The hostname served by the XMPP gateway

A list of SQL statements to execute once after making a connection.

The changes the principal is allowed to make.

If set, use NixOS-generated ACME certificate with the specified name for TLS

The path to the file used for signing derivation data

Hostname of the machine where slurmdbd is running (i.e. name returned by hostname -s).

Attribute set of additional plugins that will be symlinked to the plugin subdirectory

MySQL user name.

Nginx configuration can be done by adapting services.nginx.virtualHosts.<name>

Defines route table names as an attrset of name to number

Apache configuration can be done by adapting services.httpd.virtualHosts.<name>

Defines the name of the claim that contains group memberships or role assignments in the provider's userinfo endpoint

The content of this attribute is appended to any host name that does not contain a period (except localhost), including defaulthost and idhost

Interval to check the liveness of a peer actively using IKEv2 INFORMATIONAL exchanges or IKEv1 R_U_THERE messages

Time range from which to choose a random value to subtract from rekey/reauth times

Enables MOBIKE on IKEv2 connections

Allow the specified IPs to act as a proxy

Bucket name for the minio storage backend.

The public host name to serve.

Hostname of a waiting vpicc server vpcd will be connecting to

Path to file containing password.

Path to the repository

ESP proposals to offer for the CHILD_SA

If enabled, lowerdir, upperdir and workdir will be prefixed with /sysroot

Periodically refresh the endpoint hostname or address for all peers

XFRM interface ID set on inbound policies/SA, can be overridden by child config, see there for details

The name of the path priority routine

Name of database.

Database name for the MySQL database.

Cadvisord storage driver database name.

The domain name of your instance (eg 'hatsu.local').

Specify the attribute name of the ESP.

Bind to this device for native ethernet operation. all is a pseudo-name which will try to connect to all devices.

Name of existing PHP-FPM pool that is used to run Icingaweb2

Give extended privileges to the container

Override the default entrypoint of the image.

How often to run this job, specified in Go duration format.

Basic Auth username used to connect to remote_write endpoint

Basic Auth username used to connect to remote_write endpoint

Unix domain socket path to bind this listener to.

The full path to a file that contains the hash of the user's password

Label to the repository

Optional description for the organization.

Enable recommended uwsgi settings.

Enable recommended proxy settings.

Files to load as an environment file just before Traefik starts

Name of the world to use

Whether to enable the HTTP/3 protocol

The name of the multipath device

The fully qualified domain name to bind to

Whether to enable the HTTP/3 protocol

Instance hostname (base domain name)

Controls Link-Local Multicast Name Resolution support (RFC 4795) on the local host

List of packages containing firmware files

Whether to enable the HTTP/3 protocol

Send certificate payloads when using certificate authentication.

• With the default of ifasked the daemon sends certificate payloads only if certificate requests have been received.
• never disables sending of certificate payloads altogether,
• always causes certificate payloads to be sent unconditionally whenever certificate authentication is used

List of volumes to attach to this container

This is optional and is by default off, because most users will not need it

Logging driver for the container

Whether to enable the HTTP/3 protocol

The DNS name of the storage array

The short hostname of the machine where SLURM control functions are executed (i.e. the name returned by the command "hostname -s", use "tux001" rather than "tux001.my.com").

The domain name for the signal service.

Name or GUID of extra ZFS pools that you wish to import during boot

Command to run after become master, the interface name, virtual address and optional extra parameters are passed as arguments.

The output name of the monitor, as shown by xrandr(1) invoked without arguments.

Specifies the initial password for the user, i.e. the password assigned if the user does not already exist

Discourse database user.

XFRM interface ID set on outbound policies/SA, can be overridden by child config, see there for details

LiveKit key file holding one or multiple application secrets

Enable private repos

User under which mastodon runs

Domain name under which the derper server is reachable.

Whether to enable knot-resolver (version 6) domain name server

Domain name of your server.

Attribute set of vault-agent instances

Whether a Postquantum Preshared Key (PPK) is required for this connection

The hostname part of the public URL used as base for all frontend requests

Environment variables to set for this container.

Instance name used to distinguish between different instances

A file containing the auth key

The name of the timezone to use for the cron schedule

Whether to enable nominatim

Use this option to configure name resolution and DNS caching.

Name of the administrator of this worker

Remote UDP port for IKE communication

Enables Aggressive Mode instead of Main Mode with Identity Protection

Name of the organization sending out the reports.

List of HTTP resources to serve on this listener.

Whether to enable reverse hostname lookups.

Kubernetes kubelet hostname override.

The hostname under which the Ollama UI interface should be accessible

Whether to enable roundcube

Absolute file path to an SSH private key, usually generated by rad auth

Whether to enable the HTTP/3 protocol

The login name of the search user

Whether to enable the HTTP/3 protocol

Name of standard way of trusted network specification to use, leave blank if you specify it explicitly or if you want to use default (localhost-only).

Whether to enable the HTTP/3 protocol

Whether to enable the HTTP/3 protocol