Profile name, defaults to 'system' (NixOS).

The domain name serving your Weblate instance.

Flush the WAL data to disk immediately after it has been received

Members of this group can control wpa_supplicant.

Database user

Define which other containers this one depends on

The port to listen for HTTP(S) requests on.

File permissions on the UNIX domain socket.

Name of the nginx virtual host to use and setup

Section defining named pools

Interval to check the liveness of a peer actively using IKEv2 INFORMATIONAL exchanges or IKEv1 R_U_THERE messages

See torrc manual.

Name of this virtual host

The path that opendkim should put its generated private keys into

Location where the file system will be mounted

Whether to enable reverse hostname lookups.

XFRM interface ID set on inbound policies/SA, can be overridden by child config, see there for details

Time range from which to choose a random value to subtract from rekey/reauth times

The name of the table to which logs are written.

Grants the user, created by the ensureUser attr, login permissions

VLAN to which the network interface is connected.

Database hostname.

The base64 public key of the peer.

Cell name, this server will serve.

Path to a file containing a registration token for the PeerTube instance

Username for accessing the database.

Whether to enable TLS on the listener socket.

Real name of the owner of the instance

Cachix binary cache name

Name of the screen session for weechat.

For an IPv6-based tunnel, the maximum number of nested encapsulation to allow. 0 means no nesting, "none" unlimited.

ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1

GitLab database name.

Group name who owns the socket file.

If the device does not currently contain a filesystem (as determined by blkid), then automatically format it with the filesystem type specified in fsType

The name of the user to use for Wakapi.

ESP proposals to offer for the CHILD_SA

Set the maximum transmission unit in bytes for the wireguard interface

Turn on proxy_arp for this device

Send certificate payloads when using certificate authentication.

• With the default of ifasked the daemon sends certificate payloads only if certificate requests have been received.
• never disables sending of certificate payloads altogether,
• always causes certificate payloads to be sent unconditionally whenever certificate authentication is used

Whether to announce the locally used domain name for browsing by other hosts.

Whether to enable tournament mode

Commands called before shutting down the interface.

UUID of the stratis pool that the fs is located in

This is only relevant if you are using stratis.

Name of the database instance to connect to

Name of the nginx or caddy virtualhost to use and setup

File name extension mappings

Enable recommended uwsgi settings.

Enable recommended proxy settings.

Supported versions to enable on this switch.

Private key file as generated by wg genkey.

Other route options

Other route options

The internet hostname of this mail system

The name of the table used for password alteration

Whether to enable ‘oidentd’, an implementation of the Ident protocol (RFC 1413)

GitLab container registry host name.

Source port when using UDP encapsulation

Directory of sockets for controlling wpa_supplicant.

The username to login with.

Server name domain suffixes.

Only execute the administrator Sieve scripts for the mailbox configured with services.dovecot2.imapsieve.mailbox..name when the message originates from the indicated mailbox

Mark all wireguard packets originating from this interface with the given firewall mark

The database name.

If set, the filesystem is grown to its maximum size before being mounted. (This is typically the size of the containing partition.) This is currently only supported for ext2/3/4 filesystems that are mounted during early boot.

The hostname that clients should use to connect to this server

XFRM interface ID set on outbound policies/SA, can be overridden by child config, see there for details

Whether to enable WINS NSS (Name Service Switch) plug-in

DNS name for the urls generated in the cgi.

User that runs smokeping and (optionally) thttpd

Commands called after shutting down the interface.

Range of open UDP ports.

List of IP (v4 or v6) addresses with CIDR masks from which this peer is allowed to send incoming traffic and to which outgoing traffic for this peer is directed

Whether to enable at-spi2-core, a service for the Assistive Technologies available on the GNOME platform

Domain name(s) to synchronize.

Enables backward-compatible NetBird client service

Automatically restart the service on config change

Filename for unix-command socket.

The name of the S3 bucket.

Only execute the administrator Sieve scripts for the mailbox configured with services.dovecot2.imapsieve.mailbox..name when one of the listed IMAPSIEVE causes apply

Path to an image file to load before running the image

Automatically generate a private key with wg genkey, at the privateKeyFile location.

Whether to enable knot-resolver (version 5) domain name server

A file containing the superuser password

Server definitions ("stanzas") for the client system-options file

The hostname to bind to

The kernel routing table to add this interface's associated routes to

A range of TCP ports on which incoming connections are accepted.

Absolute path to a file containing environment variables used for gitlab-runner registrations with runner authentication tokens

Name of the filter

Mail "from" name.

The name of the type of storage backend

Specifies the hashed password for the user

Which hostname to set the vHost to that is proxying to sks.

Unix domain socket path to bind this listener to.

Extra options to append to the interface section

Whether this VPN connection should be started automatically.

Location of the backing encrypted device.

IPv6 address of the interface

IPv4 address of the interface