Create the home directory when creating the user.

Whether to create the home directory and ensure ownership as well as permissions to match the user.

The user's home directory mode in numeric format

The user's home directory mode in numeric format

Indicates whether this is an account for a “real” user

Indicates whether this is an account for a “real” user

Configuration for users.

Whether to create the home directory and ensure ownership as well as permissions to match the user.

Additional user accounts to be created automatically by the system

Whether to configure zsh as an interactive shell

Path to encrypted luks device that contains the user's home directory.

Specifies the hashed password for the user

Alias of users.users.

The name of the user account

The name of the user account

Specifies the initial hashed password for the user, i.e. the hashed password assigned if the user does not already exist

If set to true, you are free to add new users and groups to the system with the ordinary useradd and groupadd commands

Specifies the hashed password for the user

Path to encrypted luks device that contains the user's home directory.

The user's UID.

The user's primary group.

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Specifies the initial hashed password for the user, i.e. the hashed password assigned if the user does not already exist

The account UID

The user's home directory.

The user's home directory

The user's primary group.

The name of the group

The group's name

The user to run Memos as.

The path to the user's shell

The user's shell

Attributes for user's entry in pam_mount.conf.xml

The name of the user account

Whether to make the user account hidden.

If set to false, the user account will not be created

The name of the group

Whether to enable or disable lingering for this user

Subordinate group ids that user is allowed to use

Subordinate user ids that user is allowed to use

The user's auxiliary groups.

Automatically allocate subordinate user and group ids for this user

Set the date on which the user's account will no longer be accessible

Indicates if the user is a system user or not

The group's GID.

Count of subordinate user ids

Count of subordinate group ids

The group GID

The set of packages that should be made available to the user

The set of packages that should be made availabe to the user

Users that intend to use BenchExec

Start of the range of subordinate user ids that user is allowed to use.

Start of the range of subordinate group ids that user is allowed to use.

If true, the user's shell will be set to users.defaultUserShell.

The account UID

The user's home directory.

The user's primary group.

The group GID

Specifies the (clear text) password for the user

Add the necessary actions for a upsmon process to work

A short description of the user account, typically the user's full name

The path to the user's shell

Username for JSON-RPC connections.

Attributes for user's entry in pam_mount.conf.xml

A short description of the user account, typically the user's full name

Allow the user to do certain things with upsd

The group's members.

If set to false, the user account will not be created

By default, nixos will check that programs

By default, nix-darwin will check that programs

The user names of the group members, added to the /etc/group file.

The distinguished name of the search base.

Subordinate user ids that user is allowed to use

Subordinate group ids that user is allowed to use

The user's auxiliary groups.

Specify the rules for which files to read on the host

Whether to enable or disable lingering for this user

The full path to a file that contains the hash of the user's password

Automatically allocate subordinate user and group ids for this user

ID of the user in initrd.

Specifies the initial password for the user, i.e. the password assigned if the user does not already exist

Let the user initiate specific instant commands

Set the date on which the user's account will no longer be accessible

The user names of the group members, added to the /etc/group file.

Indicates if the user is a system user or not

Whether to enable PdfDing service

Count of subordinate group ids

Count of subordinate user ids

The full path to a file that contains the user's (clear text) password

The set of packages that should be made available to the user

The path to the user's shell in initrd.

Group the user belongs to in initrd.

Start of the range of subordinate group ids that user is allowed to use.

Start of the range of subordinate user ids that user is allowed to use.

If true, the user's shell will be set to users.defaultUserShell.

A list of verbatim OpenSSH public keys that should be added to the user's authorized keys

A list of verbatim OpenSSH public keys that should be added to the user's authorized keys

Specifies the clear text password for the account

Username

A list of files each containing one OpenSSH public key that should be added to the user's authorized keys

A list of files each containing one OpenSSH public key that should be added to the user's authorized keys

RPC user information for JSON-RPC connections.

Specifies the path to a file containing the clear text password for the account

Enables the use of the ~/.ssh/authorized_keys file

The name of table that maps unique login names to the passwords.

The name of the column that contains a unix login name.

Per-user rules for creation, deletion and cleaning of volatile and temporary files automatically

Specifies the (clear text) password for the user

A short description of the user account, typically the user's full name

Specifies the password hash for the account, generated with grub-mkpasswd-pbkdf2

Password HMAC-SHA-256 for JSON-RPC connections

The group's description.

A list of verbatim principal names that should be added to the user's authorized principals.

Location of the dokuwiki users file

By default, nixos will check that programs

List of UIDs of all users for which this application is allowed location info access, Defaults to an empty string to allow it for all users.

Specifies the path to a file containing the password hash for the account, generated with grub-mkpasswd-pbkdf2

SHA-512 password hash (can be generated by mkpasswd -m sha-512 <password>)

Name of the UKI

User name accepted by anki-sync-server.

The family name of the font within the package.

The full path to a file that contains the hash of the user's password

Specifies the initial password for the user, i.e. the password assigned if the user does not already exist

The name of the database containing the users

The name of the table used for password alteration

The name of the theme within the package.

The name of the column in the log table to which the name of the user being authenticated is stored.

The name of the column in the log table to which the name of the user being authenticated is stored.

Maximum number of concurrent connections to the proxy for this user

A list of verbatim OpenSSH public keys that should be added to the user's authorized keys

Control client access to topics on the broker.

A list of files each containing one OpenSSH public key that should be added to the user's authorized keys

The name of the table to which logs are written.

The name of the column in the log table to which the name of the remote host that initiates the session is stored

The family name of the font within the package.

The family name of the font within the package.

The family name of the font within the package.

The name of the system used in the system.build.toplevel derivation

Whether to ensure that this user is present or absent.

The name of the column or an SQL expression that indicates the status of the user

The name of the column in the log table to which the description of the performed operation is stored.

The name of the theme within the package.

The name of the theme within the package.

The name of the theme within the package.

The name of the icon theme within the package.

The name of the column in the log table to which the pid of the process utilising the pam_mysql authentication service is stored.

Specifies the (clear text) password for the MQTT User.

A list of verbatim principal names that should be added to the user's authorized principals.

The name of the column in the log table to which the timestamp of the log entry is stored.

Whether to try to create home directories for users with $HOMEs pointing to nonexistent locations on session login.

The name of the column that contains a (encrypted) password string.

Password for the user

Specifies the path to a file containing the clear text password for the MQTT user

The name of this nylon instance.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

A unique ID that links the agent to Pareto Cloud

Specifies the hashed password for the MQTT User

The name of the icon theme within the package.

The name of the icon theme within the package.

The name of the icon theme within the package.

Specifies the path to a file containing the hashed password for the MQTT user

Name of the zone.

A list of user names that belong to the organization.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Name of the PPP peer.

Specific name of the application.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The name of the cursor theme within the package.

Name of the action.

Name of the image

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The name of the cursor theme within the package.

The name of the cursor theme within the package.

The name of the cursor theme within the package.

The endpoint name.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Etcd unique node name.

The distinguished name to use to bind to the LDAP server when the root user tries to modify a user's password.

The endpoint name.

The name of this systemd unit, including its extension

Name of the control, as it appears in alsamixer

Name of the PAM service.

The name of the cask to install.

The name of the formula to install.

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

Name of the worker

The name of this systemd unit, including its extension

The cursor name within the package.

The unique name for THIS channel in THIS group

Name of modem device, will be searched for in /dev.

Name i2pd appears in UPnP forwardings list.

The name of the node which is used as an identifier when communicating with the remote nodes in the mesh

The name of this systemd unit, including its extension

Profile name.

Profile name

The profile's name.

Automatically create missing mailboxes within the given mail store.

Specifies the Name of the Storage daemon.

The name of the network interface to match against.

Unique identifier of the account

The family name of the font within the package.

Name of the runner to configure

Name of the runner to configure

The friendly name you give to the network device

The friendly name you give to the network device

The endpoint name.

The endpoint name.

The distinguished name to bind to the LDAP server with

This library's name.

Database name.

The name of this group for this account

When clone_target is unspecified, this is the name of a formula repository to tap from GitHub using HTTPS

The language to use for personal names.

Profile name.

Name of the redis server

Name for the device

The endpoint name.

The endpoint name.

The name of the Helm chart

The director name used by the system administrator

The client name that must be used by the Director when connecting

A system user name for this client instance.

A system user name for this client instance.

Mail "from" name.

Keyboard name.

Whether to generate and add a script to the system path, that has the same environment variables set as the systemd service

Whether to generate and add a script to the system path, that has the same environment variables set as the systemd service

Database name.

Akkoma frontend name.

The name of the host

The name of the Helm chart

The theme name.

The unique agent name.

The name of the service to run

Create the database and database user locally.

The name of the agent as seen in the buildkite dashboard.

The name of the agent as seen in the buildkite dashboard.

Agent name, usually same as the hostname

Agent name, usually the same as the hostname.

The name of the plugin.

Unique identifier of the account

Name of the site.

Text of the file

Unique identifier of the contact account

The name of the theme within the package.

The name of the instance.

Name of the tmux window;

Font name, as used by fontconfig.

Create the database and database user locally.

The name of the plugin.

Name of the font to use for regreet.

Mail "reply-to" name.

Name is referenced in logs

Whether to create the target namespace if not present.

Name of the redis server

Container name, e.g., shopping.

Table name.

Name of the GNOME Shell theme.

The endpoint name.

The name to return in service discovery responses for the MUC service itself

Unique identifier of the calendar

Name is used as a suffix for the service name, user, and group

Text of the file

Name of the rule.

Name of the plugin.

Name of the plugin.

Whether to create the target namespace if not present.

Name of the Docker context

Profile name.

Container name, e.g., shopping.

Name of the theme to use for regreet.

Name of the machine when registering it at the central or local api.

Name of the iSCSI initiator to boot from

The name of the mailbox.

Name of the interface.

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

The name of an explicit dtb to be loaded, relative to the dtb base

The endpoint name.

Name of the existing database.

Name of directory from which to import ZFS device, this is passed to zpool import as the value of the -d option

The name of the service to run

The logical name of the Galera cluster

The name of the plugin.

The name of the server

Name of the user to ensure.

Name of the interface

Path to target file relative to HOME.

Borg command to use for archive creation

Name of the beat

Name of the wiki.

Name of the server.

The serial port to which your UPS is connected. /dev/ttyS0 is usually the first port on Linux boxes, for example.

Database name.

Database name.

Name of this iscsi initiator

Text of the file

Text of the file

Database name.

Name of the icon theme to use for regreet.

The name of the watcher

The endpoint name.

Name of the profile.

Database name.

Whether this file should be generated

The database name

The name of this gateway as shown in firezone

The name of the cookie that the oauth_proxy creates.

Name of the group members of which will be allowed to create usershares

Name of ICMP pinging job.

The name of this authentication provider

Server name to be used for this virtual host

Create the database and database user locally.

Container name, e.g., shopping.

Whether to enable ‹name›.

Database name, only used when the databse is created locally.

The advertised name for zeroconf discovery.

Name associated with the build

Path to target file relative to xdg.dataHome.

The endpoint name.

Database name.

Database name.

Database name.

Name of the redis server

Whether to exclude Home Manager generated symbolic links from the backups

This feed account's name.

The name of the host in the network as well as the configuration for that host

This primary server will notify all given secondary servers about zone changes

The name of this actor

The name of this group

The name of the immich database.

Program to execute, possibly with arguments.

Name of the service.

Whether the target path should be unconditionally replaced by the managed file source

Whether this file should be generated

The name of the database to use for Wakapi.

Name of symlink

Database name

Unique identifier of the boxxy rule

Database name.

Drive name without the full path.

name of the virtualhost

The name of an existing user account under which the rsync process should run.

The name of the device.

The name of the device.

Icon to display in file manager, menus, etc.

The name identifying the runner instance towards the Gitea/Forgejo instance.

This profile's name.

The flake reference from is rewritten to.

The flake reference to which from> is to be rewritten.

Name of the cursor theme to use for regreet.

The name of this client as shown in firezone

Each attribute of this option defines a systemd service that runs hans

Text of the file

Path to target file relative to xdg.cacheHome.

The name of this relay group

Adapter name that is used in the radicle-ci-broker configuration

Specify the program to run to talk to this UPS. apcsmart, bestups, and sec are some examples.

Database name.

Database name.

The name of the hook

Name of this overlay

Whether the target path should be unconditionally replaced by the managed file source

The name of this server.

Path to target file relative to xdg.stateHome.

Text of this systemd unit.

Name of symlink

Name of the plugin linked to $XDG_CONFIG_HOME/ranger/plugins/

PostgreSQL database name

The name of an existing user group under which the rsync process should run.

The name of this gateway as shown in firezone

The name of this systemd unit, including its extension

Database name.

Whether this file should be generated

Whether this file should be generated

The flake reference to be rewritten.

The flake reference to be rewritten.

Server name.

This is the target address is to match against

Name of symlink

Name of the local AutoSSH session

Name of the local AutoSSH session

Display name of the radio station.

Name of the existing database (has no effect if type is "sqlite").

Name used to derive peer unit name.

This optional key can be used to request that the service be registered with the mDNSResponder(8)

Name of symlink

The name of this gateway group

Specifies the real host name to log into.

Path of the source file or directory

The name of this resource

The name of the wrapper program

Lines which would be added inside ups.conf for handling this UPS.

Domain to fetch certificate for (defaults to the entry name).

Name of symlink (relative to /etc)

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

When set to something distinct to null NSD is able to collect statistics per zone

Each attribute of this option defines a systemd service that runs iodine

Name of the snippet.

Whether the target path should be unconditionally replaced by the managed file source

Whether the target path should be unconditionally replaced by the managed file source

Alias of home.pointerCursor.name.

The name of the dawarich database.

MySQL database name.

Database name for FreshRSS.

Path to target file relative to xdg.configHome.

Name of the satellite.

Bind port for ‹name› endpoint.

Node name

The name of services's user

Name of the beat

User to run the cgit service as.

Create the database and database user locally.

Path of the source file or directory

Name of the game as it will appear in the game listing.

Bind port for ‹name› endpoint.

Text of this systemd unit.

The account name

Name of the modifier.

Shell commands to run when file has changed between generations

The specified name-string gives the system file name of the storage device managed by this storage daemon

Database name.

Start the specified units when this unit is started.

The flake reference from is rewritten to

The flake input from is rewritten to.

The flake input from is rewritten to.

The flake input to which from> is to be rewritten.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Whether this file should be generated

This optional key specifies the node to connect(2) or bind(2) to.

The name of the file or block device that should be used as header for the encrypted device.

Set the log-level

Database name.

Override for package "short name", used for generating configuration

Whether to enable this mount.

Path to the directory storing the hooks

Path to the directory storing the hooks

This optional key tells launchctl what type of socket to create

The name of the file (can be a raw device or a partition) that should be used as the decryption key for the encrypted device

Where to mount this dataset.

Whether to enable automatic mounting.

Name of this virtual host

Profile name

Shell commands to run when file has changed between generations

Database name.

Database name.

This optional key implies SockFamily is set to "Unix"

Name for where mail coming from the remote (far) mail server will end up locally

Group to run the cgit service as.

Port number Go Ethereum will be listening on, both TCP and UDP.

If the specified units are started at the same time as this unit, delay this unit until they have started.

TLS options for virtual host

Target node name on the IBM TSM server.

S3 bucket name to use for HTTP-01 based challenges

The flake reference to be rewritten

Discourse database name.

Format: [AXFR|UDP] <ip-address> <key-name | NOKEY>

APIs to enable over WebSocket

Path of the source file or directory

Path of the source file or directory

Whether the target path should be unconditionally replaced by the managed file source

Replace any existing runner with the same name

Replace any existing runner with the same name

Name of the symlink (relative to /var/lib/rancher/k3s/server/manifests)

Rename nodes to different name.

Name of the PCM card to control (slave).

The set of system-wide known SSH hosts

Extra configuration lines to add to THIS channel's configuration.

Whether to enable ‹name›.

A path which will be scanned for repositories.

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

This optional key specifies the mode of the socket

Generic name of the application.

The nickname of this Tahoe node.

Interface name

The plugin.

Name of the remote read config, which if specified must be unique among remote read configs

This optional key can be used to request that the service be registered with the mDNSResponder(8)

DNS full-qualified domain name of a database server

DNS full-qualified domain name of a database server

What port to listen for client requests, default is 1080.

The name of the database to create.

Whether to enable ‹name›.

The name of the first admin user.

Start the specified units when this unit is started.

Start the specified units when this unit is started.

Start the specified units when this unit is started.

Interface name

A local file path specifying the location of the mount point.

VirtualHost to serve cgit on, defaults to the attribute name.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

ACME options for virtual host.

HTTP options for virtual host

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

SSID to be used in IEEE 802.11 management frames.

Database name.

cgit repository settings, see cgitrc(5)

Name of Google storage bucket

Name of the symlink (relative to /var/lib/rancher/rke2/server/manifests)

Port number of Go Ethereum HTTP API.

Location of the host path to be mounted.

Name of the remote write config, which if specified must be unique among remote write configs

Real name

The name of this client as shown in firezone

Shell commands to run when file has changed between generations

Shell commands to run when file has changed between generations

This optional key can be used to request that the service be registered with the mDNSResponder(8)

Proxy account name, without the possibility to include domain name ('at' sign is interpreted literally).

Name of the user to ensure.

Name of the user to ensure.

Whether to enable cgit.

The type of the device.

How to display the tag when focused.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Name of symlink

This optional key can be used to request that the service be registered with the mDNSResponder(8)

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Custom skills for Claude Code

Name of the model to download and use for speech synthesis

Name that will be shown.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Members of this group can access the control socket for this interface.

Packages added to the service's PATH environment variable

Blockchain garbage collection mode.

Whether to enable hub instance.

Database name.

Database name.

Name of database.

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Name of the kernel module that provides the card.

Path to a certificate signing request to apply when fetching the certificate.

The type of the desktop entry.

Interface to use when method is iface.

Whether to join this channel on connect.

Local secret key in hexadecimal form.

Instead of synchronizing just the mailboxes that match the farPattern, use it as a prefix which is not matched against the patterns, and is not affected by mailbox list overrides.

Listed primary servers are allowed to notify this secondary server

Whether the SSID is to be interpreted using UTF-8 encoding.

Aliases of that unit.

Aliases of that unit.

Name of the PostgreSQL database.

The name of the Linkwarden database.

Path of the source file or directory

Specify the bind mode that the bind is used in

Name of modem configuration file, will be searched for in config in the spooling area directory.

Database name.

Disable running fsck on this filesystem.

The name of the host in the network as well as the configuration for that host

This optional key specifies the service on the node to connect(2) or bind(2) to.

Whether to enable Go Ethereum Node.

Additional arguments passed to Go Ethereum.

Name of consistency check to run.

Local Mattermost database name.

Program to execute, possibly with arguments.

Bind address for ‹name› endpoint.

Name displayed when sending mails.

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

The name of the Grafana database.

Custom skills for Codex

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Backup type as described in: https://pgbackrest.org/command.html#command-backup/category-command/option-type

Name of the homebridge UI platform

Database name to use when connecting to an external or manually provisioned database; has no effect when a local database is automatically provisioned

Name of symlink

Determine whether the mounted path will be accessed in read-only mode.

Name of the PCM device to control (slave).

Set name to shared memory zone.

The node name of the device

The node name of the device

Name to display

Start the specified units when this unit is started.

Start the specified units when this unit is started.

Override the default TLS port for this virtual host.

Bind address for ‹name› endpoint.

Name of the MySQL database that holds EPGStation's data.

Name of the beat

IMAP4 patterns for which mailboxes on the remote mail server to sync

Root directory for requests.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Instance name.

Name for the filter.

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Whether to enable TLS support.

Path to the private key to the matching certificate signing request.

A program name specifying a Postfix service/daemon process

Set the host address for this virtual host

Name of the printer / printer queue

This optional key specifies the node to connect(2) or bind(2) to.

Output DPI configuration.

Output DPI configuration.

Shell commands executed as the service's main process.

Icon to display in file manager, menus, etc.

Verify peer certificate

Verify peer certificate

Start the specified units when this unit is started.

Start the specified units when this unit is started.

Group running the ACME client.

Whether to enable remove bind.

static: Immediately answer any Neighbor Solicitation Messages (if they match the IP rule). iface: Forward the Neighbor Solicitation Message through the specified interface and only respond if a matching Neighbor Advertisement Message is received. auto: Same as iface, but instead of manually specifying the outgoing interface, check for a matching route in /proc/net/ipv6_route.

Username used to connect to registry.

This optional key specifies the protocol to be passed to socket(2)

Shell commands to run when file has changed between generations

Output resolution.

Output framerate.

Output resolution.

Output framerate.

Mount point on the container file system.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

This optional key tells launchctl what type of socket to create

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Path of the source file.

Adds index directive.

Alias directory for requests.

How to name the created archives

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Whether the luksOpen will be attempted before LVM scan or after it.

Override the default HTTP port for this virtual host.

Whether the from reference needs to match exactly

Whether the from reference needs to match exactly

Whether the from reference needs to match exactly

The object to make available inside the initrd.

Name of symlink

Packages added to the service's PATH environment variable

Output video display controller.

Output video display controller.

The relationship with upsd

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

This optional key implies SockFamily is set to "Unix"

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Define a launchd job

Whether to enable DNSSEC.

Adds DirectoryIndex directive

Alias directory for requests

This optional key specifies the node to connect(2) or bind(2) to.

The cgit package to use.

The geth package to use.

Uhub plugin configuration.

Name of symlink

Aliases of that unit.

Aliases of that unit.

The server username of this account

Adds try_files directive.

Start URL of the site.

The actual zone data

Optional PKCS#11 module name.

Aliases of that unit.

Aliases of that unit.

Whether to enable the filesystem mount.

Isolate traffic between stations (clients) and prevent them from communicating with each other.

Enables nylon as a running service upon activation.

How to display the tag when unfocused

Change current mode after bind is executed

Marks the server as a backup server

The Flake URI of the NixOS configuration to use for the container

Name of this virtual host

Levels (minimum value for logged events): 0 = verbose debugging 1 = debugging 2 = informational messages 3 = notification 4 = warning

This optional key specifies the node to connect(2) or bind(2) to.

Label of the unlocked encrypted device

Output gamma configuration.

Output gamma configuration.

This optional key tells launchctl what type of socket to create

Remote public key in hexadecimal form.

Zone file resource records contain columns of data, separated by whitespace, that define the record.

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

This optional key specifies the mode of the socket

Packages added to the service's PATH environment variable

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Keeps the specified running while this unit is running

The domain name to collect stats for.

Username from upsd.users for accessing this UPS

Whether to enable Go Ethereum HTTP API.

Use a different name as mailbox name

Local name of the IBM TSM server, must not contain space or more than 64 chars.

This optional key tells launchctl what type of socket to create

Vertical scaling factor/pixels.

Horizontal scaling factor/pixels.

Horizontal scaling factor/pixels.

Vertical scaling factor/pixels.

Optional PKCS#11 module name.

The name of the database to store data in.

This optional key implies SockFamily is set to "Unix"

Label for this destination

A system group name for this client instance.

A system group name for this client instance.

Attribute set of NetBird client daemons, by default each one will:

1. be manageable using dedicated tooling:

• netbird-<name> script,
• NetBird - netbird-<name> graphical interface when appropriate (see ui.enable),

2. run as a netbird-<name>.service,
3. listen for incoming remote connections on the port 51820 (openFirewall by default),
4. manage the netbird-<name> wireguard interface,
5. use the /var/lib/netbird-/config.json configuration file,
6. override /var/lib/netbird-/config.json with values from /etc/netbird-/config.d/*.json,
7. (hardened) be locally manageable by netbird-<name> system group,

With following caveats:

• multiple daemons will interfere with each other's DNS resolution of netbird.cloud, but should remain fully operational otherwise

The MIME type(s) supported by this application.

Configuration for MPD

User name of file owner

Name of the homebridge

Specifies the MAC addresses to deny if macAcl is set to "deny" or "radius"

The device to update.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

Adds a return directive, for e.g. redirections.

ID of the group in initrd.

Shell commands executed as the service's main process.

Text of the file.

The hotkey.

This optional key implies SockFamily is set to "Unix"

Label to use for the name of the config file.

The vlan identifier

The database name.

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Start the specified units when this unit is started.

Start the specified units when this unit is started.

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

DNS full-qualified domain name of a database server

Whether to enable this PPP peer.

Port to bind the TTS server to.

User account under which this pool runs.

Whether to enable Operate silently.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

The underlying network device on which the tunnel resides.

Command executed as the service's main process.

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

This optional key specifies the mode of the socket

Whether to enable the output.

Output rotate configuration.

Whether to enable the output.

Output rotate configuration.

This can be set as a global variable above your first UPS definition and it can also be set in a UPS section

Put the host-side of the veth-pair into the named bridge

Container icon.

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

This optional key is a variant of SockPathName

A system group name for this client instance.

A system group name for this client instance.

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Path] section of the unit

Text of the file.

The network to connect to

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Specify the log file name

Each attribute of this option defines a systemd service that runs an OpenVPN instance

Server name to verify the hostname on the returned gRPC certificates

Specifies the MAC addresses to allow if macAcl is set to "allow" or "radius"

Master=false means slave server

Addresses who may request zone transfers.

Limit retry time for secondary zones.

Whether to enable this RAUC slot.

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

The time-to-live of the connection to the remote tunnel endpoint.

Shell commands executed as the service's main process.

This optional key specifies the mode of the socket

Interpolation method to be used for scaling the output.

Optional PKCS#11 module name.

Name shown in the website title and on the front page.

Directory for the ACME challenge, which is public

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

This optional key specifies what nice(3) value should be applied to the daemon.

When or how often the backup should run

These lines go to the end of cgitrc verbatim.

Shell commands executed to stop the service.

The IPv4 address assigned to the host interface. (Not used when hostBridge is set.)

Container ID

Database name to connect to

Adds DirectoryIndex directive

Alias directory for requests

Specifies the user to log in as.

Style to use for Qt5/Qt6 applications

Enable logging, default is no logging.

A program name specifying a Postfix service/daemon process

The specified name-string must be the generic SCSI device name of the autochanger that corresponds to the normal read/write Archive Device specified in the Device resource

Group name of file owner

An attribute set of option values passed to rclone mount

Tunnel type.

Aliases of that unit.

Aliases of that unit.

The database engine name

Environment variables used for this PHP-FPM pool.

Name of the tun device

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

The IPv6 address assigned to the host interface. (Not used when hostBridge is set.)

Container color.

Configuration for this host

Location of hardware kiss tnc for this interface.

Units that want (i.e. depend on) this unit

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Keeps the specified running while this unit is running

This optional key specifies the service on the node to connect(2) or bind(2) to.

Start the specified units when this unit is started.

Path to the file which contains the actual base64 encoded key

Domain name

Basic Auth protection for a vhost

The ID of the sound card

Pair of roots to synchronise.

Name of the class implementing the check

Type of the file system

Key type to use for private keys

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

Enables HTTP/3 over QUIC on the UDP port for TLS

Dataset name to send snapshots to.

Keeps the specified running while this unit is running

Keeps the specified running while this unit is running

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Guaranteed minimum hops for ‹name› tunnels.

Tunnel type.

Text of the file.

This required key uniquely identifies the job to launchd.

A list of host names and/or IP numbers used for accessing the host's ssh service

Minimum remaining validity before renewal in days.

Environment variables and their value to send to the server.

Aliases of that unit.

Aliases of that unit.

Container icon.

User name

GVPE node name

Path of the underlying encrypted block device.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

Keyset used for tunnel identity.

Group account under which this pool runs.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

The packaged Helm chart

Whether output should be marked as primary

Whether output should be marked as primary

Commands to run after new certificates go live

Guaranteed minimum hops for ‹name› tunnels.

The serial port speed of this interface.

The underlying network device on which the tunnel resides.

Optional slot number of the token that stores the certificate.

The name of the Stash Box

Name of the voice model to use

Units that want (i.e. depend on) this unit

Email address for account creation and correspondence from the CA

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Source directories.

Root directory for requests.

Output scaling method.

Output scaling method.

Port number of Go Ethereum metrics service.

Listen address of Go Ethereum HTTP API.

Specifies port number to connect on remote host.

Source of the custom plugin

The user as which to run bitcoind.

Blockchain sync mode.

Maximum peers to connect to.

Name shown in the server list.

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Container ID

Command executed as the service's main process.

pppd configuration for this peer, see the pppd(8) man page.

Whether to enable enable the bind

The font name, null to use system default.

This optional key specifies the service on the node to connect(2) or bind(2) to.

Path of the source file or directory.

The time-to-live of the connection to the remote tunnel endpoint.

Each attribute in this set specifies an option in the [Path] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Keyset used for tunnel identity.

List of configuration directives for this UPS.

A name for the drive

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

The ‹name› package to use.

command that will be execute

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

UUID of the stratis pool that the fs is located in

This is only relevant if you are using stratis.

Path to target relative to the vault's directory.

Port number of Go Ethereum Auth RPC API.

Whether to offload computation onto a CUDA compatible GPU.

FQIN of referenced Image when source is a file or directory archive.

This optional key specifies the protocol to be passed to socket(2)

Container color.

The path to repo in local machine

Text of the file.

Custom name of this poller.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Extra configuration to be appended to awstats.${name}.conf.

Each attribute in this set specifies an option in the [Exec] section of this unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Extra lines to append to this profile's config.

Optional slot number of the token that stores the certificate.

This optional key specifies the service on the node to connect(2) or bind(2) to.

Name of the user to log in

Shell commands executed after the service's main process has exited.

Shell commands executed to stop the service.

Name that will be shown to the user.

Tooltip for the entry.

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

Alias directory for requests.

Adds index directive.

Source of the plugin package or path

The location of the Drupal files directory.

The ID of your hook

Name of the class implementing the check

Override the default port on which to listen for connections.

Command executed as the service's main process.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

The port on which the tub will listen

The port on which the Web server will listen

Output position

Output position

Absolute path to the certificate to load

When to run the job.

Image to pull.

Service port

Environment variables to send from the local host to the server.

Path to a Containerfile which contains instructions to build the image.

Username used in the machine image

The data directory for bitcoind.

When or how often the backup should run

The packaged Helm chart

The location of the Drupal site state directory.

Start the specified units when this unit is started.

Operate on preset bindings or user bindings

Whether to enable redraw prompt after command.

The user's username.

Shell commands executed before the service's main process is started.

Specifies the BSSID for this BSS

Primary nickname.

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Extra lines to add to the tinc service configuration file

Name of a file containing the spiped key

Adds try_files directive.

Contents of the PAM service file.

Environment Variables to set in session.

cgit configuration, see cgitrc(5)

Configuration of uhub

This optional key specifies the protocol to be passed to socket(2)

Controls how long a valid or invalid entry remains in the cache, in milliseconds.

Keeps the specified running while this unit is running

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Keeps the specified running while this unit is running

Packages added to the service's PATH environment variable

The name of the module

Source ZFS dataset

Legacy RSA public key of the host in PEM format, including start and end markers

Local port of the encapsulation UDP socket.

This optional key specifies that launchd should adjust its log mask temporarily to LOG_DEBUG while dealing with this job.

Common name attribute of allowed peer certificates

Common name attribute of allowed peer certificates

The option to use this LUKS device with a GPG encrypted luks password by the GPG Smartcard

Location of bitcoind pid file.

Aliases of that unit.

Aliases of that unit.

Path to world folder containing the dimension to render

List of servers for inclusion in stub and secondary zones.

The IP interface to bind to. null means "all interfaces".

Guaranteed minimum hops for ‹name› tunnels.

The group of the wrapper program.

The group as which to run bitcoind.

The owner of the wrapper program.

Name of the runner group to add this runner to (defaults to the default runner group)

Name of the runner group to add this runner to (defaults to the default runner group)

Absolute path to the certificate to load

Which local IP to bind the UDP socket to.

Language of the environment

These lines go to the end of the location verbatim.

The address of the local endpoint which the remote side should send packets to.

The name of a .desktop file in the directory specified in the 'package' option.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

This optional key specifies the protocol to be passed to socket(2)

Text of the file.

Text of the file.

The name of the user for this authelia instance.

The name the camera will show up as.

When you have multiple UPSes on your system, you usually need to turn them off in a certain order. upsdrvctl shuts down all the 0s, then the 1s, 2s, and so on

Optional slot number of the token that stores the certificate.

This optional key is used to control whether your job is launched once at the time the job is loaded

The address on which to accept FastCGI requests.

Shell commands executed as the service's main process.

Enable unlocking and mounting of encrypted ZFS home dataset at login.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Errbot backend name.

Basic Auth password file for a vhost

Path to file containing local secret key in binary or hexadecimal form.

PostgreSQL host for operating remotely.

The kimai package to use.

The tahoelafs package to use.

Path of the authentication file.

This optional key specifies the user to run the job as

The certificate profile to choose if the CA offers multiple profiles.

Guaranteed minimum hops for ‹name› tunnels.

Vlan tag to apply to interface

Openvswitch type to assign to interface

List of channels that should be grouped together into this group

Identifier of the UPS to monitor, in this form: <upsname>[@<hostname>[:<port>]] See upsmon.conf for details.

Text of the file.

Text of the file.

The host to connect to.

The username to authenticate with.

The port to connect to.

GPG configuration.

Whether to enable the filesystem mount.

Whether to enable proxy for this bucket

Name of the heat source.

User name for authentication.

Keeps the specified running while this unit is running

Keeps the specified running while this unit is running

Source port of the external interface on host

Each attribute in this set specifies an option in the [Slice] section of the unit

Each attribute in this set specifies an option in the [Files] section of this unit

Name of the snippet.

Custom ordering of accounts and local folders in Thunderbird's folder pane

Whether to enable Drupal web application.

Extra arguments to pass to the server commandline.

Whether to enable Coqui TTS server.

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

Adds a return directive, for e.g. redirections.

Shell commands executed after the service's main process is started.

Shell commands executed when the service's main process is reloaded.

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Specifies the number of retries for failed notifies

If the specified units are started at the same time as this unit, delay this unit until they have started.

The set of actions made available to application launchers.

Definitions of SIIT instances of Jool

The user as which to run blockbook-frontend-‹name›.

Name to match.

The name of your network of sr.ht-based sites.

As which user the backup should run.

Path of the source file.

The subnets which this tinc daemon will serve

Override the default port on which to listen for JSON-RPC connections.

Shell commands executed after the service's main process has exited.

Specifies a file containing the MAC addresses to deny if macAcl is set to "deny" or "radius"

This optional key is a variant of SockPathName

Additional global flags to pass to all lego commands.

Owner's name.

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

If the specified units are started at the same time as this unit, delay them until this unit has started.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Commands to execute after the tmux-session is destroyed.

Whether to operate in tun (IP) or tap (Ethernet) mode.

Configure unit start rate limiting

Aliases of that unit.

DDNS server name.

This is the absolute path to the plugin executable.

Set maximum cache size

Path of certificates (*.{crt,cert,key}) used to connect to registry.

The name of the group for this authelia instance.

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

Absolute path to the certificate to load

IP of the Redis master

Network device to bind to.

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Extra zone config to be appended at the end of the zone section.

Shell commands executed before the service's main process is started.

The theme.conf file of the theme

The address of the remote endpoint to forward traffic over.

Name resolution of a backends host name is done at start up, or configuration reload

Listen for any Neighbor Solicitation messages on this interface, and respond to them according to a set of rules

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Path to the Public Key.

Type of the network.

Nickname in that network.

Container icon.

Settings for this site

Packages added to the service's PATH environment variable

The external address where the host can be reached

Path of the authentication file used to connect to registry.

Location of the backing encrypted device.

The port where the host can be reached

Number of simultaneous ‹name› tunnels.

Output scale configuration

Output scale configuration

The recommended idle time out (in seconds) to pass to the job

Number of power supplies that the UPS feeds on this system

URL of the site's web app manifest.

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Additional flags to pass to lego run.

List of virtual hostnames from which to accept requests.

IP address of server running hans

The location for users to install Drupal themes.

Limit refresh time for secondary zones.

Limit on the number of simultaneous connections allowed.

The proxy host to use to connect to the server.

Name of the platform

Definitions of NAT64 instances of Jool

Determines how multiple values are joined to create the claim value

Specifies if TLS should be enabled

Specifies if TLS should be enabled

The address of the local endpoint which the remote side should send packets to.

Whether to enable SFTP service.

Type of the file system

Each attribute in this set specifies an option in the [Timer] section of the unit

Set the execute bit

List of forwarded ports from host to container

Whether to show the message of the day.

Whether to enable the HTTP/3 protocol

If set, root doesn't need to authenticate (e.g. for the useradd service).

add will additionally listen for TLS connections. only will disable TLS connections. force will redirect non-TLS traffic to the TLS connection.

Specifies a file containing the MAC addresses to allow if macAcl is set to "allow" or "radius"

Override the default database cache size in MiB.

Hostname alias(es).

Username for this DDNS provider.

This optional key is a variant of SockPathName

Location of blockbook-frontend-‹name› data directory.

Location to serve cgit under.

Path of the source file.

Settings for this slot.

Address to which spiped should connect.

The labels to apply to the build.

Number of simultaneous ‹name› tunnels.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

The group as which to run blockbook-frontend-‹name›.

Configuration for the specific plugin, written to $XDG_CONFIG_HOME/streamlink/config. (linux) or Library/Application Support/streamlink/config. (darwin).

Limit retry time for secondary zones

Adds DirectoryIndex directive

Alias directory for requests

Default window size for this interface.

Path to plugin file.

Which slot on the YubiKey to challenge.

Container ID

Station MAC address -based authentication

GID of created file

UID of created file

List of address ranges allowed to query this zone

Arguments passed to date to create a timestamp suffix for the archive name.

Whether to enable Go Ethereum prometheus metrics.

IP and port to which this redis instance acts as a slave.

Shell commands executed as the service's main process.

The user ID owning the volume inside the container.

Secondary nickname.

The IPv4 address assigned to the interface in the container

This optional key can be used to request that the datagram socket join a multicast group

Basic Auth protection for a vhost

Whether to ask Let’s Encrypt to sign a certificate for this virtual host

If set, the OATH Toolkit will be used.

The name of private PKCS #8 key file for this policy to be found in the baseDirectory, or the absolute path to the key file

Whether to enable the wrapper.

Local UDP port.

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

Custom agent skills for opencode

File or block device to export.

If the specified units are started, then this unit is stopped and vice versa.

The port on which the SFTP server will listen

The JMAP configuration to use for this account.

The SMTP configuration to use for this account.

The IMAP configuration to use for this account.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Container color.

The address of the proxy.

Refer to xrandr(1) for the documentation of the transform matrix.

Refer to xrandr(1) for the documentation of the transform matrix.

The TCP port to accept connections

Each attribute in this set specifies an option in the [Slice] section of the unit

Keeps the specified running while this unit is running

Keeps the specified running while this unit is running

Print global archive statistics upon completion

The filename of the generated settings file

(optional) name your peer has for you

(optional) name your peer has for you

This optional key is a variant of SockPathName

Whether to enable Enables the axport interface.

Default maximum packet size for this interface.

The username to store inside the credentials file.

The IPv6 address assigned to the interface in the container

The prompt that will be sent to the Gemini model when the command is executed

Name of user to run the script under.

Host to use for the destination dataset

The drupal package to use.

Name of the wrapper that is installed into PATH

Icon to display in file manager, menus, etc.

FastCGI parameters to override

Whether to enable this .link unit

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Whether to enable Go Ethereum Auth RPC API.

Shell commands executed after the service's main process is started.

Shell commands executed when the service's main process is reloaded.

Filesystem type of Device. (used as -t in mount commands)

These lines go to the end of the location verbatim.

Text of the file.

Description of the UPS.

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

Order of this location block in relation to the others in the vhost

Whether to enable watching for repo.

Optional url of remote repository

The absolute path to the program to be wrapped.

Optional branch in remote repository

Whether to enable Bitcoin daemon.

Label of the device

Key / certificate pairs for the virtual host.

Key policy for zone signing keys

Key policy for key signing keys

Shell commands to run after borg create

Local address (and optionally device) to bind to using the given port.

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

Units that require (i.e. depend on and need to go down with) this unit

Units that require (i.e. depend on and need to go down with) this unit

Whether to enable debug logging for this certificate.

Shell commands executed when the instance is starting.

Name of the network interface managed by this client.

Name of the network interface managed by this client.

User name for authentication.

This optional key causes the job to be started if any one of the listed paths are modified.

Address to bind on for UI connections

Environment variables to set for the kernel.

Enable logging to the system logger.

Whether to enable Redis server.

Number of worker instances to run

The path of the web root directory.

Path to the certificate authority certificate.

Set the execute bit

Keep this unit running as long as the listed units are running

Local Redis instance name

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Whether this file should be generated

Path to the SSH key to use for authentication

Copy content of the image located at the mountpoint of the volume on first run.

This optional key specifies what value should be passed to umask(2) before running the job

port of the Redis master

Configuration for secure connections.

Configuration for secure connections.

Configure unit start rate limiting

The amount of time launchd waits before sending a SIGKILL signal

Authentication algorithm for this key.

Path of the source file.

The authentication method to use.

Options for the Kimai PHP pool

Check the host IP address in the known_hosts file.

The path to the xkb types file

Host pattern used by this conditional block

Allow client if common name appears in the list.

The address of the remote endpoint to forward traffic over.

Event type.

Aliases of that unit.

ACME Directory Resource URI

The account type

Run the rsync process with an inhibition lock taken; see systemd-inhibit(1) for a list of possible operations.

Extra configuration options to put at the end of this BSS's defintion in the hostapd.conf for the associated interface

Maximum number of items to keep in slow log.

This setting configures the name of a mailbox for which administrator scripts are configured

NNTP group name for the inbox.

Database name.

Name (relative to the root of the filesystem) of the subvolume where the hash table will be stored.

Maps kanidm groups to values for the claim.

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

TCP Port to bind on for UI connections

This optional key causes the job to be started every time a filesystem is mounted.

The profile name.

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

(optional) human-readable name for peer

(optional) human-readable name for peer

Allow client if organizational unit name appears in the list.

A list of host names and/or IP numbers used for accessing the host's ssh service

Whether to enable this PAM service.

Path or reference to the host key.

Extra configuration append to unit

Each attribute in this set specifies an option for a key in the plist. https://developer.apple.com/legacy/library/documentation/Darwin/Reference/ManPages/man5/launchd.plist.5.html

Location where the file system will be mounted

Path to the unix socket file on which to accept FastCGI requests.

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

If set, the OTPW system will be used (if ~/.otpw exists).

Configure unit start rate limiting

Configure unit start rate limiting

The key to use as listed in gpg --list-keys.

The address that Anubis listens to

Folder display name

Whether to enable this plugin

The type of log being collected.

Each attribute in this set specifies an option in the [Timer] section of the unit

Whether to add the setuid bit the wrapper program.

Whether to add the setgid bit the wrapper program.

The specified name-string names the type of media supported by this device, for example, DLT7000

Public address for p2p connections from peers (if TCP is used)

Whether to start the build on boot

Whether to pull the image on boot

Root path in filesystem of the smug project

User name for RPC connections.

Text of the file.

Profile path.

Whether the program runs in a terminal window.

The options to use for this LUKS device in YubiKey-PBA

Turns on or off the router flag for Neighbor Advertisement Messages.

The group ID owning the volume inside the container.

The type of this worker

The hotkey modifiers.

Manually specify the hostname

Interface and port to listen on to solve HTTP challenges in the form [INTERFACE]:PORT

Kissattach parameters for this interface.

This option provides a simple way to serve individual, static files.

Number of simultaneous ‹name› tunnels.

Page or namespace to restrict

The location of the Drupal config sync directory.

Keeps the specified running while this unit is running

Whether users can log in with passwords defined in /etc/shadow.

Specify the server verbosity level, options: debug, verbose, notice, warning.

The title of the boot menu entry.

Whether to enable helper service.

Means "this application exists, but don't display it in the menus"

Forcibly override any existing configuration for this extension.

Local address to bind to

Name of the bridge interface that wpa_supplicant should listen at.

Command and arguments to start the kernel.

TLS Options for the Director in this Configuration.

Bind address to be used for this server.

TLS Options for the Director in this Configuration.

Port the NetBird client listens on.

Port the NetBird client listens on.

Path to the SVG of the panel.

Indicates the priority over identical Subnets owned by different nodes

Turns on the OCSP Must-Staple TLS extension

Hostname of IMAP server.

Hostname of SMTP server.

If set to something else than symlink, the file is copied instead of symlinked, with the given file mode.

Similar to requires

APIs to enable over WebSocket

Path to the host certificate.

Allow client if URI subject alternative name appears in the list.

Allow client if DNS subject alternative name appears in the list.

DNS server to use as an intermediate relay to the iodined server

If the specified units are started, then this unit is stopped and vice versa.

Specifies the image the volume is based on when Driver is set to the image.

Profile ID

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Name of the font to use.

Whether to enable the desktop entry for this site.

Where to mount this dataset.

Number of simultaneous ‹name› tunnels.

Key of taint.

Whether the bridge interface should enable rstp.

The underlying network device on which the tunnel resides.

Name of the theme to use for the lightdm-gtk-greeter.

Device identifiers, as shown by keyd(1).

If given, sets the SO_MARK option on the TCP socket.

If given, sets the SO_MARK option on the TCP socket.

Require HTTPS and verification of certificates when contacting registries.

Require HTTPS and verification of certificates when contacting registries.

The prefix length of the subnet

Full legal name

The hostname the web service appears under.

Allow these IPs and TSIG to transfer zones, addr TSIG|NOKEY|BLOCKED address range 192.0.2.0/24, 1.2.3.4&255.255.0.0, 3.0.2.20-3.0.2.40

Your yandex.com login name.

The location for users to install Drupal modules.

Additional flags to pass to lego renew.

I2P nodes that are allowed to connect to this service.

Shell commands executed when the instance is shutting down.

URL where this inbox can be accessed over HTTP.

Whether to enable DHCP on the interfaces matched.

Enable PAM mount (pam_mount) system to mount filesystems on user login.

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

Path of the source file.

Remote UDP port

Path of the source file.

The external IP address or hostname where the host can be reached.

Units that require (i.e. depend on and need to go down with) this unit

Units that require (i.e. depend on and need to go down with) this unit

Run specified command or script after the tunnel device has been opened.

If the specified units are started, then this unit is stopped and vice versa.

If the specified units are started, then this unit is stopped and vice versa.

Name of group to run the script under

The email address used to authenticate as this account

Set the execute bit

Set the execute bit

Canonical hostname for the server.

Path of the source file.

Path of the source file.

Canonical hostname for the server.

The URL at which to fetch the feed.

The path to the socket to bind to.

The volume driver to use.

The labels to apply to the volume.

Port to bind on for p2p connections from peers (both TCP and UDP)

Address to bind on for p2p connections from peers (both TCP and UDP)

Keep this unit running as long as the listed units are running

Basic Auth password file for a vhost

The auth adapter type

The ax25-tools package to use.

Enable verbose output, default is to not be verbose.

Listen address of Go Ethereum metrics service.

Options for PHP's php.ini file for this Drupal site.

Whether to enable this proxy cache path entry.

Whether this file locals should be generated

Require TLS or TLS-PSK encryption

Require TLS or TLS-PSK encryption

Time in seconds to wait for the GPG Smartcard.

The znapzend backup plan to use for the source

The path to the xkb compat file

IP Address of a database server

IP Address of a database server

Set size to shared memory zone.

This allows you to pass arguments to the child program

The amount of time in seconds for a keyFile to appear before timing out and trying passwords.

These lines go to the end of the location verbatim.

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

Units that require (i.e. depend on and need to go down with) this unit

Units that require (i.e. depend on and need to go down with) this unit

Each attribute in this set specifies an option in the [Unit] section of the unit

The bitcoind package to use.

Domain part of the web interface URL (no web interface for this domain if null)

Name of the theme to use for the lightdm-enso-os-greeter

Additional command line parameters

Location of the DokuWiki state directory.

Hostname of server running iodined

A list of options for 'restic check'.

Whether to run the rspamd worker.

The path of a device which is mounted for the volume.

Whether to create the volume on boot.

Each attribute in this set specifies an option in the [Link] section of the unit

Whether this file should be generated

Key size in bits

Key size in bits

The time-to-live/hoplimit of the connection to the remote tunnel endpoint.

Match block conditions used by this block

Order of this location block in relation to the others in the vhost

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

The maximum volume in dB.

Database user.

Configure unit start rate limiting

Configure unit start rate limiting

Structural Kimai's local.yaml configuration

Listen address of Go Ethereum Auth RPC API.

Whether to run the check command with the provided checkOpts options.

The PHP package to use for running this PHP-FPM pool.

Each attribute in this set specifies an option for a key in the plist. https://developer.apple.com/legacy/library/documentation/Darwin/Reference/ManPages/man5/launchd.plist.5.html

Automatically start this unit at the given date/time, which must be in the format described in systemd.time(7)

Public URL of the API address of the reverse proxy/tls terminator

Options for the Drupal PHP pool

Forcibly override any existing configuration for this extension.

To enable SSL, specify path to the name of certificate files without extension

The nickname of this Tahoe introducer.

Protocol names to hide in summary tables (RE2 syntax),

Port number of Go Ethereum WebSocket API.

The configuration file path to supply bitcoind.

If the device does not currently contain a filesystem (as determined by blkid), then automatically format it with the filesystem type specified in fsType

Whether to enable Whether to enable this plugin.

User or group to restrict

Path to the directory where the pastes will be saved to

Disables scan for overlapping BSSs in HT40+/- mode

The name of the module

Address to bind on for API connections relied by the reverse proxy/tls terminator.

Port to bind on for API connections relied by the reverse proxy/tls terminator.

Text of the init script file. if this option is null then source must be set.

This optional key specifies the group to run the job as

Any additional text to be appended to the wp-config.php configuration file

Each attribute in this set specifies an option in the [Network] section of this unit

Each attribute in this set specifies an option in the [Socket] section of the unit

If set, keys listed in ~/.ssh/authorized_keys and ~/.eid/authorized_certificates can be used to log in with the associated PKCS#11 tokens.

This is a rule that the target address is to match against

Type of this limit

Database host address.

Database host port.

Name of the icon theme to use for the lightdm-gtk-greeter.

Additional names of virtual hosts served by this virtual host configuration.

A list of extra domain names, which are included in the one certificate to be issued.

Keeps the specified running while this unit is running

This optional key specifies what nice(3) value should be applied to the daemon.

Settings that should be passed to rsync via long options

Name of the theme to use for the lightdm-slick-greeter.

Whether to support proxying websocket connections with HTTP/1.1.

Set the logcheck level.

Number of daily snapshots.

Whether to enable this source.

The protocol specifier for port forwarding between host and container

The path to the workdir