An SSH public key (as an absolute file path or directly as a string), usually generated by rad auth

Whether to support proxying websocket connections with HTTP/1.1.

Specify a filter for iptables to use when services.prometheus.exporters.tibber.openFirewall is true

How long after deactivation to keep a key in the zone

The traefik package to use.

Open port in firewall for incoming connections.

Username for connecting to Nextcloud

Path to a file containing the SOCKS5 password.

Open port in firewall for incoming connections.

Whether to enable Minio Object Storage.

Whenever to send e-mail notifications.

Optional Proxy URL.

The pghero package to use.

MySQL configuration

User name under which the junos-czerwonk exporter shall be run.

User name under which the dmarc exporter shall be run.

Scopes for the token request.

TCP port where Tautulli listens.

Configuration options for the taler exchange config file

Server configuration, see https://maddy.email for more information

IP address the RPC server will bind to.

Maximum bandwidth (in bits per second) that clients may send speech at.

Whether to enable Netclient Daemon.

OpenID authentication scopes.

Whether to delete the devices which are not configured via the devices option

The configuration of Pinchflat is handled through environment variables

The sanoid package to use.

Maximum number of queries served on a single TCP connection. 0 means no maximum.

Data storage directory

The port group variables for suricata.

Extra flags to pass to updatedb.

Attribute set of NetBird client daemons, by default each one will:

1. be manageable using dedicated tooling:

• netbird-<name> script,
• NetBird - netbird-<name> graphical interface when appropriate (see ui.enable),

2. run as a netbird-<name>.service,
3. listen for incoming remote connections on the port 51820 (openFirewall by default),
4. manage the netbird-<name> wireguard interface,
5. use the /var/lib/netbird-/config.json configuration file,
6. override /var/lib/netbird-/config.json with values from /etc/netbird-/config.d/*.json,
7. (hardened) be locally manageable by netbird-<name> system group,

With following caveats:

• multiple daemons will interfere with each other's DNS resolution of netbird.cloud, but should remain fully operational otherwise

The OAuth2 redirect URL.

Configuration for peertube-runner

Database username.

Whenever to send wall notifications to all users.

IPs and subnets that are authorized to connect for this device

A runtime directory used by NetBird client.

Home directory of the PlantUML server instance.

Port to listen on.

Extra commandline options to pass to the artifactory exporter.

File containing the URL of the database.

Cached data that has not been accessed for the time specified by the inactive parameter is removed from the cache, regardless of its freshness.

Optional Authorization header configuration.

User account under which Plex runs.

IPv4-specific configuration.

The host address qui listens on.

Address to listen on for the web interface, API, and telemetry.

On which port to run the management plugin

Run Suricata with a specific group-id.

Port number to listen on

Additional options given to netbird-mgmt as commandline arguments.

Whether to enable the HTTP/2 protocol

User to run mailman-web as

OAuth client ID.

Whether to enable the public-inbox mail archiver.

Whether to enable ollama server for local large language models.

Group under which the klipper exporter shall be run.

Whether this file should be generated

Metrics expose path

IO scheduler priority.

Whether to enable Syncthing relay service.

Whether to enable HTTP 2

The package being used by postgresql.

Verify Loki's certificate.

URL of the Matrix homeserver to use.

ncdns settings

Whether to enable dynamic tuning.

Turn-rs server config file

Host of the postgresql server

CI adapters

Publish contact information for this service

Access token for authentication against JFrog Artifactory API

If specified, public-inbox-watch(1) will only process mail containing a matching header.

Source directories.

Database host address.

Processes used by the mastodon-web service.

A path to directory writable by logstash that it uses to store data

Whether to enable support for booting from VDOLVs.

List of devices to monitor.

Ruutime directory of the pixelfed user which holds the application's caches and temporary files.

The navidrome package to use.

Host which to proxy requests to if ACME challenge is not found

If set, all requests for this host are redirected (defaults to 301, configurable with redirectCode) to the given hostname.

MQTT topic used for ESPHome messages.

PHP-FPM pools

The overseerr package to use.

Group under which Readarr runs.

Whether to enable Coqui TTS server.

Configuration for Sshwifty

The marytts package to use.

Command line arguments passed to Gunicorn server.

Set the mailing list domain

List of paths to transcoder executables that should be accessible from Subsonic

Whether to automatically open required firewall ports for master service.

Whether to enable periodic tarsnap backups.

username is required if using Identity V2 API

Whether to enable SoftEther VPN Server.

The path to the world file (.wld) which should be loaded

Which port this service should listen on.