Whether to support proxying websocket connections with HTTP/1.1.

IPsec Mode to establish CHILD_SA with.

• tunnel negotiates the CHILD_SA in IPsec Tunnel Mode,
• whereas transport uses IPsec Transport Mode.
• transport_proxy signifying the special Mobile IPv6 Transport Proxy Mode.
• beet is the Bound End to End Tunnel mixture mode, working with fixed inner addresses without the need to include them in each packet.
• Both transport and beet modes are subject to mode negotiation; tunnel mode is negotiated if the preferred mode is not available.
• pass and drop are used to install shunt policies which explicitly bypass the defined traffic from IPsec processing or drop it, respectively

A path of a profile file to include

Hostname to use

Internal http server binding [address]:port.

Whether new users can register on this server.

The shared secret used to compute passwords for the TURN server

Whether to enable namecoind, Namecoin client.

The timestamp format to use for constructing snapshot names

EHT multi user beamformee support

Path to keystore (combined PEM with cert/key, or PKCS12 keystore)

Hostaccess variable to pass to updown script

Identity the NTLM secret belongs to

Whether this interface should be configured with DHCP

Each attribute in this set specifies an option in the [VRF] section of the unit

Whether to allow TRIM requests to the underlying device

Whether to inherit values set in security.acme.defaults or not.

Whether the service should accept new connections

FastCGI parameters to override

FastCGI parameters to override

FastCGI parameters to override

FastCGI parameters to override

FastCGI parameters to override

FastCGI parameters to override

FastCGI parameters to override

Borg command to use for archive creation

Maximum lifetime before CHILD_SA gets closed

Binary passes the data exactly as the audit event dispatcher gets it from the audit daemon

If ECS is added to the request, let the full IP address or cap it to 24 or 128 mask

The address of the remote endpoint to forward traffic over.

Hostname of the nginx vhost to configure

If set, all requests for this host are redirected permanently to the given URL.

DEPRECATED, use driverOptions

By default, nixos will check that programs

Additional destinations.

Map of incoming traffic patterns to local targets

Root directory for requests.

Path to certificate.

The domain part of the MUC to connect to for control.

Optional slot number to access the token.

Configure unit start rate limiting

List of filesystem paths to archive.

List of IP address ranges allowed to use the RPC API

The email for the Reply-To: header in emails

A list of paths to extra settings files

Each attribute in this set specifies an option in the [FooOverUDP] section of the unit

Specifies the password that must be supplied for the default Bacula Console to be authorized

Specifies the password that must be supplied for the default Bacula Console to be authorized

XFRM interface ID set on inbound policies/SA

List of certificate policy OIDs the peer's certificate must have

Mail addresses

When enabled Grafana will send anonymous usage statistics to stats.grafana.org

How strictly this policy should be enforced

An arbitrary list of items such as derivations

Order of this location block in relation to the others in the vhost

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

If specified, public-inbox-watch(1) will only process mail containing a matching header.

List of source directories and files to backup

Limits applied to domains whose writes cause other domains' transaction commits to fail

A set of files to be copied to /boot

Path to the built klipper-flash package.

Extra Environment variables to pass to the fedimintd.

Database for the Sync API.

Optional PKCS#11 module name.

This option will ensure that team memberships for OpenID Connect users are dynamic and synchronized with membership of OpenID Connect groups or assigned roles

Path to your HMAC secret used to sign OIDC JWTs.

Send/Recv VRRP messages from base interface instead of VMAC interface.

The condition under which this tag should be added

16-bit port for listening

Project ID.

Basic Auth password file for a vhost

Set of characters used as the delimiters for address extensions

Byte range from which to choose a random value to subtract from rekey_bytes

Enable running shellcheck on the generated scripts for this unit

Initial state

Network name to connect to

Give extended privileges to container.

The name of the organization responsible for the X.509 certificate's /O name.

Whether to disable the HTTP registration endpoint.

Whether to enable systemd hardening.

Wallet file

Address or CIDR subnets

StrongSwan default: []

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Whether to support proxying websocket connections with HTTP/1.1.

Domain part of JID of the XMPP user, if it is different from hostName.

Whitelist allowed services.

Labels used to map jobs to their runtime environment

Value of decryption passphrase for RSA key.

A file containing a the client secret for an openid_connect adapter

Listen addresses for this virtual host

IPv6 destination.

IPv4 destination.

Path to an INI format configuration file to provide Buffyboard

An arbitrary list of items such as derivations

An arbitrary list of items such as derivations

Extra parameters of this listen directive.