Allow clients to create repositories in subdirectories of the specified path

Set Torsocks to accept inbound connections

By default we create the sabnzbd configuration read-only, which keeps the nixos configuration as the single source of truth

Whether to respond to incoming ICMPv4 echo requests ("pings")

Whether to allow network access inside the sandbox.

This tells pgmanage whether or not to allow anyone to use a custom connection from the login screen.

List of network interfaces that should be used by the avahi-daemon

Client IDs to allow (can be repeated; if not specified, all clients are allowed)

List of domains to whitelist.

Whether to allow localhost network access inside the sandbox.

Enables or disables the native transport server (CQL binary protocol)

Listed primary servers are allowed to notify this secondary server

Enable the risky critical power actions "Suspend" and "Ignore".

Allow for slow-motion minimize effect while holding Shift key

By default, when SSH forwarding, enabling Duo Security will disable TCP forwarding

Whether to allow built-in software to receive incoming connections.

Whether to allow downloaded signed software to receive incoming connections.

Allows AdGuard Home to open raw sockets (CAP_NET_RAW), which is required for the integrated DHCP server

Whether to enable network access for logrotate.

Whether to allow privileged containers on Kubernetes.

Whether to enable nonpaying users to submit builds.

Whether to enable creation of new lists.

Enable the DHCP client for any interface whose name matches any of the shell glob patterns in this list

A list of device nodes to which esphome has access to

Allow client if common name appears in the list.

List of groups to allow access to this vhost, or null to allow all.

Allow client if organizational unit name appears in the list.

If true, allow all clients, do not check client cert subject.

Whether to enable Libravatar as profile picture source on your instance

List of emails to allow access to this vhost, or null to allow all.

Allow client if DNS subject alternative name appears in the list.

Allow client if URI subject alternative name appears in the list.

Whether to allow login for accounts that have no OTP set (i.e., accounts with no OTP configured or no existing ~/.google_authenticator).

Whether to enable keys to run shell commands.

List of email domains to allow access to this vhost, or null to allow all.

Whether to allow configuring networks "imperatively" (e.g. via wpa_supplicant_gui) and declaratively via networking.wireless.networks.

Whether to enable all anonymous clients to stream to the server.

Domains where PdfDing is allowed to run

Allows the generation of a private key and associated self-signed certificate

Whether to allow capital letters in slugs.

List of IP addresses or network addresses that may connect to Polipo.

Whether to allow Conduit to automatically contact https://conduit.rs hourly to check for important Conduit news

The main host that is allowed access.

Allowed client IP ranges are evaluated first, defaults to ARIN IPv4 private ranges: [ "192.168.0.0/16" "127.0.0.0/8" "172.16.0.0/12" "10.0.0.0/8" ]

Whether to allow SMT/hyperthreading

A list of device nodes to which the containers has access to.

List of allowed origins

Common name attribute of allowed peer certificates

Common name attribute of allowed peer certificates

Common name attribute of allowed peer certificates

IfState in initrd drastically increases the size of initrd, your boot partition may be too small and/or you may have significantly fewer generations

Specifies whether userlistFile is a list of user names to allow or deny access

Path to device node

When false, the HTTP header X-Frame-Options: deny will be set in Grafana HTTP responses which will instruct browsers to not allow rendering Grafana in a <frame>, <iframe>, <embed> or <object>

Client IPs which are allowed to connect to distccd in CIDR notation

Disable PKCE on this oauth2 resource server to work around insecure clients that may not support it

IP addresses or subnets allowed to call the periphery API

Add module allowners, any user in chat is able to kick other

Allow IPv6 HTTP requests?

List of open UDP ports.

List of TCP ports on which incoming connections are accepted.

Whether to enable Whether to allow insecure TLS..

Allow any hostname as backend endpoint

All listed users will become part of the firezone-client group so they can control the tunnel service

Add module allowners, any user in chat is able to kick other

Allow requests from a specific port.

Allow requests from a specific host.

List of IP addresses that are allowed to access the debug, stats and metrics endpoints

Range of open UDP ports.

Only allow read operations from this Neo4j instance.

A range of TCP ports on which incoming connections are accepted.

The hook config, describing which paths to mount for which system features

A list of regular expressions that are matched against the reported client id (such as task 2.3.0)

If enabled, continuwuity will send a simple GET request periodically to https://continuwuity.org/.well-known/continuwuity/announcements for any new announcements made.

By default, non global IP addresses are never forwarded to upstream servers

If non-empty, only these player names are allowed to connect

Set to false to prohibit users from creating new organizations.

Common name attribute of allowed peer certificates

Common name attribute of allowed peer certificates

Allow the user to do certain things with upsd

Deny (or allow) domain lists to use

Hosts that homepage-dashboard will be running under

Users allowed to authenticate even if not in allowedDomains.

Device node access modifier

List of allowlists

Set to false to prohibit users from being able to sign up / create user accounts

Whether to allow a websocket connection from a different origin.

A list of glob patterns, indicating which paths to expose to the sandbox

Do not fail evaluation when services.nixseparatedebuginfod.nixPackage is older than nix 2.18.

List of IP addresses associated with this peer.

Allowed principal domains. if an authenticated user's domain is not in this list authentication request will be rejected.

Whether this server federates with other servers.

Whether this server federates with other servers.

Allow non-root users to specify the allow_other or allow_root mount options, see mount.fuse3(8).

Whether new users can register on this server.

List of UnifiedPush servers

Specifies the MAC addresses to allow if macAcl is set to "allow" or "radius"