSwan default: []

Address or CIDR subnets

StrongSwan default: []

Name i2pd appears in UPnP forwardings list.

Name of the PAM service.

Username for JSON-RPC connections.

The name of this systemd unit, including its extension

Address or CIDR subnets

StrongSwan default: []

Addresses allocated in pool

Name of the worker

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Path to local domain socket which is used for communication with the daemon

The endpoint name.

The endpoint name.

Listener configuration in socket map format native to Postfix configuration.

TCP sockets to bind to

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

The name of the cursor theme within the package.

Unix socket that idled listens on.

List of named IP pools to allocate virtual IP addresses and other configuration attributes from

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Bind port for websockets endpoint.

Name for the device

Specifies the Name of the Storage daemon.

Specific name of the application.

The endpoint name.

The endpoint name.

Name of modem device, will be searched for in /dev.

Name of the redis server

Name of the image

The name of the node which is used as an identifier when communicating with the remote nodes in the mesh

Mail "from" name.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Unix socket that lmtpd listens on, used by deliver(8)

Profile name

The profile's name.

Group to grant access to the Yggdrasil control socket

The client name that must be used by the Director when connecting

Name of the action.

The director name used by the system administrator

Database name.

Whether to enable websockets.

The theme name.

The name of this systemd unit, including its extension

Name of the runner to configure

Name of the runner to configure

Permissions on the UNIX socket.

The name of the Helm chart

User to own the seatd socket

Websocket service port.

A system user name for this client instance.

A system user name for this client instance.

The name of the host

The name of the theme within the package.

The name of the cursor theme within the package.

The name of the cursor theme within the package.

The name of the cursor theme within the package.

The unique agent name.

Mail "reply-to" name.

When not set to null this option defines the path at which the unbound remote control socket should be created at

Database name.

Agent name, usually same as the hostname

Agent name, usually the same as the hostname.

The name of this systemd unit, including its extension

Whether to enable socket-activation for starting incus.service

Name of the redis server

The endpoint name.

Keyboard name.

Bind address for websockets endpoint.

Font name, as used by fontconfig.

Akkoma frontend name.

Unix domain socket that the mail notification daemon listens on.

The name of the service to run

Group to own the seatd socket

The name of the Helm chart

Unique identifier of the account

Name of the control, as it appears in alsamixer

The name to return in service discovery responses for the MUC service itself

The endpoint name.

The name of the instance.

Name is referenced in logs

The name of the agent as seen in the buildkite dashboard.

The name of the agent as seen in the buildkite dashboard.

Name of the existing database.

Name of the rule.

Name of the machine when registering it at the central or local api.

The name of the cask to install.

The name of the formula to install.

The database name

Database host address

The cursor name within the package.

Set the RUST_LOG environment variable

The endpoint name.

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

The logical name of the Galera cluster

Name is used as a suffix for the service name, user, and group

Name of the user to ensure.

The name of the service to run

Database name.

Database name.

Enable WebSocket support

The name of the server

Database name.

Database host (+port) or socket path

The family name of the font within the package.

The name of this gateway as shown in firezone

The name of the cookie that the oauth_proxy creates.

The machine which hosts your database

Name of the beat

Name of the wiki.

Name of the server.

The unique name for THIS channel in THIS group

Whether to enable systemd service and socket for wob.

Address or CIDR subnets

StrongSwan default: []

Address or CIDR subnets

StrongSwan default: []

Whether to enable MollySocket for getting Signal notifications via UnifiedPush .

Relay address (the local IP address that will be used to relay the packets to the peer)

Server name to be used for this virtual host

Name of this iscsi initiator

Database name, only used when the databse is created locally.

The name of an existing user account under which the rsync process should run.

Name of the redis server

Name of the service.

This primary server will notify all given secondary servers about zone changes

Name of ICMP pinging job.

The name of this systemd unit, including its extension

Profile name.

The name of the mailbox.

Unique identifier of the account

The path to the socket to bind to.

Database name.

The name of the network interface to match against.

Database name.

Database name.

Database name.

Database name

Name associated with the build

The language to use for personal names.

The name of the immich database.

Section defining named pools

The name of the database to use for Wakapi.

The advertised name for zeroconf discovery.

The friendly name you give to the network device

The friendly name you give to the network device

Listen on a UNIX socket at the specified path

The user's UID.

The name of this authentication provider

Database name.

This library's name.

The name of this group for this account

The name of an existing user group under which the rsync process should run.

The name of the host in the network as well as the configuration for that host

When clone_target is unspecified, this is the name of a formula repository to tap from GitHub using HTTPS

The user's primary group.

The name of this client as shown in firezone

Text of the file

Profile name.

umask for files written by Gunicorn, including UNIX socket.

name of the virtualhost

Configuration for MollySocket

Listening port of the web server

Listening address of the web server

Database name.

Database name.

The name of this actor

The name of this group

Path for the lmtp daemon's unix socket

Whether to enable postgres-websockets.

Server name.

PostgreSQL database name

The name of the watcher

The name of the device.

The name of the device.

Bird control socket path.

The name of this gateway as shown in firezone

Adapter name that is used in the radicle-ci-broker configuration

User to run the cgit service as.

When set to something distinct to null NSD is able to collect statistics per zone

The name of the plugin.

Database name.

Name of the existing database (has no effect if type is "sqlite").

TLS options for virtual host

The name identifying the runner instance towards the Gitea/Forgejo instance.

Port for the websocket that needs to be separate

Name of the font to use for regreet.

Multiaddr or array of multiaddrs describing the address to serve the local HTTP API on

The user's home directory.

APIs to enable over WebSocket

This is the target address is to match against

Enables the daemon for lorri, a nix-shell replacement for project development

Unique identifier of the contact account

Whether to use socket activation to start Kubo when needed.

Text of the file

The name of this relay group

Whether to enable systemd service and socket for shpool.

Bind port for ‹name› endpoint.

The name of the plugin.

Name of the site.

Path of the API socket to create.

Name of the GNOME Shell theme.

Name of the tmux window;

Name of the local AutoSSH session

Name of the local AutoSSH session

Port number Go Ethereum will be listening on, both TCP and UDP.

The path to a file containing the database password

Name of the game as it will appear in the game listing.

Bind port for ‹name› endpoint.

Rename nodes to different name.

ACME options for virtual host.

HTTP options for virtual host

Path to UNIX socket to bind to.

Enable Unix Socket for the server to listen on. listenAddress and port will be ignored.

Port number of Go Ethereum HTTP API.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

The serial port to which your UPS is connected. /dev/ttyS0 is usually the first port on Linux boxes, for example.

Whether the HTTP server should listen on a UNIX domain socket ("unix") or on a TCP socket ("tcp").

The account UID

Hostname or socket-path to connect to.

The path, host/port or file descriptior to bind the gunicorn socket to

The path, host/port or file descriptior to bind the gunicorn socket to

The name of this server.

The name of the dawarich database.

MySQL database name.

Database name for FreshRSS.

Path for the lmtp daemon's unix socket

The group's GID.

Secret used to sign JWT tokens used to open communications channels.

Group to run the cgit service as.

Name of the satellite.

Name of the pool(s) to collect, repeat for multiple pools (default: all pools).

Host of the database

Name of the theme to use for regreet.

Override the default TLS port for this virtual host.

Table name.

Name of the modifier.

The type of the device.

Container name, e.g., shopping.

The user's home directory mode in numeric format

Unique identifier of the calendar

Name of the plugin.

Name of the plugin.

A path which will be scanned for repositories.

The name of this gateway group

IP address where nix-serve will bind its listening socket.

The name of services's user

Name of the iSCSI initiator to boot from

What port to listen for client requests, default is 1080.

The name of an explicit dtb to be loaded, relative to the dtb base

The name of this resource

If set, mpd is socket-activated; that is, instead of having it permanently running as a daemon, systemd will start it on the first incoming connection.

Format: [AXFR|UDP] <ip-address> <key-name | NOKEY>

cgit repository settings, see cgitrc(5)

Node name

The name of the plugin.

The password to authenticate to PostgreSQL with

Name of the beat

Unix socket path (unix:///tmp/osui.sock, the "unix:///" part is mandatory) or TCP socket (192.168.1.100:50051).

The account name

Path to target file relative to HOME.

Set the host address for this virtual host

Name of the Docker context

Socket.io port for EPGStation to listen on

Profile name.

Override the default HTTP port for this virtual host.

Database name.

The user's primary group.

Port number to listen on

Port number to listen on

Port number to listen on

RPC socket path.

Make the Podman socket available in place of the Docker socket, so Docker tools can find the Podman socket

The nickname of this Tahoe node.

Each attribute of this option defines a systemd service that runs hans

Container name, e.g., shopping.

Text of the file

Text of the file

Permission of the socket file (3-digit octal value).

Profile name

Port number to listen on

Whether to enable ‹name›.

The specified name-string gives the system file name of the storage device managed by this storage daemon

Listen on a UNIX socket at the specified path

Database name.

Database name.

Whether to enable cgit.

The actual zone data

Database name.

Sockets to listen for clients on

VirtualHost to serve cgit on, defaults to the attribute name.

Redis address - may be a Unix socket or a network host and port.

Name of the model to download and use for speech synthesis

Name of the icon theme to use for regreet.

Discourse database name.

Whether to enable ‹name›.

This tells pgmanage whether or not to set the listening socket to local addresses only.

Whether this file should be generated

Blockchain garbage collection mode.

Whether to enable hub instance.

Name of this virtual host

Name of the interface.

Username

Name of the symlink (relative to /var/lib/rancher/k3s/server/manifests)

Database name.

the listenStream used by the systemd socket. see https://www.freedesktop.org/software/systemd/man/systemd.socket.html#ListenStream= for more information. use this to change the port epmd will run on. if not defined, epmd will use "[::]:4369"

Zone file resource records contain columns of data, separated by whitespace, that define the record.

Whether to enable Go Ethereum Node.

Additional arguments passed to Go Ethereum.

Listed primary servers are allowed to notify this secondary server

Directory for the ACME challenge, which is public

Database host (+port) or socket path

Enables HTTP/3 over QUIC on the UDP port for TLS

Port number to listen on

Port number to listen on

Port number to listen on

Port number to listen on

Port number to listen on

DNS full-qualified domain name of a database server

DNS full-qualified domain name of a database server

The name of the first admin user.

Proxy account name, without the possibility to include domain name ('at' sign is interpreted literally).

SSID to be used in IEEE 802.11 management frames.

Whether the target path should be unconditionally replaced by the managed file source

Whether to enable DNSSEC.

The group GID

Name of modem configuration file, will be searched for in config in the spooling area directory.

Name of the interface

Path to the file which contains the actual base64 encoded key

Whether to enable Go Ethereum HTTP API.

Path to target file relative to xdg.dataHome.

Whether to enable TLS support.

The name of this client as shown in firezone

Name of the profile.

Name of the remote read config, which if specified must be unique among remote read configs

Database connection scheme

Path to the directory storing the hooks

Path to the directory storing the hooks

Socket listen queue backlog size

Enable systemd socket activation

The name of the database to create.

Database name to use when connecting to an external or manually provisioned database; has no effect when a local database is automatically provisioned

Name of Google storage bucket

Specify the program to run to talk to this UPS. apcsmart, bestups, and sec are some examples.

Whether this file should be generated

Replace any existing runner with the same name

Replace any existing runner with the same name

The default permissions (in octal) to create the UNIX socket with.

Bind address for ‹name› endpoint.

static: Immediately answer any Neighbor Solicitation Messages (if they match the IP rule). iface: Forward the Neighbor Solicitation Message through the specified interface and only respond if a matching Neighbor Advertisement Message is received. auto: Same as iface, but instead of manually specifying the outgoing interface, check for a matching route in /proc/net/ipv6_route.

Database name.

The device to update.

The path to the socket to bind to.

Unique identifier of the boxxy rule

The name of the Grafana database.

Set name to shared memory zone.

Path to the postgres socket directory

Enables GnuPG agent with socket-activation for every user session.

Whether the SSID is to be interpreted using UTF-8 encoding.

Whether to enable control socket, created in /run/tor/control.

Whether to enable this PPP peer.

Port to bind the TTS server to.

Bind address for ‹name› endpoint.

Each attribute of this option defines a systemd service that runs iodine

Whether to enable ‹name›.

Hostname or address of the postgresql server

Drive name without the full path.

Container name, e.g., shopping.

Interface to use when method is iface.

Database name.

Database name.

Name of database.

Path to rtorrent rpc socket.

hostname:port to listen for HTTP traffic

hostname:port to listen for HTTP traffic

Name of the remote write config, which if specified must be unique among remote write configs

Database host address

The user's home directory.

Enables nylon as a running service upon activation.

The port on which the tub will listen

The port on which the Web server will listen

Username used to connect to registry.

Name of the PostgreSQL database.

The name of the Linkwarden database.

Master=false means slave server

Addresses who may request zone transfers.

Limit retry time for secondary zones.

Whether to enable this RAUC slot.

GitLab database hostname

The user's home directory mode in numeric format

The cgit package to use.

The geth package to use.

Uhub plugin configuration.

Name of the user to ensure.

Name of the user to ensure.

Whether the target path should be unconditionally replaced by the managed file source

Local Mattermost database name.

Text of the file

Verify peer certificate

Verify peer certificate

Name of the symlink (relative to /var/lib/rancher/rke2/server/manifests)

Backup type as described in: https://pgbackrest.org/command.html#command-backup/category-command/option-type

Name of symlink

The flake reference from is rewritten to.

The flake reference to which from> is to be rewritten.

Name of the cursor theme to use for regreet.

Whether to enable extra socket of the GnuPG key agent (useful for GPG Agent forwarding).

Name of the homebridge UI platform

The name of the host in the network as well as the configuration for that host

Name of the MySQL database that holds EPGStation's data.

Name of the beat

Path to target file relative to xdg.cacheHome.

Tunnel type.

Program to execute, possibly with arguments.

Root directory for requests.

Local secret key in hexadecimal form.

A system group name for this client instance.

A system group name for this client instance.

Create an individual listening socket

Create an individual listening socket

Create an individual listening socket

The account UID

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

This feed account's name.

Pair of roots to synchronise.

The name of the hook

Store tmux socket under /run, which is more secure than /tmp, but as a downside it doesn't survive user logout.

Output DPI configuration.

pppd configuration for this peer, see the pppd(8) man page.

Environment file (see systemd.exec(5) "EnvironmentFile=" section for the syntax) passed to the service

Path to target file relative to xdg.stateHome.

The idle time after which no interaction with Radicle Node via the rad CLI should be stopped, in a format that systemd-socket-proxyd(8) understands for its --exit-idle-time argument.

Create an individual listening socket

Tunnel type.

Text of the file.

Keyset used for tunnel identity.

Port number of Go Ethereum metrics service.

Listen address of Go Ethereum HTTP API.

Icon to display in file manager, menus, etc.

The network to connect to

Listen on a unix socket /run/esphome/esphome.sock instead of the TCP port.

A program name specifying a Postfix service/daemon process

Text of this systemd unit.

Output resolution.

Output framerate.

This profile's name.

Port number of Go Ethereum Auth RPC API.

Whether to offload computation onto a CUDA compatible GPU.

FQIN of referenced Image when source is a file or directory archive.

A system group name for this client instance.

A system group name for this client instance.

Server name to verify the hostname on the returned gRPC certificates

Adds index directive.

Alias directory for requests.

Lines which would be added inside ups.conf for handling this UPS.

Whether this file should be generated

Whether this file should be generated

Levels (minimum value for logged events): 0 = verbose debugging 1 = debugging 2 = informational messages 3 = notification 4 = warning

Whether to make the user account hidden.

The domain name to collect stats for.

Source directories.

If set, sshd is socket-activated; that is, instead of having it permanently running as a daemon, systemd will start an instance for each incoming connection.

Instance name.

Name of the plugin linked to $XDG_CONFIG_HOME/ranger/plugins/

URI where wyoming-satellite will bind its socket.

Keyset used for tunnel identity.

Output video display controller.

Database host address or unix socket.

Database host address or unix socket.

Path of the source file or directory

The ID of your hook

add will additionally listen for TLS connections. only will disable TLS connections. force will redirect non-TLS traffic to the TLS connection.

These lines go to the end of cgitrc verbatim.

Shell commands executed to stop the service.

DNS full-qualified domain name of a database server

The user's home directory

Path to unix socket to listen on

Store tmux socket under /run, which is more secure than /tmp, but as a downside it doesn't survive user logout.

Vertical scaling factor/pixels.

Horizontal scaling factor/pixels.

Specifies the MAC addresses to deny if macAcl is set to "deny" or "radius"

An internet socket address to listen on, either IPv4 or IPv6.

Marks the server as a backup server

Adds DirectoryIndex directive

Alias directory for requests

Name of this overlay

Password HMAC-SHA-256 for JSON-RPC connections

Listen port

Shell commands executed to stop the service.

Name of this virtual host

Enable logging, default is no logging.

Name of symlink

GVPE node name

Location of hardware kiss tnc for this interface.

Name of the tun device

Isolate traffic between stations (clients) and prevent them from communicating with each other.

Specify the log file name

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Adds try_files directive.

An RKVM server's internet socket address, either IPv4 or IPv6.

The user's primary group.

The flake reference to be rewritten.

The flake reference to be rewritten.

Port number to listen on

The location of the Drupal files directory.

Listen address

Service port

Path to a Containerfile which contains instructions to build the image.

Controls how long a valid or invalid entry remains in the cache, in milliseconds.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Create an individual listening socket

Create an individual listening socket

Create an individual listening socket

Create an individual listening socket

Create an individual listening socket

Name of the homebridge

Whether to ask Let’s Encrypt to sign a certificate for this virtual host

Units that want (i.e. depend on) this unit

Start the specified units when this unit is started.

Port number to listen on

Port number to listen on

Port number to listen on

Port number to listen on

Port number to listen on

Port number to listen on

Port number to listen on

Remote public key in hexadecimal form.

Port of the MySQL/MariaDB server

Output gamma configuration.

The location of the Drupal site state directory.

Start the specified units when this unit is started.

Address the server will listen for websocket connections.

The port on which the SFTP server will listen

Whether the target path should be unconditionally replaced by the managed file source

Whether the target path should be unconditionally replaced by the managed file source

The database name.

Guaranteed minimum hops for ‹name› tunnels.

Hostname or IP of the MySQL/MariaDB server

Group for bumblebee socket

When to run the job.

Image to pull.

Name of the voice model to use

Contents of the PAM service file.

Listen on a specific IP address and port or unix socket.

Specifies the MAC addresses to allow if macAcl is set to "allow" or "radius"

Path to world folder containing the dimension to render

List of servers for inclusion in stub and secondary zones.

The IP interface to bind to. null means "all interfaces".

Enable unlocking and mounting of encrypted ZFS home dataset at login.

How to name the created archives

The serial port speed of this interface.

The name of the database to store data in.

Guaranteed minimum hops for ‹name› tunnels.

Units that want (i.e. depend on) this unit

Display name of the radio station.

Name shown in the website title and on the front page.

Domain to fetch certificate for (defaults to the entry name).

Adds a return directive, for e.g. redirections.

This optional key can be used to request that the service be registered with the mDNSResponder(8)

Adds DirectoryIndex directive

Alias directory for requests

IP of the Redis master

Text of this systemd unit.

Specifies the real host name to log into.

Limit retry time for secondary zones

If the specified units are started at the same time as this unit, delay this unit until they have started.

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Packages added to the service's PATH environment variable

Specifies the number of retries for failed notifies

If the specified units are started at the same time as this unit, delay this unit until they have started.

Packages added to the service's PATH environment variable

The database engine name

Name of symlink

Add the necessary actions for a upsmon process to work

When or how often the backup should run

Whether to enable SFTP service.

The user as which to run bitcoind.

Blockchain sync mode.

Maximum peers to connect to.

Database name to connect to

Path of the source file or directory

The name of this systemd unit, including its extension

The kimai package to use.

The tahoelafs package to use.

Path of the authentication file.

Shell commands to run when file has changed between generations

Shell commands executed after the service's main process has exited.

Whether to enable Drupal web application.

Extra arguments to pass to the server commandline.

Whether to enable Coqui TTS server.

Override the default port on which to listen for JSON-RPC connections.

Shell commands executed after the service's main process has exited.

Whether to enable the output.

Output rotate configuration.

The packaged Helm chart

The path to repo in local machine

Text of the file.

A program name specifying a Postfix service/daemon process

If set, CUPS is socket-activated; that is, instead of having it permanently running as a daemon, systemd will start it on the first incoming connection.

Path to target file relative to xdg.configHome.

Use Unix socket.

Use Unix socket

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

libpq connection parameters as documented in:

https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-PARAMKEYWORDS

List of address ranges allowed to query this zone

Path of certificates (*.{crt,cert,key}) used to connect to registry.

File or block device to export.

Hostname or address of the postgresql server

Whether the database connection should be secured by SSL / TLS

Alias of home.pointerCursor.name.

The path to the user's shell

The maximum send socket buffer size in bytes

The maximum receive socket buffer size in bytes

postgres-websockets configuration as defined in: https://github.com/diogob/postgres-websockets/blob/master/src/PostgresWebsockets/Config.hs#L71-L87

PGWS_DB_URI is represented as an attribute set, see [`environment

Domain name

Optional PKCS#11 module name.

The group GID

As which user the backup should run.

Override the default port on which to listen for connections.

Wether to start µStreamer on boot

The name of the file or block device that should be used as header for the encrypted device.

Create the home directory when creating the user.

Extra zone config to be appended at the end of the zone section.

Shell commands executed before the service's main process is started.

Shell commands executed before the service's main process is started.

The name of the file (can be a raw device or a partition) that should be used as the decryption key for the encrypted device

Key / certificate pairs for the virtual host.

Key policy for zone signing keys

Key policy for key signing keys

Name of a file containing the spiped key

Name of symlink

Path to UNIX domain socket to listen on

An existing Let’s Encrypt certificate to use for this virtual host

Name used to derive peer unit name.

Port number to listen on

Set maximum cache size

Label for this destination

Path of the authentication file used to connect to registry.

Basic Auth protection for a vhost

cgit configuration, see cgitrc(5)

Configuration of uhub

If set, root doesn't need to authenticate (e.g. for the useradd service).

Name of the snippet.

The flake reference from is rewritten to

If set to false, the user account will not be created

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Configuration for this host

Root directory for requests.

Output scaling method.

The postgresql database server to connect to

The data directory for bitcoind.

Address to listen on

List of virtual hostnames from which to accept requests.

IP address of server running hans

The location for users to install Drupal themes.

Limit refresh time for secondary zones.

Limit on the number of simultaneous connections allowed.

The default permissions (in octal) to create the UNIX socket with.

port of the Redis master

Specifies the BSSID for this BSS

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Attributes for user's entry in pam_mount.conf.xml

Common name attribute of allowed peer certificates

Common name attribute of allowed peer certificates

Optional PKCS#11 module name.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

The file access mode of the UNIX socket.

Specify the path to a file or AF_UNIX stream socket to read a CA certificate from

Whether to show the message of the day.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Whether this file should be generated

Extra lines to add to the tinc service configuration file

Location of bitcoind pid file.

Whether to enable Go Ethereum prometheus metrics.

RPC user information for JSON-RPC connections.

IP and port to which this redis instance acts as a slave.

Shell commands executed as the service's main process.

The user ID owning the volume inside the container.

Start the specified units when this unit is started.

Username used in the machine image

Run the rsync process with an inhibition lock taken; see systemd-inhibit(1) for a list of possible operations.

Override for package "short name", used for generating configuration

Shell commands executed as the service's main process.

Guaranteed minimum hops for ‹name› tunnels.

Enables GnuPG network certificate management daemon with socket-activation for every user session.

Extra configuration to be appended to awstats.${name}.conf.

The name of the wrapper program

Port number to listen on

Location to serve cgit under.

Path of the source file.

Settings for this slot.

Address to which spiped should connect.

The labels to apply to the build.

Database host or socket path.

The group as which to run bitcoind.

If set, the OATH Toolkit will be used.

The path to a file or AF_UNIX stream socket to read the server certificate from

local database using UNIX socket authentication

The flake input from is rewritten to.

The flake input from is rewritten to.

The flake input to which from> is to be rewritten.

Whether to enable Go Ethereum Auth RPC API.

Shell commands executed after the service's main process is started.

Shell commands executed when the service's main process is reloaded.

Filesystem type of Device. (used as -t in mount commands)

PostgreSQL host to connect to

Options for the Kimai PHP pool

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

Shell commands to run when file has changed between generations

Name of symlink (relative to /etc)

Shell commands executed after the service's main process is started.

Shell commands executed when the service's main process is reloaded.

Name that will be shown to the user.

Path to Klipper's API socket.

Listen port

Name of the class implementing the check

Guaranteed minimum hops for ‹name› tunnels.

Whether output should be marked as primary

Alias directory for requests.

Adds index directive.

The name of the Stash Box

Whether to enable helper service.

The user's auxiliary groups.

Key size in bits

Key size in bits

If the specified units are started at the same time as this unit, delay them until this unit has started.

Copy content of the image located at the mountpoint of the volume on first run.

Specifies if TLS should be enabled

Specifies if TLS should be enabled

Whether to enable proxy for this bucket

The name of a .desktop file in the directory specified in the 'package' option.

Specify the path to a file or AF_UNIX stream socket to read the secret server key corresponding to the certificate specified with services.journald.gateway.cert from

The name of the module

Source ZFS dataset

This optional key specifies the node to connect(2) or bind(2) to.

Name shown in the server list.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Whether to enable the HTTP/3 protocol

The drupal package to use.

Listen address

Shell commands executed when the instance is starting.

Path to encrypted luks device that contains the user's home directory.

Allow these IPs and TSIG to transfer zones, addr TSIG|NOKEY|BLOCKED address range 192.0.2.0/24, 1.2.3.4&255.255.0.0, 3.0.2.20-3.0.2.40

Legacy RSA public key of the host in PEM format, including start and end markers

Whether to operate in tun (IP) or tap (Ethernet) mode.

The name of your network of sr.ht-based sites.

Address to bind on for UI connections

Environment variables to set for the kernel.

Enable logging to the system logger.

Whether to enable Redis server.

Number of worker instances to run

The path of the web root directory.

Path to the certificate authority certificate.

Set the log-level

Maximum number of items to keep in slow log.

Adds try_files directive.

Port number to listen on

If set, the OTPW system will be used (if ~/.otpw exists).

The type of this worker

Discourse database hostname. null means “prefer local unix socket connection”.

User name for RPC connections.

The name of private PKCS #8 key file for this policy to be found in the baseDirectory, or the absolute path to the key file

Path of the source file or directory

Path of the source file or directory

Whether the target path should be unconditionally replaced by the managed file source

Specifies a file containing the MAC addresses to deny if macAcl is set to "deny" or "radius"

Optional PKCS#11 module name.

Whether to enable a local Redis database using UNIX socket authentication.

Authentication algorithm for this key.

Whether to enable this mount.

Station MAC address -based authentication

TCP Port to bind on for UI connections

Public address for p2p connections from peers (if TCP is used)

Whether to start the build on boot

Whether to pull the image on boot

Where to mount this dataset.

Whether users can log in with passwords defined in /etc/shadow.

Specify the server verbosity level, options: debug, verbose, notice, warning.

Custom name of this poller.

These lines go to the end of the location verbatim.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Create an individual listening socket

S3 bucket name to use for HTTP-01 based challenges

Owner's name.

Optional slot number of the token that stores the certificate.

Language of the environment

Event type.

Aliases of that unit.

The specified name-string names the type of media supported by this device, for example, DLT7000

Start the specified units when this unit is started.

The flake reference to be rewritten

The specified name-string must be the generic SCSI device name of the autochanger that corresponds to the normal read/write Archive Device specified in the Device resource

DDNS server name.

Whether to enable this PAM service.

Path or reference to the host key.

Whether to enable automatic mounting.

Turns on or off the router flag for Neighbor Advertisement Messages.

The group ID owning the volume inside the container.

Style to use for Qt5/Qt6 applications

The group's members.

Manually specify the hostname

If the specified units are started at the same time as this unit, delay this unit until they have started.

Aliases of that unit.

Dataset name to send snapshots to.

Domain part of the web interface URL (no web interface for this domain if null)

The name of the user for this authelia instance.

The name the camera will show up as.

When or how often the backup should run

Hostname alias(es).

Username for this DDNS provider.

Create an individual listening socket

Create an individual listening socket

Create an individual listening socket

Create an individual listening socket

Create an individual listening socket

Create an individual listening socket

Create an individual listening socket

If true, a system-wide PipeWire service and socket is enabled allowing all users in the "pipewire" group to use it simultaneously

The database host Invidious should use

Port number to listen on

Protocol names to hide in summary tables (RE2 syntax),

This optional key implies SockFamily is set to "Unix"

The furl for a Tahoe helper node

Number of simultaneous ‹name› tunnels.

Determines how multiple values are joined to create the claim value

The type of log being collected.

Override the default database cache size in MiB.

Enable extra socket for GnuPG agent.

Errbot backend name.

Page or namespace to restrict

The location of the Drupal config sync directory.

Whether to make the nix-daemon service socket activated.

Whether to create the home directory and ensure ownership as well as permissions to match the user.

DNS server to use as an intermediate relay to the iodined server

Specifies the image the volume is based on when Driver is set to the image.

Allow the user to do certain things with upsd

Output position

Enable PAM mount (pam_mount) system to mount filesystems on user login.

Basic Auth password file for a vhost

The subnets which this tinc daemon will serve

Keep this unit running as long as the listed units are running

Database user.

Adds a return directive, for e.g. redirections.

A short description of the user account, typically the user's full name

Text of the file.

Default window size for this interface.

Path to plugin file.

The packaged Helm chart

Command and arguments to start the kernel.

TLS Options for the Director in this Configuration.

Bind address to be used for this server.

TLS Options for the Director in this Configuration.

Port the NetBird client listens on.

Port the NetBird client listens on.

The username to store inside the credentials file.

Specifies a file containing the MAC addresses to allow if macAcl is set to "allow" or "radius"

The path to the xkb types file

Database host or socket path.

Device identifiers, as shown by keyd(1).

Require HTTPS and verification of certificates when contacting registries.

Require HTTPS and verification of certificates when contacting registries.

Configuration for MPD

Name of the class implementing the check

The set of system-wide known SSH hosts

Number of simultaneous ‹name› tunnels.

If set, keys listed in ~/.ssh/authorized_keys and ~/.eid/authorized_certificates can be used to log in with the associated PKCS#11 tokens.

This is a rule that the target address is to match against

Whether this file locals should be generated

Keep this unit running as long as the listed units are running

Database host address.

Database host port.

Name of the PCM card to control (slave).

Optional slot number of the token that stores the certificate.

Name for where mail coming from the remote (far) mail server will end up locally

Path to the host certificate.

UUIDs of Signal accounts that may use this server

Listen for any Neighbor Solicitation messages on this interface, and respond to them according to a set of rules

The location for users to install Drupal modules.

I2P nodes that are allowed to connect to this service.

Shell commands executed when the instance is shutting down.

URL where this inbox can be accessed over HTTP.

Whether to enable Enables the axport interface.

Default maximum packet size for this interface.

Port to bind on for p2p connections from peers (both TCP and UDP)

Address to bind on for p2p connections from peers (both TCP and UDP)

Name of the runner group to add this runner to (defaults to the default runner group)

Name of the runner group to add this runner to (defaults to the default runner group)

A list of host names and/or IP numbers used for accessing the host's ssh service

Attrset to be transformed into YAML for host config

Public URL of the API address of the reverse proxy/tls terminator

Options for the Drupal PHP pool

Target node name on the IBM TSM server.

Disables scan for overlapping BSSs in HT40+/- mode

Path to file containing local secret key in binary or hexadecimal form.

Absolute path to the certificate to load

See torrc manual.

Local UDP port.

Output scale configuration

User account under which this instance of redis-server runs.

Automatically start this unit at the given date/time, which must be in the format described in systemd.time(7)

Listen address of Go Ethereum metrics service.

Options for PHP's php.ini file for this Drupal site.

Whether to enable this proxy cache path entry.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

(optional) name your peer has for you

(optional) name your peer has for you

Settings that should be passed to rsync via long options

Path to key file

The address of the proxy.

How to display the tag when focused.

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

Canonical hostname for the server.

Path of the source file.

Canonical hostname for the server.

The URL at which to fetch the feed.

The volume driver to use.

The labels to apply to the volume.

Path of UNIX socket of log forwarder

Whether to enable watching for repo.

Optional url of remote repository

Optional branch in remote repository

Whether to enable Bitcoin daemon.

The name of the group for this authelia instance.

PostgreSQL host for operating remotely.

IP Address of a database server

IP Address of a database server

Set size to shared memory zone.

Extra configuration lines to add to THIS channel's configuration.

The number of shares required to store a file.

Hostname of the database to connect to

Structural Kimai's local.yaml configuration

Listen address of Go Ethereum Auth RPC API.

Whether to run the check command with the provided checkOpts options.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Shell commands to run when file has changed between generations

Shell commands to run when file has changed between generations

Address to bind on for API connections relied by the reverse proxy/tls terminator.

Port to bind on for API connections relied by the reverse proxy/tls terminator.

The repo of the Helm chart

Whether to enable storage service.

URI to bind the wyoming server to.

The path of a PEM encoded TLS private key

The path of a PEM encoded TLS private key

Print global archive statistics upon completion

Name of the heat source.

Attribute set of NetBird client daemons, by default each one will:

1. be manageable using dedicated tooling:

• netbird-<name> script,
• NetBird - netbird-<name> graphical interface when appropriate (see ui.enable),

2. run as a netbird-<name>.service,
3. listen for incoming remote connections on the port 51820 (openFirewall by default),
4. manage the netbird-<name> wireguard interface,
5. use the /var/lib/netbird-/config.json configuration file,
6. override /var/lib/netbird-/config.json with values from /etc/netbird-/config.d/*.json,
7. (hardened) be locally manageable by netbird-<name> system group,

With following caveats:

• multiple daemons will interfere with each other's DNS resolution of netbird.cloud, but should remain fully operational otherwise

Automatically start this unit at the given date/time, which must be in the format described in systemd.time(7)

The plugin.

Additional command line parameters

Location of the DokuWiki state directory.

Hostname of server running iodined

A list of options for 'restic check'.

Whether to run the rspamd worker.

The path of a device which is mounted for the volume.

Whether to create the volume on boot.

Basic Auth protection for a vhost

Additional names of virtual hosts served by this virtual host configuration.

Keeps the specified running while this unit is running

Specifies the frequency band to use, possible values are 2g for 2.4 GHz, 5g for 5 GHz, 6g for 6 GHz and 60g for 60 GHz.

TTL for dnssec records

Path to a certificate signing request to apply when fetching the certificate.

If set, the pam_mysql module will be used to authenticate users against a MySQL/MariaDB database.

The hash of the packaged Helm chart

Number of ElGamal/AES tags to send.

The schedule in which data is persisted to disk, represented as a list of lists where the first element represent the amount of seconds and the second the number of changes

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Start the specified units when this unit is started.

Start the specified units when this unit is started.

Arguments passed to date to create a timestamp suffix for the archive name.

Absolute path to the certificate to load

If set, the calling user's SSH agent is used to authenticate against the configured keys

Require TLS or TLS-PSK encryption

Require TLS or TLS-PSK encryption

Name of the theme to use for the lightdm-gtk-greeter.

URL of the accounts server.

Name to match.

The number of distinct storage nodes required to store a file.

User or group to restrict

Path to the directory where the pastes will be saved to

Adds DirectoryIndex directive

Alias directory for requests

Name of the font to use.

Network interface to bind to.

Name of the user to log in

Limit refresh time for secondary zones

The delay time (in microseconds) on failure.

The external address where the host can be reached

Whether to try to create home directories for users with $HOMEs pointing to nonexistent locations on session login.

Additional TLS/SSL-related configuration options

(optional) human-readable name for peer

(optional) human-readable name for peer

Keeps the specified running while this unit is running

Your yandex.com login name.

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

Create an individual listening socket

A local file path specifying the location of the mount point.

This option provides a simple way to serve individual, static files.

Type of this limit

Name of the wrapper that is installed into PATH

Path to the key file.

Maps kanidm groups to values for the claim.

Order of this location block in relation to the others in the vhost

Optional slot number of the token that stores the certificate.

This optional key can be used to request that the service be registered with the mDNSResponder(8)

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Number of CPUs to allocate to the machine

Swap size in MB for the machine

Number of ElGamal/AES tags to send.

Path to the SSH host public key.

Shell commands to run after borg create

Whether to run 'restic check' with the provided checkOpts options

Each attribute in this set specifies an option in the [Unit] section of the unit

Specify the bind mode that the bind is used in

Whether to enable the QUIC transport protocol

The account type

The port where the host can be reached

The znapzend backup plan to use for the source

The user's shell

The path to the xkb compat file

Subordinate group ids that user is allowed to use

Subordinate user ids that user is allowed to use

Set the logcheck level.

Number of daily snapshots.

Whether to enable this source.

ID of the user in initrd.

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

The Postgresql hostname or socket path OnlyOffice should connect to.

Database user.

Extra configuration options to put at the end of this BSS's defintion in the hostapd.conf for the associated interface

Item this limit applies to

The address that Anubis listens to

Apache configuration can be done by adapting services.httpd.virtualHosts.

A list of options for 'restic check'

These lines go to the end of the location verbatim.

Kissattach parameters for this interface.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Each attribute of this option defines a systemd service that runs an OpenVPN instance

Extra configuration values that you want to insert into settings.php

The hostname the web service appears under.

This optional key can be used to request that the service be registered with the mDNSResponder(8)

Name of the theme to use for the lightdm-enso-os-greeter

Name of user to run the script under.

Number of simultaneous ‹name› tunnels.

The user as which to run blockbook-frontend-‹name›.

Database name.

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

Group account under which this instance of redis-server runs.

Whitelists the given rrl-types.

The IP and port to forward all traffic to.

The IP and port to forward all traffic to.

Database host address.

Database host port.

Generic name of the application.

Whether to update /var/log/wtmp.

Each attribute in this set specifies an option in the [Unit] section of the unit

Don't send the password immediately after login, but store for PAM session.

The input type

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Location of the dokuwiki acl rules

Path to the accounts file.

Whether PostgreSQL should listen on all network interfaces

Whether to enable Unix Domain Socket at /run/memcached/memcached.sock instead of listening on an IP address and port

Whether PostgreSQL should listen on all network interfaces

Name of the network interface managed by this client.

Name of the network interface managed by this client.

Create an individual listening socket

Run specified command or script after the tunnel device has been opened.

User that runs the cronjob.

Paths to SSL files

Whether this node is a relay.

Name of the platform

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If enabled, the pam_umask module will be loaded.

Shell commands to execute when the event is triggered.

Regex specifying which log lines to ignore.

The external location that the node should listen on

Number of simultaneous ‹name› tunnels.

Key of taint.

Name (relative to the root of the filesystem) of the subvolume where the hash table will be stored.

Combined stdout and stderr log file for the Colima service.

Packages added to the service's PATH environment variable

Path of the source file or directory

Start the specified units when this unit is started.

Start the specified units when this unit is started.

Whether the luksOpen will be attempted before LVM scan or after it.

Whether to enable HTTPS in addition to plain HTTP

Whether to enable HTTPS in addition to plain HTTP

Attribute set describing resource limits

Arguments passed to the main process script

Name of the database user to initialise the database with

Allow client if common name appears in the list.

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Full legal name

Name of the icon theme to use for the lightdm-gtk-greeter.

The type of the service

FastCGI parameters to override

Instead of binding to an IP address like 127.0.0.1, you may bind to a Unix socket

Real name

Path to the certificate file.

Log level of the NetBird daemon.

Log level of the NetBird daemon.

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Path to the private key to the matching certificate signing request.

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

Absolute path to the certificate to load

Whether the delay after typing a wrong password should be disabled.

INI sections and values to populate the Image Quadlet.

INI sections and values to populate the Build Quadlet.

Name of the theme to use for the lightdm-slick-greeter.

How frequently to change keys

How frequently to change keys

If set, fingerprint reader will be used (if exists and your fingerprints are enrolled).

The number of shares required to reconstitute a file.

The relationship with upsd

Remote UDP port

Permission level to restrict the actor(s) to

Path to the working directory (used for config and pidfile)

If enabled, checks all masters for the last zone version

Allow client if organizational unit name appears in the list.

Hostname or address of the postgresql server

Host to use for the destination dataset

If set, users listed in $XDG_CONFIG_HOME/Yubico/u2f_keys (or $HOME/.config/Yubico/u2f_keys if XDG variable is not set) are able to log in with the associated U2F key

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

The user names of the group members, added to the /etc/group file.

If the specified units are started at the same time as this unit, delay this unit until they have started.

NNTP group name for the inbox.

The ax25-tools package to use.

Enable verbose output, default is to not be verbose.

Refer to xrandr(1) for the documentation of the transform matrix.

The username OnlyOffice should use to connect to Postgresql

Whether to enable frp.

Akkoma frontend reference.

The tinc_pre package to use.

Enable or disable TTY auditing for specified users

E-mail address of the server administrator.

A state directory used by NetBird client to store config.json, state.json & resolv.conf.

A state directory used by NetBird client to store config.json, state.json & resolv.conf.

The path to the user's shell

Path to host the API on and forward to the daemon's api port

Whether the PPP session is automatically started at boot time.

Automatically allocate subordinate user and group ids for this user

Name of the kernel module that provides the card.

Controls how long to wait for a Neighbor Advertisement Message before invalidating the entry, in milliseconds.

Directory for the acme challenge which is PUBLIC, don't put certs or keys in here

Directory for the ACME challenge, which is public

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Whether to enable HTTPS and reject plain HTTP connections

Whether to enable HTTPS and reject plain HTTP connections

The email address used to authenticate as this account

This option provides a simple way to serve individual, static files.

Arguments passed to the main process script

User under which to run the service

Host to use for the database

Denied client IP ranges, these gets evaluated after the allowed IP ranges, defaults to all IPv4 addresses: [ "0.0.0.0/0" ] To block all other access than the allowed.

Create an individual listening socket

Port to listen on

The path to the xkb symbols file

Canonical hostname for the server.

Value of this limit

Path of the source .yaml file.

Whether this manifest file should be generated.

Controls presence of netbird-ui wrapper for this NetBird client.

Controls presence of netbird-ui wrapper for this NetBird client.

Indicates the priority over identical Subnets owned by different nodes

This setting configures the name of a mailbox for which administrator scripts are configured

Location of blockbook-frontend-‹name› data directory.

Extra parameters to append to redis-server invocation

Public domain of the API address of the reverse proxy/tls terminator.

Bootable image to use for the machine

The auth adapter type

If set to false, the user account will not be created

Name of the icon theme to use for the lightdm-enso-os-greeter

By default data is only periodically persisted to disk, enable this option to use an append-only file for improved persistence.

Timeout, in seconds, after which an attempt to connect to the target or a protocol handshake will be aborted (and the connection dropped) if not completed

Commands executed after the profile is successfully applied

The bitcoind package to use.

The type of the desktop entry.

Access Control Lists: see https://www.dokuwiki.org/acl Mutually exclusive with services.dokuwiki.aclFile Set this to a value other than null to take precedence over aclFile option

The group as which to run blockbook-frontend-‹name›.

Count of subordinate user ids

Count of subordinate group ids

Basic Auth password file for a vhost

This optional key can be used to request that the service be registered with the mDNSResponder(8)

The piper-tts package to use.

The client authentication stance for this policy.

Enable systemd socket activation.

Short description for the zone.

Rich rules for the zone.

Ports to allow in the zone.

The restic package to use.

The restic package to use.

The configuration file path to supply bitcoind.

Allow client if URI subject alternative name appears in the list.

Allow client if DNS subject alternative name appears in the list.

Whether to accelerate the underlying onnxruntime library with CUDA.

Instead of synchronizing just the mailboxes that match the farPattern, use it as a prefix which is not matched against the patterns, and is not affected by mailbox list overrides.

Whether to enable kTLS support

Group running the ACME client.

Whether to enable remove bind.

Packages added to the service's PATH environment variable

The server name.

How often to fsync the append-only log, options: no, always, everysec.

Whether to join this channel on connect.

The frp consists of client and server

If set, users listed in ~/.yubico/authorized_yubikeys are able to log in with the associated Yubikey tokens.

Email address to which to send feed items

Interface name

Hostname alias(es).

Username for this DDNS provider.

Aliases of that unit.

Aliases of that unit.

Root directory for requests.

Root directory for requests.

Root directory for requests.

Username from upsd.users for accessing this UPS

Any additional text to be appended to the wp-config.php configuration file

Text of the file.

Attributes for user's entry in pam_mount.conf.xml

Whether to use HTTPS for this DDNS provider.

Path to 64x64 logo png.

Path to 32x32 logo png.

Enable SSL.

Name displayed when sending mails.

Tag list.