Whether to enable Instructs the hook to mount the symlink targets as well, when any of the paths contain symlinks

Station MAC address -based authentication

Whether to allow editing the boot entries before booting them

Which user or group the specified command is allowed to run as

The port Invidious should listen on

Use chfn SUID to allow non-root users to change their account GECOS information.

On service or configuration errors that prevent Duo authentication, fail "safe" (allow access) or "secure" (deny access)

Controls how systemd will interpret the root FS in initrd

Additional prosody configuration

The generated file is processed by envsubst to allow secrets to be passed securely via environment variables.

Allow users to have a roster

Under which user/group the specified command is allowed to run

Allow the cloud-init service to configure network interfaces through systemd-networkd.

The restriction flags to be set on source

Under which user/group the specified command is allowed to run

Allow these IPs and TSIG to transfer zones, addr TSIG|NOKEY|BLOCKED address range 192.0.2.0/24, 1.2.3.4&255.255.0.0, 3.0.2.20-3.0.2.40

Whether to allow editing the kernel command-line before boot

Enable acpilight

Allow leaving config.boot.initrd.network.ssh.hostKeys empty, to deploy ssh host keys out of band.

The TTL ("Time to Live") value to set for your DNS records

List of additional portals to add to path

Ports to allow in the zone.

Salt to allow room operator passwords generated by this server instance to still work when the server is restarted

Allow N days for the first retry

Allow a client to resume a disconnected session, and prevent message loss

Whether or not to open the minimum required ports on the firewall

Allow changes made on the web interface to persist between service restarts.

Allow the specified IPs to act as a proxy

Whether to allow the remote address and port to change when properly encrypted packets are received.

Allow binding to non local addresses.

Allow chronyd to step the system clock if the error is larger than the specified threshold.

Whether to ignore the cpuid check to allow running on unsupported platforms

Indicates whether to allow the contents of the dataDir directory to be changed by the user at run-time

List of IPs of relays that this node should allow traffic from.

This tells pgmanage to only allow users in a certain PostgreSQL group to login to pgmanage

Whether to enable local discovery for the Kubo daemon

ACL rule

The following authentication modes are available: Open -- Accept connections from anyone, use NickServ for user authentication

Whether to enable the APC UPS daemon. apcupsd monitors your UPS and permits orderly shutdown of your computer in the event of a power failure

Allow GDM to run on Wayland instead of Xserver.

Whether to enable hardware accelerated graphics drivers

List of UIDs of all users for which this application is allowed location info access, Defaults to an empty string to allow it for all users.

Allow rooms to be moderated

This tells pgmanage whether or not to only allow super users to login

Enable Git daemon, which allows public hosting of git repositories without any access controls

Determines how client certificates are validated

Whether to configure permissions to allow integration with Postfix.

Source ports to allow in the zone.

Allow users to register on this server using a client and change passwords

Allow all users to access the FUSE mount points

Allow insecure connections to the mongo database.

Enables reverse proxy support

Whether to allow writable on-line configuration

The address (including host and port) under which we can access the Ollama backend server. !Note that if the the UI service is running under a domain "https://ui.example.org", the Ollama backend service must allow "CORS" requests from this domain, e.g. by adding "services.ollama.environment

Services to allow in the zone.

Hostname to allow or deny.

Allow users to block communications with other users

Whether to enable Sets PRESSURE_VESSEL_IMPORT_OPENXR_1_RUNTIMES system-wide to allow Steam to automatically discover the WiVRn server

Additional nftables rules to be appended to the input-allow chain

Whether to automatically allow VRRP and AH packets in the firewall.

Configure freetds database entries

Allow only a defined list of nodes to connect.

Allow changes to the program config made by the program to persist between restarts

By default pam-u2f module sets the origin to pam://$HOSTNAME

Whether to allow powerups such as the ninja.

Whether to allow users in the 'wireshark' group to capture USB traffic

Allow new user registrations with the atuin server.

Whether to allow users in the 'wireshark' group to capture network traffic

Whether to enable team damage; whether to allow team mates to inflict damage on one another.

Protocols to allow in the zone.

Allow GDM to run on Wayland instead of Xserver.

Defines the mapping from system users to database users

List of device paths to allow access to for SMART monitoring

Set to true for unauthenticated emergency access, and false or null for no emergency access

Allow the service to create and use its own config file inside the dataDir as configured by services.mediatomb.dataDir

Additional nftables rules to be appended to the forward-allow chain

Don't allow users to connect in non-secure mode (without random padding).

Address to listen on (use 0.0.0.0 to allow access from any address).

Enable tracking of the RTC offset to the system clock and automatic trimming

Environment files that allow passing secret configuration values

How to treat USB devices that don't match any rule in the policy

If enabled, allow principal names containing (.) dots

Whether to allow X11 connections to be forwarded.

Configuration for UWSM-managed Wayland Compositors

How to treat USB devices that are already connected when the daemon starts

Allow books to be uploaded via Calibre-Web UI.

If enabled srun will accept the option "--x11" to allow for X11 forwarding from within an interactive session or a batch job

Reduce storage requirements by enabling pruning (deleting) of old blocks

Allow open registration without secondary verification (reCAPTCHA).

Configuration for WiVRn

If enabled, pam_gnupg will attempt to automatically unlock the user's GPG keys with the login password via gpg-agent

IP address on which RabbitMQ will listen for AMQP connections

Whether to make configuration.yaml writable

Whether to allow invalid certificates when provisioning the target instance

Deactivates analytics

Maximum number of concurrent certificate generation or renewal jobs

Additional shell commands executed as part of the firewall initialisation script

Set this to yes to allow symlinks that point outside user-defined media_dir.

A list of device paths to hardware acceleration devices that Plex should have access to

Multiaddr or array of multiaddrs describing the address to serve the local HTTP API on

Allow changes made on the AdGuard Home web interface to persist between service restarts.