List of TCP ports on which incoming connections are accepted.

Whether to open the UDP port used for multicast peer discovery

A range of TCP ports on which incoming connections are accepted.

List of open UDP ports.

Interface-specific open ports.

addr:port to listen on for HTTPS clients

Range of open UDP ports.

List of IP (v4 or v6) addresses with CIDR masks from which this peer is allowed to send incoming traffic and to which outgoing traffic for this peer is directed

List of IP (v4 or v6) addresses with CIDR masks from which this peer is allowed to send incoming traffic and to which outgoing traffic for this peer is directed

Determines whether to add allowed IPs as routes or not.

Name of the interface.

Name of the UKI

Name of the interface

Name used to derive peer unit name.

The name of the user account

Source ports to allow in the zone.

The name of the group

Whether this interface should be configured with DHCP

Ports to forward in the zone.

MTU size for packets leaving the interface

The name of the user account

The name of the system used in the system.build.toplevel derivation

Vlan tag to apply to interface

Openvswitch type to assign to interface

Destination IP address.

The interfaces to bond together

The IP addresses of DNS servers to configure.

Commands called at the start of the interface setup.

16-bit port for listening

The type of interface to create

The type of the interface

Commands called after the interface setup.

Source ports for the service.

Command called before the interface is taken down.

If not specified, the MTU is automatically determined from the endpoint addresses or the system default route, which is usually a sane choice

Peers linked to the interface.

The name of the group

Command called after the interface is taken down.

Whether to enable wol on this interface.

The physical network interfaces connected by the bridge.

List of extra IPv6 static routes that will be assigned to the interface.

IPv4 address of the next hop.

IPv6 address of the next hop.

The kernel routing table to add this interface's associated routes to

MAC address of the interface

Whether this interface is virtual and should be created by tunctl

The IP addresses of the interface.

Turn on proxy_arp for this device

The Wake-on-LAN policy to set for the device

List of extra IPv4 static routes that will be assigned to the interface.

If you want consistency between the two implementations, set the scope of the route manually with networking.interfaces.eth0.ipv4.routes = [{ options.scope = "global"; }] for example.

Table name.

The base64 public key to the peer.

The name of this nylon instance.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

wg-quick .conf file, describing the interface

In case of a virtual device, the user who owns it. null will not set owner, allowing access to any user.

Type of the route

Type of the route

Base64 private key generated by wg genkey

16-bit port for listening

The IP addresses of the interface.

Private key file as generated by wg genkey.

Interfaces to bind.

Extra options to append to the interface section

The physical network interfaces connected by the vSwitch.

The type of the interface

When IPv6 is enabled with SLAAC, this option controls the use of temporary address (aka privacy extensions) on this interface

IPv4 address of the network.

IPv6 address of the network.

Name of the zone.

Peers linked to the interface.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Whether to bring up this interface automatically during boot.

Name of the PPP peer.

Set the maximum transmission unit in bytes for the wireguard interface

List of IPv6 addresses that will be statically assigned to the interface.

List of IPv4 addresses that will be statically assigned to the interface.

Commands called at the start of the interface setup.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Endpoint IP or hostname of the peer, followed by a colon, and then a port number of the peer.

Commands called at the end of the interface setup.

Mark all wireguard packets originating from this interface with the given firewall mark

Set the metric of routes related to this Wireguard interface.

Other route options

Other route options

The kernel routing table to add this interface's associated routes to

Subnet mask of the network, specified as the number of bits in the prefix (24).

Subnet mask of the network, specified as the number of bits in the prefix (64).

Name of the image

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Common name attribute of allowed peer certificates

Common name attribute of allowed peer certificates

Username to authenticate with.

The base64 public key of the peer.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Base64 private key generated by wg genkey

Private key file as generated by wg genkey.

Commands called before shutting down the interface.

Automatically generate a private key with wg genkey, at the privateKeyFile location.

Extra options to append to the interface section

Endpoint IP or hostname of the peer, followed by a colon, and then a port number of the peer

Allowed client IP ranges are evaluated first, defaults to ARIN IPv4 private ranges: [ "192.168.0.0/16" "127.0.0.0/8" "172.16.0.0/12" "10.0.0.0/8" ]

Base64 preshared key generated by wg genpsk

Commands called after shutting down the interface.

IPv4 address of the interface

IPv6 address of the interface

File pointing to preshared key as generated by wg genpsk

Etcd unique node name.

Whether this VPN connection should be started automatically.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The endpoint name.

The endpoint name.

Gateway server to connect to.

Subnet mask of the interface, specified as the number of bits in the prefix (24).

Subnet mask of the interface, specified as the number of bits in the prefix (64).

Private key to authenticate with.

Name of the control, as it appears in alsamixer

The underlying network device on which the tunnel resides.

The time-to-live of the connection to the remote tunnel endpoint.

The name of this systemd unit, including its extension

The vlan identifier

Protocol to use.

Name of the PAM service.

Username for JSON-RPC connections.

Interface name

The name of this systemd unit, including its extension

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

The underlying network device on which the tunnel resides.

Name of the worker

File containing the password to authenticate with

The time-to-live of the connection to the remote tunnel endpoint.

The pre-existing network namespace in which the WireGuard interface is created, and which retains the socket even if the interface is moved via interfaceNamespace

Automatically generate a private key with wg genkey, at the privateKeyFile location.

Extra config to be appended to the interface config

Name i2pd appears in UPnP forwardings list.

Base64 preshared key generated by wg genpsk

File pointing to preshared key as generated by wg genpsk

The address of the local endpoint which the remote side should send packets to.

Local port of the encapsulation UDP socket.

Name of modem device, will be searched for in /dev.

The endpoint name.

The endpoint name.

Specifies the Name of the Storage daemon.

The name of the node which is used as an identifier when communicating with the remote nodes in the mesh

Network device to bind to.

The name of this systemd unit, including its extension

The name of the network interface to match against.

The address of the local endpoint which the remote side should send packets to.

The address of the remote endpoint to forward traffic over.

The endpoint name.

The endpoint name.

Name of the redis server

The pre-existing network namespace the WireGuard interface is moved to

Certificate to authenticate with.

The friendly name you give to the network device

The friendly name you give to the network device

Name for the device

This is optional and is by default off, because most users will not need it

Database name.

Mail "from" name.

Local address (and optionally device) to bind to using the given port.

Name of the runner to configure

DEPRECATED, use driverOptions

The director name used by the system administrator

The client name that must be used by the Director when connecting

The address of the remote endpoint to forward traffic over.

A system user name for this client instance.

A system user name for this client instance.

The name of the Helm chart

Database name.

The name of the host

Whether the bridge interface should enable rstp.

The underlying network device on which the tunnel resides.

Keyboard name.

Periodically refresh the endpoint hostname or address for all peers

Akkoma frontend name.

The time-to-live/hoplimit of the connection to the remote tunnel endpoint.

Agent name, usually same as the hostname

The name of the service to run

Local address to bind to

Mail "reply-to" name.

The name of the Helm chart

Name of the font to use for regreet.

Font name, as used by fontconfig.

Name of the redis server

The endpoint name.

The name of the instance.

The name of the agent as seen in the buildkite dashboard.

This is optional and is by default off, because most users will not need it

The user's home directory.

Periodically re-execute the wg utility every this many seconds in order to let WireGuard notice DNS / hostname changes

Whether the tunnel routes layer 2 (tap) or layer 3 (tun) traffic.

Optional configuration string for this interface.

DEPRECATED, use driverOptions

Definitions of SIIT instances of Jool

The mode of the macvlan device.

Name is referenced in logs

The address of the local endpoint which the remote side should send packets to.

The name to return in service discovery responses for the MUC service itself

Name of the theme to use for regreet.

Name of directory from which to import ZFS device, this is passed to zpool import as the value of the -d option

The account UID

The endpoint name.

Name of the rule.

The prefix used for embedding IPv4 into IPv6 addresses

Definitions of NAT64 instances of Jool

Name of the iSCSI initiator to boot from

The serial port to which your UPS is connected. /dev/ttyS0 is usually the first port on Linux boxes, for example.

Name is used as a suffix for the service name, user, and group

Name of the machine when registering it at the central or local api.

Name of the existing database.

A list of glob patterns, indicating which paths to expose to the sandbox

The user's home directory mode in numeric format

The name of an explicit dtb to be loaded, relative to the dtb base

When the dynamic endpoint refresh that is configured via dynamicEndpointRefreshSeconds exits (likely due to a failure), restart that service after this many seconds

The address of the remote endpoint to forward traffic over.

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

Name of the bridge interface that wpa_supplicant should listen at.

The logical name of the Galera cluster

The name of the service to run

The user's primary group.

The name of the server

Name of the user to ensure.

The database name

The endpoint name.

The name of the mailbox.

Database name.

Database name.

Name of the icon theme to use for regreet.

Name of the beat

Name of the wiki.

Name of the server.

Database name.

The name of the underlying hardware WLAN device as assigned by udev.

The name of this gateway as shown in firezone

The name of the cookie that the oauth_proxy creates.

Name of this iscsi initiator

Database name.

Options for the bonding driver

Short description for the zone.

Rich rules for the zone.

Ports to allow in the zone.

Protocol number of the encapsulated packets

Server name to be used for this virtual host

Name of ICMP pinging job.

Database name, only used when the databse is created locally.

The interface the vlan will transmit packets through.

The name of this authentication provider

The group GID

Name of the redis server

The endpoint name.

Database name.

Database name.

Database name.

The advertised name for zeroconf discovery.

The framework to use for attaching Jool's translation to the exist kernel packet processing rules

The name of the immich database.

Which requiredSystemFeatures should trigger relaxation of the sandbox

This primary server will notify all given secondary servers about zone changes

Database name

Enable this table.

Table family.

The name of the database to use for Wakapi.

Drive name without the full path.

Database name.

The name of the host in the network as well as the configuration for that host

The name of an existing user account under which the rsync process should run.

The name of this actor

The name of this group

Action for packets that doesn't match any rules.

DEPRECATED, use driverOptions

Specify the program to run to talk to this UPS. apcsmart, bestups, and sec are some examples.

Name of the service.

The user's home directory.

The user's home directory mode in numeric format

The framework to use for attaching Jool's translation to the exist kernel packet processing rules

Name of the cursor theme to use for regreet.

The name of this client as shown in firezone

name of the virtualhost

Either the raw pre-shared key in hexadecimal format or the name of the secret (as defined inside networking.wireless.secretsFile and prefixed with ext:) containing the network pre-shared key.

The name of the device.

List of forwarded ports from host to container

Source port of the external interface on host

Adapter name that is used in the radicle-ci-broker configuration

Firewall rules for inbound traffic.

Database name.

Database name.

The table content.

The name identifying the runner instance towards the Gitea/Forgejo instance.

The account UID

PostgreSQL database name

ICMP types to block in the zone.

Version of the zone.

The name of an existing user group under which the rsync process should run.

The name of this relay group

Server name.

The name of this gateway as shown in firezone

Text of this systemd unit.

Each attribute of this option defines a systemd service that runs hans

Name of this overlay

MeshID of interface with type mesh.

Database name.

The type of the WLAN interface

Lines which would be added inside ups.conf for handling this UPS.

Name of the existing database (has no effect if type is "sqlite").

The name of this server.

Source addresses, address ranges, MAC addresses or ipsets to bind.

Force a specific wpa_supplicant driver.

Flags for interface of type monitor.

A MAC address.

The user's primary group.

OpenFlow rules to insert into the Open vSwitch

See torrc manual.

Firewall rules for outbound traffic.

If set, this network block is used only when associating with the AP using the configured BSSID.

This is the target address is to match against

Name of the local AutoSSH session

The name of this systemd unit, including its extension

Name of symlink

Domain to fetch certificate for (defaults to the entry name).

Whether to enable 4-address mode with type managed.

MAC address to use for the device

This option allows you to define vlan devices that tag packets on top of a physical interface

The name of this gateway group

When set to something distinct to null NSD is able to collect statistics per zone

Command line arguments to add when executing wpa_supplicant.

Set this to true if the SSID of the network is hidden.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Ports of the service.

The name of this resource

The network's pre-shared key in plaintext defaulting to being a network without any authentication.

The interface the macvlan will transmit packets through.

Services to allow in the zone.

Short description for the service.

Text of this systemd unit.

The name of the dawarich database.

MySQL database name.

Database name for FreshRSS.

Name of the satellite.

You could use this field to override the network's ssid

Whether to enable intra-zone forwarding

Bind port for ‹name› endpoint.

An ipset.

This option allows you to define bond devices that aggregate multiple, underlying networking interfaces together

Add the necessary actions for a upsmon process to work

The name of the file or block device that should be used as header for the encrypted device.

The group GID

The name of the wrapper program

Name of the modifier.

Name of the game as it will appear in the game listing.

Bind port for ‹name› endpoint.

User to run the cgit service as.

The name of the file (can be a raw device or a partition) that should be used as the decryption key for the encrypted device

The fully qualified domain name (FQDN) of this host

The path to the user's shell

The system domain name

Node name

Name of symlink (relative to /etc)

The account name

Version of OpenFlow protocol to use when communicating with the switch internally (e.g. with openFlowRules).

Name of the beat

The flake reference from is rewritten to

If set to false, the user account will not be created

Use this option to configure advanced authentication methods like EAP

Each attribute of this option defines a systemd service that runs iodine

Whether to enable Instructs the hook to mount the symlink targets as well, when any of the paths contain symlinks

External wpa_supplicant.conf configuration file

Start the specified units when this unit is started.

The protocol specifier for port forwarding between host and container

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

The name of services's user

Attributes for user's entry in pam_mount.conf.xml

Configuration options for wpa_supplicant.conf

The flake input from is rewritten to.

Database name.

Common name attribute of allowed peer certificates

Common name attribute of allowed peer certificates

The specified name-string gives the system file name of the storage device managed by this storage daemon

Creating multiple WLAN interfaces on top of one physical WLAN device (NIC)

Database name.

The user's auxiliary groups.

Commands to manipulate the Open vSwitch database

TLS options for virtual host

APIs to enable over WebSocket

Common name attribute of allowed peer certificates

Path to encrypted luks device that contains the user's home directory.

Rename nodes to different name.

Protocols to allow in the zone.

Database name.

Database name.

Where to mount this dataset.

S3 bucket name to use for HTTP-01 based challenges

VLAN to which the network interface is connected.

Extra configuration lines appended to the network block

Discourse database name.

Format: [AXFR|UDP] <ip-address> <key-name | NOKEY>

Version of the service.

Helpers for the service.

Name of this virtual host

Port number Go Ethereum will be listening on, both TCP and UDP.

If the specified units are started at the same time as this unit, delay this unit until they have started.

The flake reference to be rewritten

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Start the specified units when this unit is started.

Group to run the cgit service as.

Whether to create the home directory and ensure ownership as well as permissions to match the user.

Name of the PCM card to control (slave).

ACME options for virtual host.

HTTP options for virtual host

Target node name on the IBM TSM server.

Whether to enable ‹name›.

Allow the user to do certain things with upsd

Port number of Go Ethereum HTTP API.

Path to the directory storing the hooks

Name of the symlink (relative to /var/lib/rancher/k3s/server/manifests)

The nickname of this Tahoe node.

Database name.

A path which will be scanned for repositories.

The name of the first admin user.

Whether to enable ‹name›.

Target port of container

Either the fully qualified domain name (FQDN), or just the host name if it does not exist

VirtualHost to serve cgit on, defaults to the attribute name.

What port to listen for client requests, default is 1080.

The type of the device.

DNS full-qualified domain name of a database server

DNS full-qualified domain name of a database server

Name of the remote read config, which if specified must be unique among remote read configs

Start the specified units when this unit is started.

Start the specified units when this unit is started.

Priority for outbound traffic

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are started at the same time as this unit, delay this unit until they have started.

The name of the database to create.

Replace any existing runner with the same name

cgit repository settings, see cgitrc(5)

The name of this client as shown in firezone

SSID to be used in IEEE 802.11 management frames.

Path to a certificate signing request to apply when fetching the certificate.

Username

Override the default TLS port for this virtual host.

Proxy account name, without the possibility to include domain name ('at' sign is interpreted literally).

This option allows you to define Ethernet bridge devices that connect physical networks together

Name of the model to download and use for speech synthesis

Services to include for the service.

Subordinate group ids that user is allowed to use

Subordinate user ids that user is allowed to use

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Whether to enable masquerading in the zone.

Automatically assign an IP address to the network interface using the same scheme as virtualisation.vlans.

Name of the remote write config, which if specified must be unique among remote write configs

ID of the user in initrd.

Database name.

Whether to enable cgit.

Whether the configuration file at configFile.path should be written to by wpa_supplicant.

Listed primary servers are allowed to notify this secondary server

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Name of Google storage bucket

Database name.

Database name.

Name of database.

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Destination port when using UDP encapsulation.

Name of the user to ensure.

Name of the kernel module that provides the card.

The name of the Grafana database.

Start the specified units when this unit is started.

Start the specified units when this unit is started.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Configures the type of encapsulation.

Name of the PostgreSQL database.

The name of the Linkwarden database.

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

The user names of the group members, added to the /etc/group file.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Name of the symlink (relative to /var/lib/rancher/rke2/server/manifests)

Name of modem configuration file, will be searched for in config in the spooling area directory.

Blockchain garbage collection mode.

Whether to enable hub instance.

Members of this group can access the control socket for this interface.

Set the host address for this virtual host

Path to the private key to the matching certificate signing request.

Priority for inbound traffic

Database name to use when connecting to an external or manually provisioned database; has no effect when a local database is automatically provisioned

List of forwarded ports from host to container

Whether the luksOpen will be attempted before LVM scan or after it.

Override the default HTTP port for this virtual host.

Automatically allocate subordinate user and group ids for this user

Interface name

Local Mattermost database name.

The path to the user's shell

Count of subordinate user ids

Count of subordinate group ids

Interface to use when method is iface.

The relationship with upsd

A list of device nodes to which the containers has access to.

Whether to set the machine hostname based on the information received from the DHCP server.

Bind address for ‹name› endpoint.

Whether the SSID is to be interpreted using UTF-8 encoding.

Aliases of that unit.

Aliases of that unit.

If set to false, the user account will not be created

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Whether to enable Go Ethereum Node.

Additional arguments passed to Go Ethereum.

Name of the homebridge UI platform

Source port of the external interface on host

The name of the host in the network as well as the configuration for that host

Group running the ACME client.

Name of the PCM device to control (slave).

Set name to shared memory zone.

The list of authentication protocols accepted by this network

Name of the MySQL database that holds EPGStation's data.

Name of the beat

An IP address or a network IP address with a mask for IPv4 or IPv6

Attributes for user's entry in pam_mount.conf.xml

Bind address for ‹name› endpoint.

The user's auxiliary groups.

Verify peer certificate

Verify peer certificate

Backup type as described in: https://pgbackrest.org/command.html#command-backup/category-command/option-type

Local secret key in hexadecimal form.

Username from upsd.users for accessing this UPS

The object to make available inside the initrd.

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Protocols for the service.

The node name of the device

The node name of the device

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Path to encrypted luks device that contains the user's home directory.

The actual zone data

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Whether to enable TLS support.

Root directory for requests.

Whether to invert the icmp block handling

static: Immediately answer any Neighbor Solicitation Messages (if they match the IP rule). iface: Forward the Neighbor Solicitation Message through the specified interface and only respond if a matching Neighbor Advertisement Message is received. auto: Same as iface, but instead of manually specifying the outgoing interface, check for a matching route in /proc/net/ipv6_route.

Whether to enable DNSSEC.

Instance name.

A program name specifying a Postfix service/daemon process

Name of the printer / printer queue

Aliases of that unit.

Aliases of that unit.

By default, all networks will get same priority group (0)

Output DPI configuration.

Zone file resource records contain columns of data, separated by whitespace, that define the record.

Description for the zone.

Start the specified units when this unit is started.

Start the specified units when this unit is started.

ID of the group in initrd.

Whether the from reference needs to match exactly

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Specify the controller targets

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Path to device node

This can be set as a global variable above your first UPS definition and it can also be set in a UPS section

Output resolution.

Output framerate.

Whether to enable Go Ethereum HTTP API.

Whether to create the home directory and ensure ownership as well as permissions to match the user.

For an IPv6-based tunnel, the maximum number of nested encapsulation to allow. 0 means no nesting, "none" unlimited.

Members of this group can control wpa_supplicant.

Path of the source file.

Adds index directive.

Alias directory for requests.

Directory for the ACME challenge, which is public

Name of this virtual host

A system group name for this client instance.

A system group name for this client instance.

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

How to name the created archives

Output video display controller.

The set of packages that should be made available to the user

The device to update.

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

If true, the user's shell will be set to users.defaultUserShell.

The cgit package to use.

The geth package to use.

Uhub plugin configuration.

Adds DirectoryIndex directive

Alias directory for requests

The path to the user's shell in initrd.

Group the user belongs to in initrd.

Name of the homebridge

Start the specified units when this unit is started.

Start the specified units when this unit is started.

Enables nylon as a running service upon activation.

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Enables HTTP/3 over QUIC on the UDP port for TLS

Aliases of that unit.

Aliases of that unit.

Adds try_files directive.

The domain name to collect stats for.

Marks the server as a backup server

Levels (minimum value for logged events): 0 = verbose debugging 1 = debugging 2 = informational messages 3 = notification 4 = warning

Isolate traffic between stations (clients) and prevent them from communicating with each other.

Vertical scaling factor/pixels.

Horizontal scaling factor/pixels.

DNS full-qualified domain name of a database server

Whether to enable this PPP peer.

Port to bind the TTS server to.

User account under which this pool runs.

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Source port when using UDP encapsulation

The database name.

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Keeps the specified running while this unit is running

The name of the database to store data in.

Select the encapsulation type:

• 6in4: the IPv6 packets are encapsulated using the 6in4 protocol (formerly known as SIT, RFC 4213);

• gue: the IPv6 packets are encapsulated in UDP packets using the Generic UDP Encapsulation (GUE) scheme;

• foo: the IPv6 packets are encapsulated in UDP packets using the Foo over UDP (FOU) scheme.

Output gamma configuration.

Optional PKCS#11 module name.

A system group name for this client instance.

A system group name for this client instance.

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Start of the range of subordinate user ids that user is allowed to use.

Start of the range of subordinate group ids that user is allowed to use.

Master=false means slave server

Addresses who may request zone transfers.

Limit retry time for secondary zones.

Whether to enable this RAUC slot.

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Server name to verify the hostname on the returned gRPC certificates

Password HMAC-SHA-256 for JSON-RPC connections

Specifies the MAC addresses to deny if macAcl is set to "deny" or "radius"

Path to the file which contains the actual base64 encoded key

Label of the unlocked encrypted device

Local name of the IBM TSM server, must not contain space or more than 64 chars.

Directory of sockets for controlling wpa_supplicant.

Remote public key in hexadecimal form.

Path of the underlying encrypted block device.

Name shown in the website title and on the front page.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Subordinate user ids that user is allowed to use

Subordinate group ids that user is allowed to use

Environment variables used for this PHP-FPM pool.

Select the encapsulation type:

• ipip to create an IPv4 within IPv4 tunnel (RFC 2003).

• 4in6 to create a 4in6 tunnel (RFC 2473);

• ip6ip6 to create an IPv6 within IPv6 tunnel (RFC 2473);

Tunnel type.

Aliases of that unit.

Aliases of that unit.

Database name to connect to

Optional PKCS#11 module name.

Name of the tun device

Adds a return directive, for e.g. redirections.

Key type to use for private keys

The database engine name

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Keeps the specified running while this unit is running

Specify the log file name

Configuration for MPD

User name of file owner

Label for this destination

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Path] section of the unit

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Attribute set of NetBird client daemons, by default each one will:

1. be manageable using dedicated tooling:

• netbird-<name> script,
• NetBird - netbird-<name> graphical interface when appropriate (see ui.enable),

2. run as a netbird-<name>.service,
3. listen for incoming remote connections on the port 51820 (openFirewall by default),
4. manage the netbird-<name> wireguard interface,
5. use the /var/lib/netbird-/config.json configuration file,
6. override /var/lib/netbird-/config.json with values from /etc/netbird-/config.d/*.json,
7. (hardened) be locally manageable by netbird-<name> system group,

With following caveats:

• multiple daemons will interfere with each other's DNS resolution of netbird.cloud, but should remain fully operational otherwise

The user names of the group members, added to the /etc/group file.

List of emails to allow access to this vhost, or null to allow all.

List of groups to allow access to this vhost, or null to allow all.

The ID of the sound card

The list of nameservers

Commands to run after new certificates go live

A program name specifying a Postfix service/daemon process

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Adds DirectoryIndex directive

Alias directory for requests

Whether to enable the output.

Output rotate configuration.

Specifies the MAC addresses to allow if macAcl is set to "allow" or "radius"

Guaranteed minimum hops for ‹name› tunnels.

This option allows you to define Open vSwitches that connect physical networks together

Tunnel type.

Text of the file.

Supported versions to enable on this switch.

The network to connect to

Minimum remaining validity before renewal in days.

Email address for account creation and correspondence from the CA

When or how often the backup should run

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Automatically allocate subordinate user and group ids for this user

A list of host names and/or IP numbers used for accessing the host's ssh service

The port on which the tub will listen

The port on which the Web server will listen

Count of subordinate group ids

Count of subordinate user ids

GVPE node name

Location of the host path to be mounted.

Keyset used for tunnel identity.

Group account under which this pool runs.

Name of the voice model to use

These lines go to the end of cgitrc verbatim.

Shell commands executed to stop the service.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Guaranteed minimum hops for ‹name› tunnels.

Port number of Go Ethereum metrics service.

Listen address of Go Ethereum HTTP API.

Each attribute in this set specifies an option in the [Path] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

pppd configuration for this peer, see the pppd(8) man page.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Enable logging, default is no logging.

Set the date on which the user's account will no longer be accessible

Source directories.

The option to use this LUKS device with a GPG encrypted luks password by the GPG Smartcard

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Allow normal users to control wpa_supplicant through wpa_gui or wpa_cli

Optional PKCS#11 module name.

Domain name

Units that want (i.e. depend on) this unit

Each attribute of this option defines a systemd service that runs an OpenVPN instance

Location of hardware kiss tnc for this interface.

Keyset used for tunnel identity.

List of configuration directives for this UPS.

The full path to a file that contains the user's (clear text) password

Port number of Go Ethereum Auth RPC API.

Whether to offload computation onto a CUDA compatible GPU.

Group name of file owner

Configuration for this host

Start the specified units when this unit is started.

The specified name-string must be the generic SCSI device name of the autochanger that corresponds to the normal read/write Archive Device specified in the Device resource

The packaged Helm chart

Basic Auth protection for a vhost

Keeps the specified running while this unit is running

Keeps the specified running while this unit is running

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Units that want (i.e. depend on) this unit

The name of the Stash Box

Name of the class implementing the check

A short description of the user account, typically the user's full name

Shell commands executed to stop the service.

Root directory for requests.

Output scaling method.

The ID of your hook

IPv4 destination.

IPv6 destination.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

The name of the column that contains a unix login name.

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Name shown in the server list.

Source of the plugin package or path

The location of the Drupal files directory.

Let the user initiate specific instant commands

Destinations for the service.

Description for the service.

Aliases of that unit.

Aliases of that unit.

Identifier of the UPS to monitor, in this form: <upsname>[@<hostname>[:<port>]] See upsmon.conf for details.

The serial port speed of this interface.

Service port

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Indicates whether this is an account for a “real” user

Whether output should be marked as primary

Dataset name to send snapshots to.

When to run the job.

Optional slot number of the token that stores the certificate.

Disable running fsck on this filesystem.

The location of the Drupal site state directory.

Start the specified units when this unit is started.

The protocol specifier for port forwarding between host and container

Controls how long a valid or invalid entry remains in the cache, in milliseconds.

Keeps the specified running while this unit is running

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Keeps the specified running while this unit is running

When you have multiple UPSes on your system, you usually need to turn them off in a certain order. upsdrvctl shuts down all the 0s, then the 1s, 2s, and so on

Custom name of this poller.

The user as which to run bitcoind.

Blockchain sync mode.

Maximum peers to connect to.

Contents of the PAM service file.

Extra configuration to be appended to awstats.${name}.conf.

The list of interfaces to be moved into the container.

The name of the machine

The name of a .desktop file in the directory specified in the 'package' option.

Indicates if the user is a system user or not

Path to the Public Key.

UUID of the stratis pool that the fs is located in

This is only relevant if you are using stratis.

Alias directory for requests.

Adds index directive.

Each attribute in this set specifies an option in the [Exec] section of this unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Path to world folder containing the dimension to render

List of servers for inclusion in stub and secondary zones.

The IP interface to bind to. null means "all interfaces".

Name that will be shown to the user.

A name for the drive

If the specified units are started at the same time as this unit, delay this unit until they have started.

Aliases of that unit.

Aliases of that unit.

Determine whether the mounted path will be accessed in read-only mode.

The set of packages that should be made available to the user

The path to repo in local machine

Which local IP to bind the UDP socket to.

Name of a file containing the spiped key

Guaranteed minimum hops for ‹name› tunnels.

Enable unlocking and mounting of encrypted ZFS home dataset at login.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Shell commands executed after the service's main process has exited.

If true, the user's shell will be set to users.defaultUserShell.

The address on which to accept FastCGI requests.

Extra lines to add to the tinc service configuration file

Optional slot number of the token that stores the certificate.

The certificate profile to choose if the CA offers multiple profiles.

Which slot on the YubiKey to challenge.

add will additionally listen for TLS connections. only will disable TLS connections. force will redirect non-TLS traffic to the TLS connection.

Specifies the BSSID for this BSS

Adds try_files directive.

The kimai package to use.

The tahoelafs package to use.

Interfaces for which to start wpa_supplicant

Guaranteed minimum hops for ‹name› tunnels.

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Override the default port on which to listen for connections.

Name of the class implementing the check

IP of the Redis master

The name of the module

Source ZFS dataset

Number of power supplies that the UPS feeds on this system

Text of the file.

Text of the file.

Whether to enable Drupal web application.

Extra arguments to pass to the server commandline.

Whether to enable Coqui TTS server.

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Specifies the number of retries for failed notifies

If the specified units are started at the same time as this unit, delay this unit until they have started.

Absolute path to the certificate to load

Packages added to the service's PATH environment variable

Name of the user to log in

Output position

Whether to ask Let’s Encrypt to sign a certificate for this virtual host

Shell commands executed before the service's main process is started.

The data directory for bitcoind.

When or how often the backup should run

These lines go to the end of the location verbatim.

Start of the range of subordinate group ids that user is allowed to use.

Start of the range of subordinate user ids that user is allowed to use.

Override the default port on which to listen for JSON-RPC connections.

Shell commands executed after the service's main process has exited.

Legacy RSA public key of the host in PEM format, including start and end markers

Whether to enable SFTP service.

cgit configuration, see cgitrc(5)

Configuration of uhub

As which user the backup should run.

The port on which the SFTP server will listen

The name of your network of sr.ht-based sites.

Mount point on the container file system.

Additional global flags to pass to all lego commands.

Language of the environment

The name of the user for this authelia instance.

The name the camera will show up as.

Specifies the clear text password for the account

Errbot backend name.

Packages added to the service's PATH environment variable

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Location of bitcoind pid file.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Owner's name.

This is the absolute path to the plugin executable.

Set maximum cache size

Name of the heat source.

Adds a return directive, for e.g. redirections.

Extra zone config to be appended at the end of the zone section.

Shell commands executed before the service's main process is started.

File or block device to export.

The packaged Helm chart

The group of the wrapper program.

The group as which to run bitcoind.

The owner of the wrapper program.

Absolute path to the certificate to load

DDNS server name.

Basic Auth password file for a vhost

Specifies if TLS should be enabled

Specifies if TLS should be enabled

Shell commands executed as the service's main process.

Limit retry time for secondary zones

Text of the file.

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

Name to match.

Optional slot number of the token that stores the certificate.

Each attribute in this set specifies an option in the [Slice] section of the unit

Each attribute in this set specifies an option in the [Files] section of this unit

Text of the file.

Additional flags to pass to lego run.

List of virtual hostnames from which to accept requests.

IP address of server running hans

The location for users to install Drupal themes.

Limit refresh time for secondary zones.

Limit on the number of simultaneous connections allowed.

Number of simultaneous ‹name› tunnels.

Key / certificate pairs for the virtual host.

Key policy for zone signing keys

Key policy for key signing keys

If set, root doesn't need to authenticate (e.g. for the useradd service).

PostgreSQL host for operating remotely.

Keeps the specified running while this unit is running

Keeps the specified running while this unit is running

List of address ranges allowed to query this zone

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Determines how multiple values are joined to create the claim value

Whether to enable the filesystem mount.

Whether to enable proxy for this bucket

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Specifies a file containing the MAC addresses to deny if macAcl is set to "deny" or "radius"

Whether to show the message of the day.

Name of the runner group to add this runner to (defaults to the default runner group)

A short description of the user account, typically the user's full name

Shell commands executed after the service's main process is started.

Shell commands executed when the service's main process is reloaded.

The Flake URI of the NixOS configuration to use for the container

The subnets which this tinc daemon will serve

The name of private PKCS #8 key file for this policy to be found in the baseDirectory, or the absolute path to the key file

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

Location to serve cgit under.

Path of the source file.

Settings for this slot.

Address to which spiped should connect.

port of the Redis master

Whether to enable the filesystem mount.

Hostname alias(es).

Username for this DDNS provider.

Whether to enable Go Ethereum prometheus metrics.

RPC user information for JSON-RPC connections.

IP and port to which this redis instance acts as a slave.

Shell commands executed as the service's main process.

Whether to enable the HTTP/3 protocol

Number of simultaneous ‹name› tunnels.

Path to file containing local secret key in binary or hexadecimal form.

The TCP port to accept connections

Each attribute in this set specifies an option in the [Slice] section of the unit

The distinguished name of the search base.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

If set, the OATH Toolkit will be used.

Configure unit start rate limiting

Listen for any Neighbor Solicitation messages on this interface, and respond to them according to a set of rules

Keeps the specified running while this unit is running

Keeps the specified running while this unit is running

The name of the group for this authelia instance.

Whether to enable this .link unit

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

If the specified units are started at the same time as this unit, delay them until this unit has started.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

The options to use for this LUKS device in YubiKey-PBA

Whether to enable Go Ethereum Auth RPC API.

Shell commands executed after the service's main process is started.

Shell commands executed when the service's main process is reloaded.

Whether to operate in tun (IP) or tap (Ethernet) mode.

ACME Directory Resource URI

The drupal package to use.

(optional) name your peer has for you

(optional) name your peer has for you

The username to store inside the credentials file.

Name of the platform

Output scale configuration

Set the date on which the user's account will no longer be accessible

Station MAC address -based authentication

Configure unit start rate limiting

Aliases of that unit.

User name for RPC connections.

Description of the UPS.

Specifies a file containing the MAC addresses to allow if macAcl is set to "allow" or "radius"

Adds DirectoryIndex directive

Alias directory for requests

Basic Auth protection for a vhost

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

Absolute path to the certificate to load

Whether to enable debug logging for this certificate.

Shell commands executed when the instance is starting.

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Type of the file system

Each attribute in this set specifies an option in the [Timer] section of the unit

Run the rsync process with an inhibition lock taken; see systemd-inhibit(1) for a list of possible operations.

Options for the Kimai PHP pool

The external address where the host can be reached

The path to the xkb types file

The user as which to run blockbook-frontend-‹name›.

Name of the font to use.

The title of the boot menu entry.

Whether to enable helper service.

Name resolution of a backends host name is done at start up, or configuration reload

Address to bind on for UI connections

Environment variables to set for the kernel.

Enable logging to the system logger.

Whether to enable Redis server.

Number of worker instances to run

The path of the web root directory.

Path to the certificate authority certificate.

Name of the theme to use for the lightdm-gtk-greeter.

Location of the backing encrypted device.

The port where the host can be reached

Target port of container

Database name.

Time in seconds to wait for the GPG Smartcard.

Arguments passed to date to create a timestamp suffix for the archive name.

Authentication algorithm for this key.

Print global archive statistics upon completion

Maximum number of items to keep in slow log.

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

Each attribute in this set specifies an option in the [Timer] section of the unit

Path to the unix socket file on which to accept FastCGI requests.

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Override the default database cache size in MiB.

Event type.

Aliases of that unit.

Key size in bits

Key size in bits

These lines go to the end of the location verbatim.

GID of created file

UID of created file

TCP Port to bind on for UI connections

Order of this location block in relation to the others in the vhost

The account type

Interface and port to listen on to solve HTTP challenges in the form [INTERFACE]:PORT

If set, the OTPW system will be used (if ~/.otpw exists).

Name of the wrapper that is installed into PATH

Default window size for this interface.

Path to plugin file.

Maps kanidm groups to values for the claim.

Name of user to run the script under.

Whether to enable this PAM service.

Path or reference to the host key.

Extra configuration append to unit

Manually specify the hostname

(optional) human-readable name for peer

(optional) human-readable name for peer

Public address for p2p connections from peers (if TCP is used)

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Shell commands to run after borg create

The type of this worker

The specified name-string names the type of media supported by this device, for example, DLT7000

Whether to enable this plugin

The type of log being collected.

If the specified units are started, then this unit is stopped and vice versa.

Whether to enable the wrapper.

Local UDP port.

Name of the theme to use for the lightdm-enso-os-greeter

Turns on or off the router flag for Neighbor Advertisement Messages.

Put the host-side of the veth-pair into the named bridge

A list of host names and/or IP numbers used for accessing the host's ssh service

Indicates whether this is an account for a “real” user

The address that Anubis listens to

Whether users can log in with passwords defined in /etc/shadow.

Specify the server verbosity level, options: debug, verbose, notice, warning.

Turns on the OCSP Must-Staple TLS extension

Name of the network interface managed by this client.

Name of the network interface managed by this client.

Text of the file.

The amount of time in seconds for a keyFile to appear before timing out and trying passwords.

Whether to enable Enables the axport interface.

Default maximum packet size for this interface.

Units that require (i.e. depend on and need to go down with) this unit

Units that require (i.e. depend on and need to go down with) this unit

The address of the proxy.

Refer to xrandr(1) for the documentation of the transform matrix.

Page or namespace to restrict

The location of the Drupal config sync directory.

FastCGI parameters to override

Host to use for the destination dataset

This is the name that will be displayed by NetworkManager and GUIs.

Allow these IPs and TSIG to transfer zones, addr TSIG|NOKEY|BLOCKED address range 192.0.2.0/24, 1.2.3.4&255.255.0.0, 3.0.2.20-3.0.2.40

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

The size of the key file

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

Number of simultaneous ‹name› tunnels.

Command and arguments to start the kernel.

TLS Options for the Director in this Configuration.

Bind address to be used for this server.

TLS Options for the Director in this Configuration.

Port the NetBird client listens on.

Port the NetBird client listens on.

Whether to enable or disable lingering for this user

Location of blockbook-frontend-‹name› data directory.

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Allow client if common name appears in the list.

DNS server to use as an intermediate relay to the iodined server

If the specified units are started, then this unit is stopped and vice versa.

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

Indicates if the user is a system user or not

Units that require (i.e. depend on and need to go down with) this unit

Units that require (i.e. depend on and need to go down with) this unit

Whether to enable watching for repo.

Optional url of remote repository

The absolute path to the program to be wrapped.

Optional branch in remote repository

Whether to enable Bitcoin daemon.

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

The group as which to run blockbook-frontend-‹name›.

Keep this unit running as long as the listed units are running

Name (relative to the root of the filesystem) of the subvolume where the hash table will be stored.

APIs to enable over WebSocket

Path to the host certificate.

Extra configuration options to put at the end of this BSS's defintion in the hostapd.conf for the associated interface

Name of the icon theme to use for the lightdm-gtk-greeter.

Device identifiers, as shown by keyd(1).

If given, sets the SO_MARK option on the TCP socket.

If given, sets the SO_MARK option on the TCP socket.

NNTP group name for the inbox.

The IPv4 address assigned to the host interface. (Not used when hostBridge is set.)

Database user.

Enable PAM mount (pam_mount) system to mount filesystems on user login.

Protocol names to hide in summary tables (RE2 syntax),

Name of the theme to use for the lightdm-slick-greeter.

This setting configures the name of a mailbox for which administrator scripts are configured

Where to mount this dataset.

Allow client if organizational unit name appears in the list.

Number of simultaneous ‹name› tunnels.

Key of taint.

This option provides a simple way to serve individual, static files.

The location for users to install Drupal modules.

Additional flags to pass to lego renew.

I2P nodes that are allowed to connect to this service.

Shell commands executed when the instance is shutting down.

URL where this inbox can be accessed over HTTP.

Whether to enable DHCP on the interfaces matched.

Require TLS or TLS-PSK encryption

Require TLS or TLS-PSK encryption

Full legal name

Keep this unit running as long as the listed units are running

The hostname the web service appears under.

Your yandex.com login name.

Configure unit start rate limiting

Configure unit start rate limiting

Database host address.

Database host port.

Port to bind on for p2p connections from peers (both TCP and UDP)

Address to bind on for p2p connections from peers (both TCP and UDP)

Time in seconds to wait for the FIDO2 key.

Domain part of the web interface URL (no web interface for this domain if null)

The furl for a Tahoe helper node

Whether this file locals should be generated

The path to the xkb compat file

This allows you to pass arguments to the child program

The IPv6 address assigned to the host interface. (Not used when hostBridge is set.)

An existing Let’s Encrypt certificate to use for this virtual host

Canonical hostname for the server.

Path of the source file.

Path of the source file.

Canonical hostname for the server.

The URL at which to fetch the feed.

The path to the socket to bind to.

The email address used to authenticate as this account

Listen address of Go Ethereum metrics service.

Options for PHP's php.ini file for this Drupal site.

Whether to enable this proxy cache path entry.

Configure unit start rate limiting

Configure unit start rate limiting

Each attribute in this set specifies an option in the [Link] section of the unit

The auth adapter type

IP Address of a database server

IP Address of a database server

Set size to shared memory zone.

Whether to add the setuid bit the wrapper program.

Whether to add the setgid bit the wrapper program.

See torrc manual.

Name of the icon theme to use for the lightdm-enso-os-greeter

Public URL of the API address of the reverse proxy/tls terminator

Options for the Drupal PHP pool

Allow client if URI subject alternative name appears in the list.

Allow client if DNS subject alternative name appears in the list.

Additional command line parameters

Location of the DokuWiki state directory.

Hostname of server running iodined

A list of options for 'restic check'.

Whether to run the rspamd worker.

Indicates the priority over identical Subnets owned by different nodes

Structural Kimai's local.yaml configuration

Listen address of Go Ethereum Auth RPC API.

Whether to run the check command with the provided checkOpts options.

The PHP package to use for running this PHP-FPM pool.

If set, keys listed in ~/.ssh/authorized_keys and ~/.eid/authorized_certificates can be used to log in with the associated PKCS#11 tokens.

This is a rule that the target address is to match against

Disables scan for overlapping BSSs in HT40+/- mode

Keeps the specified running while this unit is running

DEPRECATED, use driverOptions

The maximum volume in dB.

Kissattach parameters for this interface.

Basic Auth password file for a vhost

Path of the symlink.

If set to something else than symlink, the file is copied instead of symlinked, with the given file mode.

Similar to requires

Where the webroot of the HTTP vhost is located. .well-known/acme-challenge/ directory will be created below the webroot if it doesn't exist. http://example.org/.well-known/acme-challenge/ must also be available (notice unencrypted HTTP).

Port number of Go Ethereum WebSocket API.

Address to bind on for API connections relied by the reverse proxy/tls terminator.

Port to bind on for API connections relied by the reverse proxy/tls terminator.

Attrset to be transformed into YAML for host config

Settings that should be passed to rsync via long options

Type of the file system

Whether to enable Whether to enable this plugin.

User or group to restrict

Path to the directory where the pastes will be saved to

Whether to enable storage service.

URI to bind the wyoming server to.