Specify path to the control socket used for connection sharing.

Causes the function to inherit completions from the given wrapped command.

Specifies the password hash for the account, generated with grub-mkpasswd-pbkdf2

Extra config for <StorageHints> section.

Configure unit start rate limiting

Configure unit start rate limiting

This configuration file only applies to the hosts listed with this key

The organization's buckets which should be allowed to be written

Application image to display in the WebUI

Whether to manage network configuration using systemd-network

If set, all requests for this host are redirected (defaults to 301, configurable with redirectCode) to the given hostname.

The url endpoint where the scrobble API is listening.

The url endpoint where the scrobble API is listening.

Interval in seconds to check if the machine is running

Whether to enable this Woodpecker-Agent

systemd-boot orders the menu entries by their sort keys, so if you want something to appear after all the NixOS entries, it should start with o or onwards

Whether to copy the DF bit to the outer IPv4 header in tunnel mode

These lines go to the end of the location verbatim.

Country code (ISO/IEC 3166-1)

The description of the network.

Similar to requires

Similar to requires

If set, all the required runtime store paths for this service are bind-mounted into a tmpfs-based chroot(2).

HTTP status used by globalRedirect and forceSSL

Whether to enable this wake-up check.

The consul-template package to use.

Path to server SSL certificate.

Enable cron service which periodically runs Invoiceplane tasks

This optional key can be used to request that the datagram socket join a multicast group

Database name.

The IPv6 address assigned to the host interface. (Not used when hostBridge is set.)

Shell commands executed on specified operational states.

Configure unit start rate limiting

Configure unit start rate limiting

Attribute set of options for each extension

The systemd unit (a service or a target) for other services to depend on if they need to be started after matrix-synapse

The domain part of the JID for the recorder.

Enables or disables adaptive synchronization (aka

List of ‹name› add-on packages to install for this profile

An argument whose meaning depends on the type of operation

Basic Auth protection for a vhost

Seconds between script invocations.

Limits for timeline cleanup.

Whether to run in snapshot only mode

Extra configuration options for the host.

The command to use to connect to the server.

Sets the authentication mechanism if imap is used as the incoming method

Sets the authentication mechanism if smtp is used as the outgoing method

Include/exclude paths matching the given patterns

The host name or IP address the server should listen to.

Sets the output transform.

Authentication to perform locally.

• The default pubkey uses public key authentication using a private key associated to a usable certificate.
• psk uses pre-shared key authentication.
• The IKEv1 specific xauth is used for XAuth or Hybrid authentication,
• while the IKEv2 specific eap keyword defines EAP authentication.
• For xauth, a specific backend name may be appended, separated by a dash

Similar to requires

Similar to requires

Location where the file system will be mounted

It is recommended you keep your secrets separate from the configuration

Specify the local database filename to store persistent data

CHILD_SA configuration sub-section

Description of how to identify the filesystem to be duplicated by this instance of bees

Path to certificate file

Path to the SimpleSAMLphp library directory.

Extra environment variables for HDFS NameNode

Whether to ensure that this bucket is present or absent.

Type of this worker

Specifies whether X11 connections will be automatically redirected over the secure channel and DISPLAY set.

Indicates that ssh(1) should hash host names and addresses when they are added to the known hosts file.

This optional key can be used to request that the datagram socket join a multicast group

Whether this vault should be generated.

Systemd calendar expression when to check for renewal

Whether to enable or disable lingering for this user

The path on the current machine where the remote path would be mounted.

If this attribute is given with non-zero length, it will set the password identifier for this entry

The namespace in which the Helm chart gets installed.

Whether to create the target namespace if not present.

Username for the postgresql connection

Permissions granted for the services.syncoid.user user for local target datasets

Each attribute in this set specifies an option for a key in the plist. https://developer.apple.com/legacy/library/documentation/Darwin/Reference/ManPages/man5/launchd.plist.5.html

This key maps to the first argument of execvp(3)

Hostname of the instance.

Ingress rules

Catch-all service if no ingress matches

Port of the remote MQTT broker.

Enable running shellcheck on the generated scripts for this unit

Path to your JWT secret used during identity verificaton.

A file containing the password corresponding to database.user.

An IP address or a network IP address with a mask for IPv4 or IPv6

Opens UDP port in firewall for fedimintd's API Iroh endpoint

Additional names of virtual hosts served by this virtual host configuration.

Specification of pages to be ignored by web crawlers

Sets the password for WPA-PSK

Extra command-line options passed to the daemon

This optional key specifies that launchd should adjust its log mask temporarily to LOG_DEBUG while dealing with this job.

Specifies the path to muchsync on the server

For each item in this list, a ListenStream option in the [Socket] section will be created.

This optional key specifies what nice(3) value should be applied to the daemon.

Reduce memory consumption by a factor of 2 beyond what lowmem does, at the cost of significantly slowing down the archiving process.

The domain name on which canaille will be served.

Path to an environment file, containing the TOKEN environment variable, that holds a token to register at the configured Gitea/Forgejo instance.

Absolute path of the salt on the unencrypted device with that device's root directory as "/".

Create the database and database user locally.