The changes the principal is allowed to make.

ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1

Whether to enable Validate configuration file.

The path to the file holding the credentials to access the web interface

A list of SQL statements to execute once after making a connection.

The server_name is the name of this server

Enables MOBIKE on IKEv2 connections

File path containing the verification token.

Path under which to expose metrics.

Interval to check the liveness of a peer actively using IKEv2 INFORMATIONAL exchanges or IKEv1 R_U_THERE messages

List of sessions supported with the command used to start each session

Mail "from" name.

Name of the corosync cluster.

database name for postgres only

List consisting of a virtual host name and a list of web applications to deploy on each virtual host

Enables backward-compatible NetBird client service

Set workgroup name (default WORKGROUP).

DNS name for the urls generated in the cgi.

When enabled, the user must authorize requested permissions for all extensions from programs.floorp.profiles.<profile>.extensions.packages in programs.floorp.profiles.<profile>.extensions.settings.<extensionID>.permissions

Time range from which to choose a random value to subtract from rekey/reauth times

File path containing the authentication secret.

Hostname of a waiting vpicc server vpcd will be connecting to

List of font names list used for window titles

Specifies the initial password for the user, i.e. the password assigned if the user does not already exist

Path to the file with your personal ecoflow app login email password

Output path for the full chain including the acquired certificate

XFRM interface ID set on inbound policies/SA, can be overridden by child config, see there for details

If enabled, lowerdir, upperdir and workdir will be prefixed with /sysroot

Match displays based on edid instead of name

Name of the directory under /var/lib holding the server's data

The database name.

Whether to enable WINS NSS (Name Service Switch) plug-in

User account name under which to run shairport-sync

Match displays based on edid instead of name.

The name of the video driver for your graphics card

Search engines that can be used via the address bar

Path to the file prometheus should write its query log to.

Periodically refresh the endpoint hostname or address for all peers

Basic Auth username used to connect to remote_write endpoint

Basic Auth username used to connect to remote_write endpoint

How often to run this job, specified in Go duration format.

Path to the Xen Store access log file.

Send certificate payloads when using certificate authentication.

• With the default of ifasked the daemon sends certificate payloads only if certificate requests have been received.
• never disables sending of certificate payloads altogether,
• always causes certificate payloads to be sent unconditionally whenever certificate authentication is used

When enabled, the user must authorize requested permissions for all extensions from programs.firefox.profiles.<profile>.extensions.packages in programs.firefox.profiles.<profile>.extensions.settings.<extensionID>.permissions

This is optional and is by default off, because most users will not need it

Label to the repository

Optional description for the organization.

Bucket name for the S3 storage backend.

The package that provides the theme given in the name option.

The name of the S3 bucket.

Name of the shell wrapper to be called.

Name, your client connects as.

Enable recommended uwsgi settings.

Enable recommended proxy settings.

PEM encoded X509 certificate for TLS

List of font names list used for window titles

Server name prefixes.

Name of the default JVB room that will be joined if no special header is included in SIP invite.

Whether to enable at-spi2-core, a service for the Assistive Technologies available on the GNOME platform

The name of the savegame that will be used by the server

Name of the caddy/nginx virtualhost to use and setup.

Domain name for a http_file_share service.

Name of this Mattermost site.

Name of the network tunneling interface.

Label of the unlocked encrypted device

Path to a sendmail-compatible executable for delivery reports.

XFRM interface ID set on outbound policies/SA, can be overridden by child config, see there for details

Discourse database user.

Path to root SSL certificate for stapling and client certificates.

Domain name for the http-upload service

Whether to enable knot-resolver (version 5) domain name server

Name of the user the AutoSSH session should run as

Configuration for one or more device IDs

Whether to enable the mDNS NSS (Name Service Switch) plug-in for IPv4

Overridden configuration files, written into /etc/rspamd/override.d/{name}.

AWS S3 region name.

Group account name under which to run shairport-sync

Attribute set from name of a setting to its value

Package providing a GNOME Shell theme in $out/share/themes/${name}/gnome-shell.

Name of the user the AutoSSH session should run as

Path to keystore (combined PEM with cert/key, or PKCS12 keystore)

The hostname under which the Ollama UI interface should be accessible

The hostname part of the public URL used as base for all frontend requests

List of font names list used for window titles

Attribute set of environment variable used in the global environment

Path to a snmp exporter configuration file

Whether a Postquantum Preshared Key (PPK) is required for this connection

Paths can point to a single service, or the root of a tree of services.

Remote UDP port for IKE communication

Enables Aggressive Mode instead of Main Mode with Identity Protection

Path to the Unbound control socket certificate

The URL under which Alertmanager is externally reachable (for example, if Alertmanager is served via a reverse proxy)

A list of backends from which clients are allowed to connect from

Name of the nginx virtualhost to use and setup

The admin user's full name.

Name of the nginx virtualhost to use and setup

The host name or IP address the server should listen to.

The name of the interface to pull the bind_addr from.

Name of the directory in /var/lib.

List of HTTP resources to serve on this listener.