Runner-specific command script executed before code is pulled.

Helpers for the service.

Version of the service.

Whether the service's sockets and storage directory is restricted to be only available via the mail system

A script that produces a list of files to back up

The marker indicates the position of the cursor when the abbreviation is expanded

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the vhost verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

Set the max number of connected clients at the same time.

Enables or disables the specified output.

Where to mount this dataset.

Configuration of defcfg other than linux-dev (generated from the devices option) and linux-continue-if-no-devs-found (hardcoded to be yes)

Extra configuration that is appended to the end of the file. Do not write ids section here, use a separate option for it

Name of the postgresql database

Name of the postgresql database.

The name of the device to add the address to.

Errbot identity configuration

Resume interval in seconds.

Additional flags to pass to lego renew.

Create an individual listening socket

Optional interface name to restrict outbound IPsec policies.

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Path to the directory with database, registration, and other data for the bridge service

Local address to bind to

A list of gateway groups (sites) which can reach the resource and may be used to connect to it.

The force_run option is used to tell the PAM module for KWallet to forcefully run even if no graphical session (such as a GUI display manager) is detected

Accepted traffic will be forwarded only to this service.

Required number of failures for KO transition.

Required number of successes for OK transition.

Whether to enable the installation of this Helm chart

This key specifies that the job should be spawned into a new security audit session rather than the default session for the context is belongs to

File name in the pkcs12 folder for which this passphrase should be used.

Match block conditions used by this block

Custom agent skills for opencode

Key-value pairs that convey additional parameters about a stream.

Path to firmware config which is generated using klipper-genconf

The profile name.

Time in seconds to wait for the FIDO2 key.

This optional key specifies whether the kernel should consider this daemon to be low priority when doing file system I/O.

The number of allowed simultaneous connections to the daemon, default 10.

Paths to keyboard devices

The path of Apache's document root directory

The hotkey modifiers.

The address of the remote endpoint to forward traffic over.

Configure unit start rate limiting

Configure unit start rate limiting

This allows you to pass arguments to the child program

Adds try_files directive.

Adds try_files directive.

Root directory for requests.

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

vdirsyncer's status path

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

This option can be used to store the username / password credentials with the "auth-user-pass" authentication method

Whether to enable Authelia instance.

Per output profile configuration.

Whether to automatically take snapshots.

Before resuming, execute this shell script

The buildkite-agent package to use.

Which buildkite-agent derivation to use

Use fast/weak handshaking: This reduces the CPU time spent in the initial connection setup, at the expense of losing perfect forward secrecy.

The password to store inside the credentials file.

Socket type: 'unix', 'tcp' or 'tcp6'.

User to be set as owner of the UNIX socket.

The video-format to write to output-stream.

Port number to listen on

Path of the source file.

An arbitrary list of items such as derivations

The Wayland compositor to run the greeter in

Forcibly override any existing configuration for this extension.

The port on which the IMAP server listens

The port on which the SMTP server listens

Don't start gpg-agent if it is not running

Sync data.

general configuration

Configure unit start rate limiting

Configure unit start rate limiting

Reduce storage requirements by enabling pruning (deleting) of old blocks

The autoupdate policy for the container.

This optional key is used to specify a directory to chroot(2) to before running the job.

Each attribute in this set specifies an option in the [Link] section of the unit

Adds a return directive, for e.g. redirections.

Structural DokuWiki configuration

Name of this virtual host

Name of this virtual host

Name of this virtual host

User part of the JID.

Wether to enable VictoriaMetrics's vmalert.

vmalert evaluates alerting and recording rules against a data source, sends notifications via Alertmanager.