Free-form settings written directly to the config.json file

Maps kanidm groups to returned oauth scopes

Name of the datasource to delete.

Allow clients to create repositories in subdirectories of the specified path

XFRM interface ID set on inbound policies/SA

Extra Environment variables to pass to the fedimintd.

Defines the name of the claim that contains the username in the provider's userinfo endpoint

Runner-specific command script executed after code is pulled.

Whether to enable keys to run shell commands.

Basic Auth protection for a vhost

If set, all the required runtime store paths for this service are bind-mounted into a tmpfs-based chroot(2).

A list of verbatim OpenSSH public keys that should be added to the user's authorized keys

Ingress rules

Catch-all service if no ingress matches

These lines go to the end of the location verbatim.

The language used to to parse words and sentences.

The program to make available as /bin/sh inside the chroot

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

The redirect URL of the service

Whether this lighthouse node should serve DNS.

List of roles for this stream

Whether to enable this Woodpecker-Agent

Opens UDP port in firewall for fedimintd's API Iroh endpoint

User-visible description for the repository.

Number of processes to prefork.

A list of files each containing one OpenSSH public key that should be added to the user's authorized keys

Whether to add a separate nginx server block that permanently redirects (301) all plain HTTP traffic to HTTPS

Basic Auth password file for a vhost

Environment for the netbird service, used to pass configuration options.

Environment for the netbird service, used to pass configuration options.

Extra command-line options passed to the daemon

User part of the JID.

Domain under which ZeroTier records will be available.

The name of the organization responsible for the X.509 certificate's /O name.

Peers to connect initially

Description for the zone.

spool directory

The name of table that maps unique login names to the passwords.

Reduce memory consumption by a factor of 2 beyond what lowmem does, at the cost of significantly slowing down the archiving process.

Extra config for <StorageHints> section.

Path to server SSL certificate key.

The systemd unit (a service or a target) for other services to depend on if they need to be started after matrix-synapse

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

A list of device nodes to which the containers has access to.

Whether to ensure that this oauth2 resource server is present or absent.

Path to an environment file, containing the TOKEN environment variable, that holds a token to register at the configured Gitea/Forgejo instance.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Optional PKCS#11 module name.

Format the logs are written as.

The base XMPP domain.

Whitelist allowed images.

Location of the HTML templates

Defines how unit configuration is provided for systemd:

asDropinIfExists creates a unit file when no unit file is provided by the package otherwise it creates a drop-in file named overrides.conf.

asDropin creates a drop-in file named overrides.conf

Defines how unit configuration is provided for systemd:

asDropinIfExists creates a unit file when no unit file is provided by the package otherwise it creates a drop-in file named overrides.conf.

asDropin creates a drop-in file named overrides.conf

These lines go to the end of the location verbatim.

Basic Auth protection for a vhost

Adds additional claims (and values) based on which kanidm groups an authenticating party belongs to

Defines how unit configuration is provided for systemd:

asDropinIfExists creates a unit file when no unit file is provided by the package otherwise it creates a drop-in file named overrides.conf.

asDropin creates a drop-in file named overrides.conf

Defines how unit configuration is provided for systemd:

asDropinIfExists creates a unit file when no unit file is provided by the package otherwise it creates a drop-in file named overrides.conf.

asDropin creates a drop-in file named overrides.conf

HMAC-SHA-256 is used with 128-bit truncation with IPsec

Whether to invert the icmp block handling

Each attribute in this set specifies an option in the [QuickFairQueueing] section of the unit

Timeout before closing CHILD_SA after inactivity

Username for login.

List of local traffic selectors to include in CHILD_SA

The name of the column in the log table to which the name of the remote host that initiates the session is stored

Adapter command to run.

If set, all requests for this host are redirected (defaults to 301, configurable with redirectCode) to the given hostname.

JID of the MUC to join

Name of the voice model to use

A list of URIs referencing documentation for this unit or its configuration.

A list of URIs referencing documentation for this unit or its configuration.

file containing the credentials to access the repository, in the format of an EnvironmentFile as described by systemd.exec(5)

Source port of the external interface on host

Maximum bytes processed before CHILD_SA gets closed

RPC password for JSON-RPC connections

Keep the latest N GC roots in this profile.

Your Authelia config.yml as a Nix attribute set

A list of glob patterns, indicating which paths to expose to the sandbox

Opens up internal firewall ports for the NetBird's network interface.

Opens up internal firewall ports for the NetBird's network interface.

It is recommended you keep your secrets separate from the configuration

Specify the local database filename to store persistent data

Identify different instances on same host

config.yaml configuration as a Nix attribute set

Add programs to the buildkite-agent environment

Additional policy settings merged into the policy file

Whether to enable armagetronad.

Order of this location block in relation to the others in the vhost

Whether the repo (which must be local) is a removable device.