One of the reasons service configurations on OpenBSD (e.g. pf.conf, ipsec.conf, etc) are so convenient and expressive is because they don't shy away from defini

One of the reasons service configurations on OpenBSD (e.g. pf.conf, ipsec.conf, etc) are so convenient and expressive is because they don't shy away from defining and implementing custom configuration syntax using yacc. At some point somebody needs to implement the configuration interface for the human. Punting things by preferring boilerplate, machinable formats and libraries doesn't actually solve the problem.