Additional environment variables to provide to authelia

Name is used as a suffix for the service name, user, and group

Multi-domain protection currently requires multiple instances of Authelia

It is recommended you keep your secrets separate from the configuration

Here you can provide authelia with configuration files or directories

Configuring authelia's secret files via the secrets attribute set is intended to be convenient and help catch cases where values are required to run at all

Path to your JWT secret used during identity verificaton.

Path to your HMAC secret used to sign OIDC JWTs.

Path to your session secret

Path to your private key file used to encrypt OIDC JWTs.

Path to your storage encryption key.

LiveKit key file holding one or multiple application secrets

A list of files containing the various secrets

LiveKit key file holding one or multiple application secrets

config.xml configuration as a Nix attribute set

List of paths files that follows systemd environmentfile structure

Secrets to append to the initrd

Secrets to run PeerTube

A list of files containing the various secrets

File containing environment variables to substitute when copying the configuration out of Nix store to the services.mautrix-meta.dataDir

The name of the user for this authelia instance.

A list of files containing the various secrets

The name of the group for this authelia instance.

A file containing the secrets for the dynamic DNS provider

Whether to enable Authelia instance.

A file containing the secret used to encrypt secrets for OTP tokens

A file containing the various secrets

A list of paths to NNCP configuration files that should not be in the Nix store

yaml file containing all secrets. this needs to be in the same structure as the configuration

Path of a file with extra environment variables to be loaded from disk

Path to file containing secrets for Pomerium, in systemd EnvironmentFile format

Secret files to read into entries in config.php

This is a small wrapper over systemd's LoadCredential

A file containing the secret used to encrypt variables in the DB

A file containing the secret used to encrypt session keys

Default location for kubernetes secrets

Attribute set of filesystem paths

A list of paths to IPSec secret files

File containing the access token for Draupnir's Matrix account to be used in place of services.draupnir.settings.accessToken.

A file containing the secret used to encrypt variables in the DB

The authelia package to use.

File consisting of lines of the form varname=value to define variables for the wireless configuration

The secret data used to encode the SRS address. to generate, use a command like: for n in $(seq 5); do dd if=/dev/urandom count=1 bs=1024 status=none | sha256sum | sed 's/ -$//' | sed 's/^/ /'; done

Secret keys used for signing and verification.

A list of files containing the various secrets

EAP secret section for a specific secret

Path to the file containing the secret keys.

A file containing the salt for active record encryption in the DB

Your Authelia config.yml as a Nix attribute set

Sensitive configuration values such as passwords, API keys, and tokens

NTLM secret section for a specific secret

The theme to display.

EAP secret section for a specific secret

Level of verbosity for logs.

Format the logs are written as.

Secrets like SECRET_KEY_BASE and BASIC_AUTH_PASSWORD should be passed to the service without adding them to the world-readable Nix store

uWSGI configuration

Instance ID for when running multiple processes (default null).

Instance name used to distinguish between different instances

Path to a JSON file containing secrets for effects

Path to a JSON file containing secrets for effects

A file containing the secret used to encrypt some rails data in the DB

Private key decryption passphrase for a key in the rsa folder.

Postquantum Preshared Key (PPK) section for a specific secret

IKE preshared secret section for a specific secret

The instance ID to listen for events for.

Private key decryption passphrase for a key in the ecdsa folder.

Definition for a private key that's stored on a token/smartcard/TPM.

Private key decryption passphrase for a key in the pkcs8 folder.

The address to listen on.

JSON file containing secret keys

TLS certificates are obtained by modules called "certificate loaders"

File name in the rsa folder for which this passphrase should be used.

PKCS#12 decryption passphrase for a container in the pkcs12 folder.

File path where the logs will be written

Instance name.

The instance url to which the provisioning tool should connect.

PPK identity the PPK belongs to

Identity the EAP/XAuth secret belongs to

Optional slot number to access the token.

IKE identity the IKE preshared secret belongs to

Path to the API key to authenticate with a local CrowdSec API

File name in the ecdsa folder for which this passphrase should be used.

File name in the pkcs8 folder for which this passphrase should be used.

Identity the NTLM secret belongs to

Private key decryption passphrase for a key in the private folder.

Value of decryption passphrase for RSA key.

Instance administrator email.

Optional PIN required to access the key on the token

Identity the EAP/XAuth secret belongs to

File name in the pkcs12 folder for which this passphrase should be used.

Value of decryption passphrase for ECDSA key.

Value of decryption passphrase for PKCS#8 key.

Optional PKCS#11 module name to access the token.

Path to file that contains LDAP password for user in {option}`ldap.username

File name in the private folder for which this passphrase should be used.

Hex-encoded CKA_ID or handle of the private key on the token or TPM, respectively.

Value of the EAP/XAuth secret

Value of the IKE preshared secret

Value of decryption passphrase for PKCS#12 container.

Whether to also log to stdout when a file_path is defined.

Value of the PPK

Set of btrbk instances

Value of decryption passphrase for private key.

Errbot instance configs

Value of the EAP/XAuth secret

File containing the password for Draupnir's Matrix account when used in conjunction with Pantalaimon to be used in place of services.draupnir.settings.pantalaimon.password.

Permits to raise one or more cups-pdf instances

Value of the NTLM secret, which is the NT Hash of the actual secret, that is, MD4(UTF-16LE(secret))

Enable Metrics.

The address to listen on for metrics

How often this btrbk instance is started

The name identifying the runner instance towards the Gitea/Forgejo instance.

A list of secrets to provide to NetworkManager by reading their values from configured files

Attribute set of vault-agent instances

A file containing the secret used to encrypt some rails data in a deterministic way in the DB

Whether to enable a CUPS printer queue for this instance

Data directory for errbot instance.

User under which this instance runs.

The name of the instance.

Whether to enable ytdl-sub instance.

Specify SSH host keys to import into the initrd

Group under which this instance runs.

varnishstat -n value.

Whether to enable this instance of Anubis.

File containing the secret token when using the Synapse HTTP Antispam module to be used in place of services.draupnir.settings.web.synapseHTTPAntispam.authorization

Options for Bookstack configuration

Instance description.

Whether to enable this vault-agent instance.

The fallback instance name if not configured into the admin UI

Whether to enable this v4l2-relayd instance.

Configure the instance from config server

Enable the instance.

Configuration options for cross-seed

Assign a icinga instance to this transport

Frp instances.

Path to file containing environment variables

Settings to configure wiki-js

Attribute set of consul-template instances

Environment file as defined in systemd.exec(5)

User under which this instance runs.

Base URL of your Gitea/Forgejo instance.

name of the setting section for which secrets are requested

Group under which this instance runs.

Whether to enable this cups-pdf instance.

Configuration for ytdl-sub instances.

A YAML file containing secrets such as database or user passwords

Path to easytier config file

Plain token to register at the configured Gitea/Forgejo instance.

Default 2FA method for new users and fallback for preferred but disabled methods.

Whether to enable this consul-template instance.

Path to file containing environment variables

Group as which this instance of fcgiwrap will be run.

Extra packages to add to GST_PLUGIN_PATH for the instance.

Whether to enable Gitea Actions Runner instance.

User as which this instance of fcgiwrap will be run

Directory where Akkoma will put uploaded files.

This will contain the contents of cups-pdf.conf for this instance, derived from settings

This option specifies the Nix package instance to use throughout the system.

This option specifies the Nix package instance to use throughout the system.

Path to file that contains Client ID.

The nm-file-secret-agent package to use.

Path to an environment file, containing the TOKEN environment variable, that holds a token to register at the configured Gitea/Forgejo instance.

key in the setting section for which this entry provides a value

file from which the secret value is read

whether leading and trailing whitespace should be stripped from the files content before being passed to NetworkManager

v4l2-relayd instances to be created.

Define multiple instances of vmalert.

URL of the PeerTube instance.

The address that Anubis listens to

interface name of the NetworkManager connection

The number of instances to start

Whether to enable frp.

Whether to initialise non‐existent secrets with random values

Directory of static files

An attribute set of Anubis instances

Whether to enable this radicle-native-ci instance.

UUID of the connection profile

UUIDs are assigned once on connection creation and should never change as long as the connection still applies to the same network.

The frp consists of client and server

NetworkManager connection type

The NetworkManager configuration settings reference roughly corresponds to connection types

connection id used by NetworkManager

Environment variables to pass to the n8n service

EasyTier instances.

Credentials envs used to configure Stalwart secrets

Instances of clamsmtp to run.

Configuration for fcgiwrap instances.

Home directory of the Nexus3 instance.

Settings for a cups-pdf instance, see the descriptions in the template config file in the cups-pdf package

Your instance's hostname

Path to configuration file

Configuration for ytdl-sub

Configure mailpit instances

Credentials envs used to configure Stalwart-Mail secrets

Errbot log level

An attribute set of database instances as described in: https://pgbackrest.org/configuration.html#section-stanza

Each instance defaults to set pg-host to the attribute's name

Runner name declared to the PeerTube instance.

Path to a file containing the logo of your Hydra instance.

SMTP bind interface and port.

The name of a systemd user service that must complete before the rclone configuration file is written

Declarative instance config

The user under which Anubis is run

List of identifiers of errbot admins.

Whether to enable the actkbd key mapping daemon

Path to file that contains Client Secret.

Automatic backup of important data to a AWS S3 (or compatible) instance

FQDN for the grocy instance.

Configuration of multiple mautrix-meta instances. services.mautrix-meta.instances.facebook and services.mautrix-meta.instances.instagram come preconfigured with network.mode, appservice.id, bot username, display name and avatar.

Anubis policy configuration

Environment files for this instance

The group under which Anubis is run

The name of this nylon instance.

Maximum number of emails to keep

List of paths that ytdl-sub can write to.

A list of extra flags to be passed to Anubis.

Only allow read operations from this Neo4j instance.

The name the camera will show up as.

Errbot backend name.

The email for the From: header in emails

List of errbot plugin derivations.

Environment variables to set for the service

Local Redis instance name

HTTP bind interface and port for UI.

Frp configuration, for configuration options see the example of client or server on github.

Identify different instances on same host

The width to read from input-stream.

Gitea Actions Runner instances.

String to be appended to the config verbatim

The vault package to use.

The address Anubis' metrics server listens to

Whether to enable a Movim instance.

configuration options for btrbk

How often to run ytdl-sub

A list of the given alerting or recording rules against configured "datasource.url" compatible with Prometheus HTTP API for vmalert to execute

.env settings for Movim

FQDN of the Jitsi Meet instance.

Environment variables from this file will be interpolated into the final config file using envsubst with this syntax: $ENVIRONMENT or ${VARIABLE}

Errbot identity configuration

The height to read from input-stream.

The base URL for the Hydra webserver instance

Path to the directory with database, registration, and other data for the bridge service

Address to wait for incoming SMTP connections on

The video-format to read from input-stream.

Time-out for network connections.

evcc configuration as a Nix attribute set

Location of the server instance files

Wether to enable VictoriaMetrics's vmalert.

vmalert evaluates alerting and recording rules against a data source, sends notifications via Alertmanager.

A header to add to scanned messages

Whether to enable hub instance.

Extra args append to the easytier command-line.

Profiles allow multiple colima configurations

Environment variables from this file will be interpolated into the final config file using envsubst with this syntax: $ENVIRONMENT or ${VARIABLE}

Fully-qualified domain name (FQDN) for the Movim instance.

Action to take when a virus is detected

The ntfy-sh user to use for authenticating with the ntfy-sh instance

Id of the MySQL server instance

Whether to enable Mautrix-Meta, a Matrix <-> Facebook and Matrix <-> Instagram hybrid puppeting/relaybot bridge.

Send the XCLIENT command to the receiving server, for forwarding client addresses and connection information if the receiving server supports this feature.

User to be set as owner of the UNIX socket.

Socket type: 'unix', 'tcp' or 'tcp6'.

The video-format to write to output-stream.

YAML settings for maubot

Address of the SMTP server to send email to once it has been scanned.

Anubis policy configuration in Nix syntax

Mode to be set on the UNIX socket

Freeform configuration via environment variables for Anubis

Additional bot rules appended to the policy

Group to be set as owner of the UNIX socket.

Base directory for custom templates and other options

A file containing secrets as environment variables

Additional prosody configuration

The generated file is processed by envsubst to allow secrets to be passed securely via environment variables.

Extra environment files to pass to all Dawarich services

Extra environment files to pass to all mastodon services

Number of seconds to wait between each NOOP sent to the sending server. 0 to disable

Command to run when a virus is found

vmalert configuration, passed via command line flags

Timezone of your SOGo instance

Group for hg.sr.ht

The gstreamer-pipeline to use for the input-stream.

radicle-native-ci adapter instances.

Allows loading of public environment variables, these are emitted to the log so it shouldn't contain secrets.

Environment file to be passed to the systemd service

Environment file to be passed to the systemd service

Extra environment files to pass to DocuSeal services

Group for man.sr.ht

Group for git.sr.ht

Group for hub.sr.ht

Settings to generate easytier-‹name›.toml

The primary patroni configuration

Runner description declared to the PeerTube instance.

Email domains handled by this instance

Group for todo.sr.ht

Group for meta.sr.ht

.env settings for Pixelfed

Path to a JSON file containing settings that will be merged with the settings option

Free-form settings written directly to the config.json file

Title of the instance.

Attribute set of arbitrary config options

Attribute set of arbitrary config options

Attribute set of arbitrary config options

The consul-template package to use.

The email for the Reply-To: header in emails

Port to bind local redis instance to.

Address to bind local redis instance to.

Environment variables to set for the service

The reverse proxy target that Anubis is protecting

Socket address

The framerate to read from input-stream.

Whether this is the master instance of your Graylog cluster

Automatically determine the IPv4 address of this peer based on existing peers on network.

The systemd unit (a service or a target) for other services to depend on if they need to be started after matrix-synapse

Path to the files with alerting and/or recording rules.

Whether to open the default ports in the firewall: TCP/UDP 22000 for transfers and UDP 21027 for discovery

PeerTube instances to register this runner with.

Specify the local database filename to store persistent data

A list of paths to extra steps files

Whether to run in snapshot only mode

Group for paste.sr.ht

Group for lists.sr.ht

Group for pages.sr.ht

config.yaml configuration as a Nix attribute set

Temporary directory that needs to be accessible to both clamd and clamsmtpd.

Number of processes to prefork.

Peers to connect initially

An attribute set of remote configurations

Additional configuration for MicroBin, see https://microbin.eu/docs/installation-and-configuration/configuration/ for supported values

Additional configuration for wastebin, see https://github.com/matze/wastebin#usage for supported values

Path to config file to parse and append to settings

Path to the Django secret key

Path to the Django secret key

Extra settings to add to easytier-‹name›.toml.

Additional policy settings merged into the policy file

IPv4 cidr address of this peer in the virtual network

URL of instance

Domain name of the docs instance.

Domain name of the meet instance.

spool directory

A file for storing secrets

Path to the file containing your secret pleroma configuration.

DO NOT POINT THIS OPTION TO THE NIX STORE, the store being world-readable, it'll compromise all your secrets.

Path to a file containing a registration token for the PeerTube instance

Attribute set of arbitrary config options

Additional configuration for transfer-sh, see https://github.com/dutchcoders/transfer.sh#usage-1 for supported values

Adapter name that is used in the radicle-ci-broker configuration

output directory; ${HOME} will be expanded to the user's home directory, ${USER} will be expanded to the user name.

This can be used to pass secrets to the systemd service without adding them to the nix store.

Database url

The policy file to use

Runtime directory shared between the taler services

FQDN for the Kanboard instance.

FQDN for the Pixelfed instance.

Renovate's global configuration

Path to use for the pid file.

Group for builds.sr.ht

Which package to use for the ownCloud Infinite Scale instance.

Whether to quarantine files that contain viruses by leaving them in the temporary directory.

The hosts config to be merged with the settings

If this instance is part of a replica set, set its name here

Credentials envs used to configure nomad secrets.

Whether to enable a Pixelfed instance.

Configuration for act_runner daemon

Labels used to map jobs to their runtime environment

Server configuration, see https://maddy.email for more information

IMAP authentication configuration for rspamd-trainer

Whether to include Anubis's default bot detection rules via the (data)/meta/default-config.yaml import

path for anonymously created PDF files

Environment variables from this file will be interpolated into the final config file using envsubst with this syntax: $ENVIRONMENT or ${VARIABLE}

Whether to serve a default robots.txt that denies access to common AI bots by name and all other bots by wildcard.

Static settings set in the config.toml, see https://github.com/knadh/listmonk/blob/master/config.toml.sample for details

The network family that Anubis should bind to

Template section of vault-agent

Path of a file containing secrets (gpg passphrase, access key...) in the format of EnvironmentFile as described by systemd.exec(5)

Environment file to inject e.g. secrets into the configuration.

The domain name serving your Weblate instance.

FQDN for the froide-govplan instance.

File containing the Flask secret key

Config files to merge into the settings defined in services.olivetin.settings

NNCP configuration, see http://www.nncpgo.org/Configuration.html

The primary synapse configuration

The nextcloud-occ program preconfigured to target this Nextcloud instance.

PostgreSQL host for operating remotely.

Endpoint for the victorialogs instance

Attrset that is converted and passed as config file

Whether the configuration file specifies a remote mongo instance

List of packages, that are available to actions, when the runner is configured with a host execution label.

Real name of the owner of the instance

Whether to add registration file to services.matrix-synapse.settings.app_service_config_files and make Synapse wait for registration service.

FQDN for the nextcloud instance.

FQDN for the ruTorrent instance.

Attribute set of arbitrary config options

Attribute set of arbitrary config options

The radicle-native-ci package to use.

Definitions of SIIT instances of Jool

Name of the database instance to connect to

location of GhostScript binary

Mail transfer agent (MTA) integration

Environment file for specifying additional settings such as secrets

Prometheus Alertmanager URL

Hostname shown in peer list and web console.

Maximum number of connections to accept at once.

Home directory of the PlantUML server instance.

The git package to use

Environment variables to set for the service

Free-form settings written directly to the config.json file

Override default chart values via Nix expressions

Definitions of NAT64 instances of Jool

Environment variables to set for the service

IP and port to which this redis instance acts as a slave.

Path to a file containing sensitive environment as described in {manpage}`systemd.exec(5)

File with environment variables to pass into the runtime environment

Whether to enable a Jibri instance and configure it to connect to Prosody

Configuration settings for the generated config file

Shell commands executed when the instance is starting.

Configuration of radicle-native-ci

The domain serving your Dawarich instance.

The domain serving your CastoPod instance.

The domain serving your Mastodon instance.

The domain serving your PeerTube instance.

Whether to enable JiCoFo instance and configure it to connect to Prosody

Mutual TLS - client certificate to call remote instance requiring client certs.

Enable clamsmtp's transparent proxy support.

Whether or not SSL verification should be enabled for outgoing connections to the homeserver.

Generates the conduit.toml configuration file

User for anonymous PDF creation

File where radicle-native-ci should write the run log.

Override default chart values via Nix expressions

Mutual TLS - client key to call remote instance requiring client certs

Configure this LibreNMS instance as a distributed poller

A list of paths to extra settings files

Path to file containing environment variables

Whether to enable jigasi instance and configure it to connect to Prosody

URL of the Immich instance

The name of this installation.

Your configuration.yaml as a Nix attribute set

The difficulty required for clients to solve the challenge

Host or address that this Mattermost instance listens on.

Subscriptions for ytdl-sub

Allowed users and their secrets

Hostname of the instance.

Path to use for the pid file.

Directory where per-run directories are stored.

Whether to enable the Hologram agent for AWS instance credentials

Shell commands executed when the instance is shutting down.

If set, shows a contact email address when rendering error pages

Datasource compatible with Prometheus HTTP API.

The network family that the metrics server should bind to

YAML file to merge into the schleuder config at runtime

Set the log level of the daemon.

The directory where pantalaimon should store its state such as the database file.

Template section of consul-template

Environment file to be passed to the systemd service

Path to file containing sensitive environment variables

Location where RethinkDB stores its data, 1 data directory per instance.

Settings serialized into user-data/conf.yml before build

File to load as environment file

Salt to allow room operator passwords generated by this server instance to still work when the server is restarted

This file contains the full URI that can be used to access this instance of CouchDB

Environment variables from this file will be interpolated into the final config file using envsubst with this syntax: $ENVIRONMENT or ${VARIABLE}

Listener addresses to accept connections from other peers

File to load as environment file

Path to the yaml registration file of the appservice.

The full URL that the Sharkey instance will be publically accessible on

URL this Mattermost instance is reachable under, without trailing slash.

Files containing additional config environment variables for gotify-server

Extra config files to include

The base URI below which your pretalx instance will be reachable.

Apply configurations for pianobar via key/value attributes

Whether to enable the Hologram server for AWS instance credentials

Path to an environment file loaded for the tsidp service

A system user name for this client instance.

A system user name for this client instance.

Settings serialized into config.yml before build

Whether to install a wrapper around pleroma_ctl to simplify administration of the Akkoma instance.

Packages added to the adapter's PATH.

Each attribute of this option defines a systemd service that runs an OpenVPN instance

If set, sshd is socket-activated; that is, instead of having it permanently running as a daemon, systemd will start an instance for each incoming connection.

Extra configuration for roundcube webmail instance

Path to the file that contains the server salt

Environment file to be passed to the systemd service

Environment file to be passed to the systemd service

Environment variables made available to Patroni as files content, useful for providing secrets from files.

Environment file to be passed to the systemd service

Path to a file containing extra ntfy environment variables in the systemd EnvironmentFile format

A file including Invidious settings

Whether to enable Open Graph tag passthrough

The domain name of your instance

Whether to enable a local mongodb instance.

The domain name of your instance (eg 'hatsu.local').

Whether this OpenVPN instance should be started automatically.

A system group name for this client instance.

A system group name for this client instance.

User account under which this instance of redis-server runs.

Instance hostname (base domain name)

Path to environment file

Path to environment file

The port where the daemon will listen to client connections for this homeserver

Whether clients will access your PeerTube instance with HTTPS

Files to load environment variables from in addition to services.chhoto-url.settings

Environment file (see systemd.exec(5) "EnvironmentFile=" section for the syntax) passed to the service

Whether to set up a local redis instance.

Base URL for build logs (mandatory for access from CI broker page).

IP on which the server instance will listen for incoming ServerQuery connections

IP on which the server instance will listen for incoming voice connections

A system group name for this client instance.

A system group name for this client instance.

Files to load environment variables from (in addition to services.zipline.settings)

This can be used to pass secrets to the systemd service without adding them to the nix store

File containing env-vars to be substituted into the final config

The domain name of your instance (eg 'lemmy.ml').

Rendering mode of grafana-image-renderer:

• default: Creates on browser-instance per rendering request.
• reusable: One browser instance will be started and reused for each rendering request.
• clustered: allows to precisely configure how many browser-instances are supposed to be used

File to load as environment file

The path to the file containing the Redis password

Create and use a local Redis instance

Cryptpad configuration settings

List of Systemd services to require and wait for when starting the application service.

Group account under which this instance of redis-server runs.

Environment file to be passed to the systemd service

This tells pgmanage whether or not to only allow super users to login

Attribute set containing paths to files to add to the environment of linkwarden

Environment variables which are loaded from the contents of the specified file paths

Environment file to inject e.g. secrets into the configuration

Path to file containing the secret key base

Whether to enable this instance of Anubis.

The address where the daemon will listen to client connections for this homeserver.

Whether to enable authenticating using a signature performed by the ssh-agent

EasyTier network name.

File to load as the environment file

Whether to enable this wstunnel instance.

Whether to enable this wstunnel instance.

Path to an EnvironmentFile for the monero service as defined in systemd.exec(5)

The domain serving your FileSender instance.

List of paths to files containing environment variables for Sharkey to use at runtime

Files containing additional environment variables to pass to Stirling PDF

Extra configuration options

A list of host:port for the Redis servers that are part of a cluster

Environment file as defined in systemd.exec(5)

Extra settings in the form of a set of key-value pairs

Whether to enable starting this wstunnel instance automatically.

Whether to enable starting this wstunnel instance automatically.

The origin of your Kanidm instance

Directory under which Actual runs and saves its data

Whether to enable creation of database on the instance.

The origin of your Kanidm instance

Role of the MySQL server instance.

If set the URL specified in bitcoin.rpc.url will get the content of this file added as an URL password, so http://user@example.com will turn into http://user:SOMESECRET@example.com

State directory (secrets, work directory, etc) for agent

State directory (secrets, work directory, etc) for agent

Additional environment file as defined in systemd.exec(5)

FQDN for the OnlyOffice instance.

Whether to configure the required settings to use pfix-srsd in the local Postfix instance.

Path to an environment-file which may contain secrets.

Nextcloud's data storage path

Path to an environment file to be loaded

Enable the karakeep-browser service that runs a chromium instance in the background with debugging ports exposed

File to load as environment file

Environment variables which are loaded from the contents of files at a file paths, mainly used for secrets

Overwrite the URL for the GitLab instance

Overwrite the URL for the GitLab instance

File to load environment variables from

Files to load environment variables from in addition to services.glitchtip.settings

Known homeservers

The registration service that generates the registration file

Configuration of this OpenVPN instance

The URI of the homeserver that the pantalaimon proxy should forward requests to, without the matrix API path but including the http(s) schema.

Path to the session tokens file

A list of names of users that have additional rights when connecting to the Nix daemon, such as the ability to specify additional binary caches, or to import unsigned NARs

A list of names of users that have additional rights when connecting to the Nix daemon, such as the ability to specify additional binary caches, or to import unsigned NARs

An environment file as defined in systemd.exec(5)

Instance theme.

Which package to use for the Nextcloud instance.

Make your The Lounge instance public

Whether to enable Paperless-ngx

File containing environment variables to substitute in the configuration before starting Traccar

Shared folder list

Host and port used to connect to a redis instance.

An environment file as defined in systemd.exec(5)

If you're running a self hosted instance and wish to serve public links, set this to the URL where your albums web app is running.

Whether to enable and configure a local Redis instance.

Environment file as defined in systemd.exec(5)

General description of the instance

Instance hostname (base domain name)

Whether to automatically set up the database on the local DBMS instance

The path to the password for the specified ntfy-sh user

Enable Tandoor Recipes

Lock backend to use: 'local' (single instance), 'redis' (distributed), 'postgres' (distributed, requires PostgreSQL)

Configuration for the rclone remote being used for backup

Compress the btrfs send stream before transferring it from/to remote locations using a compression command.

Whether to enable captive browser, a dedicated Chrome instance to log into captive portals without messing with DNS settings.

Enables InfluxDB on the host system using the services.influxdb2 NixOS module with default options

EasyTier network credential used for verification and encryption

pantalaimon options (enables E2E Encryption support)

Specifies the platform on which NixOS should be built

Path to a file containing extra paperless config options in the systemd EnvironmentFile format

The primary account of your instance (eg 'example.com').

The port of the InfluxDB instance.

Whether to configure the required settings to use postsrsd in the local Postfix instance.

This is the URL that users will enter to load your instance

Whether to automatically set up the database on the local DBMS instance

Enable billing Cron-Jobs on the local instance

IP or hostname of the InfluxDB instance.

Every once in a while, a new nix-darwin release may change configuration defaults in a way incompatible with stateful data

IP on which the server instance will listen for incoming file transfer connections

URL of a cgit instance

Specifies the platform on which nix-darwin should be built

Environment file (see systemd.exec(5) "EnvironmentFile=" section for the syntax) passed to the service

File to load environment variables from

File to load environment variables from

Custom base path for this Reposilite instance

lnd instance gRPC address:port.

Configure Nginx as a reverse proxy for Cryptpad

Jitsi Videobridge instance and configure it to connect to Prosody

Settings to configure backend server

Environment file as defined in systemd.exec(5)

The domain that Kanidm manages

URL of the immich instance.

Whether to enable a local mongodb instance.

The domain that Kanidm manages

File containing environment variables to substitute when copying the configuration out of Nix store to the services.mautrix-discord.dataDir

Specifies the bar ID for the configured bar instance

The path to an environment file that contains environment variables to pass to the homepage-dashboard service, for the purpose of passing secrets to the service

Path of a file with extra environment variables to be loaded from disk

Whether to configure the required settings to use postfix-tlspol in the local Postfix instance.

Default instance (unit) priority.

FQDN for the Oncall instance.

The hostname of this ncdns instance, which defaults to the machine hostname

Path to a file containing extra LubeLogger config options in the systemd EnvironmentFile format

Environment file as defined in systemd.exec(5)

Extra configuration for the postfixadmin instance, see postfixadmin's config.inc.php for available options.

Path to an environment file loaded for the rmfakecloud service

How many invidious instances to run

Environment file as defined in systemd.exec(5)

Color in which events in this calendar are displayed

Whether to enable creating a postgresql instance.

The port Conduit will be running on

Use this option to configure advanced authentication methods like EAP

Specifies the bar ID for the configured bar instance

This is the default directory to look for statically configured secrets like cluster-join-token.key

This is the default directory to look for statically configured secrets like cluster-join-token.key

Replace YouTube links with links to this instance (blank to disable).

The port(s) tuwunel will be running on

The environment hook will run before all other commands, and can be used to set up secrets, data, etc

The hash algorithm to use for passwords and API keys

Environment file as defined in systemd.exec(5)

Regular configuration options as described in rclone's documentation https://rclone.org/docs/

Whether to allow invalid certificates when provisioning the target instance

Domain name of the instance.

Whether to enable Libravatar as profile picture source on your instance

File to load environment variables from

The configuration file for OpenVPN.

Color in which events in this calendar are displayed

Replace Reddit links with links to this instance (blank to disable).

File to load as environment file

Additional environment file as defined in systemd.exec(5)

Extra permission groups to attach to the KMonad instance for this keyboard

Custom environment variables injected to build environment

Custom environment variables injected to build environment

Whether to use binary caches for downloading store paths

Files to load as an environment file just before Traefik starts

The n8n instance timezone

Parameter-sets for each instance of hddfancontrol.

Write logs to a specific Cloudwatch Logs stream

The host:port combination or the path to the UNIX socket of a memcached instance

Reference to the matrix-synapse wrapper with all extras (e.g. for oidc or saml2) added to the PYTHONPATH of all executables

Replace Twitter links with links to this instance (blank to disable).

The PHP-FPM pool that serves SimpleSAMLphp instance.

Config files to merge into the settings defined in services.prometheus.alertmanager-ntfy.settings

Basic Auth username used to protect VictoriaLogs instance by authorization

Create and use a local Meilisearch instance

Controls the timeout to connect to a Pi-Hole instance

The hostname of an instance of radicle-node, reachable via HTTPS.

File to load as environment file

The domain serving your LibreTranslate instance

File containing the password for the mpd daemon

Whether to enable creating a clickhouse instance.

The domain serving your SimpleSAMLphp instance

This option allows you to override the Linux kernel used by NixOS

The default application to be used for a given mimetype

Whether to enable Google OS Login

File that contains the Basic Auth password used to protect VictoriaLogs instance by authorization

User name under which the chrony exporter shall be run

Whether to automatically set up a local Meilisearch instance and configure Sharkey to use it

Configuration for the rclone remote being used for backup

Environment file as defined in systemd.exec(5)

Grant capabilities to the uWSGI instance

Additional environment file or files as defined in systemd.exec(5)

Description of how to identify the filesystem to be duplicated by this instance of bees

List of URLs of the Nextcloud instance

Group under which the chrony exporter shall be run

Description of the homebridge instance.

Configure nginx as a reverse proxy for mastodon

The domain part of the JID for this Jibri instance.

Enables distributed pollers for this LibreNMS instance

Default configuration for the loggers used by matrix-synapse and its workers

Environment variables which are read by healthchecks (local)_settings.py

List of paths to instance icons

The prefix that will be added to all metrics

Environment variables which are read by healthchecks (local)_settings.py

The nickname for this Jibri instance in the MUC.

The interfaces wpa_supplicant will use

File containing additional config environment variables for alertmanager-gotify-bridge

Whether the official parsedmarc grafana dashboard should be provisioned to the local grafana instance.

Configure the domain name of this Warpgate instance

Basic Auth username used to protect VictoriaTraces instance by authorization

Whether to enable the AppArmor Mandatory Access Control system

Environment variables to set for the service

EnvironmentFile as defined in systemd.exec(5)

Environment file as defined in systemd.exec(5)

The port(s) continuwuity will be running on

File that contains the Basic Auth password used to protect VictoriaTraces instance by authorization

NNTP URLs to this public-inbox instance

POP3 URLs to this public-inbox instance

IMAP URLs to this public-inbox instance

Whether to generate an extlinux-compatible configuration file under /boot/extlinux.conf

The IP address to connect to the XMPP server on

Whether the automatically provisioned Elasticsearch instance should be added as a grafana datasource

Sets the border color for the focused window (format: 0xAARRGGBB)

The shell (/bin/sh) command executed once the proxy starts

Basic Auth username used to protect VictoriaMetrics instance by authorization

Enable per-torrent metrics

Addresses of public STUN services to use to automatically find the public and local addresses of this Jitsi-Videobridge instance without the need for manual configuration

By default any user can create an account on this gitea instance

Environment file as defined in systemd.exec(5)

Whether to set up and use a local instance of Elasticsearch.

Compression algorithm used by this instance of Reposilite. none reduces usage of CPU & memory, but requires transfering more data.

File that contains the Basic Auth password used to protect VictoriaMetrics instance by authorization

The shared secret used to compute passwords for the TURN server

The base URL of the ntfy.sh instance.

Secret key used as a base to generate further secrets for encrypting and signing data

Conditions to make outbound packets go through this redsocks instance

Your instance's hostname for generating URLs throughout the app

File must contain one line, example: R3300000,R3400000,NC430000,...

Additional configuration for the WirePlumber daemon when run in single-instance mode (the default in nixpkgs and currently the only supported way to run WirePlumber configured via extraConfig)

The base path for plugin endpoints

Secret key for authentication tokens

Point DOCKER_HOST to rootless Docker instance for normal users by default.

The AWS Region

Whether to assign predictable names to network interfaces

A boolean that controls whether site visitors can create new accounts

Whether to enable tweaking of kernel parameters to open many more connections at the same time

Filters can be used optionally to filter the instance list by other criteria.

The database backend for the service

Filter can be used optionally to filter the instance list by other criteria Syntax of this filter string is described here in the filter query parameter section: https://cloud.google.com/compute/docs/reference/latest/instances/list.

Script to provision the TPM before control is handed off to the VM.

TPM2TOOLS_TCTI will be provided to configure tpm2-tools to use the swtpm instance transparently. TCTI is also provided as a generic value, consumer is expected to re-export it however it may need (TPM2OPENSSL_TCTI, TPM2_PKCS11_TCTI, ...).

The read permissions to include for this token

The read permissions to include for this token

Controls how Prometheus handles conflicts between labels that are already present in scraped data and labels that Prometheus would attach server-side ("job" and "instance" labels, manually configured target labels, and labels generated by service discovery implementations)

XFRM interface ID set on inbound policies/SA

XFRM interface ID set on outbound policies/SA

Netfilter mark and mask for output traffic

Netfilter mark and mask for input traffic

Role of the targets to retrieve

The tag separator used to separate concatenated GCE instance network tags

The API server addresses

The AWS region

If set, allows registration by anyone who also has the shared secret, even if registration is otherwise disabled

Refresh interval to re-read the instance list

Refresh interval to re-read the cloud instance list

The string by which Linode Instance tags are joined into the tag label

Whether to include the parameters as meta labels

Refresh interval to re-read the instance list

Whether the service discovery should list all instances for all projects

Refresh interval to re-read the instance list

Refresh interval to re-read the instance list

Maximum number of connections per plugin instance.