Runner-specific command script executed after code is pulled and just after build executes.

Runner-specific command script executed after code is pulled and just after build executes.

Whether to start the container on boot (requires user lingering).

A short description of the user account, typically the user's full name

Enable the instance.

Token lifetime

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Username for basic http authentication.

A file containing the password corresponding to database.user.

Add a custom host-to-IP mapping.

Add a custom host-to-IP mapping.

Path to the built firmware package.

Path to the directory with database, registration, and other data for the bridge service

For each user matching one of comma-separated glob patterns, enable TTY auditing

Set the max number of connected clients at the same time.

Enables or disables the specified output.

The room name of the MUC to connect to for control.

Select executor, eg. shell, docker, etc

An arbitrary list of items such as derivations

Create an individual listening socket

Path to the syntax folder.

A host of an existing Let's Encrypt certificate to use

The listener type to enable.

Path to a git repository

Canonical hostname for the server.

IKE identity to expect for authentication round

Section for a certificate candidate to use for authentication

The URL prefix under which the awstats pages appear.

Create the database and database user locally.

DNS full-qualified domain name of a database server

DNS full-qualified domain name of a database server

Errbot identity configuration

Resume interval in seconds.

Specifies port number to connect on remote host.

Aliases of that unit.

Aliases of that unit.

Extra packages to add to PATH of the service to make them available to workflows.

Extra packages to add to PATH of the service to make them available to workflows.

Paths to keyboard devices

The path of Apache's document root directory

Whether to enable enable the bind

Accepted traffic will be forwarded only to this service.

Required number of failures for KO transition.

Required number of successes for OK transition.

Use fast/weak handshaking: This reduces the CPU time spent in the initial connection setup, at the expense of losing perfect forward secrecy.

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Path] section of the unit

An arbitrary list of items such as derivations

Adds index directive.

Alias directory for requests.

Automatically wake up the service after the specified number of seconds

Structural DokuWiki configuration

Client EAP-Identity to use in EAP-Identity exchange and the EAP method.

Select executor, eg. shell, docker, etc

If set, use the Duo Security pam module pam_duo for authentication

Key-value pairs that convey additional parameters about a stream.

Path to firmware config which is generated using klipper-genconf

Container icon.

Before resuming, execute this shell script

Extra SSL configuration options.

The underlying network device on which the tunnel resides.

An arbitrary list of items such as derivations

Default pull-policy for Docker images

MQTT server access username.

Whether to enable Authelia instance.

Per output profile configuration.

Whether to automatically take snapshots.

Indicates whether this is an account for a “real” user

The end of the port range, inclusive.

Optional numeric identifier by which authentication rounds are sorted

Wether to enable VictoriaMetrics's vmalert.

vmalert evaluates alerting and recording rules against a data source, sends notifications via Alertmanager.

Register to run untagged builds; defaults to true when tagList is empty.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Whether output should be marked as primary

A script that produces a list of files to back up

Either a single port or port range to allow

An arbitrary list of items such as derivations

Adds index directive.

Alias directory for requests.

Alias directory for requests.

Adds index directive.

Adds index directive.

Adds index directive.

Alias directory for requests.

Adds index directive.

Alias directory for requests.

Alias directory for requests.

Enable this server by default

Alias directory for requests.

Adds index directive.

Adds index directive.

Alias directory for requests.

Location of the dir with main.css CSS file