Group under which the chrony exporter shall be run

If provided, adds a prefix to indexes in Elasticsearch

Attribute set of feed accounts

Whether to enable the "sx" pseudo-display manager, which allows users to start manually via the "sx" command from a vt shell

Whether to enable reattaching a program to the user's bootstrap session

Enable legacy crypto on this client

Whether to install the register_new_matrix_user script, that allows account creation on the terminal.

VRRP will normally preempt a lower priority machine when a higher priority machine comes online. "nopreempt" allows the lower priority machine to maintain the master role, even when a higher priority machine comes back online

List of allowed headers to be set by the user

Sets the pointer acceleration profile to the given profile

Whether the member list should be overwritten each time (true) or appended (false)

Whether to wrap the interpreter in a shell script

AH proposals to offer for the CHILD_SA

Make the Podman and Docker compatibility API available over the network with TLS client certificate authentication

Rendering mode of grafana-image-renderer:

• default: Creates on browser-instance per rendering request.
• reusable: One browser instance will be started and reused for each rendering request.
• clustered: allows to precisely configure how many browser-instances are supposed to be used

Whether to overwrite Jellyfin's encoding.xml configuration file on each service start

Additional arguments passed to each module in addition to ones like lib, config, and pkgs, modulesPath

Additional arguments passed to each module in addition to ones like lib, config, and pkgs, modulesPath

Additional arguments passed to each module in addition to ones like lib, config, and pkgs, modulesPath

Send notifications about killed processes via the system d-bus

Data Plane Development Kit is a framework for fast packet processing in data plane applications running on a wide variety of CPU architectures

Specifies the number of seconds between status packets sent back to the server

The configuration of vaultwarden is done through environment variables, therefore it is recommended to use upper snake case (e.g. DISABLE_2FA_REMEMBER)

Specifies if mapped OpenID Connect accounts are automatically created upon successful authentication

Whenever to send systembus-notify notifications

ESP proposals to offer for the CHILD_SA

Define a whitelist of allowed IP addresses or domains, with ports, to be used in data source URLs with the Grafana data source proxy

Periodically refresh the endpoint hostname or address for all peers

Enables MOBIKE on IKEv2 connections

Enables Aggressive Mode instead of Main Mode with Identity Protection

Specifies if mapped OpenID Connect accounts are automatically created upon successful authentication

List of IP address CIDR ranges that the URL preview spider is allowed to access even if they are specified in url_preview_ip_range_blacklist.

XFRM interface ID set on inbound policies/SA

Set of characters used as the delimiters for address extensions

Defines the base URI for the Hash and URL feature supported by IKEv2

XFRM interface ID set on outbound policies/SA

Netfilter mark and mask for output traffic

Netfilter mark and mask for input traffic

Sets the password(s) for WPA-PSK

Enable per-CPU CHILD_SAs

Netfilter mark applied to packets after the outbound IPsec SA processed them

Set to true to add the Content-Security-Policy header to your requests

Email will be sent by default with an HTML and a plain text body

List of local traffic selectors to include in CHILD_SA

If set, allows registration by anyone who also has the shared secret, even if registration is otherwise disabled