Optional Authorization header configuration.

Max age of a file before it gets deleted.

Folders which should be shared by Syncthing

The thermald manual configuration file

Dynamic configuration files to write

Use local tailscaled instead of tsnet.

Block duration for TSDB block

If true, enable cgit (fast web interface for git repositories) as a sub-service in lighttpd.

The number of allowed simultaneous connections to the daemon, default 10.

SOCKS5 password

The collection of hosted maillists

Use SSL for objectstore access.

Extra commandline options to pass to the artifactory exporter.

OAuth client ID.

Optional proxy URL.

Scopes for the token request.

The configuration of snips-sh is done through environment variables, therefore you must use upper snake case (e.g. SNIPS_HTTP_INTERNAL)

Log verbosity (syslog keyword or level).

Optionally restrict logins to a comma-separated list of role IDs

An uncompressed response body larger than this many bytes will cause the scrape to fail. 0 means no limit

Unix command socket that can be used to pass commands to Suricata

Path to a file containing sensitive environment variables for Newt

A YAML file containing secrets such as database or user passwords

Extra commandline options to pass to the frr exporter.

Set commandline parameters to pass to matterircd

Specify the mailexporter configuration file to use.

User name under which the mailman3 exporter shall be run.

The realmd package to use.

Number of yearly snapshots.

Path to server SSL certificate key.

A file containing the password for Redis database.

The miniflux package to use.

The secret data used to encode the SRS address. to generate, use a command like: for n in $(seq 5); do dd if=/dev/urandom count=1 bs=1024 status=none | sha256sum | sed 's/ -$//' | sed 's/^/ /'; done

Open port in firewall for incoming connections.

Total upload speed limit.

Linux high speed af-xdp capture support, see docs/capture-hardware/af-xdp.

CPU scheduler priority.

A system group name for this client instance.

Section defining complementary attributes of certification authorities, each in its own subsection with an arbitrary yet unique name

Address or CIDR subnets

StrongSwan default: []

TCP port opened for ServerQuery connections using the raw telnet protocol.

End of UDP port range for WebRTC

Whether to connect via SSL.

Maximum retry delay for distributed locks (exponential backoff caps at this).

Address to listen on.

Smallest allowed size for individual swapfiles

Configuration options to pass to Taskserver

Path where to store the data files of the hidden service

Root of the application.

If NSD as secondary server should be allowed to AXFR if the primary server does not allow IXFR.

Open ports in the firewall for pihole-FTL's DHCP server.

A string specifying where to send log messages to

The password used for database authentication.

Whether to enable nix-serve, the standalone Nix binary cache server.

A list of device paths to hardware acceleration devices that Plex should have access to

Whether to enable the prometheus chrony exporter.

Define the server configurations

The port on which to have the LDAP server.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Path to the client certificate signed with the server certificate

Optional cookie domains to force cookies to (ie: .yourcompany.com)

Initial peers for HA cluster.

Interfaces on which the HTTPS server will listen on.

The mattermost package to use.

The username used to access your metrics.

The default logging directory

IPv4-specific configuration.

Whether to enable umami.

Directory holding all state for unbound to run.

An explicit address that NetBird will serve *.netbird.cloud. (usually) entries on

Whether to enable the ldap server.

Enable SSL.

The port to scrape metrics from

Disable validation of the server certificate.

Extra contents for resssion.conf.

Whether to support proxying websocket connections with HTTP/1.1.

Verbose logs.

Log level of the netbird services.

Overridable configuration file contents to use for ntopng

Specify rules for nftables to add to the input chain when services.prometheus.exporters.blackbox.openFirewall is true.

The location of Tautulli's config file.

Database host.

Declarative location config

Whether to stop the fan when minPwm is reached.

A secret file to be sourced for the .env settings

The full path to a file that contains the database password.

An attrset of clauses to grant to the user

The TCP port Tomcat should listen on.

Specify a filter for iptables to use when services.prometheus.exporters.rasdaemon.openFirewall is true

Applications to be exposed to Moonlight.

To configure Google auth, you'll need to create an OAuth Client ID at https://console.cloud.google.com/apis/credentials

When configuring the Client ID, add an Authorized redirect URI to https://[publicUrl]/auth/google.callback.

See torrc manual.

State directory of radicle-ci-broker.

The syslogng package to use.

Create archive at this interval

The full path to a file that contains the admin's password

Optional Proxy URL.

Sets the authentication type

Files containing additional environment variables to pass to Stirling PDF

Configuration for Miniflux, refer to https://miniflux.app/docs/configuration.html for documentation on the supported values.