When set to true, attempts to discover the host's public IP via STUN

An IP address or a network IP address with a mask for IPv4 or IPv6

Path to your JWT secret used during identity verificaton.

A file containing the password corresponding to database.user.

Specification of pages to be ignored by web crawlers

Additional names of virtual hosts served by this virtual host configuration.

Type of this worker

Node name.

The path to the workdir

systemd-boot orders the menu entries by their sort keys, so if you want something to appear after all the NixOS entries, it should start with o or onwards

Whether this runtime directory should be generated

The directory where the skeleton files are located

If nothing is received from the client for this amount of time, server will send a keepalive message.

Username for the postgresql connection

Each attribute in this set specifies an option in the [Socket] section of the unit

Each attribute in this set specifies an option in the [Network] section of this unit

Configure unit start rate limiting

Configure unit start rate limiting

Ingress rules

Catch-all service if no ingress matches

Port of the remote MQTT broker.

Opens UDP port in firewall for fedimintd's API Iroh endpoint

The $table_prefix is the value placed in the front of your database tables

Extra command-line options passed to the daemon

Create the database and database user locally.

Path to the SimpleSAMLphp library directory.

Reduce memory consumption by a factor of 2 beyond what lowmem does, at the cost of significantly slowing down the archiving process.

Basic Auth password file for a vhost

Whether to enable HDFS NameNode.

Path to an environment file, containing the TOKEN environment variable, that holds a token to register at the configured Gitea/Forgejo instance.

The radicle-native-ci package to use.

Whether to manage network configuration using systemd-network

Datasource specific secure configuration

Whether to create the target namespace if not present.

The namespace in which the Helm chart gets installed.

FastCGI parameters to override

If this attribute is given with non-zero length, it will set the password identifier for this entry

Check interval in seconds

Environment for the netbird service, used to pass configuration options.

Environment for the netbird service, used to pass configuration options.

Name of the database to use.

Whether to ensure that this bucket is present or absent.

Sets the password for WPA-PSK

CHILD_SA configuration sub-section

Declarative location config

Basic Auth password file for a vhost

Path to the Xen Store access log file.

Encryption mode to use

Order of this location block in relation to the others in the vhost

Order of this location block in relation to the others in the vhost

Similar to requires

Similar to requires

If empty string mailaddress value is used

User-visible description for the repository.

Domains the certificate represents

Whether to install IPsec policies or not

A short description of the layout.

Name of the bridge interface that wpa_supplicant should listen at.

Niceness.

Niceness.

Either "basic" for a general-purpose authorization protocol or "stealth" for a less scalable protocol that also hides service activity from unauthorized clients.

Whether to invert the icmp block handling

The host name or IP address the server should listen to.

RPC password for JSON-RPC connections

E-mail addresses with these domains are disallowed from subscribing.

List of names of the systemd-networkd operational states which should trigger the script

If the free space in the filesystem containing log_file drops below this value, the audit daemon takes the action specified by space_left_action

User part of the JID.

Configure unit start rate limiting

Configure unit start rate limiting

Path to server SSL certificate key.

LDAP-attribute that corresponds to the username-attribute in mailman.

Absolute path of the salt on the unencrypted device with that device's root directory as "/".

Whether to include Anubis's default bot detection rules via the (data)/meta/default-config.yaml import

Whether to copy the ECN (Explicit Congestion Notification) header field to/from the outer IP header in tunnel mode

Sets the maximum amount of time a connection may be reused

The path of Apache's document root directory

file containing the credentials to access the repository, in the format of an EnvironmentFile as described by systemd.exec(5)

Adds DirectoryIndex directive

Alias directory for requests

If set, does not limit target to localhost, 127.0.0.1, [::1], or UNIX sockets

Hostname to use

CPU scheduler priority.

CPU scheduler priority.

Description for the zone.

For smtp, the sendmail binary is started with the parameter -bs: Use the SMTP protocol on standard input and output

Set this value to automatically add new users to the provided org

Systemd calendar expression when to check for renewal

The secret file to be sourced for the .env settings.

Whether to enable namecoind, Namecoin client.

Location where the file system will be mounted

Enable PROXY protocol.

Preswitch hook executed before mode switch.

Address or CIDR subnets

StrongSwan default: []

Address or CIDR subnets

StrongSwan default: []

Address or CIDR subnets

StrongSwan default: []

These lines go to the end of the location verbatim.

Note: when using ntfy.sh and other public instances it is recommended to set this option to an empty string and set the actual topic via services.prometheus.alertmanager-ntfy.extraConfigFiles since the topic in ntfy.sh is essentially a password