The address of the local endpoint which the remote side should send packets to.

The address of the local endpoint which the remote side should send packets to.

Use the browser's local timezone instead of the server's for displaying dates.

Local address (and optionally device) to bind to using the given port.

Whether to enable FTP for local users.

This option represents a directory which vsftpd will try to change into after a local (i.e. non- anonymous) login

The local directory for storing configuration and cached store paths

Path of file to link to /etc/rspamd/rspamd.local.lua for local rules written in Lua

The address of the local endpoint which the remote side should send packets to.

Whether to enable local discovery for the Kubo daemon

This tells pgmanage whether or not to set the listening socket to local addresses only.

Local UDP port.

Add ~/.local/bin/ to $PATH

Network device to bind to.

Whether to enable Local-Content-Share.

Permissions granted for the services.syncoid.user user for local source datasets

The local-content-share package to use.

List of accepted local users

Define list of allowed domains.

If storageType is local, this sets the parent directory under which all attachments/images go.

IP address or hostname of the local end.

Local address to bind to

Set to false if you want to run OpenGFW on FORWARD chain. (e.g. on a router)

Port on which the service will be available

The domain name serving your Weblate instance.

System-wide customization file contents, has higher priority than defaultFonts settings.

Systems with a recently generated hardware-configuration.nix do not need to specify this option, unless cross-compiling, in which case you should set only nixpkgs.buildPlatform

Local configuration files, written into /etc/rspamd/local.d/{name}.

Permissions granted for the services.syncoid.user user for local target datasets

Listen on localhost:.

The domain serving your Dawarich instance.

The domain serving your CastoPod instance.

The domain serving your Mastodon instance.

The domain serving your PeerTube instance.

The configuration for a crowdsec security engine.

Listen on local and forwards traffic from remote.

Local addresses to which the server binds.

Section for a local authentication round

The IPv4 address assigned to the interface in the container

The IPv6 address assigned to the interface in the container

The unique name that identifies this particular node within the cluster

Shell commands to be executed at the end of the network-setup systemd service

Permissions granted for the services.syncoid.user user for local source datasets

The domain serving your FileSender instance.

Local address to assume when running behind NAT.

Whether to automatically open the specified port in the firewall

The set of parser specifications

Permissions granted for the services.syncoid.user user for local target datasets

Address on which the service will be available

IP address or hostname of this node that will be used for cluster communication

Path to the local source folder.

Open ports in the firewall for Steam Local Network Game Transfers.

A list of files containing custom grok patterns.

A list of profiles to enable

Optional configuration to be written to the Zerotier JSON-based local.conf

A list of additional contexts to specify

The IPv4 address assigned to the interface in the container

The IPv6 address assigned to the interface in the container

A list of stage s00-raw specifications

Whether Postfix and Dovecot should be set up to receive mail locally. parsedmarc will be configured to watch the local inbox as the automatically created user specified in services.parsedmarc.provision.localMail.recipientName

Local ZFS filesystem from which snapshots should be sent

A list of stage s01-parse specifications

If specified, the OCS Inventory Agent will run in offline mode and the resulting inventory file will be stored in the specified path.

When not set to null this option defines the path at which the unbound remote control socket should be created at

List of directories to store localized files in.

A list of scenarios specifications

Per each i18n.extraLocaleSettings, choose the character set to use for it

The set of Postoverflows specifications

your ip on the vpn

A list of stage s02-enrich specifications

Whether to send announcements to the local LAN, also use such announcements to find other devices.

Whether local users are confined to their home directory.

The DMARC mail recipient name, i.e. the name part of the email address which receives DMARC reports

Text of the file.

The domain serving your SimpleSAMLphp instance

The server main locale

Whether to enable localsend, an open source cross-platform alternative to AirDrop.

List of raw public key candidates to use for authentication

The localsend package to use.

The localtime package to use.

A list of acquisition specifications, which define the data sources you want to be parsed

IKE identity to use for authentication round

The port on which to listen and send IPv4 broadcast announcements to.

Path of the source file.

Section for a certificate candidate to use for authentication

Client EAP-Identity to use in EAP-Identity exchange and the EAP method.

Optional slot number of the token that stores the certificate.

Optional numeric identifier by which authentication rounds are sorted

Whether this file locals should be generated

Absolute path to the certificate to load

Optional PKCS#11 module name.

A list of stage s01-whitelist specifications

The hostname to use when configuring Postfix

Client XAuth username used in the XAuth exchange.

A list of notifications to enable and use in your profiles

Whether to enable LocalSearch, indexing services for TinySPARQL search engine and metadata storage system.

List of certificate candidates to use for authentication

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

Whether to enable opening the firewall port 53317 for receiving files.

Server side EAP-Identity to expect in the EAP method

User to use when no root privileges are required

Enable localtimed, a simple daemon for keeping the system timezone up-to-date based on the current location

The Geoclue2 package to use.

Local UDP port for IKE communication

Local address(es) to use for IKE communication

By default enable localnet for loopback address ranges.

The user_id localpart to assign to the appservice

The hostname under which the Ollama UI interface should be accessible

Connection to a redis server

FoundationDB locality settings.

User accounts for GRUB

The user_id localpart to assign to the AS.

Authentication to perform locally.

• The default pubkey uses public key authentication using a private key associated to a usable certificate.
• psk uses pre-shared key authentication.
• The IKEv1 specific xauth is used for XAuth or Hybrid authentication,
• while the IKEv2 specific eap keyword defines EAP authentication.
• For xauth, a specific backend name may be appended, separated by a dash

Controls Link-Local Multicast Name Resolution support (RFC 4795) on the local host

The app environment

File containing the password for the mpd daemon

mailinglist local user

URI to use for the main PostgreSQL database

Zone identifier key

mailinglist local group

Data hall identifier key

URI to use for the main PostgreSQL database

Local Redis instance name

An ordered, comma-separated list of key-value pairs that describe the topography of the machine

Whether to allow traffic to local networks

The MODE determines which part of the NUT is to be started, and which configuration files must be modified

To support uploading of images for avatars and document attachments an s3-compatible storage can be provided

Machine identifier key

Whether to enable the mDNS NSS (Name Service Switch) plug-in for IPv6

Local system IP address to be used for CLI server endpoint.

Database name to use when connecting to an external or manually provisioned database; has no effect when a local database is automatically provisioned

Whether a database should be automatically created on the local host

Whether to enable cntlm, which starts a local proxy.

The local directory for storing configuration and cached store paths

Whether to request X11 forwarding on outgoing connections by default

Data center identifier key

Connect to someone as a client and establish a local accept endpoint

Whether to enable Gancio, a shared agenda for local communities.

The local port to use.

If set, keep the hardware clock in local time instead of UTC.

Whether a database should be automatically created on the local host

The local address to use.

Whether to enable ollama server for local large language models.

Username to use when connecting to an external or manually provisioned database; has no effect when a local database is automatically provisioned

The local IP address to which all traffic that does not match any forwarding rule is forwarded.

Name of the machine when registering it at the central or local api.

Whether a database should be automatically created on the local host

List of additional peer IP addresses to add to the local list.

Whether to enable confd, a service to manage local application configuration files using templates and data from etcd/consul/redis/zookeeper.

The path to repo in local machine

Port to bind local redis instance to.

Address to bind local redis instance to.

Depending on the local firewall/NAT rules, you might need to force Miredo to use a fixed UDP port and or IPv4 address.

Whether to enable blocky, a fast and lightweight DNS proxy as ad-blocker for local network with many features.

Whether to enable the automatic creation of a local postgres database for museum..

Local network interface

Local port of the encapsulation UDP socket.

Local web interface to use

Whether to enable private-gpt for local large language models.

Whether to enable Stratis Storage - Easy to use local storage management for Linux.

Path to local .zip file to reseed from.

This option lists the machines to be used if distributed builds are enabled (see nix.distributedBuilds)

Use S3 for storage instead of local storage.

Any additional flags passed to nixos-rebuild

Whether a database should be automatically created on the local host

Whether to open the UDP port used for multicast peer discovery

Which local IP to bind the UDP socket to.

Whether to automatically set up a local Redis cache and configure Sharkey to use it.

List of non-local DNS domains to be browsed.

Arguments to be passed to AutoSSH and retransmitted to SSH process

Path to local domain socket which is used for communication with the daemon

Niceness for local instances of btrbk

Enable local network discovery.

List of local traffic selectors to include in CHILD_SA

Username to use when connecting to an external or manually provisioned database; has no effect when a local database is automatically provisioned

Enables distributed pollers for this LibreNMS instance

Whether to run the Avahi daemon, which allows Avahi clients to use Avahi's service discovery facilities and also allows the local machine to advertise its presence and services (through the mDNS responder implemented by avahi-daemon).

Whether the HTTP service (when enabled) will decode ERIS content at /uri-res/N2R?urn:eris:

Whether to run searx in uWSGI as a "vassal", instead of using its built-in HTTP server

Whether to register a mDNS HINFO record which contains information about the local operating system and CPU.

Open ports needed for discovery of scanners on the local network, e.g. needed for Canon scanners (BJNP protocol).

Whether to fetch location from NMEA sources on local network.

List of devices that gpsd should subscribe to

The port that the local PeerTube web server will listen on.

Whether to enable Web Services Dynamic Discovery host daemon

Database name to use when connecting to an external or manually provisioned database; has no effect when a local database is automatically provisioned

Whether to enable the Router Advertisement Daemon (radvd), which provides link-local advertisements of IPv6 router addresses and prefixes using the Neighbor Discovery Protocol (NDP)

Whether to create a local redis automatically.

Depending on the local firewall/NAT rules, you might need to force Miredo to use a fixed UDP port and or IPv4 address.

Configure a local redis server for db-rest.

The path to the SSH private key with which to authenticate on the build machine

Name of the local AutoSSH session

Specifies the clear text password for the account

GitLab database hostname

Mail transfer agent (MTA) integration

Whether to enable the mDNS NSS (Name Service Switch) plug-in for IPv4

Definition of all cell-local database server machines

Only applies if sslEnable is true

Configure local Redis server for Nitter.

Local domains set (see opendkim(8) for more information on datasets)

The TCP port to use to connect to the local XMPP component.

Enable execution of compinit call for all interactive zsh shells

Whether to create a local redis automatically.

Allow the specified IPs to act as a proxy

Whether to enable a local mongodb instance.

Directory to read CSV config files from

Force enable or disable solicitation and receipt of IPv6 Router Advertisements

Whether to enable the Thanos receiver which accept Prometheus remote write API requests and write to local tsdb.

The user for the service

Only applies if sslEnable is true

Whether to enable local nginx integration.

Whether to enable local minio integration.

Configure a local Redis server for SearXNG

Database connection scheme

Allow binding to non local addresses.

Whether to configure a local nginx for Zammad.

Remote or local repository to back up to.

Path to file containing XMLRPC URI for use by web UI - this is a secret, since it contains auth credentials

Specifies whether local printers are shared by default.

Whether to enable Configure local livekit server.

path to the local directory where all files are stored

Set to true if you want to send RST for blocked TCP connections, needs local = false.

Enable the shairport-sync daemon

Whether to enable local redis integration in a dedicated redis-server.

Whether to set up a local redis instance.

The protocol used for communicating with the build machine

Mount nvidia-docker-1 directories on containers: /usr/local/nvidia/lib and /usr/local/nvidia/lib64.

Specifies the path to a file containing the clear text password for the account

Create and use a local Redis instance

Whether to let the nslcd daemon (nss-pam-ldapd) handle the LDAP lookups for NSS and PAM

Your local yggdrasil address

Whether to enable a local postgresql database for Firezone.

File storage type, it can be local or s3.

Enables the x2goserver module

Configure local Postfix SMTP server for Mastodon.

Local port to proxy associations to be performed

Configure local Postfix SMTP server for PeerTube.

Path to sendmail program

Whether to register mDNS address records for all local IP addresses.

Determines where on the local filesystem a data node should store its blocks.

Specifies the password hash for the account, generated with grub-mkpasswd-pbkdf2

The interface the BitlBee daemon will be listening to

Block retention time on local disk

Configure local Redis cache server for docs.

Whether to enable local postfix integration.

Whether to create a local redis automatically.

Whether to configure the required settings to use pfix-srsd in the local Postfix instance.

The postgresql database server to connect to

Configure local Redis server for PeerTube.

Configure local Redis server for Mastodon.

Allow falling back to local locks if Redis is unavailable (WARNING: breaks HA guarantees).

Whether to create a local database automatically.

local database using UNIX socket authentication

Whether to enable Configure local Redis cache server for meet.

A required list of local or remote repositories with paths and optional labels (which can be used with the --repository flag to select a repository)

Whether dnsmasq should resolve local queries (i.e. add 127.0.0.1 to /etc/resolv.conf).

Path to file containing local secret key in binary or hexadecimal form.

Source ZFS dataset

Whether unbound should resolve local queries (i.e. add 127.0.0.1 to /etc/resolv.conf).

Repeat interval for syncing the blocks between local and remote view

If enabled, virtual users will use the same privileges as local users

The public IP address to which packets from the local network are to be rewritten

Discourse database hostname. null means “prefer local unix socket connection”.

Whether to enable a local Redis database using UNIX socket authentication.

Local secret key in hexadecimal form.

Whether to enable OfflineIMAP, a software to dispose your mailbox(es) as a local Maildir(s).

Whether to create a local database automatically.

List of local domains, that do not require rewriting.

Jupyterhub spawner to use

There are many spawners available including: local process, systemd, docker, kubernetes, yarn, batch, etc.

Use a local postgresql database, create user and database

The public IPv6 address to which packets from the local network are to be rewritten

Target ZFS dataset

Configure local PostgreSQL database server for Mealie.

Which mode to use for sending mail

Whether to create a local database automatically.

The database host Invidious should use

Whether to run searx in uWSGI as a "vassal", instead of using its built-in HTTP server

List of local endpoints to listen for connections.

Arguments to pass to the daemon

Local Mattermost database name.

Whether to automatically set up a local PostgreSQL database and configure Sharkey to use it.

Local Mattermost database username.

Listen on remote and forwards traffic from local

List of network interfaces that should be used by the avahi-daemon

The interfaces the Quassel daemon will be listening to

Restrictions for access from non-local IP addresses

SSH port displayed in clone URL

Whether to enable and configure a local Redis instance.

IO scheduling class for btrbk (see ionice(1) for a quick description)

When tun is disabled, a lighthouse can be started without a local tun interface (and therefore without root).

Whether to enable System bus notification support

WARNING: enabling this option (while convenient) should not be done on a machine where you do not trust the other users as it allows any other local user to DoS your session by spamming notifications .

Configure local PostgreSQL database server for Homebox.

Specifies the path to a file containing the password hash for the account, generated with grub-mkpasswd-pbkdf2

Whether to create a local PostgreSQL database automatically

Whether to automatically set up the database on the local DBMS instance

The path to load specific local geoip/geosite db files

Set owner MXID otherwise first talking local user will claim the bridge

Whether to enable and configure a local PostgreSQL database server.

Whether to create a local database automatically.

Whether to enable automatic creation of a local postgres database.

calls fsync system call after every write to disk in local storage

Definition of all cell-local backup database server machines

Whether to configure the required settings to use postsrsd in the local Postfix instance.

Listen addresses for incoming connections

Whether to configure a local Redis server for Dawarich

By default, the Drone RPC server will listen on all interfaces and local IPv4 addresses for incoming connections from clients

Defines the mapping from system users to database users

Relay address (the local IP address that will be used to relay the packets to the peer)

Whether to create a local database automatically.

Enable billing Cron-Jobs on the local instance

Whether to create a local database automatically.

Whether to enable automatic creation of a local postgres database.

How long to retain raw samples on local storage.

0d - disables this retention

Defaults to 15d in Thanos when set to null.

Open ports in the firewall for Mirakurun.

Whether to create a local database automatically.

Additional packages that should be added to the agent's PATH

Whether to create a local database automatically.

Whether to register a service of type "_workstation._tcp" on the local LAN.

Name of the local WireGuard interface to use for this peer.

Create a local PostgreSQL or MySQL database for Mattermost automatically.

Configure local PostgreSQL database server for Mastodon.

Whether to automatically set up the database on the local DBMS instance

Configure local PostgreSQL database server for PeerTube.

SSH port displayed in clone URL

Whether to enable a local mongodb instance.

Duo Unix reports the IP address of the authorizing user, for the purposes of authorization and whitelisting

If set, the service will register a new session with systemd's login manager

Whether to enable a local database using UNIX socket authentication.

Remove remote snapshots that don't have a local correspondent.

Local name of the IBM TSM server, must not contain space or more than 64 chars.

Use local tailscaled instead of tsnet.

Whether to configure the required settings to use postfix-tlspol in the local Postfix instance.

The repository to fetch from

Path to the sendmail binary

Whether to enable local postgresql integration.

URL at which to reach Prometheus's API

Lock backend to use: 'local' (single instance), 'redis' (distributed), 'postgres' (distributed, requires PostgreSQL)

Whether a PostgreSQL database should be automatically created and configured on the local host

Whether to create a local database with PostgreSQL.

Whether to configure a local PostgreSQL server and database for Dawarich

Configure local PostgreSQL database server for Paperless.

Whether to enable and configure a local PostgreSQL database server.

Whether to automatically configure a local redis server for matrix-synapse.

Open ports in the firewall for the EPGStation web interface.

Use local DNS server for resolving.

IP detection provider for IPv4

IP detection provider for IPv6

Configure local PostgreSQL database server for Tandoor Recipes.

Whether to create a local database automatically

Whether to setup a local postgres database and populate the db-type fields in services.gotosocial.settings.

Configure local PostgreSQL database server for docs.

Whether the repo (which must be local) is a removable device.

Fileserver role, serves files and volumes from its local storage.

Database host name. localhost is treated specially and inserts systemd dependencies, other hostnames or IP addresses of the local machine do not.

Multiaddr or array of multiaddrs describing the address to serve the local HTTP API on

Whether to enable Configure local PostgreSQL database server for meet.

Environment variables for configuring the rke2 service/agent

A required list of local or remote repositories with paths and optional labels (which can be used with the --repository flag to select a repository)

Password used for authentication

Whether to enable publishing the pulseaudio sink in the local network.

Auto-connect to other cjdns nodes on the same network

Specify the local database filename to store persistent data

Type of 9p cache to use when mounting host nix store. "none" provides no caching. "loose" enables Linux's local VFS cache. "fscache" uses Linux's fscache subsystem

The local path name of a CSS file for the PSGI web interface.

Create and use a local Meilisearch instance

Whether to configure a local postgres database and connect to it.

Whether to configure a local PostgreSQL server.

URL of the local API.

Path to a user's home directory from which to copy DankMaterialShell configuration files

Connection string to postgresql in the [rust postgres crate config format](https://docs.rs/postgres/latest/postgres/config/struct

Password for local Mattermost database user

Whether to enable and configure a local PostgreSQL server by creating a user and database for weblate

Path to a file containing the public key of the local Rosenpass peer

Path to a file containing the secret key of the local Rosenpass peer

HTTP bind address for serving local build information/monitoring.

Whether to enable presence tracking

Whether to automatically set up a local Meilisearch instance and configure Sharkey to use it

Whether to enable discovery of pulseaudio sinks in the local network.

Whether reads should be made for queries for time ranges that the local storage should have complete data for.

User name under which the chrony exporter shall be run

The local port the bridge is listening on.

Group under which the chrony exporter shall be run

If set, all recipients to users at either "localhost" (the literal string) or the canonical host name (from the me control attribute) are remapped to this address

The database user's password (not applicable for sqlite3)

Path to an environment file as defined in systemd.exec(5)

Path to the API key to authenticate with a local CrowdSec API

The SQL server URI

List of addresses and ports to listen on (ListenAddress directive in config)

Whether to create database and user on the local machine if they do not exist

Whether to apply bandwidth limits to devices in the same broadcast domain as the local device.

Map of incoming traffic patterns to local targets

Whether to run the exporter as the local 'postgres' super user.

Path to the service's config file

An extra set of filesystem paths that FoundationDB can read to and write from

Sets the HTTP Host header on requests sent to the local service.

Whether the official parsedmarc grafana dashboard should be provisioned to the local grafana instance.

nix substituter to fetch debuginfo from

Secret key used for signing

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

The room ID or alias where moderators can use the bot's functionality

List of domain names intended for local delivery using /etc/passwd and /etc/aliases.

https://www.postfix.org/postconf.5.html#mydestination

ChronyServerAddress of the chrony server side command port. (Not enabled by default.) Defaults to the local unix socket.

Authentication to expect from remote

API key to authenticate with a local crowdsec API

Disable the “happy eyeballs” algorithm for IPv4/IPv6 fallback if your local network has misconfigured one of the protocols.

Addresses of public STUN services to use to automatically find the public and local addresses of this Jitsi-Videobridge instance without the need for manual configuration

Whether to set up and use a local instance of Elasticsearch.

Send notifications about killed processes via the system d-bus

Path to the socket for local or remote transports

Options for configuring workers

Path to the service's environment file

Install the SPICE USB redirection helper with setuid privileges

Whether to enable pay-respects' LLM integration

Specifies if mapped OpenID Connect accounts are automatically created upon successful authentication

Environment variables which are read by healthchecks (local)_settings.py

Whenever to send systembus-notify notifications

Environment variables which are read by healthchecks (local)_settings.py

Default admin password

Enable hardened VirtualBox, which ensures that only the binaries in the system path get access to the devices exposed by the kernel modules instead of all users in the vboxusers group.

Path to the service's config file

Configuration from which XMonad gets compiled

Specifies if mapped OpenID Connect accounts are automatically created upon successful authentication

Path to the postgres socket directory

This option will ensure that team memberships for OpenID Connect users are dynamic and synchronized with membership of OpenID Connect groups or assigned roles

Datasource specific secure configuration

Your role in Tor network

Identity under which the peer is registered at the mediation server, that is, the IKE identity the other end of this connection uses as its local identity on its connection to the mediation server

This option will ensure that team memberships for OpenID Connect users are dynamic and synchronized with membership of OpenID Connect groups or assigned roles

Custom engine path for local transcription.

The client TLS security level.

https://www.postfix.org/postconf.5.html#smtp_tls_security_level

By default, non global IP addresses are never forwarded to upstream servers

A set of additional system-wide locale settings other than LANG which can be configured with i18n.defaultLocale

Additional locales that the system should support, besides the ones configured with i18n.defaultLocale and i18n.extraLocaleSettings

Override default locales within gancio

Additional hwdb files

Where to send logs

Additional udev rules

Specifies a urlPrefix to use with jenkins

udev rules to include in the initrd only

Any additional text to be appended to MediaWiki's LocalSettings.php configuration file

settings-local.yaml for private-gpt

Structural Kimai's local.yaml configuration

Museum yaml configuration

Chroot under which to run redsocks

Whether to use top-level directories as LOCALSTATEDIR instead of the store path ones

The SpamAssassin local.cf config

If you are using this configuration:

add_header all Status _YESNO_, score=_SCORE_ required=_REQD_ tests=_TESTS_ autolearn=_AUTOLEARN_ version=_VERSION_

Then you can Use this sieve filter:

require ["fileinto", "reject", "envelope"];

if header :contains "X-Spam-Flag" "YES" {
  fileinto "spam";
}

Or this procmail filter:

:0:
* ^X-Spam-Flag: YES
/var/vpopmail/domains/lastlog.de/js/.maildir/.spam/new

To filter your messages based on the additional mail headers added by spamassassin.

If set, the pkgs argument to all NixOS modules is the value of this option, extended with nixpkgs.overlays, if that is also set

Listen on path or localhost port in discovery mode.

Enable status page reachable from localhost on http://127.0.0.1/nginx_status.

The default locale character set.

Consul server to query

List of remote selectors to include in CHILD_SA

The host address to bind to (defaults to localhost).

Port where the Portunus webserver should listen on

The default locale

"Peer verification string"

This option specifies the no_proxy environment variable

The IP address on which Xandikos will listen

Address of the host riemann node

Database specific connection string for example:

• MySQL/Percona/MariaDB: user:password@tcp(host:3306)/documize
• MySQLv8+: user:password@tcp(host:3306)/documize?allowNativePasswords=true
• PostgreSQL: host=localhost port=5432 dbname=documize user=admin password=secret sslmode=disable
• MSSQL: sqlserver://username:password@localhost:1433?database=Documize or sqlserver://sa@localhost/SQLExpress?database=Documize

The list of hostnames and/or IP addresses from which the Mailman Web UI will accept requests

The domain name of your instance

Net masks for trusted - allowed to relay mail to third parties - hosts

The uptime configuration file

If mongodb: server != localhost, please set usesRemoteMongo = true

If you only want to run the monitor, please set enableWebService = false and enableSeparateMonitoringService = true

If autoStartMonitor: false (recommended) and you want to run both services, please set enableSeparateMonitoringService = true

Specifies the bind address on which the irker daemon listens

Name of standard way of trusted network specification to use, leave blank if you specify it explicitly or if you want to use default (localhost-only).

Cassandra ships with JMX accessible only from localhost

Locally defined maps of hostnames to IP addresses.

Whether to add an entry to /etc/hosts for the configured nextcloud domain to point to localhost and add localhost to nextcloud's trusted_proxies config option

Zone name, like "example.com", "localhost", or "0.0.127.in-addr.arpa".

Whether the database connection should be secured by SSL / TLS

Set Torsocks to accept inbound connections

Contents of the runtime configuration file, apcupsd.conf

A unix socket to mysql, accessible by the librenms user

Whether to enable LDAPS protocol

Host of the postgresql server

Where can Mailman connect to Hyperkitty's internal API, preferably on localhost?

Database host address

You want that ip-from-header in the nginx setup case

Whether to enable Simple Ollama web UI service; an easy to use web frontend for a Ollama backend service

Host of the postgresql server

Whether PostgreSQL should listen on all network interfaces

Whether to enable i2c devices support

Whether to set the machine hostname based on the information received from the DHCP server.

Whether to enable access from anywhere (rather than just localhost).

An attribute set of repositories as described in: https://pgbackrest.org/configuration.html#section-repository

Each repository defaults to set repo-host to the attribute's name

Whether to enable ipp-usb, a daemon to turn an USB printer/scanner supporting IPP everywhere (aka AirPrint, WSD, AirScan) into a locally accessible network printer/scanner.

Whether to use Lokinet locally.

Postgresql database superuser used to create Nominatim database and import data

Database name, only used when the databse is created locally.

Whether to disable Prosody features not needed by Jitsi Meet

Username for the postgresql connection

The IP address that Meilisearch will listen on

Whether to announce the locally used domain name for browsing by other hosts.

Hosts that homepage-dashboard will be running under

Whether to allow invalid certificates when provisioning the target instance

SMTP configuration

The hostname to bind to

You want that ip-from-header in the nginx setup case

Host of the postgresql server

If given an IP address, it can be a host name ("localhost"), an IPv4 dotted-quad ("127.0.0.1") or an IPv6 address enclosed in square brackets ("[::1]").

(VCL4.1 and higher) If given an absolute Path ("/path/to/listen.sock") or "@" followed by the name of an abstract socket ("@myvarnishd") accept connections on a Unix domain socket

If set, does not limit target to localhost, 127.0.0.1, [::1], or UNIX sockets

The port under which the api will be served locally

Opens telnet console interface on localhost port 5582

The port under which the web interface will be served locally

Addresses (IPv4 or IPv6) to listen on for connections by the reverse proxy/tls terminator

Password file for the postgresql connection

IP address on which nebula lighthouse should serve DNS. 'localhost' is a good default to ensure the service does not listen on public interfaces; use a Nebula address like 10.0.0.5 to make DNS resolution available to nebula hosts only.

Configuration options for the Stalwart server

A free port on which webDriverSupport or playwrightSupport listen on localhost.

Create the database and database user locally.

The IP address the hostname specified in services.ncdns.identity.hostname should resolve to

Username for the postgresql connection

The path to the file containing the Redis password

An attribute set of database instances as described in: https://pgbackrest.org/configuration.html#section-stanza

Each instance defaults to set pg-host to the attribute's name

This directory is used to download fonts from a remote location, e.g. to host google fonts locally.

Configuration options for the Stalwart email server

Create the database and database user locally.

Create the database and database user locally.

Create the database and database user locally.

Create the database and database user locally.

Provides a custom seed for the RANDSTRUCT security option of the Linux kernel

Create the database and database user locally.

Create the database and database user locally.

Create the database and database user locally.

Whether to add the boot.binfmt.emulatedSystems to nix.settings.extra-platforms

Whether to enable MailCatcher, an SMTP server and web interface to locally test outbound emails.

Whether to enable Create the database and database user locally..

Full (!) list of domains we deliver locally

Create the database and database user locally.

Address to listen on for the web interface and API

The content of this attribute is appended to any host name that does not contain a period (except localhost), including defaulthost and idhost

Whether to automatically initialise the database on startup

Absolute path to a directory where builds will be stored in context of selected executor (Locally, Docker, SSH).

Addresses (IPv4 or IPv6) to listen on for connections by the reverse proxy/tls terminator

Create the database and database user locally.

Create the database and database user locally.

Create the database and database user locally.

Create the database and database user locally.

Create the database and database user locally.

Create the PostgreSQL database locally

Whether to enable ZoneMinder

An email address for the SOA record at the bit zone

Whether to verify clients against a locally running tailscale daemon if they are allowed to connect to this node or not.

Create the PostgreSQL database and database user locally.

Create the database and database user locally.

If set, does not limit target to localhost, 127.0.0.1, [::1], or UNIX sockets

Allow localhost redirects

Create the database and database user locally.

MAC address to use for the device

Create the database and database user locally.

Whether to create the database and database user locally.

List of IP addresses that are allowed to access the debug, stats and metrics endpoints

Create the database and database user locally, and run installation

The hostname of this ncdns instance, which defaults to the machine hostname

If not null, sets the value of the TRANSMISSION_WEB_HOME environment variable used by the service

Create the database and database user locally

Create the database and database user locally.

Create the PostgreSQL database and database user locally.

Proxy to use to connect to the wstunnel server (USER:PASS@HOST:PORT).

Create the database and database user locally.

Create the database and database user locally

pattern of a directory structure locally and on s3

When services.writefreely.database.type is set to "mysql", this option will enable the MySQL service locally.

Specifies the BSSID for this BSS

Level of TLS verification

Environment file to be passed to the systemd service

Environment file to be passed to the systemd service

Create the database and database user locally.

If set to

• "true": all DNS lookups are DNSSEC-validated locally (excluding LLMNR and Multicast DNS)

Network ports to publish from the container to the outer host

Whether to automatically register the bouncer to the locally running crowdsec service

Attribute set of NetBird client daemons, by default each one will:

1. be manageable using dedicated tooling:

• netbird-<name> script,
• NetBird - netbird-<name> graphical interface when appropriate (see ui.enable),

2. run as a netbird-<name>.service,
3. listen for incoming remote connections on the port 51820 (openFirewall by default),
4. manage the netbird-<name> wireguard interface,
5. use the /var/lib/netbird-/config.json configuration file,
6. override /var/lib/netbird-/config.json with values from /etc/netbird-/config.d/*.json,
7. (hardened) be locally manageable by netbird-<name> system group,

With following caveats:

• multiple daemons will interfere with each other's DNS resolution of netbird.cloud, but should remain fully operational otherwise

Specify the model that tabby will use to generate completions

Use these credentials to authenticate during the HTTP upgrade request (Basic authorization type, USER:[PASS]).

Identity in CA certificate to accept for authentication

The host to use if the container is in host networking mode