+This option selects whether IP addresses (both real and on the VPN)
+should be resolved. Since DNS lookups are blocking, it might affect
+tinc's efficiency, even stopping the daemon for a few seconds everytime
+it does a lookup if your DNS server is not responding.
+
+This does not affect resolving hostnames to IP addresses from the
+configuration file.
+
+@item Interface = <device>
+If you have more than one network interface in your computer, tinc will
+by default listen on all of them for incoming connections. It is
+possible to bind tinc to a single interface like eth0 or ppp0 with this
+variable.
+
+@item InterfaceIP = <local address>
+If your computer has more than one IP address on a single interface (for
+example if you are running virtual hosts), tinc will by default listen
+on all of them for incoming connections. It is possible to bind tinc to
+a single IP address with this variable. It is still possible to listen
+on several interfaces at the same time though, if they share the same IP
+address.
+
+@item KeyExpire = <seconds> (3600)
+This option controls the time the encryption keys used to encrypt the
+data are valid. It is common practice to change keys at regular
+intervals to make it even harder for crackers, even though it is thought
+to be nearly impossible to crack a single key.
+
+@item @strong{Name = <name>}
+This is a symbolic name for this connection. It can be anything
+
+@item PingTimeout = <seconds> (5)
+The number of seconds of inactivity that tinc will wait before sending a
+probe to the other end. If that other end doesn't answer within that
+same amount of seconds, the connection is terminated, and the others
+will be notified of this.
+
+@item @strong{PrivateKey = <path>}
+This is the full path name of the RSA private key file that was
+generated by ``tincd --generate-keys''. It must be a full path, not a
+relative directory. (NOTE: In version 1.0pre3, this variable was used
+to give the key inline. This is no longer supported.)
+
+@item TapDevice = <device> (/dev/tap0)
+The ethertap device to use. Note that you can only use one device per
+daemon. The info pages of the tinc package contain more information
+about configuring an ethertap device for Linux.
+
+@item VpnMask = <mask>
+The mask that defines the scope of the entire VPN. This option is not
+used by the tinc daemon itself, but can be used by startup scripts to
+configure the ethertap devices correctly.
+@end table