Absolute path to a file containing environment variables used for gitlab-runner registrations with runner authentication tokens

Absolute path to a file with environment variables used for gitlab-runner registration with runner registration tokens

GitLab host name

GitLab database name.

GitLab database user.

User to run gitlab and all related services.

Extra configuration to merge into shell-config.yml

Group to run gitlab and all related services.

Whether gitlab prints URLs with https as scheme.

GitLab server port for copy-paste URLs, e.g. 80 or 443 if you're service over https.

Redis URL for all GitLab services.

Additional environment variables for the GitLab environment.

Enable the gitlab service.

Extra options to be added under production in config/gitlab.yml, as a nix attribute set

Extra configuration in config/database.yml.

GitLab state directory

Extra configuration to be placed in config/extra-gitlab.rb

Database connection pool size.

File containing the initial password of the root account if this is a new install

File containing the GitLab database user password

Initial email address of the root account if this is a new install.

GitLab database hostname

Tag list

Limit how many jobs can be handled concurrently by this service. 0 (default) simply means don't limit.

Overwrite the URL for the GitLab instance

Absolute path to a directory where builds will be stored in context of selected executor (Locally, Docker, SSH).

Docker image to be used.

Whether a database should be automatically created on the local host

Runner-specific command script executed after code is pulled, just before build executes.

Runner-specific command script executed after code is pulled and just after build executes.

Select executor, eg. shell, docker, etc

Path to a file containing a registration token for the PeerTube instance

Add a custom host-to-IP mapping.

Default pull-policy for Docker images

Register to run untagged builds; defaults to true when tagList is empty

Bind-mount a volume and create it if it doesn't exist prior to mounting.

When set to true Runner will only run on pipelines triggered on protected branches

Runner-specific command script executed before code is pulled.

Runner-specific command script executed after code is pulled.

Disable all container caching.

What is the maximum timeout (in seconds) that will be set for job when using this Runner. 0 (default) simply means don't limit

Name/description of the runner.

When set to true Runner will disable the possibility of using the CI_DEBUG_TRACE feature.

Whitelist allowed images.

Give extended privileges to container.

Whitelist allowed services.

Name of the runner to configure

Limit number of concurrent requests for new jobs from GitLab.

Extra command-line flags passed to gitlab-runner register

The full path to a file which contains either

• a fine-grained personal access token (PAT),
• a classic PAT
• or a runner registration token

Changing this option or the tokenFile’s content triggers a new runner registration

Path to an environment file, containing the TOKEN environment variable, that holds a token to register at the configured Gitea/Forgejo instance.

Custom environment variables injected to build environment

Name of the UKI

The name identifying the runner instance towards the Gitea/Forgejo instance.

Name of the runner group to add this runner to (defaults to the default runner group)

The name of the service to run

Sets the password(s) for WPA-PSK

The name of this nylon instance.

Sets the password for WPA-PSK

Path to the file containing rclone configuration

Name of the zone.

Name of the PPP peer.

Path to the file which contains the actual base64 encoded key

Sets the password for WPA3-SAE

The name of the user account

Etcd unique node name.

The password for this entry, read from the given file when starting hostapd

Replace any existing runner with the same name

Username of the SMTP server for GitLab.

The name of the group

The endpoint name.

The endpoint name.

These lines go to the end of cgitrc verbatim.

Name i2pd appears in UPnP forwardings list.

The name of this systemd unit, including its extension

Name for the device

Basic Auth password file for a vhost

Name of the PAM service.

The name of this systemd unit, including its extension

The endpoint name.

The endpoint name.

When to run the job.

Username for JSON-RPC connections.

User under which to run the service

The name of the system used in the system.build.toplevel derivation

The name of the user account

Runner name declared to the PeerTube instance.

Location of bitcoind pid file.

Adds try_files directive.

Name of the worker

Repository to add the runner to

Extra zone config to be appended at the end of the zone section.

Specifies the Name of the Storage daemon.

Name of the redis server

The endpoint name.

The endpoint name.

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

Options for the Kimai PHP pool

Mail "from" name.

Name of modem device, will be searched for in /dev.

Working directory, available as $GITHUB_WORKSPACE during workflow runs and used as a default for repository checkouts

The name of the node which is used as an identifier when communicating with the remote nodes in the mesh

The client name that must be used by the Director when connecting

The director name used by the system administrator

The name of the group

Base URL of your Gitea/Forgejo instance.

Text of the file.

Whether to enable GitHub Actions runner

Options for the Drupal PHP pool

A program name specifying a Postfix service/daemon process

The github-runner package to use.

Location of the dokuwiki acl rules

The name of the host

Database name.

Extra lines to add to the tinc service configuration file

Each attribute in this set specifies an option in the [Unit] section of the unit

Group under which to run the service

Each attribute in this set specifies an option in the [Unit] section of the unit

The name of the Helm chart

Mail "reply-to" name.

Additional command line parameters

Extra configuration values that you want to insert into settings.php

Path to the SSH host public key.

A system user name for this client instance.

A system user name for this client instance.

Agent name, usually same as the hostname

Extra lines that go into the pool configuration

Plain token to register at the configured Gitea/Forgejo instance.

Name of the redis server

If set, all sae password entries that have a non-wildcard MAC associated to them will additionally be used to populate the MAC allow list

Extra configuration to be appended to awstats.${name}.conf.

Path to file containing local secret key in binary or hexadecimal form.

The endpoint name.

The configuration file path to supply bitcoind.

Font name, as used by fontconfig.

Text of the file.

The path to the xkb types file

Extra labels in addition to the default (unless disabled through the noDefaultLabels option)

The log file to be scanned

Database name.

Specifies a file containing the MAC addresses to deny if macAcl is set to "deny" or "radius"

Type of token to use for runner registration

Whether to enable Gitea Actions Runner instance.

The type of the service

The name to return in service discovery responses for the MUC service itself

Path of the source file.

Keyboard name.

Each attribute in this set specifies an option in the [HierarchyTokenBucket] section of the unit

Akkoma frontend name.

Path to the SSH host private key.

Specifies a file containing the MAC addresses to allow if macAcl is set to "allow" or "radius"

The name of the Helm chart

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The endpoint name.

Location of the dokuwiki users file

Selects the authentication mode for this AP.

• "none": Don't configure any authentication

The path to the xkb compat file

Whether this file should be generated

File containing the password for the user.

File that contains password

Additional configurations to be appended to bitcoin.conf.

Arguments to pass to the command

Labels used to map jobs to their runtime environment

Name is referenced in logs

If this attribute is given with non-zero length, it will set the password identifier for this entry

File with password for the database.

Additional command line parameters

Name of the existing database.

Name of the rule.

List of Node.js runtimes the runner should support.

Name of the machine when registering it at the central or local api.

Basic Auth password file for a vhost

The name of the instance.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

If this attribute is given, SAE-PK will be enabled for this connection

Options for the DokuWiki PHP pool

If this attribute is not included, or if is set to the wildcard address (ff:ff:ff:ff:ff:ff), the entry is available for any station (client) to use

Additional entries to put verbatim into worker section of rspamd config file.

The path to the xkb symbols file

Sets the password for WPA-PSK that will be converted to the pre-shared key

The name of the agent as seen in the buildkite dashboard.

Each attribute in this set specifies an option in the [HierarchyTokenBucketClass] section of the unit

The database name

Adds try_files directive.

Any additional text to be appended to the wp-config.php configuration file

Basic Auth password file for a vhost

Sets allowed passwords for WPA3-SAE

The endpoint name.

Path of the private RSA keyfile.

A Setup Key file path used for automated login of the machine.

A Setup Key file path used for automated login of the machine.

When to run the backup

These lines go to the end of the vhost verbatim.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Path of the source file.

If this attribute is given, all clients using this entry will get tagged with the given VLAN ID.

Name of the user to ensure.

These lines go to the end of the location verbatim.

Name of the service.

Extra packages to add to PATH of the service to make them available to workflows.

Configuration for act_runner daemon

List of UIDs of all users for which this application is allowed location info access, Defaults to an empty string to allow it for all users.

Each attribute in this set specifies an option in the [Service] section of the unit

The logical name of the Galera cluster

Additional lines of configuration appended to this virtual host in the automatically generated Caddyfile.

Disables adding the default labels

Database name.

Database name.

URL of the PeerTube instance.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Each attribute in this set specifies an option in the [Service] section of the unit

The name of an existing user account under which the rsync process should run.

These lines go to httpd.conf verbatim

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

Configuration for the rclone remote being used for backup

Database name.

The name of this gateway as shown in firezone

The name of the cookie that the oauth_proxy creates.

Read only representation of the final configuration.

Path to a file containing the password.

Read the repository password from a file.

The name of the service to run

Automatically wake up the service after the specified number of seconds

Name is used as a suffix for the service name, user, and group

Set of accepted cipher suites (encryption algorithms) for pairwise keys (unicast packets)

Extra configuration for bepasty server to be appended on the configuration. see https://bepasty-server.readthedocs.org/en/latest/quickstart.html#configuring-bepasty for all options.

To enable SSL, specify path to the name of certificate files without extension

Server name to be used for this virtual host

The path to the xkb keycodes file

Whether the service is chrooted to have only access to the services.postfix.queueDir and the closure of store paths specified by the program option.

Whether the application is a system component or not.

This primary server will notify all given secondary servers about zone changes

Name of the beat

Name of the wiki.

Name of the server.

List of packages, that are available to actions, when the runner is configured with a host execution label.

This option provides a simple way to serve individual, static files.

Extra configuration to be passed in Device directive.

Database name, only used when the databse is created locally.

The path to the xkb geometry file

Name of the image

Name of this iscsi initiator

Name of the redis server

Options for the WordPress PHP pool

The name of the server

The location of the Drupal private files directory.

Name of ICMP pinging job.

existing configuration file

A file that contains the server secret for safe session cookies, must be set.

secretKeyFile takes precedence over secretKey

These lines go to the end of the upstream verbatim.

Basic Auth password file for a vhost

Database name

These lines go to the end of the location verbatim.

These lines go to httpd.conf verbatim

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

The endpoint name.

Database name.

Database name.

Database name.

The name of an existing user group under which the rsync process should run.

The path to the public key file for the host

The name of the immich database.

The password for this entry

The name of the database to use for Wakapi.

List of the dokuwiki (un)loaded plugins.

Extra configuration that is appended to the end of the file. Do not write ids section here, use a separate option for it

This option provides a simple way to serve individual, static files.

The name of the mailbox.

Adds try_files directive.

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Desktop ID of the application.

Database name.

User to run the cgit service as.

A file containing the password corresponding to database.user.

GitLab container registry host name.

The maximum number of processes to spawn for this service

Additional virtual host specific configuration

Database name.

Whether the service's sockets and storage directory is restricted to be only available via the mail system

Basic Auth password file for a vhost

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

String to be appended to the config verbatim

Read only representation of the final configuration.

Whether the application will be allowed access to location information.

TLS options for virtual host

The name of the host in the network as well as the configuration for that host

systemd timer configuration

Runner description declared to the PeerTube instance.

These lines go to the end of the location verbatim.

The advertised name for zeroconf discovery.

The name of this client as shown in firezone

Path to firmware config which is generated using klipper-genconf

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

APIs to enable over WebSocket

The config file

When set to something distinct to null NSD is able to collect statistics per zone

Adds try_files directive.

name of the virtualhost

These lines go to the end of the location verbatim.

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

A file containing the password corresponding to database.user.

Port number Go Ethereum will be listening on, both TCP and UDP.

The name of this authentication provider

Database name.

Database name.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the vhost verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

Server name.

The name of the file (can be a raw device or a partition) that should be used as the decryption key for the encrypted device

Path of the private ed25519 keyfile.

PostgreSQL database name

If enabled, causes the following behavior:

• Passes the --ephemeral flag to the runner configuration script
• De-registers and stops the runner with GitHub after it has processed one job
• On stop, systemd wipes the runtime directory (this always happens, even without using the ephemeral option)
• Restarts the service after its successful exit
• On start, wipes the state directory and configures a new runner

You should only enable this option if tokenFile points to a file which contains a personal access token (PAT)

Port number of Go Ethereum HTTP API.

If set the URL specified in bitcoin.rpc.url will get the content of this file added as an URL password, so http://user@example.com will turn into http://user:SOMESECRET@example.com

Rename nodes to different name.

ACME options for virtual host.

HTTP options for virtual host

The name of this gateway as shown in firezone

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

Group to run the cgit service as.

These lines go to the end of the location verbatim.

Database name.

Bind port for ‹name› endpoint.

Extra lines to be added verbatim to the configuration file.

Securely pass environment variabels to Kimai

Name of the existing database (has no effect if type is "sqlite").

All of these scripts will be executed in lexicographical order before hostapd is started, right after the bss segment was generated and may dynamically append bss options to the generated configuration file

Override the default TLS port for this virtual host.

The name of the device.

Modify the systemd service

What port to listen for client requests, default is 1080.

Name of the game as it will appear in the game listing.

Bind port for ‹name› endpoint.

The type of the device.

The name of this actor

The name of this group

A path which will be scanned for repositories.

Path to easytier config file

This is the target address is to match against

Adapter name that is used in the radicle-ci-broker configuration

This will contain the contents of cups-pdf.conf for this instance, derived from settings

Path to the file containing the repository location to backup to.

Path(s) to additional configuration files that are then linked to the 'conf' directory.

cgit repository settings, see cgitrc(5)

Name of the control, as it appears in alsamixer

Extra config for <FileSystem> section.

Name of the local AutoSSH session

Set the host address for this virtual host

Basic Auth password file for a vhost

Override the default HTTP port for this virtual host.

Root directory for requests.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Database name.

Location of the blockbook configuration file.

These lines go to the end of the location verbatim.

The name of the dawarich database.

MySQL database name.

Database name for FreshRSS.

The name of services's user

The actual zone data

A script that produces a list of files to back up

Name of the satellite.

Format: [AXFR|UDP] <ip-address> <key-name | NOKEY>

Extra environment variables to set for the runner, as an attrset.

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

The name of this relay group

Whether to enable cgit.

Alias directory for requests.

Adds index directive.

Name of the modifier.

These lines go to httpd.conf verbatim

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

Blockchain garbage collection mode.

Whether to enable hub instance.

Zone file resource records contain columns of data, separated by whitespace, that define the record.

Enables HTTP/3 over QUIC on the UDP port for TLS

Adds try_files directive.

The name of this server.

This option provides a simple way to serve individual, static files.

Directory for the ACME challenge, which is public

The nickname of this Tahoe node.

Additionally enable the recommended set of pairwise ciphers

Application image to display in the WebUI

The path specifying a PEM encoded TLS CA certificate(s)

The path specifying a PEM encoded TLS CA certificate(s)

Whether to enable Go Ethereum Node.

Additional arguments passed to Go Ethereum.

Node name

Name of the model to download and use for speech synthesis

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

Whether to enable ‹name›.

Name of the beat

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

VirtualHost to serve cgit on, defaults to the attribute name.

Whether git-http-backend should only export repositories that contain a git-daemon-export-ok file

Basic Auth password file for a vhost

Database name.

Extra lines to be added verbatim to the vrrp_script section.

Whether to enable DNSSEC.

Adds a return directive, for e.g. redirections.

Whether to enable ‹name›.

Listed primary servers are allowed to notify this secondary server

Whether to enable Go Ethereum HTTP API.

Whether to enable TLS support.

These lines go to the end of the location verbatim.

file containing the credentials to access the repository, in the format of an EnvironmentFile as described by systemd.exec(5)

All of these scripts will be executed in lexicographical order before hostapd is started, right after the global segment was generated and may dynamically append global options the generated configuration file

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

The name of this gateway group

Each attribute of this option defines a systemd service that runs hans

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Path to your JWT secret used during identity verificaton.

A file containing the password corresponding to database.user.

Username

Basic Auth protection for a vhost

The specified name-string gives the system file name of the storage device managed by this storage daemon

The account name

Database name.

Database name.

The name of this resource

Proxy account name, without the possibility to include domain name ('at' sign is interpreted literally).

File containing password of the RPC user

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

GitLab container registry service name.

Discourse database name.

Name of this virtual host

Name of the symlink (relative to /var/lib/rancher/k3s/server/manifests)

Name of modem configuration file, will be searched for in config in the spooling area directory.

The device to update.

The port on which the tub will listen

The port on which the Web server will listen

Hostname of the XMPP server to connect to

Options for the InvoicePlane PHP pool

Database name.

Adds try_files directive.

Whether to enable this PPP peer.

Port to bind the TTS server to.

User account under which this pool runs.

The basic secret to use for this service

Additional configurations to be appended to coin.conf

Enables nylon as a running service upon activation.

Database name.

DNS full-qualified domain name of a database server

DNS full-qualified domain name of a database server

Master=false means slave server

Addresses who may request zone transfers.

Limit retry time for secondary zones.

Whether to enable this RAUC slot.

SSID to be used in IEEE 802.11 management frames.

The name of the first admin user.

The name of this systemd unit, including its extension

The cgit package to use.

The geth package to use.

Uhub plugin configuration.

Environment variables used for this PHP-FPM pool.

Adds try_files directive.

Adds try_files directive.

Name of Google storage bucket

The name of the network interface to match against.

static: Immediately answer any Neighbor Solicitation Messages (if they match the IP rule). iface: Forward the Neighbor Solicitation Message through the specified interface and only respond if a matching Neighbor Advertisement Message is received. auto: Same as iface, but instead of manually specifying the outgoing interface, check for a matching route in /proc/net/ipv6_route.

Path to your HMAC secret used to sign OIDC JWTs.

Bind address for ‹name› endpoint.

Database name to use when connecting to an external or manually provisioned database; has no effect when a local database is automatically provisioned

Set name to shared memory zone.

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Path] section of the unit

The name of this client as shown in firezone

Tunnel type.

Bind address for ‹name› endpoint.

Name of the remote read config, which if specified must be unique among remote read configs

pppd configuration for this peer, see the pppd(8) man page.

The name of the database to create.

The friendly name you give to the network device

The friendly name you give to the network device

The full path to a file that contains the user's (clear text) password

Members of this group can access the control socket for this interface.

Path to the directory storing the hooks

The network to connect to

Port number of Go Ethereum metrics service.

Listen address of Go Ethereum HTTP API.

Database name.

Keyset used for tunnel identity.

Group account under which this pool runs.

Tunnel type.

Text of the file.

add will additionally listen for TLS connections. only will disable TLS connections. force will redirect non-TLS traffic to the TLS connection.

Whether the SSID is to be interpreted using UTF-8 encoding.

The name of the Grafana database.

Port number of Go Ethereum Auth RPC API.

Whether to offload computation onto a CUDA compatible GPU.

Each attribute in this set specifies an option in the [Path] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Interface to use when method is iface.

The path to the file containing the value for backends.<name>.secret

The ID of your hook

Order of this location block in relation to the others in the vhost

Database name.

Database name.

Name of database.

Specifies the path to a file containing the clear text password for the user.

Extra lines to be added verbatim to the vrrp_instance section.

Name of the remote write config, which if specified must be unique among remote write configs

Shell commands executed to stop the service.

Keyset used for tunnel identity.

Verify peer certificate

Verify peer certificate

Source directories.

Name of the symlink (relative to /var/lib/rancher/rke2/server/manifests)

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

Name of the PostgreSQL database.

The name of the Linkwarden database.

A system group name for this client instance.

A system group name for this client instance.

Whether to ask Let’s Encrypt to sign a certificate for this virtual host

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Name of the user to ensure.

The token value

Shell commands executed to stop the service.

Location of hardware kiss tnc for this interface.

Videobridges use the same XMPP account and need to be distinguished by the nickname (aka resource part of the JID)

Enable logging, default is no logging.

Local Mattermost database name.

Each attribute of this option defines a systemd service that runs iodine

Local secret key in hexadecimal form.

Backup type as described in: https://pgbackrest.org/command.html#command-backup/category-command/option-type

Controls how long a valid or invalid entry remains in the cache, in milliseconds.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

GVPE node name

Service port

The port on which the SFTP server will listen

The name of the host in the network as well as the configuration for that host

The location of the Drupal files directory.

Start the specified units when this unit is started.

Path to your session secret

Name of the homebridge UI platform

File containing the password for the user.

Name of the MySQL database that holds EPGStation's data.

Name of the beat

The object to make available inside the initrd.

Password for the user

The location of the Drupal site state directory.

Start the specified units when this unit is started.

Root directory for requests.

Environment file to be passed to the systemd service

Environment file to be passed to the systemd service

Server name to verify the hostname on the returned gRPC certificates

A system group name for this client instance.

A system group name for this client instance.

Enable unlocking and mounting of encrypted ZFS home dataset at login.

Limit retry time for secondary zones

Path to world folder containing the dimension to render

List of servers for inclusion in stub and secondary zones.

The IP interface to bind to. null means "all interfaces".

Units that want (i.e. depend on) this unit

Contents of the PAM service file.

The domain name to collect stats for.

Packages added to the service's PATH environment variable

The serial port speed of this interface.

If set to false the component will only be woken up if it is used

Output DPI configuration.

These lines go to the end of the location verbatim.

Packages added to the service's PATH environment variable

Each attribute in this set specifies an option in the [Exec] section of this unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

An existing Let’s Encrypt certificate to use for this virtual host

FastCGI parameters to override

Which local IP to bind the UDP socket to.

Specify the log file name

If the specified units are started at the same time as this unit, delay this unit until they have started.

Specifies the path to a file containing the clear text password for the MQTT user

Specifies the number of retries for failed notifies

If the specified units are started at the same time as this unit, delay this unit until they have started.

Name of the tun device

Levels (minimum value for logged events): 0 = verbose debugging 1 = debugging 2 = informational messages 3 = notification 4 = warning

Remote public key in hexadecimal form.

IP of the Redis master

The address on which to accept FastCGI requests.

Units that want (i.e. depend on) this unit

Specifies the MAC addresses to deny if macAcl is set to "deny" or "radius"

Output resolution.

Output framerate.

LiveKit key file holding one or multiple application secrets

Shell commands executed after the service's main process has exited.

List of address ranges allowed to query this zone

The user as which to run bitcoind.

Blockchain sync mode.

Maximum peers to connect to.

Whether to enable SFTP service.

Shell commands executed after the service's main process has exited.

Override the default port on which to listen for JSON-RPC connections.

Password HMAC-SHA-256 for JSON-RPC connections

Adds index directive.

Alias directory for requests.

Whether to enable Drupal web application.

Extra arguments to pass to the server commandline.

Whether to enable Coqui TTS server.

The kimai package to use.

The tahoelafs package to use.

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

DNS full-qualified domain name of a database server

Output video display controller.

Instance name.

Marks the server as a backup server

The path to repo in local machine

Vertical scaling factor/pixels.

Horizontal scaling factor/pixels.

Path to your private key file used to encrypt OIDC JWTs.

Name of the voice model to use

Guaranteed minimum hops for ‹name› tunnels.

Adds DirectoryIndex directive

Alias directory for requests

Name of this virtual host

File or block device to export.

Shell commands executed before the service's main process is started.

JID of the MUC to join

Override the default port on which to listen for connections.

Shell commands executed before the service's main process is started.

Isolate traffic between stations (clients) and prevent them from communicating with each other.

User part of the JID.

The TCP port to accept connections

As which user the backup should run.

Name of the font to use for regreet.

Key / certificate pairs for the virtual host.

Key policy for zone signing keys

Key policy for key signing keys

Guaranteed minimum hops for ‹name› tunnels.

If set, root doesn't need to authenticate (e.g. for the useradd service).

cgit configuration, see cgitrc(5)

Configuration of uhub

These lines go to the end of the location verbatim.

Specifies the MAC addresses to allow if macAcl is set to "allow" or "radius"

File containing the password, either as MD5SUM or cleartext.

The size of the key file

Basic Auth password file for a vhost

Set maximum cache size

The user's home directory.

Name of the homebridge

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Output gamma configuration.

Run the rsync process with an inhibition lock taken; see systemd-inhibit(1) for a list of possible operations.

The data directory for bitcoind.

List of virtual hostnames from which to accept requests.

IP address of server running hans

The location for users to install Drupal themes.

Limit refresh time for secondary zones.

Limit on the number of simultaneous connections allowed.

Type of the file system

The path to the file used for signing derivation data

Each attribute in this set specifies an option in the [Slice] section of the unit

Each attribute in this set specifies an option in the [Files] section of this unit

The database name.

port of the Redis master

Name of a file containing the spiped key

The packaged Helm chart

When or how often the backup should run

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

Whether to enable Go Ethereum prometheus metrics.

RPC user information for JSON-RPC connections.

IP and port to which this redis instance acts as a slave.

Shell commands executed as the service's main process.

Shell commands executed as the service's main process.

Whether to show the message of the day.

How to name the created archives

The name of the database to store data in.

Here you can provide authelia with configuration files or directories

Whether to enable Go Ethereum Auth RPC API.

Shell commands executed after the service's main process is started.

Shell commands executed when the service's main process is reloaded.

Name shown in the website title and on the front page.

Adds DirectoryIndex directive

Alias directory for requests

Shell commands executed after the service's main process is started.

Shell commands executed when the service's main process is reloaded.

Adds a return directive, for e.g. redirections.

If set, the OATH Toolkit will be used.

Path to the unix socket file on which to accept FastCGI requests.

File containing the password for the user.

Allow these IPs and TSIG to transfer zones, addr TSIG|NOKEY|BLOCKED address range 192.0.2.0/24, 1.2.3.4&255.255.0.0, 3.0.2.20-3.0.2.40

The group as which to run bitcoind.

Location to serve cgit under.

Path of the source file.

Settings for this slot.

Address to which spiped should connect.

Whether to enable the filesystem mount.

Each attribute in this set specifies an option in the [Slice] section of the unit

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

If the specified units are started at the same time as this unit, delay them until this unit has started.

A file containing the password corresponding to database.user.

Domain name

If the specified units are started at the same time as this unit, delay them until this unit has started.

Domain part of JID of the XMPP user, if it is different from hostName.

The database engine name

Each attribute in this set specifies an option in the [Timer] section of the unit

Whether to enable helper service.

Whether to enable proxy for this bucket

Key size in bits

Key size in bits

Database name to connect to

Name of this virtual host

Shell commands executed when the instance is starting.

A program name specifying a Postfix service/daemon process

Whether to operate in tun (IP) or tap (Ethernet) mode.

The drupal package to use.

Name of directory from which to import ZFS device, this is passed to zpool import as the value of the -d option

Whether to enable the output.

Output rotate configuration.

The account UID

The type of this worker

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

If set, the OTPW system will be used (if ~/.otpw exists).

Basic Auth password file for a vhost

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

List of paths files that follows systemd environmentfile structure

Specifies the BSSID for this BSS

Maximum number of items to keep in slow log.

Network interface to bind to.

Whether to enable the HTTP/3 protocol

The serial port to which your UPS is connected. /dev/ttyS0 is usually the first port on Linux boxes, for example.

Address to bind on for UI connections

Environment variables to set for the kernel.

Enable logging to the system logger.

Whether to enable Redis server.

Number of worker instances to run

The path of the web root directory.

Path to the certificate authority certificate.

Name of the theme to use for regreet.

Each attribute in this set specifies an option in the [Timer] section of the unit

Common name attribute of allowed peer certificates

Common name attribute of allowed peer certificates

Domain part of the web interface URL (no web interface for this domain if null)

Manually specify the hostname

User name for RPC connections.

Whether users can log in with passwords defined in /etc/shadow.

Specify the server verbosity level, options: debug, verbose, notice, warning.

Public address for p2p connections from peers (if TCP is used)

Table name.

TCP Port to bind on for UI connections

Guaranteed minimum hops for ‹name› tunnels.

Authentication algorithm for this key.

File containing environment variables to substitute when copying the configuration out of Nix store to the services.mautrix-meta.dataDir

Specifies if TLS should be enabled

Specifies if TLS should be enabled

Path to the yaml registration file of the appservice.

Basic Auth protection for a vhost

The specified name-string names the type of media supported by this device, for example, DLT7000

These lines go to the end of the location verbatim.

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Turns on or off the router flag for Neighbor Advertisement Messages.

Whether to enable this PAM service.

Path or reference to the host key.

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Event type.

Aliases of that unit.

The furl for a Tahoe helper node

Keep this unit running as long as the listed units are running

Name of the iSCSI initiator to boot from

If set, keys listed in ~/.ssh/authorized_keys and ~/.eid/authorized_certificates can be used to log in with the associated PKCS#11 tokens.

This is a rule that the target address is to match against

Configuration for this host

Override the default database cache size in MiB.

Adds try_files directive.

The user's home directory mode in numeric format

User account under which this instance of redis-server runs.

Enable PAM mount (pam_mount) system to mount filesystems on user login.

Aliases of that unit.

Root directory for requests.

Output scaling method.

Guaranteed minimum hops for ‹name› tunnels.

Name that will be shown to the user.

Protocol names to hide in summary tables (RE2 syntax),

The amount of time in seconds for a keyFile to appear before timing out and trying passwords.

DNS server to use as an intermediate relay to the iodined server

The name of the module

Source ZFS dataset

Whether to support proxying websocket connections with HTTP/1.1.

Page or namespace to restrict

The location of the Drupal config sync directory.

Automatically start this unit at the given date/time, which must be in the format described in systemd.time(7)

Keep this unit running as long as the listed units are running

Specifies the path to a file containing the clear text password for the account

The type of log being collected.

Specifies the path to a file containing the hashed password for the MQTT user

Whether this file locals should be generated

The name of an explicit dtb to be loaded, relative to the dtb base

Default window size for this interface.

Path to plugin file.

Attrset to be transformed into YAML for host config

The name of private PKCS #8 key file for this policy to be found in the baseDirectory, or the absolute path to the key file

Device identifiers, as shown by keyd(1).

If given, sets the SO_MARK option on the TCP socket.

If given, sets the SO_MARK option on the TCP socket.

Disables scan for overlapping BSSs in HT40+/- mode

Database user.

Command and arguments to start the kernel.

TLS Options for the Director in this Configuration.

Bind address to be used for this server.

TLS Options for the Director in this Configuration.

Port the NetBird client listens on.

Port the NetBird client listens on.

File to load environment variables from

Public URL of the API address of the reverse proxy/tls terminator

Label for this destination

Automatically start this unit at the given date/time, which must be in the format described in systemd.time(7)

Station MAC address -based authentication

Credential file

Whether to enable Enables the axport interface.

Default maximum packet size for this interface.

The schedule in which data is persisted to disk, represented as a list of lists where the first element represent the amount of seconds and the second the number of changes

A file containing a the client secret for an openid_connect adapter

Port to bind on for p2p connections from peers (both TCP and UDP)

Address to bind on for p2p connections from peers (both TCP and UDP)

Database host address.

Database host port.

The name of your network of sr.ht-based sites.

The location for users to install Drupal modules.

I2P nodes that are allowed to connect to this service.

Shell commands executed when the instance is shutting down.

URL where this inbox can be accessed over HTTP.

APIs to enable over WebSocket

Path to the host certificate.

Settings that should be passed to rsync via long options

Name of the class implementing the check

If set, the calling user's SSH agent is used to authenticate against the configured keys

Path to a file containing the password

The repo of the Helm chart

See torrc manual.

Local UDP port.

Legacy RSA public key of the host in PEM format, including start and end markers

Listen address of Go Ethereum metrics service.

Options for PHP's php.ini file for this Drupal site.

Whether to enable this proxy cache path entry.

Optional PKCS#11 module name.

The offset of the key file

Whether output should be marked as primary

Specifies the frequency band to use, possible values are 2g for 2.4 GHz, 5g for 5 GHz, 6g for 6 GHz and 60g for 60 GHz.

Alias directory for requests.

Adds index directive.

Path to key file

The name of a .desktop file in the directory specified in the 'package' option.

The name of the Stash Box

The hash of the packaged Helm chart

Address to bind on for API connections relied by the reverse proxy/tls terminator.

Port to bind on for API connections relied by the reverse proxy/tls terminator.

A list of host names and/or IP numbers used for accessing the host's ssh service

Extra configuration append to unit

Language of the environment

Structural Kimai's local.yaml configuration

Listen address of Go Ethereum Auth RPC API.

Whether to run the check command with the provided checkOpts options.

The PHP package to use for running this PHP-FPM pool.

The path of a PEM encoded TLS private key

The path of a PEM encoded TLS private key

Limit refresh time for secondary zones

Whether to enable watching for repo.

Optional url of remote repository

Optional branch in remote repository

Whether to enable Bitcoin daemon.

The address of the proxy.

IP Address of a database server

IP Address of a database server

Set size to shared memory zone.

Name shown in the server list.

Owner's name.

The user's primary group.

Canonical hostname for the server.

Canonical hostname for the server.

The URL at which to fetch the feed.

The path to the socket to bind to.

DDNS server name.

The number of shares required to store a file.

If set, the pam_mysql module will be used to authenticate users against a MySQL/MariaDB database.

The name of the user for this authelia instance.

The name the camera will show up as.

Whether to enable storage service.

URI to bind the wyoming server to.

Hostname alias(es).

Username for this DDNS provider.

Additional names of virtual hosts served by this virtual host configuration.

Keeps the specified running while this unit is running

Port number of Go Ethereum WebSocket API.

Each attribute in this set specifies an option in the [Link] section of the unit

Number of simultaneous ‹name› tunnels.

The packaged Helm chart

Whether to try to create home directories for users with $HOMEs pointing to nonexistent locations on session login.

Location of the DokuWiki state directory.

Hostname of server running iodined

A list of options for 'restic check'.

Whether to run the rspamd worker.

Errbot backend name.

The job name assigned to scraped metrics by default.

Clevis JWE file used to decrypt the device at boot, in concert with the chosen pin (one of TPM2, Tang server, or SSS).

Number of ElGamal/AES tags to send.

TTL for dnssec records

Group account under which this instance of redis-server runs.

The number of distinct storage nodes required to store a file.

The znapzend backup plan to use for the source

Keeps the specified running while this unit is running

Whether to enable the QUIC transport protocol

Domain name for a http_file_share service.

User or group to restrict

Path to the directory where the pastes will be saved to

Additional TLS/SSL-related configuration options

Optional PKCS#11 module name.

Adds try_files directive.

The username to store inside the credentials file.

Listen for any Neighbor Solicitation messages on this interface, and respond to them according to a set of rules

URL of the accounts server.

The subnets which this tinc daemon will serve

Number of simultaneous ‹name› tunnels.

The delay time (in microseconds) on failure.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

Your yandex.com login name.

Type of this limit

Custom name of this poller.

Configuration for MPD

Number of ElGamal/AES tags to send.

"Options appended to the PHP configuration file php.ini used for this PHP-FPM pool."

When or how often the backup should run

Determines how multiple values are joined to create the claim value

Path to the key file.

Name of the icon theme to use for regreet.

Apache configuration can be done by adapting services.httpd.virtualHosts.

Path to your storage encryption key.

Name of the interface.

If set, users listed in $XDG_CONFIG_HOME/Yubico/u2f_keys (or $HOME/.config/Yubico/u2f_keys if XDG variable is not set) are able to log in with the associated U2F key

Item this limit applies to

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

Path to a list of ini file containing confidential settings such as credentials

Set the logcheck level.

Number of daily snapshots.

Whether to enable this source.

Kissattach parameters for this interface.

Whether to propagate the legacy options under services.znc.confOptions.* to the znc config

Whether to enable HTTPS in addition to plain HTTP

Whether to enable HTTPS in addition to plain HTTP

The external location that the node should listen on

The input type

Database user.

Print global archive statistics upon completion

Require TLS or TLS-PSK encryption

Require TLS or TLS-PSK encryption

Output scale configuration

(optional) name your peer has for you

(optional) name your peer has for you

Attribute set describing resource limits

Arguments passed to the main process script

Adds a return directive, for e.g. redirections.

Whether to update /var/log/wtmp.

Output position

Don't send the password immediately after login, but store for PAM session.

Name of the class implementing the check

Enables TCP_NODELAY on the TCP socket.

Whitelists the given rrl-types.

The IP and port to forward all traffic to.

The IP and port to forward all traffic to.

Enables TCP_NODELAY on the TCP socket.

If enabled, checks all masters for the last zone version

Run specified command or script after the tunnel device has been opened.

The name of the group for this authelia instance.

The specified name-string must be the generic SCSI device name of the autochanger that corresponds to the normal read/write Archive Device specified in the Device resource

Database host address.

Database host port.

Name of the database user to initialise the database with

Path to the accounts file.

Access Control Lists: see https://www.dokuwiki.org/acl Mutually exclusive with services.dokuwiki.aclFile Set this to a value other than null to take precedence over aclFile option

If enabled, the pam_umask module will be loaded.

Shell commands to execute when the event is triggered.

Regex specifying which log lines to ignore.

User that runs the cronjob.

Paths to SSL files

Whether this node is a relay.

Denied client IP ranges, these gets evaluated after the allowed IP ranges, defaults to all IPv4 addresses: [ "0.0.0.0/0" ] To block all other access than the allowed.

Dataset name to send snapshots to.

Arguments passed to date to create a timestamp suffix for the archive name.

Permission level to restrict the actor(s) to

Path to the working directory (used for config and pidfile)

Take unencrypted connections from the source socket and send encrypted connections to the target socket.

Take encrypted connections from the source socket and send unencrypted connections to the target socket.

Arguments passed to the main process script

If set, fingerprint reader will be used (if exists and your fingerprints are enrolled).

Whether to enable HTTPS and reject plain HTTP connections

Whether to enable HTTPS and reject plain HTTP connections

Location where the file system will be mounted

Whether the delay after typing a wrong password should be disabled.

Optional slot number of the token that stores the certificate.

Whether to enable kTLS support

Log level of the NetBird daemon.

Log level of the NetBird daemon.

A state directory used by NetBird client to store config.json, state.json & resolv.conf.

A state directory used by NetBird client to store config.json, state.json & resolv.conf.

Account certificate file, necessary to create, delete and manage tunnels

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Path to the certificate file.

Directory for the acme challenge which is PUBLIC, don't put certs or keys in here

Directory for the ACME challenge, which is public

The number of shares required to reconstitute a file.

Optional PKCS#11 module name.

If set to false, this unit will be a symlink to /dev/null

The ax25-tools package to use.

Enable verbose output, default is to not be verbose.

Remote UDP port

Controls how long to wait for a Neighbor Advertisement Message before invalidating the entry, in milliseconds.

How frequently to change keys

How frequently to change keys

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

The content of /etc/asusd/aura_.ron

(optional) human-readable name for peer

(optional) human-readable name for peer

A systemd service name to use (without .service suffix).

A systemd service name to use (without .service suffix).

Path to host the API on and forward to the daemon's api port

Whether the PPP session is automatically started at boot time.

Name of the wrapper that is installed into PATH

Shell commands to run after borg create

Enable or disable TTY auditing for specified users

The frp consists of client and server

E-mail address of the server administrator.

If set, users with an SSH certificate containing an authorized principal in their SSH agent are able to log in

Whether to enable frp.

Akkoma frontend reference.

The tinc_pre package to use.

Change permissions for the socket

By default data is only periodically persisted to disk, enable this option to use an append-only file for improved persistence.

Timeout, in seconds, after which an attempt to connect to the target or a protocol handshake will be aborted (and the connection dropped) if not completed

Which paths to backup, in addition to ones specified via dynamicFilesFrom

Each attribute in this set specifies an option in the [Network] section of this unit

Each attribute in this set specifies an option in the [Socket] section of the unit

PostgreSQL host for operating remotely.

IPv4 interface to bind to.

IPv6 interface to bind to.

Public domain of the API address of the reverse proxy/tls terminator.

Controls presence of netbird-ui wrapper for this NetBird client.

Controls presence of netbird-ui wrapper for this NetBird client.

Email address to which to send feed items

Extra parameters to append to redis-server invocation

Basic Auth protection for a vhost

HTTP status used by globalRedirect & forceSSL

Value of this limit

Path of the source .yaml file.

Whether this manifest file should be generated.

Name of the interface

Canonical hostname for the server.

Each attribute in this set specifies an option in the [Socket] section of the unit

Attribute set of NetBird client daemons, by default each one will:

1. be manageable using dedicated tooling:

• netbird-<name> script,
• NetBird - netbird-<name> graphical interface when appropriate (see ui.enable),

2. run as a netbird-<name>.service,
3. listen for incoming remote connections on the port 51820 (openFirewall by default),
4. manage the netbird-<name> wireguard interface,
5. use the /var/lib/netbird-/config.json configuration file,
6. override /var/lib/netbird-/config.json with values from /etc/netbird-/config.d/*.json,
7. (hardened) be locally manageable by netbird-<name> system group,

With following caveats:

• multiple daemons will interfere with each other's DNS resolution of netbird.cloud, but should remain fully operational otherwise

If set, users listed in ~/.yubico/authorized_yubikeys are able to log in with the associated Yubikey tokens.

Name of the heat source.

The bitcoind package to use.

Makes this policy trust all remote parties

The address that Anubis listens to

Whether to accelerate the underlying onnxruntime library with CUDA.

How often to fsync the append-only log, options: no, always, everysec.

Extra configuration options to put at the end of this BSS's defintion in the hostapd.conf for the associated interface

The hostname the web service appears under.

If set to false, this unit will be a symlink to /dev/null

The piper-tts package to use.

The client authentication stance for this policy.

The group GID

Number of simultaneous ‹name› tunnels.

The external address where the host can be reached

Name of user to run the script under.

Short description for the zone.

Rich rules for the zone.

Ports to allow in the zone.

The restic package to use.

The user as which to run blockbook-frontend-‹name›.

Extra configuration to be passed in Autochanger directive.

Name of the theme to use for the lightdm-gtk-greeter.

Optional slot number of the token that stores the certificate.

Absolute path to the certificate to load

Adds DirectoryIndex directive

Alias directory for requests

The server name.

Name of the font to use.

Whether to use HTTPS for this DDNS provider.

IP to listen on. 0.0.0.0 for IPv4 only, * for all.

Name to match.

Name of the network interface managed by this client.

Name of the network interface managed by this client.

Children zones inherit all options of their parents

Root directory for requests.

Root directory for requests.

Root directory for requests.

Name (relative to the root of the filesystem) of the subvolume where the hash table will be stored.

Path to 64x64 logo png.

Path to 32x32 logo png.

Enable SSL.

Text of the file.

Order of this location block in relation to the others in the vhost

Sets the number of worker threads to use

Number of simultaneous ‹name› tunnels.

Key of taint.

Paths for public-inbox-watch(1) to monitor for new mail.

Set the TTY audit flag when opening the session, but do not restore it when closing the session

Maps kanidm groups to values for the claim.

Allow client if common name appears in the list.

Whether to use the testnet instead of mainnet.

The port where the host can be reached

Environment files for this instance

Set the login uid of the process (/proc/self/loginuid) for auditing purposes

Absolute file path to an SSH private key, usually generated by rad auth

Whether this OpenVPN instance should be started automatically.

Number of yearly snapshots.

Number of hourly snapshots.

Enable or disable this network.

The account type

Specify delay (in seconds) before sending snaps to the destination

Full legal name

Wait for DNS

Domain name of this Gemini server, enables checking hostname and port in requests. (multiple occurrences means basic vhosts)

The levels parameter defines structure of subdirectories in cache: from 1 to 3, each level accepts values 1 or 2

Each attribute in this set specifies an option in the [Match] section of the unit

Each attribute of this option defines a systemd service that runs an OpenVPN instance

Allow client if organizational unit name appears in the list.

Whether to enable HTTPS in addition to plain HTTP

Whether to enable the Howdy PAM module

If set, the calling user's SSH agent is used to authenticate against the keys in the calling user's ~/.ssh/authorized_keys

Port number to listen on.

Root directory for requests.

IP address to listen on.

IRC server port.

A file containing the auth key

Name of the theme to use for the lightdm-enso-os-greeter

NNTP group name for the inbox.

Nginx first writes files that are destined for the cache to a temporary storage area, and the use_temp_path=off directive instructs Nginx to write them to the same directories where they will be cached

Path to the unix socket file to use for authentication.

This option sets the PAM "control" used for this module.

Whether to enable the HTTP/3 protocol

If NSD as secondary server should be allowed to AXFR if the primary server does not allow IXFR.

Name of the user to log in

Whether to enable SSL (https) support.

Patterns to exclude when backing up

Absolute path to the certificate to load

Database name.

Whether to enable fedimintd.

The repo of the Helm chart

The dokuwiki package to use.

The dataset to use for this source.

The full path to a file containing the password from upsd.users for accessing this UPS

Basic Auth protection for a vhost

Whether to enable HTTP 2

Location of blockbook-frontend-‹name› data directory.

Use this as the SNI while connecting via TLS

How long in advance to publish new keys

How long in advance to publish new keys

Filesystem type

The amount of debugging information to add to the log. 0 means little logging while 5 is the most logging. man tincd for more details.

FastCGI parameters to override

Whether to enable Go Ethereum WebSocket API.

An application timeout on receiving data from the TCP socket.

An application timeout on receiving data from the TCP socket.

List of IPs of relays that this node should allow traffic from.

The hash of the packaged Helm chart

Allow client if URI subject alternative name appears in the list.

Allow client if DNS subject alternative name appears in the list.

Remote or local repository to back up to.

Port to listen on

Listen address.

Path where to store the data files of the hidden service

Whether to enable HTTPS and reject plain HTTP connections

Name of the default administrator user

Specify the program to run to talk to this UPS. apcsmart, bestups, and sec are some examples.

Name of the icon theme to use for the lightdm-gtk-greeter.

The group as which to run blockbook-frontend-‹name›.

Name of the platform

UUID of the stratis pool that the fs is located in

This is only relevant if you are using stratis.

This setting configures the name of a mailbox for which administrator scripts are configured

Ports of the service.

TLS key to use instead of the hardcoded on in case of HTTPS connections

Public URL of the API address of the reverse proxy/tls terminator

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Whether to use SSL to connect to the IRC server.

Each attribute in this set specifies an option in the [Tap] section of the unit

Each attribute in this set specifies an option in the [Tun] section of the unit

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Directory for the acme challenge which is PUBLIC, don't put certs or keys in here

If enabled, this will replace the FAIL_DELAY setting from login.defs

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Indicates the priority over identical Subnets owned by different nodes

Name of the theme to use for the lightdm-slick-greeter.

Path to server SSL certificate key.

Restrict the allowed ciphers of this policy to those defined here

Host to use for the destination dataset

Drive name without the full path.

Makes this vhost the default.

Services to allow in the zone.

Short description for the service.

Optional slot number of the token that stores the certificate.

Hostname alias(es).

Username for this DDNS provider.

SSH private key file to use to login to the remote system

E-mail address of the server administrator.

A list of options (--keep-* et al.) for 'restic forget --prune', to automatically prune old snapshots

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

Refer to xrandr(1) for the documentation of the transform matrix.

Adds index directive.

Alias directory for requests.

Alias directory for requests.

Alias directory for requests.

Adds index directive.

Adds index directive.

Port to run the TCP server on. null will not run the server.

Allowed time window for first received packet in seconds (positive number allows packets from history)

Configure unit start rate limiting

Data directory for errbot instance.

The email address used to authenticate as this account

User name.

Name of group to run the script under

The user's home directory.

Log format for Apache's log files