Extra key-value pairs to add to the [Desktop Entry] section

Whether to enable fedimintd.

Whether to enable the HTTP/3 protocol

Each attribute in this set specifies an option for a key in the plist. https://developer.apple.com/legacy/library/documentation/Darwin/Reference/ManPages/man5/launchd.plist.5.html

Text of the file.

FastCGI parameters to override

Optional hostname to add to /etc/hosts; prevents reverse lookup failures.

Optional hostname to add to /etc/hosts; prevents reverse lookup failures.

The schedule in which data is persisted to disk, represented as a list of lists where the first element represent the amount of seconds and the second the number of changes

Controls how long to wait for a Neighbor Advertisement Message before invalidating the entry, in milliseconds.

If the file source is a directory, then this option determines whether the directory should be recursively linked to the target location

Location where the file system will be mounted

Listening address and listening port of the build runner (with HTTP port if not 80).

Name of the default administrator user

Whether to manage network configuration using systemd-network

Denied client IP ranges, these gets evaluated after the allowed IP ranges, defaults to all IPv4 addresses: [ "0.0.0.0/0" ] To block all other access than the allowed.

Attribute set describing resource limits

Arguments passed to the main process script

Configure unit start rate limiting

Configure unit start rate limiting

This configuration file only applies to the hosts listed with this key

The group which should be allowed access to the given resource.

Public domain of the API address of the reverse proxy/tls terminator.

Bootable image to use for the machine

This optional key can be used to request that the datagram socket join a multicast group

This optional key can be used to request that the datagram socket join a multicast group

Path to 32x32 logo png.

Path to 64x64 logo png.

Enable SSL.

Extra configuration options for the host.

The command to use to connect to the server.

Directory for the acme challenge which is PUBLIC, don't put certs or keys in here

Directory for the ACME challenge, which is public

Similar to requires

Similar to requires

Time in seconds to wait for the YubiKey.

Canonical hostname for the server.

Whether to enable HTTPS in addition to plain HTTP

Whether to enable HTTPS in addition to plain HTTP

Enable or disable TTY auditing for specified users

A set of files to be copied to /boot

How often to fsync the append-only log, options: no, always, everysec.

User name.

Name that will be shown to the user.

Enable or disable this network.

Number of hourly snapshots.

Path of the source file.

Number of yearly snapshots.

Whether this vault should be generated.

The subnet to use for the network.

The network driver to use.

The labels to apply to the network.

For each item in this list, a ListenStream option in the [Socket] section will be created.

Whether this file should be generated

Tag for notmuch to use for messages stored in the mailbox labeled with the Sent name attribute

How frequently to change keys

How frequently to change keys

Name to use for the device.

Whether to enable .

Set the execute bit

IP to listen on. 0.0.0.0 for IPv4 only, * for all.

The path on the current machine where the remote path would be mounted.

List of ‹name› add-on packages to install for this profile

Specifies the password hash for the account, generated with grub-mkpasswd-pbkdf2

Systemd calendar expression when to check for renewal

The number of shares required to reconstitute a file.

The resource type

By default data is only periodically persisted to disk, enable this option to use an append-only file for improved persistence.

Timeout, in seconds, after which an attempt to connect to the target or a protocol handshake will be aborted (and the connection dropped) if not completed

Specifies whether X11 connections will be automatically redirected over the secure channel and DISPLAY set.

Indicates that ssh(1) should hash host names and addresses when they are added to the known hosts file.

The piper-tts package to use.

The client authentication stance for this policy.

Group account under which this instance of redis-server runs.

The location of the Drupal private files directory.

Whether this OpenVPN instance should be started automatically.

Whether to enable HTTPS and reject plain HTTP connections

Whether to enable HTTPS and reject plain HTTP connections

If enabled, checks all masters for the last zone version

The path to the xkb keycodes file

The group's description.

Controls presence of netbird-ui wrapper for this NetBird client.

Controls presence of netbird-ui wrapper for this NetBird client.

Order of this location block in relation to the others in the vhost

The filesystem of the unencrypted device.

File encoding for items, both content and file name

For each item in this list, a ListenStream option in the [Socket] section will be created.

This optional key specifies what nice(3) value should be applied to the daemon.

Disk size in GB for the machine

Extra name appended to the wrapper package name.

The external location that the node should listen on

Root directory for requests.

Root directory for requests.

Root directory for requests.

Extra configuration append to unit

Declarative search engine configuration.

The OAuth2 server's authentication URI.

If set, users listed in ~/.yubico/authorized_yubikeys are able to log in with the associated Yubikey tokens.

This optional key specifies that launchd should adjust its log mask temporarily to LOG_DEBUG while dealing with this job.

Commands executed after the profile is successfully applied