Key policy for zone signing keys

Key policy for key signing keys

Turns on or off the router flag for Neighbor Advertisement Messages.

The group ID owning the volume inside the container.

The IPv6 address assigned to the host interface. (Not used when hostBridge is set.)

Whether users can log in with passwords defined in /etc/shadow.

Specify the server verbosity level, options: debug, verbose, notice, warning.

Turns on the OCSP Must-Staple TLS extension

Whether to enable the desktop entry for this site.

Attribute set of NetBird client daemons, by default each one will:

1. be manageable using dedicated tooling:

• netbird-<name> script,
• NetBird - netbird-<name> graphical interface when appropriate (see ui.enable),

2. run as a netbird-<name>.service,
3. listen for incoming remote connections on the port 51820 (openFirewall by default),
4. manage the netbird-<name> wireguard interface,
5. use the /var/lib/netbird-/config.json configuration file,
6. override /var/lib/netbird-/config.json with values from /etc/netbird-/config.d/*.json,
7. (hardened) be locally manageable by netbird-<name> system group,

With following caveats:

• multiple daemons will interfere with each other's DNS resolution of netbird.cloud, but should remain fully operational otherwise

The bitcoind package to use.

Text of the file.

Profile path.

The function body.

DEPRECATED, use driverOptions

The name of private PKCS #8 key file for this policy to be found in the baseDirectory, or the absolute path to the key file

Number of simultaneous ‹name› tunnels.

Name of the network interface managed by this client.

Name of the network interface managed by this client.

Which slot on the YubiKey to challenge.

The location of the Drupal config sync directory.

Allow these IPs and TSIG to transfer zones, addr TSIG|NOKEY|BLOCKED address range 192.0.2.0/24, 1.2.3.4&255.255.0.0, 3.0.2.20-3.0.2.40

If the file source is a directory, then this option determines whether the directory should be recursively linked to the target location

The path to the workdir

Each attribute in this set specifies an option in the [Network] section of this unit

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Each attribute in this set specifies an option in the [Socket] section of the unit

Name of the bridge interface that wpa_supplicant should listen at.

Basic Auth password file for a vhost

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

TLS Options for the Director in this Configuration.

TLS Options for the Director in this Configuration.

Command and arguments to start the kernel.

Bind address to be used for this server.

The configuration file path to supply bitcoind.

Port the NetBird client listens on.

Port the NetBird client listens on.

port of the Redis master

Configuration for secure connections.

Configuration for secure connections.

Path to the SVG of the panel.

Configuration for MPD

Units that require (i.e. depend on and need to go down with) this unit

Units that require (i.e. depend on and need to go down with) this unit

DNS server to use as an intermediate relay to the iodined server

Specifies the image the volume is based on when Driver is set to the image.

Profile ID

If the specified units are started, then this unit is stopped and vice versa.

This setting configures the name of a mailbox for which administrator scripts are configured

Allow client if common name appears in the list.

APIs to enable over WebSocket

Path to the host certificate.

Name of the platform

Device identifiers, as shown by keyd(1).

If given, sets the SO_MARK option on the TCP socket.

If given, sets the SO_MARK option on the TCP socket.

Require HTTPS and verification of certificates when contacting registries.

Require HTTPS and verification of certificates when contacting registries.

Name (relative to the root of the filesystem) of the subvolume where the hash table will be stored.

Enable PAM mount (pam_mount) system to mount filesystems on user login.

The marker indicates the position of the cursor when the abbreviation is expanded

Where to mount this dataset.

(optional) name your peer has for you

(optional) name your peer has for you

NNTP group name for the inbox.

I2P nodes that are allowed to connect to this service.

The location for users to install Drupal modules.

Additional flags to pass to lego renew.

Shell commands executed when the instance is shutting down.

URL where this inbox can be accessed over HTTP.

Whether to enable DHCP on the interfaces matched.

This option provides a simple way to serve individual, static files.

Local address to bind to

The key to use as listed in gpg --list-keys.

Allow client if organizational unit name appears in the list.

The options to use for this LUKS device in YubiKey-PBA

Arguments passed to the main process script

Configure unit start rate limiting

Configure unit start rate limiting

User under which to run the service

Keep this unit running as long as the listed units are running

The hostname the web service appears under.

Whether to support proxying websocket connections with HTTP/1.1.

The profile name.

Order of this location block in relation to the others in the vhost

Whether to use the testnet instead of mainnet.

Match block conditions used by this block

These lines go to the end of the location verbatim.

Port to bind on for p2p connections from peers (both TCP and UDP)

Address to bind on for p2p connections from peers (both TCP and UDP)

Denied client IP ranges, these gets evaluated after the allowed IP ranges, defaults to all IPv4 addresses: [ "0.0.0.0/0" ] To block all other access than the allowed.

Domain part of the web interface URL (no web interface for this domain if null)

Whether this file locals should be generated

Extra key-value pairs to add to the [Desktop Entry] section

Similar to requires

Similar to requires

This allows you to pass arguments to the child program

Location where the file system will be mounted