When using storage type filesystem this is the absolute path to the file system where uploaded files are stored until they expire

Arbitrary unique number 1..255

List of Thunderbird profiles for which this account should be enabled

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Allows the generation of a private key and associated self-signed certificate

Metadata keys that should be synchronized when vdirsyncer metasync is executed.

Expected hostname for WebUI.

Whether to enable a CUPS printer queue for this instance

Patterns to include/exclude

Identity the EAP/XAuth secret belongs to

Action to perform after loading the configuration.

• The default of none loads the connection only, which then can be manually initiated or used as a responder configuration.
• The value trap installs a trap policy, which triggers the tunnel as soon as matching traffic has been detected.
• The value start initiates the connection actively.
• Since version 5.9.6 two modes above can be combined with trap|start, to immediately initiate a connection for which trap policies have been installed

These lines go to the end of the location verbatim.

The directory where pantalaimon should store its state such as the database file.

Optional text to provide as a prompt for the first window

Environment file to be passed to the systemd service

Environment file to be passed to the systemd service

Commands called after shutting down the interface.

Range of open UDP ports.

Any additional entries you want added to the systemd-boot menu

The name of the wrapper program

Extra settings to add to this Thunderbird account configuration

Attribute set of options for each extension

Configure path to the Calibre's ebook-convert in the DB.

Only applicable to MySQL or Postgres

Path to a custom home page

The full path to the PEM encoded TLS certificate

The full path to the PEM encoded TLS certificate

Kafka server.properties configuration file path

Object store configuration

Path for the jwt secret required to connect to the execution layer.

Path to the UNIX domain-socket to communicate with postgres.

Object store configuration

Path to serve from the HTTP servers root.

Path to certificate file

Path to your SSL key

Path to your SSL certificate

Object store configuration

Path to BIRD2 (or BIRD1 v4) socket.

Path to server SSL certificate.

HT (High Throughput) capabilities given as a list of flags

Enable warp routing

Mark all wireguard packets originating from this interface with the given firewall mark

Value of decryption passphrase for ECDSA key.

These lines go to the end of the location verbatim.

The sway command to execute on state changes

The activitywatch package to use

The difficulty required for clients to solve the challenge

URL of the host, without https prefix

When redirecting from the Kanidm Apps Listing page, some linked applications may need to land on a specific page to trigger oauth2/oidc interactions.

File containing the password for the user.

See torrc manual.

Output path for the certificate private key

Directory where uploaded images and attachments are stored.

Specifies the hashed password for the user

List of IP (v4 or v6) addresses with CIDR masks from which this peer is allowed to send incoming traffic and to which outgoing traffic for this peer is directed

FastCGI parameters to override

The timeout after which a TCP keepalive packet is sent on a connection between Tunnel and the origin server.

User for anonymous PDF creation

Environment files for this instance

Automatically generate a private key with wg genkey, at the privateKeyFile location.

Value of decryption passphrase for PKCS#8 key.

Automatically assign an IP address to the network interface using the same scheme as virtualisation.vlans.

An absolute file path (which should be outside the Nix-store) to a secret key to encrypt internal messages with

The full path to the PEM encoded TLS certificate

Additional list of packages to be added to the session search path

URL path to upload test on this server

URL path to download test on this server

Configure eBPF modules path

Path to the directory that contains static files.

Limit number of concurrent requests for new jobs from GitLab.

Adds a return directive, for e.g. redirections.

Limit number of concurrent requests for new jobs from GitLab.

Users allowed to use fcrontab and fcrondyn (one name per line, all for everyone).

Domain name for the website.

Name of the nat64 tun device.

Specifies whether sshd(8) should look up the remote host name, and to check that the resolved host name for the remote IP address maps back to the very same IP address

Runtime rule files written to $XDG_CONFIG_HOME/pay-respects/rules/.toml

Whether to enable namecoind, Namecoin client.

A range of TCP ports on which incoming connections are accepted.

See torrc manual.

List of URIs referencing documentation for the unit.

Datasource compatible with Prometheus HTTP API.

Each attribute in this set specifies an option in the [DeficitRoundRobinScheduler] section of the unit

Enable legacy crypto on this client

This key lets one override the default throttling policy imposed on jobs by launchd

Extra commandline arguments for hddfancontrol

Connect to selected server only.

Configuration of radicle-native-ci

A command that prints the OAuth credentials to standard output

Extra settings.

Whether to support proxying websocket connections with HTTP/1.1.

woodpecker-agent config environment variables, for other options read the documentation

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

The presence of this key specifies that the daemon expects to be run as if it were launched from inetd.