The redirect URL of the service

Whether to copy the DF bit to the outer IPv4 header in tunnel mode

Address or CIDR subnets

StrongSwan default: []

Address or CIDR subnets

StrongSwan default: []

Adds a return directive, for e.g. redirections.

Custom headers to send in the upgrade request

The url endpoint where the scrobble API is listening.

The mandatory base directory for cryptographic objects of this policy

Null if no special use flag is set

The options to use for this LUKS device in YubiKey-PBA

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

If set, all the required runtime store paths for this service are bind-mounted into a tmpfs-based chroot(2).

Local address (and optionally device) to bind to using the given port.

Authentication to perform locally.

• The default pubkey uses public key authentication using a private key associated to a usable certificate.
• psk uses pre-shared key authentication.
• The IKEv1 specific xauth is used for XAuth or Hybrid authentication,
• while the IKEv2 specific eap keyword defines EAP authentication.
• For xauth, a specific backend name may be appended, separated by a dash

Client-server API URL

The systemd unit (a service or a target) for other services to depend on if they need to be started after matrix-synapse

Whether to enable this wake-up check.

The consul-template package to use.

Path to server SSL certificate.

Whether to enable keys to run shell commands.

Each attribute in this set specifies an option in the [Timer] section of the unit

Shell commands executed on specified operational states.

Whether to run in snapshot only mode

Whether this lighthouse node should serve DNS.

List of roles for this stream

All gateway groups (sites) to provision

An attribute set of Anubis instances

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

The absolute path to the program to be wrapped.

Include/exclude paths matching the given patterns

Adds additional claims (and values) based on which kanidm groups an authenticating party belongs to

Description of how to identify the filesystem to be duplicated by this instance of bees

A host of an existing Let's Encrypt certificate to use

All resources to provision

Optional description for the API token

Internal http server binding [address]:port.

Seconds between script invocations.

Limits for timeline cleanup.

It is recommended you keep your secrets separate from the configuration

Specify the local database filename to store persistent data

These lines go to the end of the location verbatim.

The language used to to parse words and sentences.

Interface and port to listen on to solve HTTP challenges in the form [INTERFACE]:PORT

Permissions granted for the services.syncoid.user user for local target datasets

Listen addresses for this virtual host

If this attribute is given with non-zero length, it will set the password identifier for this entry

Basic Auth protection for a vhost

Additional policy settings merged into the policy file

Server name to be used for this virtual host

Enable running shellcheck on the generated scripts for this unit

Redis username for authentication (for Redis ACL).

Type of this worker

An IP address or a network IP address with a mask for IPv4 or IPv6

Sets the password for WPA-PSK

Extra configuration append to unit

Peers to connect initially

Ingress rules

Catch-all service if no ingress matches

Port of the remote MQTT broker.

Whether to ensure that this oauth2 resource server is present or absent.

Opens UDP port in firewall for fedimintd's API Iroh endpoint

Configure unit start rate limiting

Configure unit start rate limiting

Extra command-line options passed to the daemon

The title of the boot menu entry.

Name that SLURM uses to refer to a node (or base partition for BlueGene systems)

Reduce memory consumption by a factor of 2 beyond what lowmem does, at the cost of significantly slowing down the archiving process.

The address of the remote endpoint to forward traffic over.

Number of processes to prefork.

Whether to install IPsec policies or not

Path to an environment file, containing the TOKEN environment variable, that holds a token to register at the configured Gitea/Forgejo instance.

spool directory

Domain under which ZeroTier records will be available.

config.yaml configuration as a Nix attribute set

Whether to enable this plugin

URL of the host, without https prefix

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Enable running shellcheck on the generated scripts for this unit

Environment for the netbird service, used to pass configuration options.

Environment for the netbird service, used to pass configuration options.

Order of this location block in relation to the others in the vhost

IPv4 cidr address of this peer in the virtual network

Turns on the OCSP Must-Staple TLS extension

Adapter command to run.

Extra config for <StorageHints> section.

Extra Environment variables to pass to the fedimintd.

Format the logs are written as.

Your Authelia config.yml as a Nix attribute set

User-visible description for the repository.

Whether to copy the ECN (Explicit Congestion Notification) header field to/from the outer IP header in tunnel mode