Destinations for the service.

Description for the service.

Modify the systemd service

The block device is backed by an encrypted one, adds this device as a initrd luks entry.

By default, H2O, without prejudice, will use as many TLS versions & cipher suites as it & the TLS library (OpenSSL) can support

The name of the underlying hardware WLAN device as assigned by udev.

Identity the EAP/XAuth secret belongs to

HE single user beamformee support

HE single user beamformer support

Optional PIN required to access the key on the token

Allows the generation of a private key and associated self-signed certificate

The prefix used for embedding IPv4 into IPv6 addresses

Alias directory for requests

Adds DirectoryIndex directive

Byte range from which to choose a random value to subtract from rekey_bytes

List of additional peer IP addresses to connect to.

Alias directory for requests.

Adds index directive.

Consensus peg-in finality delay.

Defines how unit configuration is provided for systemd:

asDropinIfExists creates a unit file when no unit file is provided by the package otherwise it creates a drop-in file named overrides.conf.

asDropin creates a drop-in file named overrides.conf

EHT single user beamformee support

EHT single user beamformer support

Structural InvoicePlane configuration

An arbitrary list of items such as derivations

Similar to requires

Similar to requires

Whether to serve a wildcard record for ZeroTier Nodes.

Additional configurations to be appended to coin.conf

The backend used to setup virtual network firewall rules.

Text of the file.

When redirecting from the Kanidm Apps Listing page, some linked applications may need to land on a specific page to trigger oauth2/oidc interactions.

Declarative vhost config

Server name to be used for this virtual host

Add programs to the buildkite-agent environment

Name the bot should appear with.

Application name.

A file containing a the client secret for an openid_connect adapter

Whether to include the full closure of the systemd unit file into the chroot, instead of just the dependencies for the executables.

Adds DirectoryIndex directive

Alias directory for requests

List of local traffic selectors to include in CHILD_SA

A list of URIs referencing documentation for this unit or its configuration.

Whether to enable this angrr policy.

Path to server SSL certificate.

Whether to manage network configuration using systemd-network

A list of tunnel interfaces to be added to the network section of the unit

A list of bridge interfaces to be added to the network section of the unit

Whether to add the special Bitlbee operations channel.

The duration in seconds for which the bucket will retain data (0 is infinite).

Order of this location block in relation to the others in the vhost

TCP port of the IBM TSM server

FastCGI parameters to override

FastCGI parameters to override

Postswitch hook executed after mode switch.

Defines whatever to use an empty string as a default salt

Whether to keep the last booted system generation

Adds try_files directive.

The domain part of the JID for this Jibri instance.

An arbitrary list of items such as derivations

HMAC-SHA-256 is used with 128-bit truncation with IPsec

A list of domains to pass to the network config.

Hostnames of the XMPP servers to connect to.

Names of the templates to use for this dataset.

Sets allowed passwords for WPA3-SAE

Path to the SimpleSAMLphp config directory.

Extra lines to be added verbatim to the vrrp_instance section.

Similar to requires

Similar to requires

An arbitrary list of items such as derivations

Retention period for the GC roots matched by this policy.

Regex pattern to match the GC root path.

Username for accessing the database.

Specifies the (clear text) password for the MQTT User.

A list of BridgeMDB sections to be added to the unit

A list of BridgeFDB sections to be added to the unit

If not empty, which job classes should be executed by this process. If left empty, all job classes will be executed by this process.

The hostname to show in the Datadog dashboard (optional)

Root directory for requests.

Extra arguments to pass to ghostunnel server

additional groups to add the dynamic user to

Each attribute in this set specifies an option in the [VXLAN] section of the unit

Specifies the path to a file containing the password hash for the account, generated with grub-mkpasswd-pbkdf2

A path of a profile file to include

Timeout before closing CHILD_SA after inactivity

Name of the postgresql database

Whether this interface should be configured with DHCP

External filter program to further filter GC roots matched by this policy.

Sets the password for WPA-PSK that will be converted to the pre-shared key

Enable legacy crypto on this client

FastCGI parameters to override

Maximum bytes processed before CHILD_SA gets closed

Compression method to use

Each attribute in this set specifies an option in the [VRF] section of the unit

Whether to allow TRIM requests to the underlying device

TLS certificate to use instead of the hardcoded one in case of HTTPS connections

Whether to inherit values set in security.acme.defaults or not.

Extra environment variables to set for the runner, as an attrset.

Hash table size in MB; must be a multiple of 16

Certificate revocation policy for CRL or OCSP revocation.

• A strict revocation policy fails if no revocation information is available, i.e. the certificate is not known to be unrevoked.
• ifuri fails only if a CRL/OCSP URI is available, but certificate revocation checking fails, i.e. there should be revocation information available, but it could not be obtained.
• The default revocation policy relaxed fails only if a certificate is revoked, i.e. it is explicitly known that it is bad

Optional text to provide as a prompt for the first window