If enabled, pam_gnome_keyring will attempt to automatically unlock the user's default Gnome keyring upon login

A list of host interfaces to bind to for this virtual host.

A script that must run before starting the backup process.

A script that must run after finishing the backup process.

(Path of) Script command to execute followed by args, i.e. cmd [args]...

OpenFlow rules to insert into the Open vSwitch

Select executor, eg. shell, docker, etc

A list of routing policy rules sections to be added to the unit

Determines the platform faster-whisper is run on

Interfaces to bind.

The name of the organization responsible for the X.509 certificate's /O name.

The hostname to use when configuring Postfix

An extra list of directories that is bound to the container.

Whether to follow all symlinks in archive trees.

If set the URL specified in bitcoin.rpc.url will get the content of this file added as an URL password, so http://user@example.com will turn into http://user:SOMESECRET@example.com

The path to the public key file for the host

Path to directory of X.509 certificates in PEM format for trusted parties

Path to an EnvironmentFile for the cert's service containing any required and optional environment variables for your selected dnsProvider

Stream URL

Whether to copy the DF bit to the outer IPv4 header in tunnel mode

Connect to particular port at destination.

A host of an existing Let's Encrypt certificate to use

Location of the blockbook configuration file.

Plain token to register at the configured Gitea/Forgejo instance.

Run yes | vdirsyncer discover prior to vdirsyncer sync

FastCGI parameters to override

FastCGI parameters to override

FastCGI parameters to override

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

Adds a return directive, for e.g. redirections.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

Path to server SSL chain file.

Additional names of virtual hosts served by this virtual host configuration.

Whether to enable 4-address mode with type managed.

Services to include for the service.

Listen addresses and ports for this virtual host.

The blockbook package to use.

The byte offset of the magic number used for recognition.

This will contain the contents of cups-pdf.conf for this instance, derived from settings

Whether this is a public client (enforces PKCE, doesn't use a basic secret)

Adds a return directive, for e.g. redirections.

Whether to ask Let's Encrypt to sign a certificate for this vhost

Firewall rules for outbound traffic.

vmalert configuration, passed via command line flags

Command line arguments to add when executing wpa_supplicant.

If this attribute is given with non-zero length, it will set the password identifier for this entry

Type of token to use for runner registration

Adds try_files directive.

Whether to recursively snapshot dataset children

Each item in this array specifies an option in the [WireGuardPeer] section of the unit

Additional arguments for borg compact

The TCP address or UNIX socket path to listen on.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

The interface the macvlan will transmit packets through.

Free format description of this interface.

Extra command line options to pass to bitcoind

Whether to enable this activity check.

Seconds after which script is considered to have failed.

Whether to enable masquerading in the zone.

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Bind-mount a volume and create it if it doesn't exist prior to mounting.

Defines whether the timeline cleanup algorithm should be run for the config.

Level of verbosity for logs.

FastCGI parameters to override

Authorized password to the opposite end of the tunnel.

Authorized password to the opposite end of the tunnel.

A list of DHCPServerStaticLease sections to be added to the unit

Limits for timeline cleanup.

Limits for timeline cleanup.

Limits for timeline cleanup.

Remote endpoints for the bridge.

This address will be used for zone-transfer requests if configured as a secondary server or notifications in case of a primary server

Whether to enable this angrr policy.

See torrc manual.

Sets the password for WPA-PSK

Toggles lego DNS propagation check, which is used alongside DNS-01 challenge to ensure the DNS entries required are available.

Whether to install IPsec policies or not

Whether to enable this consul-template instance.

Proxy to use to connect to the wstunnel server (USER:PASS@HOST:PORT).

Network name to connect to

The theme to display.

Retention period for the GC roots in this profile.

These lines go to the end of the location verbatim.

Address or CIDR subnets

StrongSwan default: []

These lines go to the end of the location verbatim.

These lines go to httpd.conf verbatim

Create an individual listening socket

SFTP private key file

Primary username

Maps kanidm groups to returned oauth scopes

Declaratively define NetworkManager profiles

Default sample format.