Database name.

Name of the datasource

Whether to copy the ECN (Explicit Congestion Notification) header field to/from the outer IP header in tunnel mode

Additional arguments for borg compact

Whether to enable this activity check.

Seconds after which script is considered to have failed.

Whether to enable masquerading in the zone.

Whether to recursively snapshot dataset children

Each item in this array specifies an option in the [WireGuardPeer] section of the unit

Whether to enable HTTP 2

Adds DirectoryIndex directive

Alias directory for requests

All resources to provision

Bind-mount a volume and create it if it doesn't exist prior to mounting.

Defines whether the timeline cleanup algorithm should be run for the config.

A list of files each containing one OpenSSH public key that should be added to the user's authorized keys

Declarative location config

Alias directory for requests.

Adds index directive.

A list of DHCPServerStaticLease sections to be added to the unit

All gateway groups (sites) to provision

Limits for timeline cleanup.

Limits for timeline cleanup.

Limits for timeline cleanup.

Name of the user on the MySQL/MariaDB server

A list of URIs referencing documentation for this unit or its configuration.

A list of languages provided by the layout. (Use ISO 639-2 codes, for example: "eng" for english)

OpenSSH private key

A run-time path to the key file, which is supposed to be provisioned outside of Nix store.

When enabled Grafana will send anonymous usage statistics to stats.grafana.org

A set of special arguments to be passed to NixOS modules

Adds try_files directive.

Whether to enable this consul-template instance.

Toggles lego DNS propagation check, which is used alongside DNS-01 challenge to ensure the DNS entries required are available.

UDP port number for lighthouse DNS server.

If set, a changed unit is never assumed to be socket-activated on configuration switch, even if it might have associated socket units

List of remote selectors to include in CHILD_SA

Time range from which to choose a random value to subtract from rekey_time

Optional fixed priority for IPsec policies

These lines go to the end of the location verbatim.

Path to the SimpleSAMLphp library directory.

Determines the platform faster-whisper is run on

SFTP private key file

Default sample format.

Extra packages to add to GST_PLUGIN_PATH for the instance.

If set, a changed unit is never assumed to be socket-activated on configuration switch, even if it might have associated socket units

User as which this instance of fcgiwrap will be run

Proxy to use to connect to the wstunnel server (USER:PASS@HOST:PORT).

The namespace in which the Helm chart gets installed.

Whether to create the target namespace if not present.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

Adds a return directive, for e.g. redirections.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

These lines go to the end of the location verbatim.

Path to server SSL chain file.

If set the URL specified in bitcoin.rpc.url will get the content of this file added as an URL password, so http://user@example.com will turn into http://user:SOMESECRET@example.com

Each attribute in this set specifies an option in the [FairQueueing] section of the unit

Additional names of virtual hosts served by this virtual host configuration.

DNS address to use for this server

Whether to enable InvoicePlane web application.

FastCGI parameters to override

FastCGI parameters to override

FastCGI parameters to override

Firewall rules for outbound traffic.

The woodpecker-agent package to use.

If this attribute is not included, or if is set to the wildcard address (ff:ff:ff:ff:ff:ff), the entry is available for any station (client) to use

Whether to ask Let's Encrypt to sign a certificate for this vhost

This will contain the contents of cups-pdf.conf for this instance, derived from settings

Adds try_files directive.

A host of an existing Let's Encrypt certificate to use

The TCP address or UNIX socket path to listen on.

The interpreter to invoke to run the program

See torrc manual.

Path to directory of X.509 certificates in PEM format for trusted parties

Hostname to use

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Whether to enable Gitea Actions Runner instance.

Authentication to perform locally.

• The default pubkey uses public key authentication using a private key associated to a usable certificate.
• psk uses pre-shared key authentication.
• The IKEv1 specific xauth is used for XAuth or Hybrid authentication,
• while the IKEv2 specific eap keyword defines EAP authentication.
• For xauth, a specific backend name may be appended, separated by a dash

Authorized password to the opposite end of the tunnel.

Authorized password to the opposite end of the tunnel.

Options used to mount the file system

List of paths that should be mounted before this one

If this attribute is given, SAE-PK will be enabled for this connection

If this attribute is given, all clients using this entry will get tagged with the given VLAN ID.

An optional description for resource address, usually a full link to the resource including a schema.

Each attribute in this set specifies an option in the [BatmanAdvanced] section of the unit

Whether to only snapshot child datasets if recursing.

Disable transport layer keep-alives.

Fail the whole backup job if any borg command returns a warning (exit code 1), for example because a file changed during backup.

FastCGI parameters to override

Hostaccess variable to pass to updown script

Whether to enable this angrr policy.

See torrc manual.

The duration in seconds for which the bucket will retain data (0 is infinite).

Host to listen on