Whether to enable or disable lingering for this user

Sets allowed passwords for WPA3-SAE

List of URIs referencing documentation for the unit.

The distinguished name of the search base.

If the specified units are started, then this unit is stopped and vice versa.

If the specified units are started, then this unit is stopped and vice versa.

Path to your HMAC secret used to sign OIDC JWTs.

The devices this folder should be shared with

The devices this folder should be shared with

Name of this virtual host

Name of this virtual host

Name of this virtual host

Name of this virtual host

Name of this virtual host

A list of URIs referencing documentation for this unit or its configuration.

Wallet file

Similar to requires

Similar to requires

Hostname of JMAP server

Name of the datasource to delete.

The offset of the key file

Whether the tunnel routes layer 2 (tap) or layer 3 (tun) traffic.

Whether this /etc file should be generated

Identity the EAP/XAuth secret belongs to

Extra configuration options for the host.

The command to use to connect to the server.

Timeout before closing CHILD_SA after inactivity

Whether to include the full closure of the systemd unit file into the chroot, instead of just the dependencies for the executables.

Basic Auth password file for a vhost

Hostnames of the XMPP servers to connect to.

Names of the templates to use for this dataset.

Units that require (i.e. depend on and need to go down with) this unit

Units that require (i.e. depend on and need to go down with) this unit

Maximum bytes processed before CHILD_SA gets closed

Extra lines to be added verbatim to the vrrp_instance section.

Extra command line options to pass to Blockbook

Whether this vault should be generated.

The basic secret to use for this service

IKE identity the IKE preshared secret belongs to

Specifies the (clear text) password for the MQTT User.

Address or CIDR subnets

StrongSwan default: []

The node where the rule should be applied.

By default, H2O, without prejudice, will use as many TLS versions & cipher suites as it & the TLS library (OpenSSL) can support

The path on the current machine where the remote path would be mounted.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Commands that should be run right after we have mounted our LUKS device.

If not empty, which job classes should be executed by this process. If left empty, all job classes will be executed by this process.

Extra arguments to pass to ghostunnel server

additional groups to add the dynamic user to

Certificate revocation policy for CRL or OCSP revocation.

• A strict revocation policy fails if no revocation information is available, i.e. the certificate is not known to be unrevoked.
• ifuri fails only if a CRL/OCSP URI is available, but certificate revocation checking fails, i.e. there should be revocation information available, but it could not be obtained.
• The default revocation policy relaxed fails only if a certificate is revoked, i.e. it is explicitly known that it is bad

If the file source is a directory, then this option determines whether the directory should be recursively linked to the target location

If the file source is a directory, then this option determines whether the directory should be recursively linked to the target location

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

Systemd calendar expression when to check for renewal

This optional key can be used to request that the datagram socket join a multicast group

Sets the password for WPA-PSK that will be converted to the pre-shared key

Json formatted options for this extension.

Extra environment variables for HDFS NameNode

Match windows where wm class group contains string.

Specifies whether X11 connections will be automatically redirected over the secure channel and DISPLAY set.

Indicates that ssh(1) should hash host names and addresses when they are added to the known hosts file.

Listen addresses for this virtual host

Here you can provide authelia with configuration files or directories

Whether to use STARTTLS.

Whether to use STARTTLS.

The address of the local endpoint which the remote side should send packets to.

For each item in this list, a ListenStream option in the [Socket] section will be created.

This optional key specifies what nice(3) value should be applied to the daemon.

Identity the NTLM secret belongs to

If the device does not currently contain a filesystem (as determined by blkid), then automatically format it with the filesystem type specified in fsType

Alias directory for requests

Adds DirectoryIndex directive

Extra configuration append to unit

Declarative search engine configuration.

The block device is backed by an encrypted one, adds this device as a initrd luks entry.

Compression method to use

Settings for a cups-pdf instance, see the descriptions in the template config file in the cups-pdf package

TLS certificate to use instead of the hardcoded one in case of HTTPS connections

The broadcast address on the interface.

Root directory for requests.

location of GhostScript binary

A file containing a the client secret for an openid_connect adapter

The domain part of the MUC to connect to for control.

Optional slot number to access the token.

If the position is "command", the abbreviation expands only if the position is a command

The email address of this account.

Maildir configuration for this account.

Standard email folders.

Local configuration for the contacts.

Alternative identities of this account.

Command to run before mounting.

Netfilter mark and mask for input traffic

Whether to serve a wildcard record for ZeroTier Nodes.

XFRM interface ID set on outbound policies/SA

Environment variables passed to the backup script