The action to be executed when the pattern is matched

If specified, Duo authentication is required only for users whose primary group or supplementary group list matches one of the space-separated pattern lists

Configuration options for the Default Terminal Execution Specification

"ignoreIP" can be a list of IP addresses, CIDR masks or DNS hosts

Iptables filters that if matched will get the packet off of redsocks.

A list of regular expressions that are matched against the reported client id (such as task 2.3.0)

The APP_URL used by firefly-iii internally

List of ID matchers to export.

If enabled, the agent attempts to install and then load an RDMA kernel driver that matches the version of the firmware on the underlying hardware.

Shared secret token to authenticate the client

Shared secret token to authenticate the client

The fingerprint of the endorsement key

A list of regular expressions that are matched against the reported client id (such as task 2.3.0)

Packages to which no replacements should be applied

Retention period for the GC roots matched by this policy.

External filter program to further filter GC roots matched by this policy.

List of channel matchers to export.

Disable the DHCP client for any interface whose name matches any of the shell glob patterns in this list

Catch-all service if no ingress matches

System-wide default emoji font(s)

By default, all networks will get same priority group (0)

Path to the private key to the matching certificate signing request.

The subnets which this tinc daemon will serve

Disable the DHCP client for any interface whose name matches any of the shell glob patterns in this list

Conditions to make outbound packets go through this redsocks instance

Only write log for matching AREAs (all|main|network|bus|device|update|other) below or equal to LEVEL (none|error|notice|info|debug)

Only include .dtb files matching glob expression.

Only write log for matching AREAs (all|main|network|bus|device|update|other) below or equal to LEVEL (none|error|notice|info|debug)

Only write log for matching AREAs (all|main|network|bus|device|update|other) below or equal to LEVEL (none|error|notice|info|debug)

Sets the default UI theme. system matches the user's system theme.

Whether to enable dsearch, a fast filesystem search service with fuzzy matching.

Only write log for matching AREAs (all|main|network|bus|device|update|other) below or equal to LEVEL (none|error|notice|info|debug)

A regexp matching the full paths of cgroups whose data shouldn't be collected

Game will be published on the official Factorio matching server.

Only write log for matching AREAs (all|main|network|bus|device|update|other) below or equal to LEVEL (none|error|notice|info|debug)

Only write log for matching AREAs (all|main|network|bus|device|update|other) below or equal to LEVEL (none|error|notice|info|debug)

Regular expression against which the extracted value is matched

Only write log for matching AREAs (all|main|network|bus|device|update|other) below or equal to LEVEL (none|error|notice|info|debug)

List of IP (v4 or v6) addresses with CIDR masks from which this peer is allowed to send incoming traffic and to which outgoing traffic for this peer is directed

Skip authentication for requests matching any of these regular expressions.

Literal DTS contents, overlay is applied to each .dtb file matching "compatible" of the overlay.

Path to .dts overlay file, overlay is applied to each .dtb file matching "compatible" of the overlay.

Only apply to .dtb files matching glob expression.

List of IP (v4 or v6) addresses with CIDR masks from which this peer is allowed to send incoming traffic and to which outgoing traffic for this peer is directed

A regexp pattern matching the header

Path to the directory Traefik should watch for configuration files.

The source labels select values from existing labels

Paths to be searched for matching data

Default block I/O scheduler

Installing a public key allows firmware signed with a matching private key to be recognized as trusted, which may require less authentication to install than for untrusted files

The MODE determines which part of the NUT is to be started, and which configuration files must be modified

File containing x509 private key matching tlsCertFile.

Exclude files and directories matching these patterns.

Regular expression against which the extracted value is matched

Replacement value against which a regex replace is performed if the regular expression matches

Prune a repository by deleting all archives not matching any of the specified retention options

A mask to be ANDed with the byte sequence of the file before matching

For each user matching one of comma-separated glob patterns, enable TTY auditing

Include only files and directories matching these patterns (the empty list includes everything)

Whether interactive shells should show which Nix package (if any) provides a missing command

sysfs attributes to be set as soon as they become available

Exclude paths matching any of the given patterns

Regular expression against which the extracted value is matched

For each user matching one of comma-separated glob patterns, disable TTY auditing

Pick CSV config files matching initial scan ("none" or empty for no initial scan message, "full" for full scan, or a single hex address to scan, default is to send a broadcast ident message)

The source labels select values from existing labels

Which pinentry package to use

If specified, public-inbox-watch(1) will only process mail containing a matching header.

List of local traffic selectors to include in CHILD_SA

File containing the password for the mpd daemon

The source labels select values from existing labels

This setting configures the name of a mailbox for which administrator scripts are configured

List files matching a pattern to include

List files matching a pattern to include

Replacement value against which a regex replace is performed if the regular expression matches

Default block I/O scheduler for rotational drives (e.g. hard disks)

Comma-separated list of authorized principals to permit; if the user presents a certificate with one of these principals, then they will be authorized

Path to a list of principals; if the user presents a certificate with one of these principals, then they will be authorized

The LightDM greeter to login via

Optional list of URL matches that the URL preview spider is denied from accessing.

Replacement value against which a regex replace is performed if the regular expression matches

Authentication to perform locally.

• The default pubkey uses public key authentication using a private key associated to a usable certificate.
• psk uses pre-shared key authentication.
• The IKEv1 specific xauth is used for XAuth or Hybrid authentication,
• while the IKEv2 specific eap keyword defines EAP authentication.
• For xauth, a specific backend name may be appended, separated by a dash

Drive(s) to get temperature from

Can also use command substitution to automatically grab all matching drives; such as all scsi (sas) drives

Products with the given vendor matching this string are blacklisted

Action to perform based on regex matching

Sets allowed passwords for WPA3-SAE

Action to perform for this CHILD_SA on DPD timeout

Sets the password(s) for WPA-PSK

Action to perform based on regex matching

Action to perform after loading the configuration.

• The default of none loads the connection only, which then can be manually initiated or used as a responder configuration.
• The value trap installs a trap policy, which triggers the tunnel as soon as matching traffic has been detected.
• The value start initiates the connection actively.
• Since version 5.9.6 two modes above can be combined with trap|start, to immediately initiate a connection for which trap policies have been installed

Action to perform based on regex matching

Optional label and field selectors to limit the discovery process to a subset of available resources