Per output profile configuration.

Whether to automatically take snapshots.

Create an individual listening socket

Which slot on the YubiKey to challenge.

Whether to ensure that this user is present or absent.

The length of time to ensure that keys will be correct; no action will be taken to create new keys to be activated after this time.

This configuration file only applies to hosts NOT listed with this key

Database user.

The autoupdate policy for the container.

Configuration for secure connections.

Path to the SVG of the panel.

Configuration for secure connections.

Key-value pairs that convey additional parameters about a stream.

Path to firmware config which is generated using klipper-genconf

This optional key specifies what value should be passed to umask(2) before running the job

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Whether to enable HTTPS in addition to plain HTTP

Whether to enable intra-zone forwarding

A list of the given alerting or recording rules against configured "datasource.url" compatible with Prometheus HTTP API for vmalert to execute

Indicates if the user is a system user or not

A set of files to be copied to /boot

A unique provider name.

List of named IP pools to allocate virtual IP addresses and other configuration attributes from

Root path in filesystem of the smug project

repository to backup to.

Host pattern used by this conditional block

File to include additional settings for this provider from.

Description of this unit used in systemd messages and progress indicators.

Where to mount this dataset.

Runner name declared to the PeerTube instance.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Updown script to invoke on CHILD_SA up and down events.

Whether to bypass cgit and use git-http-backend for HTTP clones

Basic Auth protection for a vhost

Whether to begin the synchronisation by running notmuch new locally.

Before resuming, execute this shell script

Whether to automatically prune old snapshots.

URI to bind the wyoming server to.

This configuration file only applies to hosts NOT listed with this key

Whether the service's sockets and storage directory is restricted to be only available via the mail system

Whether to enable HTTPS and reject plain HTTP connections

A script that produces a list of files to back up

File name in the ecdsa folder for which this passphrase should be used.

File name in the pkcs8 folder for which this passphrase should be used.

Group under which to run the service

These lines go to httpd.conf verbatim

Root directory for requests.

Root directory for requests.

Root directory for requests.

Root directory for requests.

Root directory for requests.

Root directory for requests.

Root directory for requests.

Database host port.

Database host address.

Extra commands to run before starting buildkite.

This optional key specifies whether the kernel should consider this daemon to be low priority when doing file system I/O.

Specifies the clear text password for the account

Each attribute in this set specifies an option in the [Timer] section of the unit

Units that require (i.e. depend on and need to go down with) this unit

Units that require (i.e. depend on and need to go down with) this unit

If the specified units are started, then this unit is stopped and vice versa.

Profile ID

Additional command line options as a dictionary to pass to the unison program

Path to the directory with database, registration, and other data for the bridge service

ACME Directory Resource URI

An arbitrary list of items such as derivations

Create the repository if it doesn't exist.

The volumes to mount into the container.

The devices to mount into the container

install policy for the worker (always, if-not-present, never, prompt)

The nickname for this Jibri instance in the MUC.

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Forcibly override any existing configuration for this extension.

Source ports for the service.

Additional flags to pass to lego renew.

Paths to keyboard devices

The path of Apache's document root directory

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Whether to enable awstats web service.

Extra args append to the easytier command-line.

These lines go to the end of the location verbatim.

Whether to enable setting individual kill switch.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

This key specifies that the job should be spawned into a new security audit session rather than the default session for the context is belongs to