Users allowed to use fcrontab and fcrondyn (one name per line, all for everyone).

Users allowed to use incrontab

Whether to allow traffic that is neither TCP nor UDP

Allow HTML in client messages, comments, and channel descriptions.

Whether to enable Whether to allow the PUT verb to push narinfo and nar files directly to the cache. .

allow Artalk store the settings to config file persistently

From which hosts to allow unconditional access.

Whether to allow any user to lock the screen

Whether to allow traffic on the loopback interface

Allow Type-1 fonts

User's access level for changing data.

• view: view only permission.
• add: view and add permissions.
• edit: view, add, and edit permissions.
• sandstorm: permissions from the X-Sandstorm-Permissions request header.

Whether to enable Whether to allow the DELETE verb to delete narinfo and nar files from the cache. .

Allow hibernation support, this may be a unsafe option depending on your setup

Allow bitmap fonts

Whether to relax the security sandbox to allow running setuid binaries (e.g. sudo) in the dhcpcd hooks.

Whether to allow writes to MSRs ("on") or not ("off").

If NSD as secondary server should be allowed to AXFR if the primary server does not allow IXFR.

Disable checking that at least the root user or a user in the wheel group can log in using a password or an SSH key

Whether to enable the SFTP subsystem in the SSH daemon

Enable uploads of external files

Allow falling back to local locks if Redis is unavailable (WARNING: breaks HA guarantees).

Whether to enable configuring X to allow external NVIDIA GPUs when using Prime [Reverse] sync optimus .

Whether to enable setting the system time.

List of address ranges allowed to query this zone

Whether to allow traffic to local networks

Allow the use of writeable root inside chroot().

Whether to enable Allow the system to forward packets from easytier

Reboot the system into the new generation instead of a switch if the new generation uses a different kernel, kernel modules or initrd than the booted system

Whether to allow TRIM requests to the underlying device

Set the Access-Control-Allow-Origin header in the HTTP response, used for direct (non-proxy) JavaScript-based access from browsers. "*" to allow access from all sites.

Whether to use POINTTOPOINT interfaces

Whether to make /var/spool/at{jobs,spool} writeable by everyone (and sticky)

When enabled, the stargazer process will be given CAP_SETGID and CAP_SETUID so that it can run cgi processes as a different user

Whether to enable rebooting the system.

Install polkit rules to allow Mirakurun to access smart card readers which is commonly used along with tuner devices.

If set to true, any remote host can connect to and control this BOINC client (subject to password authentication)

IP address ranges of clients allowed to make API requests.

IP address ranges of clients allowed to make DNS queries.

TCP ports to which traffic is allowed

UDP ports to which traffic is allowed

Allow client if common name appears in the list.

Whether to load additional drivers for certain vendors (I

Allow client if organizational unit name appears in the list.

If true, allow all clients, do not check client cert subject.

Allow client if URI subject alternative name appears in the list.

Allow client if DNS subject alternative name appears in the list.

List of IPs or networks to allow (default all allowed).

Allow these URLs to be used in the downloadFrom API field

Whether to get IPv6 addresses from interfaces.

List of IP address ranges allowed to use the RPC API

IPs and subnets that are authorized to connect for this device

Whether to enable access to video devices like cameras on the system .

Whether to allow Moonraker to perform system-level operations

Whether to enable killing/restarting processes.

Allow account creation

Whether to allow creation of user namespaces

Whether to allow TRIM requests to the underlying device

Whether the initrd can be built even though modules listed in boot.initrd.kernelModules or boot.initrd.availableKernelModules are missing from the kernel

A list of names of users (separated by whitespace) that are allowed to connect to the Nix daemon

Whether to allow logging into accounts that have no password set (i.e., have an empty password field in /etc/passwd or /etc/group)

Set Torsocks to accept inbound connections

By default we create the sabnzbd configuration read-only, which keeps the nixos configuration as the single source of truth

Allow clients to create repositories in subdirectories of the specified path

Whether to respond to incoming ICMPv4 echo requests ("pings")

This tells pgmanage whether or not to allow anyone to use a custom connection from the login screen.

List of network interfaces that should be used by the avahi-daemon

Client IDs to allow (can be repeated; if not specified, all clients are allowed)

List of domains to whitelist.

Listed primary servers are allowed to notify this secondary server

Enables or disables the native transport server (CQL binary protocol)

Enable the risky critical power actions "Suspend" and "Ignore".

By default, when SSH forwarding, enabling Duo Security will disable TCP forwarding

Allows AdGuard Home to open raw sockets (CAP_NET_RAW), which is required for the integrated DHCP server

Whether to enable network access for logrotate.

Whether to allow privileged containers on Kubernetes.

Whether to enable nonpaying users to submit builds.

Whether to enable creation of new lists.

Enable the DHCP client for any interface whose name matches any of the shell glob patterns in this list

A list of device nodes to which esphome has access to

Allow client if common name appears in the list.

Whether to enable Libravatar as profile picture source on your instance

Allow client if organizational unit name appears in the list.

If true, allow all clients, do not check client cert subject.

List of groups to allow access to this vhost, or null to allow all.

Allow client if DNS subject alternative name appears in the list.

Allow client if URI subject alternative name appears in the list.

List of emails to allow access to this vhost, or null to allow all.

Whether to enable keys to run shell commands.

Whether to allow login for accounts that have no OTP set (i.e., accounts with no OTP configured or no existing ~/.google_authenticator).

Whether to allow configuring networks "imperatively" (e.g. via wpa_supplicant_gui) and declaratively via networking.wireless.networks.

List of email domains to allow access to this vhost, or null to allow all.

Whether to enable all anonymous clients to stream to the server.

Allows the generation of a private key and associated self-signed certificate

Domains where PdfDing is allowed to run

Whether to allow capital letters in slugs.

List of IP addresses or network addresses that may connect to Polipo.

Allowed client IP ranges are evaluated first, defaults to ARIN IPv4 private ranges: [ "192.168.0.0/16" "127.0.0.0/8" "172.16.0.0/12" "10.0.0.0/8" ]

Whether to allow Conduit to automatically contact https://conduit.rs hourly to check for important Conduit news

The main host that is allowed access.

Whether to allow SMT/hyperthreading