Remote CFSSL server.

The address of the remote endpoint to forward traffic over.

Optional url of remote repository

The address of the remote endpoint to forward traffic over.

The address of the remote endpoint to forward traffic over.

Header to trust for remote IP, if present

Port number for remote control operations (uses TLS over TCP).

Name of the remote read config, which if specified must be unique among remote read configs

Remote UDP port

IP address or hostname of the remote end (use 0.0.0.0 for a floating/dynamic remote endpoint).

Name of the remote write config, which if specified must be unique among remote write configs

Whether to enable remote control via nsd-control.

The port to listen to

Configuration in the journal-remote configuration file

Which protocol to listen to.

The location of the output journal

Timeout for requests to the remote read endpoint.

Whether to allow the remote address and port to change when properly encrypted packets are received.

Whether to enable receiving systemd journals from the network.

Timeout for requests to the remote write endpoint.

Open ports in the firewall for Steam Remote Play.

Cassandra ships with JMX accessible only from localhost

Whether to enable Remote Desktop support using Pipewire.

Endpoint for prometheus compatible remote_write

Endpoint for the victorialogs instance

Listen on remote and forwards traffic from local

Which interfaces NSD should bind to for remote control.

Address to listen on for remote write requests

Custom HTTP headers to be sent along with each remote read request

Set the class A subnet number to use for the internal remote DNS mapping, uses the reserved 224.x.x.x range by default.

Custom HTTP headers to be sent along with each remote write request

Periodically sign the data in the journal using Forward Secure Sealing.

Path to the server private key, which is used by the server but not by nsd-control

Section for a remote authentication round

Parameters of the endpoints to query from

Path to the server self signed certificate, which is used by the server but and by nsd-control

ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1

A path to a SSL secret key file in PEM format

Path to the client private key, which is used by nsd-control but not by the server

Whether to enable modification of share contents through the web ui.

Parameters of the endpoints to send samples to

ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1

With "host", a separate output file is used, based on the hostname of the other endpoint of a connection

Path to the client certificate signed with the server certificate

Configures the remote read request's TLS settings.

Configures the remote write request's TLS settings.

Configures AWS Signature Version 4 settings.

Sets the Authorization header on every remote read request with the configured username and password. password and password_file are mutually exclusive.

The maximum file-based buffer size in bytes

Sets the Authorization header on every remote write request with the configured username and password. password and password_file are mutually exclusive.

Basic Auth username used to connect to remote_write endpoint

Basic Auth username used to connect to remote_write endpoint

Remote ZFS filesystem where snapshots should be sent.

File that contains the Basic Auth password used to connect to remote_write endpoint

File that contains the Basic Auth password used to connect to remote_write endpoint

The AWS region.

A list of remote servers to which to send each message

Configures the queue used to write to remote storage.

Sets the Authorization header on every remote read request with the configured bearer token

The named AWS profile used to authenticate.

Sets the Authorization header on every remote write request with the configured bearer token

Optional Proxy URL.

Path to the remotes control file

Optional Proxy URL.

The AWS role ARN.

Identity in CA certificate to accept for authentication

Authentication to expect from remote

Whether to enable writing to the Nix store as a remote store via SSH

The Access Key ID.

The Secret Access Key.

A path to a SSL certificate file in PEM format

Whether reads should be made for queries for time ranges that the local storage should have complete data for.

Number of samples to buffer per shard before we block reading of more samples from the WAL

Section for a certificate candidate to use for authentication

IKE identity to expect for authentication round

Optional slot number of the token that stores the certificate.

Configures the sending of series metadata to remote storage

Whether metric metadata is sent to remote storage or not.

List of certificates to accept for authentication

CA certificate to validate API server certificate with.

A path to a SSL CA certificate file in PEM format, or all

Optional numeric identifier by which authentication rounds are sorted

Section for a CA certificate to accept for authentication

Identity to use as peer identity during EAP authentication

CA certificate to validate API server certificate with.

HTTP username

HTTP password

Absolute path to the certificate to load

Optional PKCS#11 module name.

Optional slot number of the token that stores the certificate.

Key file for client cert authentication to the server.

HTTP password

HTTP username

List of CA certificates to accept for authentication

List of raw public keys to accept for authentication

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

Absolute path to the certificate to load

Authorization group memberships to require

Key file for client cert authentication to the server.

Optional PKCS#11 module name.

Certificate file for client cert authentication to the server.

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

Certificate file for client cert authentication to the server.

An optional list of equality matchers which have to be present in a selector to query the remote read endpoint.

Sets the Authorization header on every remote read request with the bearer token read from the configured file

Whether to enable serving the Nix store as a remote store via SSH.

Sets the Authorization header on every remote write request with the bearer token read from the configured file

List of certificate policy OIDs the peer's certificate must have

ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1

ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1

Whether to enable RustDesk, a remote access and remote control software, allowing maintenance of computers and other devices.

Certificate revocation policy for CRL or OCSP revocation.

• A strict revocation policy fails if no revocation information is available, i.e. the certificate is not known to be unrevoked.
• ifuri fails only if a CRL/OCSP URI is available, but certificate revocation checking fails, i.e. there should be revocation information available, but it could not be obtained.
• The default revocation policy relaxed fails only if a certificate is revoked, i.e. it is explicitly known that it is bad

Maximum number of shards, i.e. amount of concurrency.

Minimum number of shards, i.e. amount of concurrency.

Network hosts that should be probed for remote scanners.

How frequently metric metadata is sent to remote storage.

HTTP password file

Maximum retry delay.

HTTP password file

Initial retry delay

Remote UDP port for IKE communication

List of remote write relabel configurations.

Whether to enable xrdp, the Remote Desktop Protocol server.

Remote address(es) to use for IKE communication

Permissions granted for the services.syncoid.user user for local target datasets

Specifies whether sshd(8) should look up the remote host name, and to check that the resolved host name for the remote IP address maps back to the very same IP address

Enable D-Bus remote control

CAs to trust for remote TLS requests.

List of remote selectors to include in CHILD_SA

When not set to null this option defines the path at which the unbound remote control socket should be created at

The time-to-live of the connection to the remote tunnel endpoint.

Login shell of the remote user

SSH private key file to use to login to the remote system

Whether to enable sendRaw feature which adds the options -w to the zfs send command

Message to display to the remote user before authentication is allowed.

The time-to-live of the connection to the remote tunnel endpoint.

SSH public key allowed to login as user btrbk to run remote backups.

User to use when no root privileges are required

Permissions granted for the services.syncoid.user user for local target datasets

The address of the local endpoint which the remote side should send packets to.

Data directory relative to /var/lib in which to cache remote blocks.

Whether to enable the OpenSSH secure shell daemon, which allows secure remote logins.

The username to log in as on the remote host

This option lists the machines to be used if distributed builds are enabled (see nix.distributedBuilds)

Enable saned network daemon for remote connection to scanners.

saned would be run from scanner user; to allow access to hardware that doesn't have scanner group you should add needed groups to this user.

Configuration for the rclone remote being used for backup

The address of the local endpoint which the remote side should send packets to.

Enable a remote shell server which Neo4j Shell clients can log in to

Whether the configuration file specifies a remote mongo instance

Regular expression against which the extracted value is matched

Arguments to be passed to AutoSSH and retransmitted to SSH process

Optional branch in remote repository

Niceness for local instances of btrbk

Disable validation of the server certificate.

Action to perform based on regex matching

Modulus to take of the hash of the source label values.

Automatically login user on remote or other kind of externally supplied authentication, otherwise redirect to login form as normal

Disable validation of the server certificate.

Maximum time a sample will wait in buffer.

Whether to enable ‘oidentd’, an implementation of the Ident protocol (RFC 1413)

Mutual TLS - client certificate to call remote instance requiring client certs.

Separator placed between concatenated source label values

Mutual TLS - client key to call remote instance requiring client certs

Whether to enable authenticating using a signature performed by the ssh-agent

The time-to-live/hoplimit of the connection to the remote tunnel endpoint.

Maximum number of samples per send.

The name of the column in the log table to which the name of the remote host that initiates the session is stored

Binary cache URL to connect to

User to run the icecream daemon as

Replacement value against which a regex replace is performed if the regular expression matches

The address of the local endpoint which the remote side should send packets to.

Set the expiration time for data in the remote machine information directory in days.

Label to which the resulting value is written in a replace action

Remote public key in hexadecimal form.

If set to true, any remote host can connect to and control this BOINC client (subject to password authentication)

Whether to enable uploading the systemd journal to a remote server.

Whether to enable the Thanos receiver which accept Prometheus remote write API requests and write to local tsdb.

Whether or not to open the minimum required ports on the firewall

Allow the specified IPs to act as a proxy

Remote or local repository to back up to.

Start SSH service during initrd boot

The source labels select values from existing labels

Enable the shairport-sync daemon

The protocol used for communicating with the build machine

Whether to enable the CUPS Remote Printer Discovery (browsed) daemon.

The name of the node which is used as an identifier when communicating with the remote nodes in the mesh

SSH private key file to use to login to the remote system

This directory is used to download fonts from a remote location, e.g. to host google fonts locally.

If set, the calling user's SSH agent is used to authenticate against the keys in the calling user's ~/.ssh/authorized_keys

How often to remove remote media

Configuration for the rclone remote being used for backup

Source ZFS dataset

Repeat interval for syncing the blocks between local and remote view

Makes this policy trust all remote parties

Password to access the remote console

Remote host where snapshots should be sent. lz4 is expected to be installed on this host.

How old remote media needs to be in order to be removed.

Listen on local and forwards traffic from remote.

Whether to add the boot.binfmt.emulatedSystems to nix.settings.extra-platforms

Target ZFS dataset

Automatically remove remote media attachments and preview cards older than the configured amount of days

GitLab automatic upload specification

IO scheduling class for btrbk (see ionice(1) for a quick description)

WireGuard public key corresponding to the remote Rosenpass peer.

Specify the number of seconds the SCSI layer will wait after a problem has been detected on a FC remote port before failing I/O to devices on that remote port

Specifies whether remote hosts are allowed to connect to ports forwarded for the client

Some servers have invalid or self-signed certificates

Open ports in the firewall for Mirakurun.

Remote endpoint, I2P hostname or b32.i2p address.

The buildmaster will listen on a TCP port of your choosing for connections from workers

Remote endpoint, I2P hostname or b32.i2p address.

Remove remote snapshots that don't have a local correspondent.

Username used by SSH to login to remote host.

Any remote cjdns nodes that offer these passwords on connection will be allowed to route through this node.

Path to the file containing rclone configuration

Remote endpoints for the bridge.

Path to the postgres socket directory

TCP port for external connections, like remote control via amule-gui

Whether to request X11 forwarding on outgoing connections by default

Open ports in the firewall for the EPGStation web interface.

Endpoint of the remote Rosenpass peer.

Disable remote shell access through Periphery.

Port of the remote MQTT broker.

Whether to always trust remote cfssl server upon initial PKI bootstrap.

Disable remote container shell access through Periphery.

The password to connect to the remote InfluxDB server

The username to connect to the remote InfluxDB server

Whether to enable the headless Transmission BitTorrent daemon

Connection uniqueness policy to enforce

Address of the remote MQTT broker.

List of trusted remote SMTP clients, that are allowed to relay mail

Path to a file containing the public key of the remote Rosenpass peer.

File containing CA certificates of root CAs trusted to sign either remote SMTP server certificates or intermediate CA certificates

Whether to enable presence tracking

Whether to enable proxying of remote media through the instance's proxy.

SSL key in PEM format

The domain name of the server, with optional explicit port

The time to wait for a remote module listed above to complete sending a message before killing it and trying again, in seconds

The domain name of the server, with optional explicit port

Whether or not the remote IP of a WireGuard peer should be exposed via prometheus.

Path to the file containing rclone configuration

Attribute set of NetBird client daemons, by default each one will:

1. be manageable using dedicated tooling:

• netbird-<name> script,
• NetBird - netbird-<name> graphical interface when appropriate (see ui.enable),

2. run as a netbird-<name>.service,
3. listen for incoming remote connections on the port 51820 (openFirewall by default),
4. manage the netbird-<name> wireguard interface,
5. use the /var/lib/netbird-/config.json configuration file,
6. override /var/lib/netbird-/config.json with values from /etc/netbird-/config.d/*.json,
7. (hardened) be locally manageable by netbird-<name> system group,

With following caveats:

• multiple daemons will interfere with each other's DNS resolution of netbird.cloud, but should remain fully operational otherwise

Command to run before sending the snapshot to the destination

Defines the database mode of operation

Host for the api or remote transport

Path to the socket for local or remote transports

Port to connect to for the api or remote transport

Command to run after sending the snapshot to the destination

SSL CA certificate in PEM format

Install the SPICE USB redirection helper with setuid privileges

SSL CA certificate

Specify the number of seconds the SCSI layer will wait after a problem has been detected on a FC remote port before removing it from the system

A required list of local or remote repositories with paths and optional labels (which can be used with the --repository flag to select a repository)

Username for the api or remote transport

SSH identity resource for the remote transport

The labels to add to any time series or alerts when communicating with external systems (federation, remote storage, Alertmanager).

Compress the btrfs send stream before transferring it from/to remote locations using a compression command.

Which mode to use for sending mail

A required list of local or remote repositories with paths and optional labels (which can be used with the --repository flag to select a repository)

Identity under which the peer is registered at the mediation server, that is, the IKE identity the other end of this connection uses as its local identity on its connection to the mediation server

Specifies the hashed password for the user

Specifies the hashed password for the user

Specifies the initial hashed password for the user, i.e. the hashed password assigned if the user does not already exist

Specifies the initial hashed password for the user, i.e. the hashed password assigned if the user does not already exist

Authentication to perform locally.

• The default pubkey uses public key authentication using a private key associated to a usable certificate.
• psk uses pre-shared key authentication.
• The IKEv1 specific xauth is used for XAuth or Hybrid authentication,
• while the IKEv2 specific eap keyword defines EAP authentication.
• For xauth, a specific backend name may be appended, separated by a dash

Enables extra remotes in fwupd

SSH keys that should be able to make or push snapshots on this system remotely with btrbk

Repository host when operating remotely

Starts an OpenVPN client during initrd boot

PostgreSQL host for operating remotely.

The read permissions to include for this token

The read permissions to include for this token