When a job dies, launchd kills any remaining processes with the same process group ID as the job

Whether to allow logging into accounts that have no password set (i.e., have an empty password field in /etc/passwd or /etc/group)

Whether to enable the headless Transmission BitTorrent daemon

Match windows where wm class group contains string.

This option enables docker, a daemon that manages linux containers

This option enables lxd, a daemon that manages containers

Whether to enable KVMGT (iGVT-g) VGPU support

Match windows where wm class group contains string.

Listen on a UNIX socket at the specified path

Defines Anuko Time Tracker default language

SSL key in PEM format

Username for the postgresql connection

Allow users of the wpa_supplicant group to control wpa_supplicant through wpa_gui or wpa_cli

This option enables libvirtd, a daemon that manages virtual machines

This optional key can be used to request that the datagram socket join a multicast group

Path to a file containing the password

Number of I/O requests to route to a path before switching to the next in the same path group

All relay groups to provision

The name of this relay group

Whether to enable VirtualBox.

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

All gateway groups (sites) to provision

Remove users from bitwarden groups if no longer in the ldap group.

This optional key can be used to request that the datagram socket join a multicast group

Do not send VRRP adverts over VRRP multicast group

Attribute set of NetBird client daemons, by default each one will:

1. be manageable using dedicated tooling:

• netbird-<name> script,
• NetBird - netbird-<name> graphical interface when appropriate (see ui.enable),

2. run as a netbird-<name>.service,
3. listen for incoming remote connections on the port 51820 (openFirewall by default),
4. manage the netbird-<name> wireguard interface,
5. use the /var/lib/netbird-/config.json configuration file,
6. override /var/lib/netbird-/config.json with values from /etc/netbird-/config.d/*.json,
7. (hardened) be locally manageable by netbird-<name> system group,

With following caveats:

• multiple daemons will interfere with each other's DNS resolution of netbird.cloud, but should remain fully operational otherwise

The name of this gateway group

Path to a file containing the password

This optional key can be used to request that the datagram socket join a multicast group

This optional key can be used to request that the datagram socket join a multicast group

Attribute that lists members in a LDAP group.

Kanidm groups that are allowed to login using PAM.

Kanidm groups that are allowed to login using PAM.

Enable distributed billing on this poller

The targets specified by the target group.

If not null, is used as the permissions set by system.activationScripts.transmission-daemon on the directories services.transmission.settings.download-dir, services.transmission.settings.incomplete-dir. and services.transmission.settings.watch-dir

Listen on a UNIX socket at the specified path

The string by which Uyuni group names are joined into the groups label

Defaults to , in prometheus when set to null.

Time to schedule CHILD_SA rekeying