Name is used as a suffix for the service name, user, and group

Multi-domain protection currently requires multiple instances of Authelia

Here you can provide authelia with configuration files or directories

Additional environment variables to provide to authelia

The name of the user for this authelia instance.

The name of the group for this authelia instance.

Whether to enable Authelia instance.

The authelia package to use.

It is recommended you keep your secrets separate from the configuration

Your Authelia config.yml as a Nix attribute set

Instance ID for when running multiple processes (default null).

Instance name used to distinguish between different instances

The theme to display.

uWSGI configuration

Level of verbosity for logs.

The instance ID to listen for events for.

Path to your JWT secret used during identity verificaton.

Configuring authelia's secret files via the secrets attribute set is intended to be convenient and help catch cases where values are required to run at all

Format the logs are written as.

Instance name.

Path to your HMAC secret used to sign OIDC JWTs.

The instance url to which the provisioning tool should connect.

Instance administrator email.

Path to your session secret

The address to listen on.

Path to your private key file used to encrypt OIDC JWTs.

File path where the logs will be written

Set of btrbk instances

Errbot instance configs

Permits to raise one or more cups-pdf instances

The name identifying the runner instance towards the Gitea/Forgejo instance.

How often this btrbk instance is started

Whether to also log to stdout when a file_path is defined.

Path to your storage encryption key.

Whether to enable a CUPS printer queue for this instance

Attribute set of vault-agent instances

Data directory for errbot instance.

User under which this instance runs.

The name of the instance.

Whether to enable ytdl-sub instance.

Enable Metrics.

The address to listen on for metrics

Group under which this instance runs.

Whether to enable this instance of Anubis.

Instance description.

varnishstat -n value.

The fallback instance name if not configured into the admin UI

Configure the instance from config server

Whether to enable this vault-agent instance.

Whether to enable this v4l2-relayd instance.

This option specifies the Nix package instance to use throughout the system.

This option specifies the Nix package instance to use throughout the system.

Assign a icinga instance to this transport

Enable the instance.

Attribute set of consul-template instances

User under which this instance runs.

Base URL of your Gitea/Forgejo instance.

Frp instances.

Group under which this instance runs.

Whether to enable this cups-pdf instance.

Path to easytier config file

Plain token to register at the configured Gitea/Forgejo instance.

Whether to enable this consul-template instance.

Extra packages to add to GST_PLUGIN_PATH for the instance.

Whether to enable Gitea Actions Runner instance.

Group as which this instance of fcgiwrap will be run.

Configuration for ytdl-sub instances.

User as which this instance of fcgiwrap will be run

Directory where Akkoma will put uploaded files.

This will contain the contents of cups-pdf.conf for this instance, derived from settings

Path to an environment file, containing the TOKEN environment variable, that holds a token to register at the configured Gitea/Forgejo instance.

Default 2FA method for new users and fallback for preferred but disabled methods.

URL of the PeerTube instance.

Home directory of the Nexus3 instance.

v4l2-relayd instances to be created.

The address that Anubis listens to

Path to a file containing the logo of your Hydra instance.

Define multiple instances of vmalert.

Directory of static files

Automatic backup of important data to a AWS S3 (or compatible) instance

Whether to enable the actkbd key mapping daemon

Whether to enable this radicle-native-ci instance.

Whether to enable frp.

The name of this nylon instance.

FQDN for the grocy instance.

The number of instances to start

Runner name declared to the PeerTube instance.

An attribute set of Anubis instances

Your instance's hostname

Local Redis instance name

EasyTier instances.

Settings for a cups-pdf instance, see the descriptions in the template config file in the cups-pdf package

An attribute set of database instances as described in: https://pgbackrest.org/configuration.html#section-stanza

Each instance defaults to set pg-host to the attribute's name

Only allow read operations from this Neo4j instance.

Instances of clamsmtp to run.

Configuration for fcgiwrap instances.

Declarative instance config

The frp consists of client and server

Configuration for ytdl-sub

Environment files for this instance

Whether to enable a Movim instance.

Errbot log level

Configure mailpit instances

SMTP bind interface and port.

Whether to enable hub instance.

FQDN of the Jitsi Meet instance.

Profiles allow multiple colima configurations

Id of the MySQL server instance

The base URL for the Hydra webserver instance

List of identifiers of errbot admins.

Location of the server instance files

The ntfy-sh user to use for authenticating with the ntfy-sh instance

The user under which Anubis is run

The email for the From: header in emails

Fully-qualified domain name (FQDN) for the Movim instance.

Anubis policy configuration

Configuration of multiple mautrix-meta instances. services.mautrix-meta.instances.facebook and services.mautrix-meta.instances.instagram come preconfigured with network.mode, appservice.id, bot username, display name and avatar.

List of paths that ytdl-sub can write to.

The group under which Anubis is run

A list of extra flags to be passed to Anubis.

The name the camera will show up as.

Identify different instances on same host

Errbot backend name.

Maximum number of emails to keep

List of errbot plugin derivations.

HTTP bind interface and port for UI.

The address Anubis' metrics server listens to

Gitea Actions Runner instances.

Frp configuration, for configuration options see the example of client or server on github.

String to be appended to the config verbatim

The vault package to use.

Timezone of your SOGo instance

The width to read from input-stream.

configuration options for btrbk

How often to run ytdl-sub

Errbot identity configuration

A list of the given alerting or recording rules against configured "datasource.url" compatible with Prometheus HTTP API for vmalert to execute

Address to wait for incoming SMTP connections on

Time-out for network connections.

Path to the directory with database, registration, and other data for the bridge service

Whether to open the default ports in the firewall: TCP/UDP 22000 for transfers and UDP 21027 for discovery

Extra args append to the easytier command-line.

A header to add to scanned messages

The height to read from input-stream.

Wether to enable VictoriaMetrics's vmalert.

vmalert evaluates alerting and recording rules against a data source, sends notifications via Alertmanager.

Email domains handled by this instance

The video-format to read from input-stream.

Action to take when a virus is detected

Whether to enable Mautrix-Meta, a Matrix <-> Facebook and Matrix <-> Instagram hybrid puppeting/relaybot bridge.

Whether this is the master instance of your Graylog cluster

Title of the instance.

Send the XCLIENT command to the receiving server, for forwarding client addresses and connection information if the receiving server supports this feature.

Address of the SMTP server to send email to once it has been scanned.

Definitions of SIIT instances of Jool

Port to bind local redis instance to.

Address to bind local redis instance to.

Runner description declared to the PeerTube instance.

User to be set as owner of the UNIX socket.

Socket type: 'unix', 'tcp' or 'tcp6'.

The video-format to write to output-stream.

Anubis policy configuration in Nix syntax

Freeform configuration via environment variables for Anubis

URL of instance

Domain name of the docs instance.

Domain name of the meet instance.

The git package to use

Definitions of NAT64 instances of Jool

Mode to be set on the UNIX socket

FQDN for the Kanboard instance.

FQDN for the Pixelfed instance.

Group to be set as owner of the UNIX socket.

Runtime directory shared between the taler services

Additional bot rules appended to the policy

Number of seconds to wait between each NOOP sent to the sending server. 0 to disable

Whether to enable a Pixelfed instance.

vmalert configuration, passed via command line flags

Command to run when a virus is found

If this instance is part of a replica set, set its name here

The email for the Reply-To: header in emails

Settings to generate easytier-‹name›.toml

Which package to use for the ownCloud Infinite Scale instance.

The gstreamer-pipeline to use for the input-stream.

The domain name serving your Weblate instance.

FQDN for the froide-govplan instance.

Server configuration, see https://maddy.email for more information

Path to a file containing a registration token for the PeerTube instance

The nextcloud-occ program preconfigured to target this Nextcloud instance.

Whether the configuration file specifies a remote mongo instance

Real name of the owner of the instance

FQDN for the nextcloud instance.

FQDN for the ruTorrent instance.

The hosts config to be merged with the settings

The consul-template package to use.

Free-form settings written directly to the config.json file

Name of the database instance to connect to

Endpoint for the victorialogs instance

radicle-native-ci adapter instances.

PeerTube instances to register this runner with.

Home directory of the PlantUML server instance.

The systemd unit (a service or a target) for other services to depend on if they need to be started after matrix-synapse

Temporary directory that needs to be accessible to both clamd and clamsmtpd.

The framerate to read from input-stream.

Socket address

IP and port to which this redis instance acts as a slave.

Extra settings to add to easytier-‹name›.toml.

config.yaml configuration as a Nix attribute set

Automatically determine the IPv4 address of this peer based on existing peers on network.

Specify the local database filename to store persistent data

The reverse proxy target that Anubis is protecting

Configure this LibreNMS instance as a distributed poller

Whether to run in snapshot only mode

Shell commands executed when the instance is starting.

Path to the files with alerting and/or recording rules.

Number of processes to prefork.

The domain serving your Dawarich instance.

The domain serving your CastoPod instance.

The domain serving your Mastodon instance.

The domain serving your PeerTube instance.

Peers to connect initially

Mutual TLS - client certificate to call remote instance requiring client certs.

URL of the Immich instance

IPv4 cidr address of this peer in the virtual network

Additional policy settings merged into the policy file

Mutual TLS - client key to call remote instance requiring client certs

Whether to quarantine files that contain viruses by leaving them in the temporary directory.

Configuration for act_runner daemon

Host or address that this Mattermost instance listens on.

Mail transfer agent (MTA) integration

spool directory

Whether to enable a Jibri instance and configure it to connect to Prosody

Whether to enable JiCoFo instance and configure it to connect to Prosody

The policy file to use

Path to use for the pid file.

Whether to enable the Hologram agent for AWS instance credentials

Shell commands executed when the instance is shutting down.

Labels used to map jobs to their runtime environment

Whether to enable jigasi instance and configure it to connect to Prosody

Hostname of the instance.

output directory; ${HOME} will be expanded to the user's home directory, ${USER} will be expanded to the user name.

PostgreSQL host for operating remotely.

Whether to serve a default robots.txt that denies access to common AI bots by name and all other bots by wildcard.

Template section of vault-agent

The network family that Anubis should bind to

Location where RethinkDB stores its data, 1 data directory per instance.

Whether to include Anubis's default bot detection rules via the (data)/meta/default-config.yaml import

Adapter name that is used in the radicle-ci-broker configuration

List of packages, that are available to actions, when the runner is configured with a host execution label.

Whether to add registration file to services.matrix-synapse.settings.app_service_config_files and make Synapse wait for registration service.

path for anonymously created PDF files

URL this Mattermost instance is reachable under, without trailing slash.

List of paths files that follows systemd environmentfile structure

Maximum number of connections to accept at once.

Whether to enable the Hologram server for AWS instance credentials

Salt to allow room operator passwords generated by this server instance to still work when the server is restarted

Whether to enable authenticating using a signature performed by the ssh-agent

This file contains the full URI that can be used to access this instance of CouchDB

The full URL that the Sharkey instance will be publically accessible on

Whether to install a wrapper around pleroma_ctl to simplify administration of the Akkoma instance.

Extra configuration for roundcube webmail instance

If set, sshd is socket-activated; that is, instead of having it permanently running as a daemon, systemd will start an instance for each incoming connection.

Free-form settings written directly to the config.json file

Hostname shown in peer list and web console.

Prometheus Alertmanager URL

The domain name of your instance

A system user name for this client instance.

A system user name for this client instance.

Whether to enable a local mongodb instance.

Each attribute of this option defines a systemd service that runs an OpenVPN instance

location of GhostScript binary

IP on which the server instance will listen for incoming ServerQuery connections

IP on which the server instance will listen for incoming voice connections

The base URI below which your pretalx instance will be reachable.

Whether this OpenVPN instance should be started automatically.

Path to the file that contains the server salt

Enable clamsmtp's transparent proxy support.

The radicle-native-ci package to use.

Whether or not SSL verification should be enabled for outgoing connections to the homeserver.

The domain name of your instance (eg 'hatsu.local').

Whether clients will access your PeerTube instance with HTTPS

Subscriptions for ytdl-sub

A system group name for this client instance.

A system group name for this client instance.

Rendering mode of grafana-image-renderer:

• default: Creates on browser-instance per rendering request.
• reusable: One browser instance will be started and reused for each rendering request.
• clustered: allows to precisely configure how many browser-instances are supposed to be used

Instance hostname (base domain name)

User account under which this instance of redis-server runs.

LiveKit key file holding one or multiple application secrets

Whether to set up a local redis instance.

Set the log level of the daemon.

Cryptpad configuration settings

The directory where pantalaimon should store its state such as the database file.

The difficulty required for clients to solve the challenge

A system group name for this client instance.

A system group name for this client instance.

The domain name of your instance (eg 'lemmy.ml').

A list of names of users that have additional rights when connecting to the Nix daemon, such as the ability to specify additional binary caches, or to import unsigned NARs

A list of names of users that have additional rights when connecting to the Nix daemon, such as the ability to specify additional binary caches, or to import unsigned NARs

User for anonymous PDF creation

The name of this installation.

Path to use for the pid file.

Configuration of radicle-native-ci

Datasource compatible with Prometheus HTTP API.

Create and use a local Redis instance

Whether to enable this wstunnel instance.

Whether to enable this wstunnel instance.

Group account under which this instance of redis-server runs.

The domain serving your FileSender instance.

If set, shows a contact email address when rendering error pages

The network family that the metrics server should bind to

Path to the yaml registration file of the appservice.

This tells pgmanage whether or not to only allow super users to login

Whether to enable this instance of Anubis.

The path to the file containing the Redis password

Template section of consul-template

Whether to enable starting this wstunnel instance automatically.

Whether to enable starting this wstunnel instance automatically.

File where radicle-native-ci should write the run log.

FQDN for the OnlyOffice instance.

Listener addresses to accept connections from other peers

Whether to configure the required settings to use pfix-srsd in the local Postfix instance.

The origin of your Kanidm instance

Whether to enable creation of database on the instance.

Role of the MySQL server instance.

Directory where per-run directories are stored.

Whether to enable captive browser, a dedicated Chrome instance to log into captive portals without messing with DNS settings.

Specifies the platform on which NixOS should be built

Nextcloud's data storage path

A list of host:port for the Redis servers that are part of a cluster

The origin of your Kanidm instance

Directory under which Actual runs and saves its data

Whether to enable Open Graph tag passthrough

The port where the daemon will listen to client connections for this homeserver

Enable the karakeep-browser service that runs a chromium instance in the background with debugging ports exposed

Specifies the platform on which nix-darwin should be built

Every once in a while, a new nix-darwin release may change configuration defaults in a way incompatible with stateful data

Configuration of this OpenVPN instance

File containing environment variables to substitute when copying the configuration out of Nix store to the services.mautrix-meta.dataDir

Packages added to the adapter's PATH.

Overwrite the URL for the GitLab instance

Overwrite the URL for the GitLab instance

Instance theme.

Which package to use for the Nextcloud instance.

List of Systemd services to require and wait for when starting the application service.

Path to the session tokens file

Make your The Lounge instance public

Whether to enable Paperless-ngx

The address where the daemon will listen to client connections for this homeserver.

Host and port used to connect to a redis instance.

Whether to enable and configure a local Redis instance.

General description of the instance

Extra configuration options

Instance hostname (base domain name)

EasyTier network name.

Whether to automatically set up the database on the local DBMS instance

If you're running a self hosted instance and wish to serve public links, set this to the URL where your albums web app is running.

The path to the password for the specified ntfy-sh user

Enable Tandoor Recipes

pantalaimon options (enables E2E Encryption support)

IP on which the server instance will listen for incoming file transfer connections

Specifies the bar ID for the configured bar instance

Color in which events in this calendar are displayed

Base URL for build logs (mandatory for access from CI broker page).

Whether to configure the required settings to use postsrsd in the local Postfix instance.

Specifies the bar ID for the configured bar instance

Enables InfluxDB on the host system using the services.influxdb2 NixOS module with default options

The primary account of your instance (eg 'example.com').

Enable billing Cron-Jobs on the local instance

This is the URL that users will enter to load your instance

LiveKit key file holding one or multiple application secrets

Whether to automatically set up the database on the local DBMS instance

The URI of the homeserver that the pantalaimon proxy should forward requests to, without the matrix API path but including the http(s) schema.

URL of a cgit instance

config.xml configuration as a Nix attribute set

The registration service that generates the registration file

Whether to enable a local mongodb instance.

Configure Nginx as a reverse proxy for Cryptpad

Color in which events in this calendar are displayed

Custom base path for this Reposilite instance

The port of the InfluxDB instance.

Lock backend to use: 'local' (single instance), 'redis' (distributed), 'postgres' (distributed, requires PostgreSQL)

Jitsi Videobridge instance and configure it to connect to Prosody

Whether to configure the required settings to use postfix-tlspol in the local Postfix instance.

IP or hostname of the InfluxDB instance.

lnd instance gRPC address:port.

URL of the immich instance.

Extra configuration for the postfixadmin instance, see postfixadmin's config.inc.php for available options.

FQDN for the Oncall instance.

The domain that Kanidm manages

How many invidious instances to run

The domain that Kanidm manages

The hostname of this ncdns instance, which defaults to the machine hostname

Compress the btrfs send stream before transferring it from/to remote locations using a compression command.

Replace YouTube links with links to this instance (blank to disable).

Whether to enable creating a postgresql instance.

This option allows you to override the Linux kernel used by NixOS

The default application to be used for a given mimetype

EasyTier network credential used for verification and encryption

The hostname of an instance of radicle-node, reachable via HTTPS.

Default instance (unit) priority.

Whether to allow invalid certificates when provisioning the target instance

The port Conduit will be running on

The PHP-FPM pool that serves SimpleSAMLphp instance.

The port(s) tuwunel will be running on

Whether to enable Google OS Login

Whether to enable Libravatar as profile picture source on your instance

Replace Reddit links with links to this instance (blank to disable).

Parameter-sets for each instance of hddfancontrol.

Extra permission groups to attach to the KMonad instance for this keyboard

Write logs to a specific Cloudwatch Logs stream

Domain name of the instance.

Whether to use binary caches for downloading store paths

The n8n instance timezone

The domain serving your SimpleSAMLphp instance

Basic Auth username used to protect VictoriaLogs instance by authorization

Replace Twitter links with links to this instance (blank to disable).

The domain serving your LibreTranslate instance

The host:port combination or the path to the UNIX socket of a memcached instance

List of paths to instance icons

Create and use a local Meilisearch instance

Reference to the matrix-synapse wrapper with all extras (e.g. for oidc or saml2) added to the PYTHONPATH of all executables

File containing the password for the mpd daemon

File that contains the Basic Auth password used to protect VictoriaLogs instance by authorization

Controls the timeout to connect to a Pi-Hole instance

The interfaces wpa_supplicant will use

Whether to enable creating a clickhouse instance.

List of URLs of the Nextcloud instance

Whether to automatically set up a local Meilisearch instance and configure Sharkey to use it

Grant capabilities to the uWSGI instance

Description of how to identify the filesystem to be duplicated by this instance of bees

Whether to enable the AppArmor Mandatory Access Control system

Description of the homebridge instance.

User name under which the chrony exporter shall be run

Enables distributed pollers for this LibreNMS instance

Group under which the chrony exporter shall be run

Configure nginx as a reverse proxy for mastodon

Whether to generate an extlinux-compatible configuration file under /boot/extlinux.conf

The domain part of the JID for this Jibri instance.

The shell (/bin/sh) command executed once the proxy starts

Basic Auth username used to protect VictoriaTraces instance by authorization

The nickname for this Jibri instance in the MUC.

The prefix that will be added to all metrics

Configure the domain name of this Warpgate instance

Whether the official parsedmarc grafana dashboard should be provisioned to the local grafana instance.

Default configuration for the loggers used by matrix-synapse and its workers

File that contains the Basic Auth password used to protect VictoriaTraces instance by authorization

NNTP URLs to this public-inbox instance

POP3 URLs to this public-inbox instance

IMAP URLs to this public-inbox instance

The port(s) continuwuity will be running on

Sets the border color for the focused window (format: 0xAARRGGBB)

The IP address to connect to the XMPP server on

Basic Auth username used to protect VictoriaMetrics instance by authorization

Whether the automatically provisioned Elasticsearch instance should be added as a grafana datasource

File that contains the Basic Auth password used to protect VictoriaMetrics instance by authorization

Addresses of public STUN services to use to automatically find the public and local addresses of this Jitsi-Videobridge instance without the need for manual configuration

Enable per-torrent metrics

Whether to set up and use a local instance of Elasticsearch.

Compression algorithm used by this instance of Reposilite. none reduces usage of CPU & memory, but requires transfering more data.

By default any user can create an account on this gitea instance

Conditions to make outbound packets go through this redsocks instance

Whether to assign predictable names to network interfaces

Point DOCKER_HOST to rootless Docker instance for normal users by default.

The base URL of the ntfy.sh instance.

Your instance's hostname for generating URLs throughout the app

Script to provision the TPM before control is handed off to the VM.

TPM2TOOLS_TCTI will be provided to configure tpm2-tools to use the swtpm instance transparently. TCTI is also provided as a generic value, consumer is expected to re-export it however it may need (TPM2OPENSSL_TCTI, TPM2_PKCS11_TCTI, ...).

File must contain one line, example: R3300000,R3400000,NC430000,...

The base path for plugin endpoints

The AWS Region

Additional configuration for the WirePlumber daemon when run in single-instance mode (the default in nixpkgs and currently the only supported way to run WirePlumber configured via extraConfig)

Filters can be used optionally to filter the instance list by other criteria.

Whether to enable tweaking of kernel parameters to open many more connections at the same time

Filter can be used optionally to filter the instance list by other criteria Syntax of this filter string is described here in the filter query parameter section: https://cloud.google.com/compute/docs/reference/latest/instances/list.

A boolean that controls whether site visitors can create new accounts

The database backend for the service

Controls how Prometheus handles conflicts between labels that are already present in scraped data and labels that Prometheus would attach server-side ("job" and "instance" labels, manually configured target labels, and labels generated by service discovery implementations)

XFRM interface ID set on inbound policies/SA

XFRM interface ID set on outbound policies/SA

Netfilter mark and mask for output traffic

Role of the targets to retrieve

Netfilter mark and mask for input traffic

The tag separator used to separate concatenated GCE instance network tags

The AWS region

Refresh interval to re-read the instance list

Refresh interval to re-read the cloud instance list

The string by which Linode Instance tags are joined into the tag label

Refresh interval to re-read the instance list

Whether the service discovery should list all instances for all projects

Refresh interval to re-read the instance list

Refresh interval to re-read the instance list

Maximum number of connections per plugin instance.