The largest size (in bytes) file that may be created.

The hostname to serve monica on.

Allow clients to create repositories in subdirectories of the specified path

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Regex substring to match the app name (optional).

The host name or IP address the server should listen to.

Runner-specific command script executed after code is pulled.

These lines go to the end of the location verbatim.

The permissions of the wrapper program

Defines how unit configuration is provided for systemd:

asDropinIfExists creates a unit file when no unit file is provided by the package otherwise it creates a drop-in file named overrides.conf.

asDropin creates a drop-in file named overrides.conf

Defines how unit configuration is provided for systemd:

asDropinIfExists creates a unit file when no unit file is provided by the package otherwise it creates a drop-in file named overrides.conf.

asDropin creates a drop-in file named overrides.conf

Byte range from which to choose a random value to subtract from rekey_bytes

Warn if Notmuch is not also enabled for this account

If set, all the required runtime store paths for this service are bind-mounted into a tmpfs-based chroot(2).

Optional PKCS#11 module name.

Port of the remote MQTT broker.

Ingress rules

Catch-all service if no ingress matches

The program to make available as /bin/sh inside the chroot

Port the RPC server will bind to.

Additional configuration to add for this account.

Name of the voice model to use

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

A list of URIs referencing documentation for this unit or its configuration.

A list of URIs referencing documentation for this unit or its configuration.

If set, all requests for this host are redirected (defaults to 301, configurable with redirectCode) to the given hostname.

Resource limits to be imposed on the job

Resource limits to be imposed on the job

Whether to enable this Woodpecker-Agent

End of time range to show.

Opens UDP port in firewall for fedimintd's API Iroh endpoint

Name of the database to use.

Keep the latest N GC roots in this profile.

Additional policy settings merged into the policy file

Whether to enable this radicle-native-ci instance.

IPv4 cidr address of this peer in the virtual network

User-visible description for the repository.

Environment for the netbird service, used to pass configuration options.

Environment for the netbird service, used to pass configuration options.

Controls the routing table to which routes are added

The maximum number of open files for this process

The maximum number of open files for this process

Set the default session name.

Extra command-line options passed to the daemon

The fully qualified domain name of this server, which is also used as the common name in the certificates.

Whether to share this folder

Whether to share this folder

Features to enable via dlopen ELF notes

XFRM interface ID set on inbound policies/SA

Authentication settings

An attribute set of context files to create in ~/.gemini/

The IPv4 address assigned to the host interface. (Not used when hostBridge is set.)

Path to certificate file

Temperature in °C at which the fan speed should be changed

Description for the zone.

This optional key is used to specify a directory to chdir(2) to before running the job.

This optional key is used to specify launch on demand sockets that can be used to let launchd know when to run the job

Password for this DDNS provider

If true, the job will be restarted as long as the program exits and with an exit status of zero

Reduce memory consumption by a factor of 2 beyond what lowmem does, at the cost of significantly slowing down the archiving process.

Internal http server binding [address]:port.

The distinguished name to use to bind to the LDAP server when the root user tries to modify a user's password.

The public key for this peer.

Path to server SSL certificate key.

The domain part of the JID for the recorder.

Whether to enable OfflineIMAP.

The systemd unit (a service or a target) for other services to depend on if they need to be started after matrix-synapse

Path to your JWT secret used during identity verificaton.

A file containing the password corresponding to database.user.

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

Basic Auth protection for a vhost

The maximum size (in bytes) of the stack segment for a process; this defines how far a program's stack segment may be extended

The maximum size (in bytes) of the stack segment for a process; this defines how far a program's stack segment may be extended

Enable cron service which periodically runs Invoiceplane tasks

Tarsnap archive configurations

Path to an environment file, containing the TOKEN environment variable, that holds a token to register at the configured Gitea/Forgejo instance.

Null if no special use flag is set

Create the database and database user locally.

Additional names of virtual hosts served by this virtual host configuration.

Specification of pages to be ignored by web crawlers

Modify the service

Warn if Notmuch is not also enabled for this account

Whitelist allowed images.

Whitelist allowed images.

The base XMPP domain.

Specific option to point to a runner executable directly, don't set runner.package if you set this

path for anonymously created PDF files

IP address on which nebula lighthouse should serve DNS. 'localhost' is a good default to ensure the service does not listen on public interfaces; use a Nebula address like 10.0.0.5 to make DNS resolution available to nebula hosts only.

Defines the SSL policies for use with Neo4j connectors

The base64 public key to the peer.

IPsec Mode to establish CHILD_SA with.

• tunnel negotiates the CHILD_SA in IPsec Tunnel Mode,
• whereas transport uses IPsec Transport Mode.
• transport_proxy signifying the special Mobile IPv6 Transport Proxy Mode.
• beet is the Bound End to End Tunnel mixture mode, working with fixed inner addresses without the need to include them in each packet.
• Both transport and beet modes are subject to mode negotiation; tunnel mode is negotiated if the preferred mode is not available.
• pass and drop are used to install shunt policies which explicitly bypass the defined traffic from IPsec processing or drop it, respectively