Open ports in the firewall for the EPGStation web interface.

Use local DNS server for resolving.

What to do in case of a conflict between the storages

IP detection provider for IPv4

IP detection provider for IPv6

Configure local PostgreSQL database server for Tandoor Recipes.

Whether to create a local database automatically

Whether to setup a local postgres database and populate the db-type fields in services.gotosocial.settings.

Configure local PostgreSQL database server for docs.

Whether the repo (which must be local) is a removable device.

Fileserver role, serves files and volumes from its local storage.

Database host name. localhost is treated specially and inserts systemd dependencies, other hostnames or IP addresses of the local machine do not.

Multiaddr or array of multiaddrs describing the address to serve the local HTTP API on

Whether to enable Configure local PostgreSQL database server for meet.

Whether this is a default library

Environment variables for configuring the rke2 service/agent

A required list of local or remote repositories with paths and optional labels (which can be used with the --repository flag to select a repository)

Password used for authentication

Whether to enable publishing the pulseaudio sink in the local network.

Auto-connect to other cjdns nodes on the same network

Specify the local database filename to store persistent data

Type of 9p cache to use when mounting host nix store. "none" provides no caching. "loose" enables Linux's local VFS cache. "fscache" uses Linux's fscache subsystem

The local path name of a CSS file for the PSGI web interface.

Create and use a local Meilisearch instance

Whether to configure a local postgres database and connect to it.

Whether to configure a local PostgreSQL server.

URL of the local API.

Path to a user's home directory from which to copy DankMaterialShell configuration files

Connection string to postgresql in the [rust postgres crate config format](https://docs.rs/postgres/latest/postgres/config/struct

Password for local Mattermost database user

Whether to enable and configure a local PostgreSQL server by creating a user and database for weblate

Path to a file containing the public key of the local Rosenpass peer

Path to a file containing the secret key of the local Rosenpass peer

HTTP bind address for serving local build information/monitoring.

Whether to enable presence tracking

Whether to automatically set up a local Meilisearch instance and configure Sharkey to use it

Whether to enable discovery of pulseaudio sinks in the local network.

Whether reads should be made for queries for time ranges that the local storage should have complete data for.

User name under which the chrony exporter shall be run

The local port the bridge is listening on.

Group under which the chrony exporter shall be run

If set, all recipients to users at either "localhost" (the literal string) or the canonical host name (from the me control attribute) are remapped to this address

The database user's password (not applicable for sqlite3)

Path to an environment file as defined in systemd.exec(5)

Path to the API key to authenticate with a local CrowdSec API

The SQL server URI

List of addresses and ports to listen on (ListenAddress directive in config)

Whether to create database and user on the local machine if they do not exist

Whether to apply bandwidth limits to devices in the same broadcast domain as the local device.

Whether to apply bandwidth limits to devices in the same broadcast domain as the local device.

Map of incoming traffic patterns to local targets

Whether to run the exporter as the local 'postgres' super user.

Path to the service's config file

An extra set of filesystem paths that FoundationDB can read to and write from

Set labels to ignore when syncing from local tags to remote labels (after translations).

Sets the HTTP Host header on requests sent to the local service.

Whether the official parsedmarc grafana dashboard should be provisioned to the local grafana instance.

nix substituter to fetch debuginfo from

Secret key used for signing

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

The room ID or alias where moderators can use the bot's functionality

List of domain names intended for local delivery using /etc/passwd and /etc/aliases.

https://www.postfix.org/postconf.5.html#mydestination

ChronyServerAddress of the chrony server side command port. (Not enabled by default.) Defaults to the local unix socket.

Authentication to expect from remote

API key to authenticate with a local crowdsec API

Extra directives that should be added under this accounts local storage directive

If provided, each item on this list will generate an entry on khard configuration file as a separate addressbook (vdir)