tls ‐ NixOS ‐ Searchix

Search Nix packages and options from NixOS, Darwin, Home Manager, Nix Packages and NUR

Indexing last ran 10 hours ago, will run again in 14 hours.

NixOS options search

Title	Description
services.bacula-sd.tls.require	Require TLS or TLS-PSK encryption
services.bacula-fd.tls.require	Require TLS or TLS-PSK encryption
services.bacula-dir.tls.require	Require TLS or TLS-PSK encryption
services.movim.h2o.tls.policy	`add` will additionally listen for TLS connections. `only` will disable TLS connections. `force` will redirect non-TLS traffic to the TLS connection.
services.movim.h2o.tls	TLS options for virtual host
services.bacula-sd.tls.key	The path of a PEM encoded TLS private key
services.bacula-fd.tls.key	The path of a PEM encoded TLS private key
services.h2o.hosts.<name>.tls.policy	`add` will additionally listen for TLS connections. `only` will disable TLS connections. `force` will redirect non-TLS traffic to the TLS connection.
services.bacula-dir.tls.key	The path of a PEM encoded TLS private key
services.h2o.hosts.<name>.tls	TLS options for virtual host
services.bacula-sd.director.<name>.tls.require	Require TLS or TLS-PSK encryption
services.bacula-fd.director.<name>.tls.require	Require TLS or TLS-PSK encryption
services.nghttpx.tls	TLS certificate and key paths
services.bacula-fd.tls	TLS Options for the File Daemon
services.bacula-sd.tls	TLS Options for the Storage Daemon
services.bacula-dir.tls	TLS Options for the Director
services.vault.tlsKeyFile	TLS private key file
services.gitlab.smtp.tls	Whether to use TLS wrapper-mode.
services.movim.h2o.tls.port	Override the default TLS port for this virtual host.
services.coder.tlsKey	The path to the TLS key.
services.vault.tlsCertFile	TLS certificate file
services.dolibarr.h2o.tls.policy	`add` will additionally listen for TLS connections. `only` will disable TLS connections. `force` will redirect non-TLS traffic to the TLS connection.
services.nghttpx.tls.key	Path to the TLS key file.
services.nghttpx.tls.crt	Path to the TLS certificate file.
services.coder.tlsCert	The path to the TLS certificate.
services.h2o.hosts.<name>.tls.port	Override the default TLS port for this virtual host.
services.dendrite.tlsKey	The path to the TLS key. `nix-shell -p dendrite --command "generate-keys --tls-cert server.crt --tls-key server.key"`
services.cfssl.tlsCert	Other endpoint's CA to set up TLS protocol.
services.bacula-fd.tls.enable	Specifies if TLS should be enabled
services.bacula-sd.tls.enable	Specifies if TLS should be enabled
services.coturn.no-tls	Disable TLS client listener
services.dendrite.tlsCert	The path to the TLS certificate. `nix-shell -p dendrite --command "generate-keys --tls-cert server.crt --tls-key server.key"`
services.bacula-dir.tls.enable	Specifies if TLS should be enabled
services.llama-swap.tls.enable	Whether to enable TLS encryption.
services.pgmanage.tls.key	TLS key
services.llama-swap.tls.keyFile	Path to the TLS private key file
services.llama-swap.tls.certFile	Path to the TLS certificate file
services.movim.h2o.tls.quic	Enables HTTP/3 over QUIC on the UDP port for TLS
services.dolibarr.h2o.tls	TLS options for virtual host
services.pgmanage.tls.cert	TLS certificate
services.zitadel.tlsMode	The TLS mode to use
services.athens.tlsKeyFile	Path to the TLS key file.
services.pgmanage.tls	These options tell pgmanage where the TLS Certificate and Key files reside
services.h2o.hosts.<name>.tls.quic	Enables HTTP/3 over QUIC on the UDP port for TLS
services.glusterfs.tlsSettings.tlsPem	Path to the certificate used for TLS.
services.oauth2-proxy.tls.enable	Whether to serve over TLS.
services.athens.tlsCertFile	Path to the TLS certificate file.
services.cfssl.tlsRemoteCa	CAs to trust for remote TLS requests.
services.acme-dns.settings.api.tls	TLS backend to use.
services.glusterfs.tlsSettings.tlsKeyPath	Path to the private key used for TLS.
services.dolibarr.h2o.tls.port	Override the default TLS port for this virtual host.
services.skydns.etcd.tlsPem	Skydns path of TLS client certificate - public key.
services.skydns.etcd.tlsKey	Skydns path of TLS client certificate - private key.
services.synergy.server.tls.cert	The TLS certificate to use for encryption.
services.bacula-sd.director.<name>.tls.key	The path of a PEM encoded TLS private key
services.bacula-fd.director.<name>.tls.key	The path of a PEM encoded TLS private key
services.oauth2-proxy.tls.key	Path to private key file.
services.prosody.modules.tls	Add support for secure TLS on c2s/s2s connections
services.thanos.rule.grpc-server-tls-key	TLS Key for the gRPC server, leave blank to disable TLS
services.synergy.server.tls.enable	Whether TLS encryption should be used
services.nezha-agent.settings.tls	Enable SSL/TLS encryption.
services.omnom.settings.smtp.tls	Whether to enable Whether TLS encryption should be used..
services.thanos.rule.grpc-server-tls-cert	TLS Certificate for gRPC server, leave blank to disable TLS
services.bacula-sd.director.<name>.tls	TLS Options for the Director in this Configuration.
services.bacula-fd.director.<name>.tls	TLS Options for the Director in this Configuration.
services.thanos.store.grpc-server-tls-key	TLS Key for the gRPC server, leave blank to disable TLS
services.thanos.query.grpc-server-tls-key	TLS Key for the gRPC server, leave blank to disable TLS
services.cfssl.tlsKey	Other endpoint's CA private key
services.dolibarr.h2o.tls.quic	Enables HTTP/3 over QUIC on the UDP port for TLS
services.thanos.query.grpc-server-tls-cert	TLS Certificate for gRPC server, leave blank to disable TLS
services.thanos.store.grpc-server-tls-cert	TLS Certificate for gRPC server, leave blank to disable TLS
services.maddy.tls.extraConfig	Arguments for the specified certificate loader
services.movim.h2o.tls.extraSettings	Additional TLS/SSL-related configuration options
services.bacula-sd.director.<name>.tls.enable	Specifies if TLS should be enabled
services.bacula-fd.director.<name>.tls.enable	Specifies if TLS should be enabled
services.h2o.hosts.<name>.tls.extraSettings	Additional TLS/SSL-related configuration options
services.thanos.receive.grpc-server-tls-key	TLS Key for the gRPC server, leave blank to disable TLS
services.thanos.sidecar.grpc-server-tls-key	TLS Key for the gRPC server, leave blank to disable TLS
services.nghttpx.backends.*.params.tls	This option determines whether nghttpx will negotiate its connection with a backend server using TLS or not
services.portunus.ldap.tls	Whether to enable LDAPS protocol
services.thanos.sidecar.grpc-server-tls-cert	TLS Certificate for gRPC server, leave blank to disable TLS
services.thanos.receive.grpc-server-tls-cert	TLS Certificate for gRPC server, leave blank to disable TLS
services.maddy.tls.loader	TLS certificates are obtained by modules called "certificate loaders"
services.coturn.tls-listening-port	TURN listener port for TLS
services.movim.h2o.tls.identity	Key / certificate pairs for the virtual host.
services.thanos.query.grpc-client-tls-key	TLS Key for the client's certificate
services.bacula-sd.tls.caCertificateFile	The path specifying a PEM encoded TLS CA certificate(s)
services.bacula-fd.tls.caCertificateFile	The path specifying a PEM encoded TLS CA certificate(s)
services.bacula-dir.tls.caCertificateFile	The path specifying a PEM encoded TLS CA certificate(s)
services.thanos.query.grpc-client-tls-ca	TLS CA Certificates to use to verify gRPC servers
services.neo4j.bolt.tlsLevel	SSL/TSL requirement level for BOLT traffic.
services.h2o.hosts.<name>.tls.identity	Key / certificate pairs for the virtual host.
services.librespeed.tlsKey	TLS private key to use
services.foundationdb.tls	FoundationDB Transport Security Layer (TLS) settings.
services.thanos.query.grpc-client-tls-cert	TLS Certificates to use to identify this client to the server
services.dolibarr.h2o.tls.extraSettings	Additional TLS/SSL-related configuration options
services.movim.h2o.tls.identity.*.key-file	Path to key file
services.thanos.query-frontend.grpc-server-tls-key	TLS Key for the gRPC server, leave blank to disable TLS
services.thanos.query-frontend.grpc-server-tls-cert	TLS Certificate for gRPC server, leave blank to disable TLS
services.h2o.hosts.<name>.tls.identity.*.key-file	Path to key file
services.thanos.query.grpc-client-tls-secure	Use TLS when talking to the gRPC server
services.nghttpx.frontends.*.params.tls	Enable or disable TLS
services.coturn.alt-tls-listening-port	Alternative listening port for TLS and DTLS protocols.
services.oauth2-proxy.tls.httpsAddress	`addr:port` to listen on for HTTPS clients
services.wstunnel.servers.<name>.tlsKey	TLS key to use instead of the hardcoded on in case of HTTPS connections
services.thanos.rule.grpc-server-tls-client-ca	TLS CA to verify clients against
services.wstunnel.clients.<name>.tlsSNI	Use this as the SNI while connecting via TLS
services.soju.tlsCertificate	Path to server TLS certificate.
services.writefreely.database.tls	Whether or not TLS should be used for the database connection.
services.dolibarr.h2o.tls.identity	Key / certificate pairs for the virtual host.
services.bacula-fd.tls.allowedCN	Common name attribute of allowed peer certificates
services.bacula-sd.tls.allowedCN	Common name attribute of allowed peer certificates
services.bacula-dir.tls.allowedCN	Common name attribute of allowed peer certificates
services.thanos.store.grpc-server-tls-client-ca	TLS CA to verify clients against
services.thanos.query.grpc-server-tls-client-ca	TLS CA to verify clients against
services.maddy.tls.certificates	A list of attribute sets containing paths to TLS certificates and keys
services.soju.tlsCertificateKey	Path to server TLS certificate key.
services.maddy.tls.certificates.*.keyPath	Path to the private key used for TLS.
services.movim.h2o.tls.redirectCode	HTTP status used by `globalRedirect` & `forceSSL`
services.maddy.tls.certificates.*.certPath	Path to the certificate used for TLS.
services.bacula-sd.director.<name>.tls.caCertificateFile	The path specifying a PEM encoded TLS CA certificate(s)
services.bacula-fd.director.<name>.tls.caCertificateFile	The path specifying a PEM encoded TLS CA certificate(s)
services.h2o.hosts.<name>.tls.redirectCode	HTTP status used by `globalRedirect` & `forceSSL`
services.foundationdb.tls.allowedPeers	"Peer verification string"
services.vsftpd.ssl_tlsv1	Only applies if `ssl_enable` is activated
services.bacula-sd.tls.certificate	The full path to the PEM encoded TLS certificate
services.bacula-fd.tls.certificate	The full path to the PEM encoded TLS certificate
services.dolibarr.h2o.tls.identity.*.key-file	Path to key file
services.bacula-dir.tls.certificate	The full path to the PEM encoded TLS certificate
services.foundationdb.tls.key	Private key file for the certificate.
services.thanos.sidecar.grpc-server-tls-client-ca	TLS CA to verify clients against
services.thanos.receive.grpc-server-tls-client-ca	TLS CA to verify clients against
services.neo4j.ssl.policies.<name>.tlsVersions	Restrict the TLS protocol versions of this policy to those defined here.
services.outline.smtp.tlsCiphers	Override SMTP cipher configuration.
services.matrix-synapse.settings.listeners.*.tls	Whether to enable TLS on the listener socket. This option will be ignored for UNIX domain sockets.
services.bacula-fd.tls.verifyPeer	Verify peer certificate
services.bacula-sd.tls.verifyPeer	Verify peer certificate
services.bacula-dir.tls.verifyPeer	Verify peer certificate
services.oauth2-proxy.tls.certificate	Path to certificate file.
services.matrix-synapse.settings.tls_private_key_path	PEM encoded private key for TLS
services.movim.h2o.tls.recommendations	By default, H2O, without prejudice, will use as many TLS versions & cipher suites as it & the TLS library (OpenSSL) can support
services.h2o.hosts.<name>.tls.recommendations	By default, H2O, without prejudice, will use as many TLS versions & cipher suites as it & the TLS library (OpenSSL) can support
services.nghttpx.backends.*.params.redirect-if-not-tls	If true, a backend match requires the frontend connection be TLS encrypted
services.dolibarr.h2o.tls.redirectCode	HTTP status used by `globalRedirect` & `forceSSL`
services.glusterfs.tlsSettings	Make the server communicate via TLS
services.dolibarr.h2o.tls.recommendations	By default, H2O, without prejudice, will use as many TLS versions & cipher suites as it & the TLS library (OpenSSL) can support
services.thanos.query-frontend.grpc-server-tls-client-ca	TLS CA to verify clients against
services.headscale.settings.tls_letsencrypt_hostname	Domain name to request a TLS certificate for.
services.foundationdb.tls.certificate	Path to the TLS certificate file
services.bacula-sd.director.<name>.tls.allowedCN	Common name attribute of allowed peer certificates
services.bacula-fd.director.<name>.tls.allowedCN	Common name attribute of allowed peer certificates
services.bacula-sd.director.<name>.tls.certificate	The full path to the PEM encoded TLS certificate
services.bacula-fd.director.<name>.tls.certificate	The full path to the PEM encoded TLS certificate
services.librespeed.tlsCertificate	TLS certificate to use
services.omnom.settings.smtp.tls_allow_insecure	Whether to enable Whether to allow insecure TLS..
services.movim.h2o.tls.identity.*.certificate-file	Path to certificate file
services.h2o.hosts.<name>.tls.identity.*.certificate-file	Path to certificate file
services.glusterfs.tlsSettings.caCert	Path certificate authority used to sign the cluster certificates.
services.wstunnel.servers.<name>.tlsCertificate	TLS certificate to use instead of the hardcoded one in case of HTTPS connections
services.kubernetes.kubelet.tlsKeyFile	File containing x509 private key matching tlsCertFile.
services.headscale.settings.tls_letsencrypt_challenge_type	Type of ACME challenge to use, currently supported types: `HTTP-01` or `TLS-ALPN-01`.
services.coturn.no-dtls	Disable DTLS client listener
services.matrix-synapse.settings.tls_certificate_path	PEM encoded X509 certificate for TLS
services.bacula-sd.director.<name>.tls.verifyPeer	Verify peer certificate
services.bacula-fd.director.<name>.tls.verifyPeer	Verify peer certificate
services.kubernetes.kubelet.tlsCertFile	File containing x509 Certificate for HTTPS.
services.tlsrpt.enable	Whether to enable the TLSRPT services.
services.kanidm.serverSettings.tls_key	TLS key in pem format.
services.dolibarr.h2o.tls.identity.*.certificate-file	Path to certificate file
virtualisation.podman.networkSocket.tls.cert	Path to certificate describing the server.
services.wstunnel.clients.<name>.tlsVerifyCertificate	Whether to verify the TLS certificate of the server
services.nvme-rs.settings.email.use_tls	Use TLS for SMTP connection
services.kanidm.server.settings.tls_key	TLS key in pem format.
services.kanidm.serverSettings.tls_chain	TLS chain in pem format.
services.kanidm.server.settings.tls_chain	TLS chain in pem format.
services.kubernetes.apiserver.tlsKeyFile	Kubernetes apiserver private key file.
virtualisation.podman.networkSocket.tls.key	Path to the private key corresponding to the server certificate
virtualisation.podman.networkSocket.tls.cacert	Path to CA certificate to use for client authentication.
services.tlsrpt.package	The tlsrpt-reporter package to use.
services.kubernetes.apiserver.tlsCertFile	Kubernetes apiserver certificate file.
services.cloudflared.tunnels.<name>.originRequest.tlsTimeout	Timeout for completing a TLS handshake to your origin server, if you have chosen to connect Tunnel to an HTTPS server.
services.resolved.dnsovertls	If set to `"true"`: all DNS lookups will be encrypted
services.headscale.settings.tls_letsencrypt_listen	When HTTP-01 challenge is chosen, letsencrypt must set up a verification endpoint, and it will be listening on: `:http = port 80`.
services.matrix-synapse.workers.<name>.worker_listeners.*.tls	Whether to enable TLS on the listener socket. This option will be ignored for UNIX domain sockets.
services.postfix.tlsTrustedAuthorities	File containing trusted certification authorities (CA) to verify certificates of mailservers contacted for mail delivery
services.postfix.settings.main.smtpd_tls_security_level	The server TLS security level
services.prometheus.remoteRead.*.tls_config	Configures the remote read request's TLS settings.
services.postfix-tlspol.enable	Whether to enable postfix-tlspol.
services.prometheus.remoteWrite.*.tls_config	Configures the remote write request's TLS settings.
services.listmonk.database.settings.smtp.*.tls_type	Type of TLS authentication with the SMTP server
services.prometheus.alertmanagerGotify.gotifyEndpoint.tls	If your gotify endpoint uses https, leave this option set to default
services.kubernetes.controllerManager.tlsKeyFile	Kubernetes controller-manager private key file.
services.kubernetes.controllerManager.tlsCertFile	Kubernetes controller-manager certificate file.
services.prometheus.scrapeConfigs.*.tls_config	Configures the scrape request's TLS settings.
services.postfix-tlspol.package	The postfix-tlspol package to use.
services.postfix.settings.main.smtp_tls_security_level	The client TLS security level. Use `dane` with a local DNSSEC validating DNS resolver enabled. https://www.postfix.org/postconf.5.html#smtp_tls_security_level
services.tlsrpt.reportd.extraFlags	List of extra flags to pass to the tlsrpt-reportd executable
users.ldap.useTLS	If enabled, use TLS (encryption) over an LDAP (port 389) connection
services.tlsrpt.fetcher.settings	Flags from tlsrpt-fetcher(1) as key-value pairs.
services.tlsrpt.reportd.settings	Flags from tlsrpt-reportd(1) as key-value pairs.
services.headscale.settings.tls_cert_path	Path to already created certificate.
services.postfix-tlspol.settings	The postfix-tlspol configuration file as a Nix attribute set
services.headscale.settings.tls_key_path	Path to key for already created certificate.
services.tlsrpt.collectd.extraFlags	List of extra flags to pass to the tlsrpt-reportd executable
services.go-camo.sslKey	Path to TLS private key.
services.tlsrpt.configurePostfix	Whether to configure permissions to allow integration with Postfix.
services.scrutiny.settings.web.influxdb.tls.insecure_skip_verify	Whether to enable skipping TLS verification when connecting to InfluxDB.
services.tlsrpt.collectd.settings	Flags from tlsrpt-collectd(1) as key-value pairs.
services.go-camo.sslCert	Path to TLS certificate.
services.doh-server.settings.upstream	Upstream DNS resolver
services.tlsrpt.reportd.settings.dbname	Path to the sqlite database.
services.tlsrpt.fetcher.settings.storage	Path to the collectd sqlite database.
services.postfix-tlspol.settings.server.log-level	Log level
services.h2o.defaultTLSRecommendations	By default, H2O, without prejudice, will use as many TLS versions & cipher suites as it & the TLS library (OpenSSL) can support
services.postfix-tlspol.settings.server.cache-file	Path to the cache file.
services.tlsrpt.collectd.settings.storage	Storage backend definition.
services.postfix-tlspol.configurePostfix	Whether to configure the required settings to use postfix-tlspol in the local Postfix instance.
services.invidious.nginx.enable	Whether to configure nginx as a reverse proxy for Invidious
services.tlsrpt.reportd.settings.fetchers	Comma-separated list of fetcher programs that retrieve collectd data.
services.postfix-tlspol.settings.dns.address	IP and port to your DNS resolver
services.postfix-tlspol.settings.server.address	Path or address/port where postfix-tlspol binds its socket to.
services.tlsrpt.reportd.settings.log_level	Level of log messages to emit.
services.tlsrpt.fetcher.settings.log_level	Level of log messages to emit.
services.coturn.dh-file	Use custom DH TLS key, stored in PEM format in the file.
services.uhub.<name>.enableTLS	Whether to enable TLS support.
services.prometheus.exporters.imap-mailstat.accounts.<name>.starttls	set to true for using STARTTLS to start a TLS connection
services.molly-brown.keyPath	Path to TLS key
services.resolved.settings.Resolve.DNSOverTLS	Whether to use TLS encryption for DNS queries
services.cfssl.mutualTlsCa	Mutual TLS - require clients be signed by this CA.
services.tlsrpt.collectd.settings.log_level	Level of log messages to emit.
services.postfix-tlspol.settings.server.prefetch	Whether to prefetch DNS records when the TTL of a cached record is about to expire.
services.cfssl.mutualTlsCn	Mutual TLS - regex for whitelist of allowed client CNs.
services.skydns.etcd.caCert	Skydns path of TLS certificate authority public key.
services.prometheus.scrapeConfigs..kuma_sd_configs..tls_config	TLS configuration.
services.nginx.sslCiphers	Ciphers to choose from when negotiating TLS handshakes.
services.ncps.cache.redis.useTLS	Use TLS for Redis connection.
services.prometheus.remoteRead.*.tls_config.ca_file	CA certificate to validate API server certificate with.
services.prometheus.scrapeConfigs..http_sd_configs..tls_config	Configures the scrape request's TLS settings.
services.tlsrpt.collectd.settings.socketmode	Permissions on the UNIX socket.
services.prometheus.remoteWrite.*.tls_config.ca_file	CA certificate to validate API server certificate with.
services.ddclient.ssl	Whether to use SSL/TLS to connect to dynamic DNS provider.
services.tlsrpt.collectd.settings.socketname	Path at which the UNIX socket will be created.
services.prometheus.remoteRead.*.tls_config.key_file	Key file for client cert authentication to the server.
services.postfix.enableSubmissions	Whether to enable the `submissions` service configured in master.cf
services.stunnel.enable	Whether to enable the stunnel TLS tunneling service.
services.prometheus.scrapeConfigs..azure_sd_configs..tls_config	TLS configuration.
services.prometheus.scrapeConfigs..uyuni_sd_configs..tls_config	TLS configuration.
services.prometheus.remoteWrite.*.tls_config.key_file	Key file for client cert authentication to the server.
services.postfix.settings.main.smtpd_tls_chain_files	List of paths to the server private keys and certificates. The order of items matters and a private key must always be followed by the corresponding certificate. https://www.postfix.org/postconf.5.html#smtpd_tls_chain_files
services.tlsrpt.reportd.settings.http_script	Call to an HTTPS client, that accepts the URL on the commandline and the request body from stdin.
services.syncplay.certDir	TLS certificates directory to use for encryption
services.prometheus.scrapeConfigs.*.tls_config.ca_file	CA certificate to validate API server certificate with.
services.prometheus.remoteRead.*.tls_config.cert_file	Certificate file for client cert authentication to the server.
services.postfix.settings.main.smtp_tls_CAfile	File containing CA certificates of root CAs trusted to sign either remote SMTP server certificates or intermediate CA certificates
services.kresd.listenTLS	Addresses and ports on which kresd should provide DNS over TLS (see RFC 7858)
services.public-inbox.nntp.key	Path to TLS key to use for connections to public-inbox-nntpd(1).
services.public-inbox.imap.key	Path to TLS key to use for connections to public-inbox-imapd(1).
services.postfix.enableSubmission	Whether to enable the `submission` service configured in master.cf
services.prometheus.remoteWrite.*.tls_config.cert_file	Certificate file for client cert authentication to the server.
services.prometheus.scrapeConfigs..triton_sd_configs..tls_config	TLS configuration.
services.prometheus.scrapeConfigs..linode_sd_configs..tls_config	TLS configuration.
services.prometheus.scrapeConfigs..eureka_sd_configs..tls_config	TLS configuration.
services.prometheus.scrapeConfigs..docker_sd_configs..tls_config	TLS configuration.
services.prometheus.scrapeConfigs.*.tls_config.key_file	Key file for client cert authentication to the server.
services.prometheus.scrapeConfigs..consul_sd_configs..tls_config	Configures the Consul request's TLS settings.
services.public-inbox.imap.cert	Path to TLS certificate to use for connections to public-inbox-imapd(1).
services.public-inbox.nntp.cert	Path to TLS certificate to use for connections to public-inbox-nntpd(1).
services.tlsrpt.reportd.settings.contact_info	Contact information embedded into the reports.
services.infinoted.keyFile	Private key to use for TLS
services.maddy.config	Server configuration, see https://maddy.email for more information
services.portunus.port	Port where the Portunus webserver should listen on
services.prometheus.scrapeConfigs.*.tls_config.cert_file	Certificate file for client cert authentication to the server.
services.prometheus.scrapeConfigs..hetzner_sd_configs..tls_config	TLS configuration.
services.h2o.hosts	The `hosts` config to be merged with the settings
services.davis.nginx.kTLS	Whether to enable kTLS support
services.slskd.nginx.kTLS	Whether to enable kTLS support
services.nginx.sslProtocols	Allowed TLS protocol versions.
services.movim.nginx.kTLS	Whether to enable kTLS support
services.strongswan-swanctl.swanctl.connections.<name>.local.<name>.aaa_id	Server side EAP-Identity to expect in the EAP method
services.httpd.sslProtocols	Allowed SSL/TLS protocol versions.
services.snipe-it.nginx.kTLS	Whether to enable kTLS support
services.nsd.remoteControl.port	Port number for remote control operations (uses TLS over TCP).
services.prometheus.remoteRead.*.tls_config.server_name	ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1
services.tt-rss.email.security	Used to select a secure SMTP connection
services.molly-brown.certPath	Path to TLS certificate
services.sslmate-agent.enable	Whether to enable sslmate-agent, a daemon for managing SSL/TLS certificates on a server.
services.prometheus.remoteWrite.*.tls_config.server_name	ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1
services.cfssl.mutualTlsClientCert	Mutual TLS - client certificate to call remote instance requiring client certs.
services.cfssl.mutualTlsClientKey	Mutual TLS - client key to call remote instance requiring client certs
services.fluidd.nginx.kTLS	Whether to enable kTLS support
services.akkoma.nginx.kTLS	Whether to enable kTLS support
services.gancio.nginx.kTLS	Whether to enable kTLS support
services.monica.nginx.kTLS	Whether to enable kTLS support
services.matomo.nginx.kTLS	Whether to enable kTLS support
services.pgadmin.emailServer.useTLS	Whether to enable TLS for connecting to the SMTP server.
services.prometheus.scrapeConfigs..scaleway_sd_configs..tls_config	TLS configuration.
services.prometheus.scrapeConfigs..marathon_sd_configs..tls_config	TLS configuration.
services.prometheus.scrapeConfigs..puppetdb_sd_configs..tls_config	TLS configuration.
services.postfix-tlspol.settings.server.socket-permissions	Permissions to the UNIX socket, if configured. Due to hardening on the systemd unit the socket can never be created world readable/writable.
security.acme.certs.<name>.ocspMustStaple	Turns on the OCSP Must-Staple TLS extension
services.movim.h2o.settings	Attrset to be transformed into YAML for host config
services.prometheus.scrapeConfigs.*.tls_config.server_name	ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1
services.tlsrpt.reportd.settings.sender_address	Sender address used for reports.
services.fedimintd.<name>.api.url	Public URL of the API address of the reverse proxy/tls terminator
services.fedimintd.<name>.api.bind	Address to bind on for API connections relied by the reverse proxy/tls terminator.
services.fedimintd.<name>.api.port	Port to bind on for API connections relied by the reverse proxy/tls terminator.
services.prometheus.scrapeConfigs..openstack_sd_configs..tls_config	TLS configuration.
services.public-inbox.imap.port	Listening port
services.public-inbox.nntp.port	Listening port
services.h2o.hosts.<name>.settings	Attrset to be transformed into YAML for host config
services.rkvm.server.settings.key	TLS key path. This should be generated with `rkvm-certificate-gen`.
services.syncplay.useACMEHost	If set, use NixOS-generated ACME certificate with the specified name for TLS
virtualisation.podman.networkSocket.enable	Make the Podman and Docker compatibility API available over the network with TLS client certificate authentication
services.fedimintd.<name>.nginx.fqdn	Public domain of the API address of the reverse proxy/tls terminator.
services.coder.wildcardAccessUrl	If you are providing TLS certificates directly to the Coder server, you must use a single certificate for the root and wildcard domains.
services.zitadel.settings.TLS.KeyPath	Path to the TLS certificate private key.
services.zitadel.settings.TLS.CertPath	Path to the TLS certificate.
services.prometheus.scrapeConfigs..kubernetes_sd_configs..tls_config	TLS configuration.
services.tailscale.permitCertUid	Username or user ID of the user allowed to to fetch Tailscale TLS certificates for the node.
services.vsftpd.ssl_sslv2	Only applies if `ssl_enable` is activated
services.vsftpd.ssl_sslv3	Only applies if `ssl_enable` is activated
services.tlsrpt.reportd.settings.sendmail_script	Path to a sendmail-compatible executable for delivery reports.
services.librespeed.domain	If not `null`, this will add an entry to `services.librespeed.servers` and configure librespeed to use TLS.
services.librenms.nginx.kTLS	Whether to enable kTLS support
services.fediwall.nginx.kTLS	Whether to enable kTLS support
services.dolibarr.nginx.kTLS	Whether to enable kTLS support
services.agorakit.nginx.kTLS	Whether to enable kTLS support
services.kanboard.nginx.kTLS	Whether to enable kTLS support
services.mainsail.nginx.kTLS	Whether to enable kTLS support
services.postfix.enableSmtp	Whether to enable the `smtp` service configured in the master.cf
services.pixelfed.nginx.kTLS	Whether to enable kTLS support
services.fedimintd.<name>.api_ws.url	Public URL of the API address of the reverse proxy/tls terminator
security.acme.defaults.ocspMustStaple	Turns on the OCSP Must-Staple TLS extension
services.fedimintd.<name>.api_ws.bind	Address to bind on for API connections relied by the reverse proxy/tls terminator.
services.cassandra.remoteJmx	Cassandra ships with JMX accessible only from localhost
services.komodo-periphery.ssl.enable	Whether to enable SSL/TLS support.
services.fedimintd.<name>.api_ws.port	TCP Port to bind on for API connections relayed by the reverse proxy/tls terminator.
services.radicle.httpd.nginx.kTLS	Whether to enable kTLS support
services.prometheus.scrapeConfigs..dockerswarm_sd_configs..tls_config	TLS configuration.
services.anuko-time-tracker.nginx.kTLS	Whether to enable kTLS support
services.ghostunnel.servers	Server mode ghostunnels (TLS listener -> plain TCP/UNIX target)
services.keycloak.database.useSSL	Whether the database connection should be secured by SSL / TLS
services.nginx.virtualHosts.<name>.kTLS	Whether to enable kTLS support
services.dolibarr.h2o.settings	Attrset to be transformed into YAML for host config
services.coturn.listening-port	TURN listener port for UDP and TCP
services.bookstack.nginx.kTLS	Whether to enable kTLS support
services.biboumi.settings.ca_file	Specifies which file should be used as the list of trusted CA when negotiating a TLS session.
services.prometheus.scrapeConfigs..digitalocean_sd_configs..tls_config	TLS configuration.
services.infinoted.securityPolicy	How strictly to enforce clients connection with TLS.
services.sabnzbd.settings.servers.<name>.ssl	Whether the server supports TLS
services.neo4j.bolt.sslPolicy	Neo4j SSL policy for BOLT traffic
services.jirafeau.nginxConfig.kTLS	Whether to enable kTLS support
services.minio.certificatesDir	The directory where TLS certificates are stored.
services.radicle.httpd.nginx	With this option, you can customize an nginx virtual host which already has sensible defaults for `radicle-httpd`
services.kubernetes.pki.genCfsslAPICerts	Whether to automatically generate cfssl API webserver TLS cert and key, if they don't exist.
services.tlsrpt.reportd.settings.organization_name	Name of the organization sending out the reports.
services.zitadel.settings.TLS.Cert	The TLS certificate, as a base64-encoded string
services.kubernetes.pki.cfsslAPIExtraSANs	Extra x509 Subject Alternative Names to be added to the cfssl API webserver TLS cert.
services.zabbixWeb.nginx.virtualHost.kTLS	Whether to enable kTLS support
services.zitadel.settings.TLS.Key	The TLS certificate private key, as a base64-encoded string
services.nghttpx.backends.*.params.sni	Override the TLS SNI field value
services.jitsi-meet.nginx.enable	Whether to enable nginx virtual host that will serve the javascript application and act as a proxy for the XMPP server
services.firezone.server.smtp.implicitTls	Whether to use implicit TLS instead of STARTTLS (usually port 465)
services.parsedmarc.settings.smtp.ssl	Use an encrypted SSL/TLS connection.
services.parsedmarc.settings.imap.ssl	Use an encrypted SSL/TLS connection.
services.discourse.mail.outgoing.forceTLS	Force implicit TLS as per RFC 8314 3.3.
services.prometheus.scrapeConfigs..http_sd_configs..tls_config.ca_file	CA certificate to validate API server certificate with.
services.prometheus.scrapeConfigs..kuma_sd_configs..tls_config.ca_file	CA certificate to validate API server certificate with.
services.keycloak.database.caCert	The SSL / TLS CA certificate that verifies the identity of the database server
services.prometheus.scrapeConfigs..http_sd_configs..tls_config.key_file	Key file for client cert authentication to the server.
services.prometheus.scrapeConfigs..kuma_sd_configs..tls_config.key_file	Key file for client cert authentication to the server.
services.keycloak.sslCertificate	The path to a PEM formatted certificate to use for TLS/SSL connections.
services.firezone.server.api.externalUrl	The external URL under which you will serve the api
services.firezone.server.web.externalUrl	The external URL under which you will serve the web interface
services.prometheus.scrapeConfigs..http_sd_configs..tls_config.cert_file	Certificate file for client cert authentication to the server.
services.prometheus.scrapeConfigs..kuma_sd_configs..tls_config.cert_file	Certificate file for client cert authentication to the server.
services.fedimintd.<name>.nginx.config.kTLS	Whether to enable kTLS support
services.keycloak.sslCertificateKey	The path to a PEM formatted private key to use for TLS/SSL connections.
services.nginx.recommendedTlsSettings	Enable recommended TLS settings.
services.prometheus.scrapeConfigs..azure_sd_configs..tls_config.ca_file	CA certificate to validate API server certificate with.
services.prometheus.scrapeConfigs..uyuni_sd_configs..tls_config.ca_file	CA certificate to validate API server certificate with.
services.trafficserver.sni	Configure aspects of TLS connection handling for both inbound and outbound connections
services.infinoted.certificateFile	Server certificate to use for TLS
services.prometheus.scrapeConfigs..azure_sd_configs..tls_config.key_file	Key file for client cert authentication to the server.
services.prometheus.scrapeConfigs..uyuni_sd_configs..tls_config.key_file	Key file for client cert authentication to the server.
services.documize.forcesslport	Redirect given http port number to TLS.
services.prometheus.exporters.lnd.lndTlsPath	Path to lnd TLS certificate.
services.sftpgo.settings.smtp.encryption	Encryption scheme: `0`: No encryption `1`: TLS `2`: STARTTLS
services.prometheus.scrapeConfigs..uyuni_sd_configs..tls_config.cert_file	Certificate file for client cert authentication to the server.
services.prometheus.scrapeConfigs..azure_sd_configs..tls_config.cert_file	Certificate file for client cert authentication to the server.
services.jitsi-meet.prosody.lockdown	Whether to disable Prosody features not needed by Jitsi Meet
services.matrix-conduit.settings.global.address	Address to listen on for connections by the reverse proxy/tls terminator.
services.kubernetes.apiserver.extraSANs	Extra x509 Subject Alternative Names to be added to the kubernetes apiserver tls cert.
services.prometheus.scrapeConfigs..docker_sd_configs..tls_config.ca_file	CA certificate to validate API server certificate with.
services.prometheus.scrapeConfigs..eureka_sd_configs..tls_config.ca_file	CA certificate to validate API server certificate with.
services.prometheus.scrapeConfigs..triton_sd_configs..tls_config.ca_file	CA certificate to validate API server certificate with.
services.prometheus.scrapeConfigs..linode_sd_configs..tls_config.ca_file	CA certificate to validate API server certificate with.
services.prometheus.scrapeConfigs..consul_sd_configs..tls_config.ca_file	CA certificate to validate API server certificate with.
services.firefox-syncserver.singleNode.enableTLS	Whether to enable automatic TLS setup.
services.sabnzbd.settings.misc.https_key	Path to the TLS key for the web UI
services.prometheus.scrapeConfigs..kuma_sd_configs..tls_config.server_name	ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1
services.prometheus.scrapeConfigs..http_sd_configs..tls_config.server_name	ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1
services.infinoted.certificateChain	Chain of CA-certificates to which our `certificateFile` is relative
services.prometheus.scrapeConfigs..triton_sd_configs..tls_config.key_file	Key file for client cert authentication to the server.
services.prometheus.scrapeConfigs..linode_sd_configs..tls_config.key_file	Key file for client cert authentication to the server.
services.prometheus.scrapeConfigs..eureka_sd_configs..tls_config.key_file	Key file for client cert authentication to the server.
services.prometheus.scrapeConfigs..consul_sd_configs..tls_config.key_file	Key file for client cert authentication to the server.
services.prometheus.scrapeConfigs..docker_sd_configs..tls_config.key_file	Key file for client cert authentication to the server.
services.prometheus.scrapeConfigs..eureka_sd_configs..tls_config.cert_file	Certificate file for client cert authentication to the server.
services.prometheus.scrapeConfigs..consul_sd_configs..tls_config.cert_file	Certificate file for client cert authentication to the server.
services.prometheus.scrapeConfigs..triton_sd_configs..tls_config.cert_file	Certificate file for client cert authentication to the server.
services.prometheus.scrapeConfigs..linode_sd_configs..tls_config.cert_file	Certificate file for client cert authentication to the server.
services.prometheus.scrapeConfigs..docker_sd_configs..tls_config.cert_file	Certificate file for client cert authentication to the server.
services.prometheus.scrapeConfigs..azure_sd_configs..tls_config.server_name	ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1
services.prometheus.scrapeConfigs..uyuni_sd_configs..tls_config.server_name	ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1
services.limesurvey.nginx.virtualHost.kTLS	Whether to enable kTLS support
services.prometheus.scrapeConfigs..hetzner_sd_configs..tls_config.ca_file	CA certificate to validate API server certificate with.
services.sabnzbd.settings.misc.https_cert	Path to the TLS certificate for the web UI
services.rkvm.server.settings.certificate	TLS certificate path. This should be generated with `rkvm-certificate-gen`.
services.rkvm.client.settings.certificate	TLS ceritficate path. This should be generated with `rkvm-certificate-gen`.
services.prometheus.remoteRead.*.tls_config.insecure_skip_verify	Disable validation of the server certificate.
services.prometheus.scrapeConfigs..hetzner_sd_configs..tls_config.key_file	Key file for client cert authentication to the server.
services.prometheus.remoteWrite.*.tls_config.insecure_skip_verify	Disable validation of the server certificate.
services.prometheus.exporters.ipmi.webConfigFile	Path to configuration file that can enable TLS or authentication.
services.technitium-dns-server.firewallTCPPorts	List of TCP ports to open in firewall
services.opencloud.environment	Extra environment variables to set for the service
services.prometheus.scrapeConfigs..hetzner_sd_configs..tls_config.cert_file	Certificate file for client cert authentication to the server.
services.bitwarden-directory-connector-cli.ldap.ssl	Whether to use TLS.
services.prometheus.scrapeConfigs..consul_sd_configs..tls_config.server_name	ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1
services.prometheus.scrapeConfigs..linode_sd_configs..tls_config.server_name	ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1
services.prometheus.scrapeConfigs..eureka_sd_configs..tls_config.server_name	ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1
services.prometheus.scrapeConfigs..docker_sd_configs..tls_config.server_name	ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1
services.prometheus.scrapeConfigs..triton_sd_configs..tls_config.server_name	ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1
services.matrix-tuwunel.settings.global.address	Addresses (IPv4 or IPv6) to listen on for connections by the reverse proxy/tls terminator
services.prometheus.scrapeConfigs.*.tls_config.insecure_skip_verify	Disable validation of the server certificate.
services.prometheus.scrapeConfigs..puppetdb_sd_configs..tls_config.ca_file	CA certificate to validate API server certificate with.
services.prometheus.scrapeConfigs..scaleway_sd_configs..tls_config.ca_file	CA certificate to validate API server certificate with.
services.prometheus.scrapeConfigs..marathon_sd_configs..tls_config.ca_file	CA certificate to validate API server certificate with.
services.prometheus.scrapeConfigs..puppetdb_sd_configs..tls_config.key_file	Key file for client cert authentication to the server.
services.prometheus.scrapeConfigs..scaleway_sd_configs..tls_config.key_file	Key file for client cert authentication to the server.
services.prometheus.scrapeConfigs..marathon_sd_configs..tls_config.key_file	Key file for client cert authentication to the server.
services.mosquitto.listeners.*.omitPasswordAuth	Omits password checking, allowing anyone to log in with any user name unless other mandatory authentication methods (eg TLS client certificates) are configured.
services.misskey.reverseProxy.webserver.nginx.kTLS	Whether to enable kTLS support
virtualisation.podman.networkSocket.port	TCP port number for receiving TLS connections.
services.prometheus.scrapeConfigs..puppetdb_sd_configs..tls_config.cert_file	Certificate file for client cert authentication to the server.
services.prometheus.scrapeConfigs..scaleway_sd_configs..tls_config.cert_file	Certificate file for client cert authentication to the server.
services.prometheus.scrapeConfigs..hetzner_sd_configs..tls_config.server_name	ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1
services.prometheus.scrapeConfigs..marathon_sd_configs..tls_config.cert_file	Certificate file for client cert authentication to the server.
services.matrix-synapse.settings.listeners.*.path	Unix domain socket path to bind this listener to. This option is incompatible with `bind_addresses`, `port`, `tls` and also does not support the `metrics` and `manhole` listener `type`.
services.prometheus.scrapeConfigs..openstack_sd_configs..tls_config.ca_file	CA certificate to validate API server certificate with.
services.prometheus.scrapeConfigs..openstack_sd_configs..tls_config.key_file	Key file for client cert authentication to the server.
virtualisation.podman.networkSocket.server	Choice of TLS proxy server.
services.prometheus.scrapeConfigs..scaleway_sd_configs..tls_config.server_name	ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1
services.prometheus.scrapeConfigs..puppetdb_sd_configs..tls_config.server_name	ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1
services.prometheus.scrapeConfigs..marathon_sd_configs..tls_config.server_name	ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1
services.prometheus.scrapeConfigs..openstack_sd_configs..tls_config.cert_file	Certificate file for client cert authentication to the server.
services.yggdrasil-jumper.appendListenAddresses	Append Yggdrasil router configuration with listeners on loopback addresses (`127.0.0.1`) and preselected ports to support peering using client-server protocols like `quic` and `tls`
services.prometheus.scrapeConfigs..kubernetes_sd_configs..tls_config.ca_file	CA certificate to validate API server certificate with.
services.sabnzbd.settings.servers.<name>.ssl_verify	Level of TLS verification
services.prometheus.scrapeConfigs..kubernetes_sd_configs..tls_config.key_file	Key file for client cert authentication to the server.
services.cloudflared.tunnels.<name>.originRequest.noTLSVerify	Disables TLS verification of the certificate presented by your origin
services.prometheus.scrapeConfigs..openstack_sd_configs..tls_config.server_name	ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1
services.prometheus.exporters.pgbouncer.webConfigFile	Path to configuration file that can enable TLS or authentication.
services.prometheus.scrapeConfigs..kubernetes_sd_configs..tls_config.cert_file	Certificate file for client cert authentication to the server.
services.prometheus.scrapeConfigs..dockerswarm_sd_configs..tls_config.ca_file	CA certificate to validate API server certificate with.
services.prometheus.scrapeConfigs..dockerswarm_sd_configs..tls_config.key_file	Key file for client cert authentication to the server.
virtualisation.podman.networkSocket.listenAddress	Interface address for receiving TLS connections.
services.changedetection-io.behindProxy	Enable this option when changedetection-io runs behind a reverse proxy, so that it trusts X-* headers
services.prometheus.scrapeConfigs..kubernetes_sd_configs..tls_config.server_name	ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1
services.prometheus.scrapeConfigs..dockerswarm_sd_configs..tls_config.cert_file	Certificate file for client cert authentication to the server.
services.prometheus.scrapeConfigs..digitalocean_sd_configs..tls_config.ca_file	CA certificate to validate API server certificate with.
services.prometheus.scrapeConfigs..digitalocean_sd_configs..tls_config.key_file	Key file for client cert authentication to the server.
services.parsedmarc.settings.elasticsearch.ssl	Whether to use an encrypted SSL/TLS connection.
services.prometheus.scrapeConfigs..dockerswarm_sd_configs..tls_config.server_name	ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1
services.prometheus.scrapeConfigs..digitalocean_sd_configs..tls_config.cert_file	Certificate file for client cert authentication to the server.
services.cloudflared.tunnels.<name>.originRequest.connectTimeout	Timeout for establishing a new TCP connection to your origin server
services.matrix-continuwuity.settings.global.address	Addresses (IPv4 or IPv6) to listen on for connections by the reverse proxy/tls terminator
services.prometheus.scrapeConfigs..kuma_sd_configs..tls_config.insecure_skip_verify	Disable validation of the server certificate.
services.prometheus.scrapeConfigs..http_sd_configs..tls_config.insecure_skip_verify	Disable validation of the server certificate.
services.kubernetes.apiserver.serviceAccountKeyFile	File containing PEM-encoded x509 RSA or ECDSA private or public keys, used to verify ServiceAccount tokens
services.prometheus.scrapeConfigs..uyuni_sd_configs..tls_config.insecure_skip_verify	Disable validation of the server certificate.
services.prometheus.scrapeConfigs..azure_sd_configs..tls_config.insecure_skip_verify	Disable validation of the server certificate.
services.prometheus.scrapeConfigs..digitalocean_sd_configs..tls_config.server_name	ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1
services.prometheus.scrapeConfigs..linode_sd_configs..tls_config.insecure_skip_verify	Disable validation of the server certificate.
services.prometheus.scrapeConfigs..docker_sd_configs..tls_config.insecure_skip_verify	Disable validation of the server certificate.
services.prometheus.scrapeConfigs..eureka_sd_configs..tls_config.insecure_skip_verify	Disable validation of the server certificate.
services.prometheus.scrapeConfigs..triton_sd_configs..tls_config.insecure_skip_verify	Disable validation of the server certificate.
services.prometheus.scrapeConfigs..consul_sd_configs..tls_config.insecure_skip_verify	Disable validation of the server certificate.
services.biboumi.settings.policy_directory	A directory that should contain the policy files, used to customize Botan’s behaviour when negotiating the TLS connections with the IRC servers.
services.prometheus.scrapeConfigs..hetzner_sd_configs..tls_config.insecure_skip_verify	Disable validation of the server certificate.
services.nextcloud.settings.mail_smtpsecure	This depends on `mail_smtpmode`
services.parsedmarc.settings.elasticsearch.cert_path	The path to a TLS certificate bundle used to verify the server's certificate.
services.prometheus.scrapeConfigs..scaleway_sd_configs..tls_config.insecure_skip_verify	Disable validation of the server certificate.
services.prometheus.scrapeConfigs..marathon_sd_configs..tls_config.insecure_skip_verify	Disable validation of the server certificate.
services.prometheus.scrapeConfigs..puppetdb_sd_configs..tls_config.insecure_skip_verify	Disable validation of the server certificate.
services.prometheus.exporters.imap-mailstat.accounts.<name>.serverport	imap port number (at the moment only tls connection is supported)
services.neo4j.directories.certificates	Directory for storing certificates to be used by Neo4j for TLS connections
services.prometheus.scrapeConfigs..openstack_sd_configs..tls_config.insecure_skip_verify	Disable validation of the server certificate.
services.matrix-synapse.workers.<name>.worker_listeners.*.path	Unix domain socket path to bind this listener to. This option is incompatible with `bind_addresses`, `port`, `tls` and also does not support the `metrics` and `manhole` listener `type`.
services.prometheus.scrapeConfigs..kubernetes_sd_configs..tls_config.insecure_skip_verify	Disable validation of the server certificate.
services.prometheus.scrapeConfigs..dockerswarm_sd_configs..tls_config.insecure_skip_verify	Disable validation of the server certificate.
services.prometheus.scrapeConfigs..digitalocean_sd_configs..tls_config.insecure_skip_verify	Disable validation of the server certificate.
services.strongswan-swanctl.swanctl.connections.<name>.remote.<name>.auth	Authentication to expect from remote
services.agate.onlyTls_1_3	Only use TLSv1.3 (default also allows TLSv1.2).
services.transfer-sh.secretFile	Path to file containing environment variables
security.pam.dp9ik.enable	Whether to enable the dp9ik pam module provided by tlsclient