Desktop Entries allow applications to be shown in your desktop environment's app launcher

If we can't use system-provided secure storage, should we proceed anyway?

Whether to enable brillo in userspace

Allow the cloud-init service to operate xfs filesystem.

Whether new encrypted rooms can be created

Whether new encrypted rooms can be created

Authentication type

A list of regular expressions that are matched against the reported client id (such as task 2.3.0)

Number of files to allow deluged to open.

Allow the cloud-init service to operate ext4 filesystem.

UUIDs of Signal accounts that may use this server

"Peer verification string"

Which requiredSystemFeatures should trigger relaxation of the sandbox

Allow access to custom data locations.

Whether new users can register on this server

Allow authentication modules to auto-create users in tt-rss internal database when authenticated successfully.

Whether to allow the X server to accept TCP connections.

List of open UDP ports.

Extends the systemd unit with permissions to allow for the use of the eXpress Data Path (XDP).

Allow clients to write to the TTY.

Whether to enable the startup chime

List of TCP ports on which incoming connections are accepted.

Allow the cloud-init service to operate btrfs filesystem.

Enable saned network daemon for remote connection to scanners.

saned would be run from scanner user; to allow access to hardware that doesn't have scanner group you should add needed groups to this user.

List of IP (v4 or v6) addresses with CIDR masks from which this peer is allowed to send incoming traffic and to which outgoing traffic for this peer is directed

Only allow members of the wheel group to execute sudo by setting the executable's permissions accordingly

Allow clients access to internal SOCKS5 proxy

Allow stale Consul results (see https://www.consul.io/api/index.html#consistency-modes)

Address to listen on (use 0.0.0.0 to allow access from any address).

Allow clients to connect without authentication, i.e. without a valid MUNGE credential.

Only allow members of the wheel group to execute sudo by setting the executable's permissions accordingly

Whether to allow publishing in general.

List of bridge devices that can be used by qemu:///session

Range of open UDP ports.

A range of TCP ports on which incoming connections are accepted.

Store messages in an archive and allow users to access it

Whether to allow quitting of the Finder

A list of IP subnets that are allowed to stream to the server.

Determines whether to add allowed IPs as routes or not.

Allow clients reverse port forwarding

Whether to enable Rygel UPnP Mediaserver

Add a margin around the window to allow for CSS shadow styling.

Whether this server federates with other servers.

Specifies a file containing the MAC addresses to allow if macAcl is set to "allow" or "radius"

Kanidm groups that are allowed to login using PAM.

Learn more at https://docs.stashapp.cc/networking/authentication-required-when-accessing-stash-from-the-internet/

Level of TLS verification

Allow users to set vCards

Whether new encrypted rooms can be created

Station MAC address -based authentication

Whether new users can register on this server

Whether to allow editing the boot entries before booting them

Aliases that allow you to create nicknames for gh commands.

Kanidm groups that are allowed to login using PAM.

Which user or group the specified command is allowed to run as

Whether to enable user self registration

The port Invidious should listen on

Use chfn SUID to allow non-root users to change their account GECOS information.

On service or configuration errors that prevent Duo authentication, fail "safe" (allow access) or "secure" (deny access)

Controls how systemd will interpret the root FS in initrd

Additional prosody configuration

The generated file is processed by envsubst to allow secrets to be passed securely via environment variables.

Allow users to have a roster

Under which user/group the specified command is allowed to run

List of IP (v4 or v6) addresses with CIDR masks from which this peer is allowed to send incoming traffic and to which outgoing traffic for this peer is directed

Allow the cloud-init service to configure network interfaces through systemd-networkd.

The restriction flags to be set on source

Whether to enable Instructs the hook to mount the symlink targets as well, when any of the paths contain symlinks

Under which user/group the specified command is allowed to run

Allow these IPs and TSIG to transfer zones, addr TSIG|NOKEY|BLOCKED address range 192.0.2.0/24, 1.2.3.4&255.255.0.0, 3.0.2.20-3.0.2.40

Whether to enable fontconfig configuration

Whether to allow editing the kernel command-line before boot

Enable acpilight

Allow leaving config.boot.initrd.network.ssh.hostKeys empty, to deploy ssh host keys out of band.

The TTL ("Time to Live") value to set for your DNS records

List of additional portals to add to path

Ports to allow in the zone.

Salt to allow room operator passwords generated by this server instance to still work when the server is restarted

Allow N days for the first retry

Allow a client to resume a disconnected session, and prevent message loss

Whether or not to open the minimum required ports on the firewall

Allow changes made on the web interface to persist between service restarts.

Allow the specified IPs to act as a proxy

Whether to allow the remote address and port to change when properly encrypted packets are received.

Allow binding to non local addresses.

Allow chronyd to step the system clock if the error is larger than the specified threshold.

Whether to ignore the cpuid check to allow running on unsupported platforms

Indicates whether to allow the contents of the dataDir directory to be changed by the user at run-time

List of IPs of relays that this node should allow traffic from.

This tells pgmanage to only allow users in a certain PostgreSQL group to login to pgmanage

List of additional portals that should be added to the environment

Whether to enable local discovery for the Kubo daemon

ACL rule

The following authentication modes are available: Open -- Accept connections from anyone, use NickServ for user authentication

Whether to enable the APC UPS daemon. apcupsd monitors your UPS and permits orderly shutdown of your computer in the event of a power failure

Allow GDM to run on Wayland instead of Xserver.

Whether to enable hardware accelerated graphics drivers

List of UIDs of all users for which this application is allowed location info access, Defaults to an empty string to allow it for all users.