Certificate file for client cert authentication to the server.

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

Certificate file for client cert authentication to the server.

An optional list of equality matchers which have to be present in a selector to query the remote read endpoint.

Sets the Authorization header on every remote read request with the bearer token read from the configured file

Whether to enable serving the Nix store as a remote store via SSH.

Sets the Authorization header on every remote write request with the bearer token read from the configured file

List of certificate policy OIDs the peer's certificate must have

ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1

ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1

Whether to enable RustDesk, a remote access and remote control software, allowing maintenance of computers and other devices.

Certificate revocation policy for CRL or OCSP revocation.

• A strict revocation policy fails if no revocation information is available, i.e. the certificate is not known to be unrevoked.
• ifuri fails only if a CRL/OCSP URI is available, but certificate revocation checking fails, i.e. there should be revocation information available, but it could not be obtained.
• The default revocation policy relaxed fails only if a certificate is revoked, i.e. it is explicitly known that it is bad

Maximum number of shards, i.e. amount of concurrency.

Minimum number of shards, i.e. amount of concurrency.

Network hosts that should be probed for remote scanners.

How frequently metric metadata is sent to remote storage.

HTTP password file

Maximum retry delay.

HTTP password file

Initial retry delay

Remote UDP port for IKE communication

List of remote write relabel configurations.

Whether to enable xrdp, the Remote Desktop Protocol server.

Remote address(es) to use for IKE communication

Permissions granted for the services.syncoid.user user for local target datasets

Specifies whether sshd(8) should look up the remote host name, and to check that the resolved host name for the remote IP address maps back to the very same IP address

Enable D-Bus remote control

CAs to trust for remote TLS requests.

List of remote selectors to include in CHILD_SA

When not set to null this option defines the path at which the unbound remote control socket should be created at

The time-to-live of the connection to the remote tunnel endpoint.

Login shell of the remote user

SSH private key file to use to login to the remote system

Whether to enable sendRaw feature which adds the options -w to the zfs send command

Message to display to the remote user before authentication is allowed.

The time-to-live of the connection to the remote tunnel endpoint.

SSH public key allowed to login as user btrbk to run remote backups.

User to use when no root privileges are required

Permissions granted for the services.syncoid.user user for local target datasets

The address of the local endpoint which the remote side should send packets to.

Data directory relative to /var/lib in which to cache remote blocks.

Whether to enable the OpenSSH secure shell daemon, which allows secure remote logins.

The username to log in as on the remote host

This option lists the machines to be used if distributed builds are enabled (see nix.distributedBuilds)

Enable saned network daemon for remote connection to scanners.

saned would be run from scanner user; to allow access to hardware that doesn't have scanner group you should add needed groups to this user.

Configuration for the rclone remote being used for backup

The address of the local endpoint which the remote side should send packets to.

Enable a remote shell server which Neo4j Shell clients can log in to

Whether the configuration file specifies a remote mongo instance

Regular expression against which the extracted value is matched

Arguments to be passed to AutoSSH and retransmitted to SSH process

Optional branch in remote repository

Niceness for local instances of btrbk

Disable validation of the server certificate.

Action to perform based on regex matching

Modulus to take of the hash of the source label values.

Automatically login user on remote or other kind of externally supplied authentication, otherwise redirect to login form as normal

Disable validation of the server certificate.

Maximum time a sample will wait in buffer.

Whether to enable ‘oidentd’, an implementation of the Ident protocol (RFC 1413)

Mutual TLS - client certificate to call remote instance requiring client certs.

Separator placed between concatenated source label values

Mutual TLS - client key to call remote instance requiring client certs

Whether to enable authenticating using a signature performed by the ssh-agent

The time-to-live/hoplimit of the connection to the remote tunnel endpoint.

Maximum number of samples per send.

The name of the column in the log table to which the name of the remote host that initiates the session is stored

Binary cache URL to connect to

User to run the icecream daemon as

Replacement value against which a regex replace is performed if the regular expression matches

The address of the local endpoint which the remote side should send packets to.

Set the expiration time for data in the remote machine information directory in days.

Label to which the resulting value is written in a replace action

Remote public key in hexadecimal form.

If set to true, any remote host can connect to and control this BOINC client (subject to password authentication)

Whether to enable uploading the systemd journal to a remote server.

Whether to enable the Thanos receiver which accept Prometheus remote write API requests and write to local tsdb.

Whether or not to open the minimum required ports on the firewall

Allow the specified IPs to act as a proxy

Remote or local repository to back up to.

Start SSH service during initrd boot

The source labels select values from existing labels

Enable the shairport-sync daemon

The protocol used for communicating with the build machine

Whether to enable the CUPS Remote Printer Discovery (browsed) daemon.

The name of the node which is used as an identifier when communicating with the remote nodes in the mesh

SSH private key file to use to login to the remote system

This directory is used to download fonts from a remote location, e.g. to host google fonts locally.

If set, the calling user's SSH agent is used to authenticate against the keys in the calling user's ~/.ssh/authorized_keys

How often to remove remote media

Configuration for the rclone remote being used for backup

Source ZFS dataset

Repeat interval for syncing the blocks between local and remote view

Makes this policy trust all remote parties

Password to access the remote console

Remote host where snapshots should be sent. lz4 is expected to be installed on this host.

How old remote media needs to be in order to be removed.

Listen on local and forwards traffic from remote.

Whether to add the boot.binfmt.emulatedSystems to nix.settings.extra-platforms

Target ZFS dataset