The username to use when connecting to the database

User to run upsmon as. upsmon.conf will have its owner set to this user

The user that owns the Homebrew installation

Additional user accounts to be created automatically by the system

Configuration for users.

Definition of per-user launchd agents

User to run qui as.

The name of an existing user account to use to own the ZNC server process

Definition of systemd per-user units.

User the bee binary should execute under.

User running H2O service

User account under which MPD runs.

User under which the VDR service runs.

Definition of systemd per-user path units.

User to log-in as.

User under which Node-RED runs

User to run Agnos as

User to run u9fs under.

The user as which to run the Ergo node.

User under which the Kubo daemon runs

Which unix user ttyd should run as.

User from which you run MAME binary.

User account under which unit runs.

User under which the Loki service runs.

User account under which Ombi runs.

User account under which Plex runs.

User account under which NATS runs.

User account under which tcsd runs.

User account under which nscd runs.

The user to run oCIS as

User to run the service.

User under which museum runs

User account where Apache NiFi runs.

Subordinate user ids that user is allowed to use

User account under which caddy runs.

User account under which MySQL runs.

User account under which both the update daemon and the web-application run.

Other user directories

User account under which maddy runs.

The Music directory.

The name of the user account

The name of the user account

The user to run as

User account under which db-rest runs.

User the ntfy-sh server runs under.

Whether to manage $XDG_CONFIG_HOME/user-dirs.dirs

User for the dspam daemon.

User davis runs as.

User which runs Nexus3.

User to own the seatd socket

mailinglist local user

The Omnom service user.

User under which Stash runs.

User to run Zeyple as.

Definition of systemd per-user slice units.

Definition of systemd per-user timer units.

Whether to enable the user systemd service manager.

The user to run Memos as.

User account under which ytdl-sub runs.

If set to false, the user account will not be created

User account under which legit runs.

User account under which gitea runs.

The user the aMule daemon should run as

User account under which Komga runs.

User the hound daemon should execute under.

User account under which bosun runs.

User account under which jboss runs.

User account under which slskd runs.

User account under which nginx runs.

User account under which rqbit runs.

User running Movim service

User account under which uWSGI runs.

User snipe-it runs as.

Cyrus IMAP user name

The user's UID.

User account under which Apache Felix runs.

User to run the cgit service as.

User to use for running NIPAP services.

User account under which inadyn runs.

User account under which Sonarr runs.";

The name of an existing user to use to run the service

The user for the service

Set this option when you want to run the slurmctld daemon as something else than the default slurm user "slurm"

The user's primary group.

User under which the coder service runs.

The xdg-user-dirs package to use.

The name of the column that contains a unix login name.

The user the nixops-dns daemon should run as

The user as which to run quorum.

User that has access to the device

The user to run Kismet as.

The user under which attic runs.

Artalk user name.

The user immich should run as.

User monica runs as.

User under which pretix should run.

Name of the Zammad user.

Webhook will be run under this user

User account under which Actual runs

User the Go

User account under which Lidarr runs.

System user to run Flarum

User account under which galene runs.

User account under which Akkoma runs.

User account under which bazarr runs.

User account under which deluge runs.

User account under which Kavita runs.

User to run cross-seed as.

System user for running opkssh

User account under which NZBGet runs

User account under which Radarr runs.

User account under which WebDAV runs.

User under which Traefik runs.

The user to run code-server as

Definition of systemd per-user target units.

Definition of systemd per-user socket units.

User account under which prosody runs.

User to run gitlab and all related services.

User account under which the web-application run.

User to use when no root privileges are required.

User account under which Apache Tomcat runs.

User account name under which SFTPGo runs.

The user's home directory.

User under which dawarich runs

The user's home directory

The MQTT user to use

User account under which to run ollama

Subordinate group ids that user is allowed to use

The Videos directory.

The user's shell

Whether to make the user account hidden.

User to run the service as.

User under which pyLoad runs, and which owns the download directory.

User account under which Pocket ID runs.

Definition of systemd per-user path units

User account under which Klipper runs

The existing user the Quassel daemon should run as

User under which the service should run

Packages providing systemd user units

User under which Git daemon would be running.

Automatically allocate subordinate user and group ids for this user

Per-user rules for creation, deletion and cleaning of volatile and temporary files automatically.

The user (and PostgreSQL database name) used to run the gancio server

The account UID

The user account under which both the service and the web application run.

User name for RPC connections.

User the Go

User to run the Roon Server as.

User to run the Roon bridge as.

Username of the OpenGFW user.

User privileges for the server.

The user under which to run flexget.

The user to run Corteza under.

User to run the service as

User under which pretalx should run.

User under which Redmine is ran.

The user under which stunnel runs.

The user to run ZITADEL under.

The user 0bin should run as

The user the yandex-disk daemon should run as.

Create the home directory when creating the user.

User account under which dolibarr runs.

User account under which pixelfed runs.

User account under which seafile runs.

User account under which haproxy runs.

User account under which Jackett runs.

User account under which graylog runs

User account under which couchdb runs.

User the jenkins server should execute under.

User account under which Forgejo runs.

User account under which Homebox runs.

User account under which cgminer runs

User account under which netdata runs.

User account under which owncast runs.

User account under which pleroma runs.

User account under which Readarr runs.

User account under which Polaris runs.

User account under which unbound runs.

User account under which MongoDB runs

User account under which MonetDB runs.

User account under which PdfDing runs

User part of the JID for XMPP user connection.

User part of the JID for XMPP user connection.

User account under which httpd children processes run

The user's primary group.

The user usbmuxd should use to run after startup.

The user for the service

Definition of systemd per-user slice units

Definition of systemd per-user timer units

Definition of systemd per-user mount units

What to call the Postfix user (must be used only for postfix).

User under which Podgrab runs, and which owns the download directory.

User account under which both the service and the web-application run.

Definition of systemd per-user service units.

Extra config options for systemd user instances

User to be used to perform backup.

Name of the user used to run the jupyter service

Start of the range of subordinate user ids that user is allowed to use.

The name of the column in the log table to which the name of the user being authenticated is stored.

User to use when no root privileges are required

The name of an existing user account under which the rsync process should run.

User account under which Calibre-Web runs.

User account under which firefly-iii runs.

The database user

Whether to create the home directory and ensure ownership as well as permissions to match the user.

Owner to assign to the SEV device.

Dovecot user name.

The Desktop directory.

Text of this systemd unit.

The user of the service.

User for the daemon.

User for the daemon

User under which mastodon runs

Username for the logcheck user.

User account under which headscale runs.

Whether to enable or disable lingering for this user

User under which Kanboard runs.

User under which ejabberd is ran

Name of the LibreNMS user.

User agorakit runs as.

User under which to run collectd.

User under which FreshRSS runs.

The user to run crowdsec as

User ownership of service

The directory where user objects are stored.

The user tuwunel is run as

Name of the user to change once the server is up.

User account under which this instance of redis-server runs.

User account under which firebird runs.

User account under which Jellyfin runs.

User account under which airsonic runs.

User account under which influxdb runs

User account under which Cloudlog runs.

User account under which ErsatzTV runs.

The user account under which OliveTin runs.

User account under which OpenTSDB runs.

User account under which rtorrent runs.

User account under which slapd runs.

User under which the oxidized service runs.

User account under which Peertube runs.

User account under which sniproxy runs.

User account under which Tautulli runs.

User account under which Whisparr runs.

Database user

Specifies the owner of the wiki directory

Definition of systemd per-user target units

Definition of systemd per-user socket units

User under which to run the service

Indicates if the user is a system user or not

Extra config options for user session service manager

User account under which Portunus runs its webserver.

User to run under when setuid is not enabled.

Gitolite user account

User account under which this pool runs.

Mail username.

User account under which Pingvin Share runs.

User the jenkins slave agent should execute under.

Existing user that the CGI process will belong to. (Default almost surely will do.)

Specifies the user to log in as.

Count of subordinate user ids

The Public share directory.

The user Quickwit runs as

The user Temporal runs as

Message of the day shown to users when they log in.

The user to run OpenCloud as

The name of services's user

The user as which to run bitcoind.

The user to run Syncthing as

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

Start the specified units when this unit is started.

mjpg-streamer user name.

Optional username used for authentication with redis.

Per-user rules for creation, deletion and cleaning of volatile and temporary files automatically

The user under which calibre-server runs.

User under which Etebase server runs.

User under which to run the service

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Mail username.

User for the daemon.

User for the MySQL database.

User under which Anuko Time Tracker runs.

Subordinate user ids that user is allowed to use

User under which CommaFeed runs.

User bookstack runs as

User running bitmagnet

User under which blendfarm runs.

The user to run the service as.

The user to run Memcached as

The user pgbouncer is run as.

User to run the service as

User under which Navidrome runs.

User under which Paperless runs.

Definition of systemd per-user service units

If the specified units are started at the same time as this unit, delay this unit until they have started.

Charybdis IRC daemon user.

User account under which Kapacitor runs

Run Apache Cassandra under this user.

The user account under which GlitchTip runs.

User account under which the service runs.

User account under which recyclarr runs.

User which runs the ruTorrent service.

User account under which Pinchflat runs.

User account under which RethinkDB runs.

User account under which stargazer runs.

User account under which Moonraker runs.

The set of packages that should be made available to the user

The set of packages that should be made availabe to the user

User account under which Portunus runs its LDAP server.

User name who owns the socket file.

Database user.

The user's home directory mode in numeric format

Owner to assign to the SEV guest device.

What to call the dedicated user under which infinoted is run

User for hg.sr.ht.

Username for webconsole access

The path to the user's shell

Start of the range of subordinate group ids that user is allowed to use.

The Downloads directory.

The Pictures directory.

User account under which sitespeed-io runs.

Start the specified units when this unit is started.

Start the specified units when this unit is started.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

User for git.sr.ht.

User for man.sr.ht.

User for hub.sr.ht.

Serve entries from services for the current user

As which user the backup should run.

Attributes for user's entry in pam_mount.conf.xml

User account under which Tandoor runs.

Enable specific user icons for history view

The database user

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Set the date on which the user's account will no longer be accessible

The database user

User name for RPC connections.

Default user name to use.

The user to run Handheld Daemon with.

User the buildbot server should execute under.

User the buildbot Worker should execute under.

User which runs PlantUML server.

Packages added to the service's PATH environment variable

User name used for connection to the database

Global user rules for creation, deletion and cleaning of volatile and temporary files automatically

User for todo.sr.ht.

User for meta.sr.ht.

Database user.

Database user.

User that runs smokeping and (optionally) thttpd

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

User account under which peertube-runner runs.

User account under which Suwayomi-Server runs.

User which runs tailscale-nginx-auth

User account for the service

Whether to enable systemd user units systemd-tmpfiles-setup.service and systemd-tmpfiles-clean.timer.

The user ID owning the volume inside the container.

The database user for immich.

The user's auxiliary groups.

Path to the user data directory.

Path to encrypted luks device that contains the user's home directory.

Indicates whether this is an account for a “real” user

Aliases of that unit.

Aliases of that unit.

SMTP login name.

The name of the user to use for Wakapi.

Username used to access the GNS3 Server.

The user agent to report to the server

Database user.

Duplicati runs as it's own user

User for Taskserver.

User account to run vdirsyncer as, otherwise as a systemd dynamic user

User under which filesender runs.

User for lists.sr.ht.

User for pages.sr.ht.

User for paste.sr.ht.

User to run homebridge as.

User to run the service as

User under which Govee2MQTT should run.

User under which photoprism runs.

User microsocks runs as.

The user to run Reposilite under.

The user Linkwarden should run as.

Only applies if enableVirtualUsers is true

If set to false, the user account will not be created

Default user email to use.

User account name under which to run shairport-sync

Shell commands executed as the service's main process.

Whether to set the XDG user dir environment variables, like XDG_DESKTOP_DIR.

This defaults to true for state version < 26.05 and false otherwise.

User account under which scollector runs.

User account under which Szurubooru runs.

User which runs the Mattermost service.

User account under which privatebin runs.

User account under which LubeLogger runs.

Username from upsd.users for accessing this UPS

Domain part of the JID for XMPP user connection.

Domain part of the JID for XMPP user connection.

Start the specified units when this unit is started.

Start the specified units when this unit is started.

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

The directory to store all user data, such as flow and credential files and all library data

User to use to run nullmailer-send.

Definition of per-user launchd agents

Database user.

Database user.

PostgreSQL user

Database user.

The user borg is run as

The name of this systemd unit, including its extension

The name of this systemd unit, including its extension

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Whether to enable GNOME User Share, a user-level file sharing service for GNOME.

Username used for all administration functions.

The user to run openvscode-server as

List of users owned and managed by nix-darwin

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Aliases of that unit.

Aliases of that unit.

Settings for pam_mysql

If the specified units are started at the same time as this unit, delay this unit until they have started.

If the specified units are started at the same time as this unit, delay this unit until they have started.

Keeps the specified running while this unit is running

User to run the icecream daemon as

The user OpenSearch runs as

The distinguished name of the search base.

User under which the Periphery agent runs.

Specifies the (clear text) password for the user

Name of the user the AutoSSH session should run as

Name of the user the AutoSSH session should run as

User for builds.sr.ht.

Database user.

User account under which healthchecks runs.

Mail username.

Username for Loki.

User account under which the service runs.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

The user borg serve is run as

Definition of systemd generators; see systemd.generator(5)

User name of file owner

Database user.

User that runs the cronjob.

Each attribute in this set specifies an option in the [Path] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

A file containing the message of the day shown to users when they log in.

SMTP login name.

SMTP login name.

The Templates directory.

The Documents directory.

Command executed as the service's main process.

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

The user used for database authentication.

Configuration for groups.

User for the Postgres database.

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Shell commands executed to stop the service.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Definition of systemd per-user automount units

A system user name for this client instance.

A system user name for this client instance.

User account under which HBase runs.

Database user.

Database user.

Database user.

Database user.

Database user.

Subordinate group ids that user is allowed to use

Count of subordinate group ids

The name of the user account

Database username.

User to be used for the automatic login.

User used for authentication.

Start the specified units when this unit is started.

Keeps the specified running while this unit is running

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are stopped or restarted, then this unit is stopped or restarted as well.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Keeps the specified running while this unit is running

MySQL user name.

Database user for FreshRSS.

The database user for dawarich.

The content of /etc/asusd/asusd-user-ledmodes.ron

The user to run DragonflyDB as

User meshtasticd runs as.

User under which Writefreely is ran.

Specifies the hashed password for the user

Environment variables that will be set for the user session

Database user.

Aliases of that unit.

Aliases of that unit.

Database username.

User account under which FileBrowser runs.

User account under which CockroachDB runs

User account under which qbittorrent runs.

The user name used to log in to the ZNC web admin interface.

Automatically allocate subordinate user and group ids for this user

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

The name of this systemd unit, including its extension

Rules for creating and cleaning up temporary files automatically

User account under which firefly-iii-data-importer runs.

If set to true, you are free to add new users and groups to the system with the ordinary useradd and groupadd commands

User account under which the web-application run.

User to run wyoming-satellite under.

If true, the user's shell will be set to users.defaultUserShell.

The username to authenticate with.

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

If the specified units are started at the same time as this unit, delay this unit until they have started.

Shell commands executed after the service's main process has exited.

User under which this instance runs.

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

The user to run Silverbullet as

Packages added to the service's PATH environment variable

Additional groups to be created automatically by the system.

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

The user you're using to authenticate.

Shell commands executed before the service's main process is started.

Default user name to use.

The user of the file

The hostname of the MySQL/MariaDB server

Mail username.

Database username.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

User name

Shell commands executed as the service's main process.

AppVM user login

Each attribute in this set specifies an option in the [Slice] section of the unit

Keeps the specified running while this unit is running

Keeps the specified running while this unit is running

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

A command that prints the user name to standard output.

Run Suricata with a specific user-id.

Database user.

Specifies the initial password for the user, i.e. the password assigned if the user does not already exist

Shell commands executed after the service's main process is started.

Shell commands executed when the service's main process is reloaded.

Absolute path to the systemctl tool

Configure unit start rate limiting

Organizational unit to look up a user.

Alias of users.users.

This optional key specifies the user to run the job as

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Start of the range of subordinate user ids that user is allowed to use.

Users that can access upsd

Default user email to use.

The user under which Anubis is run

Each attribute in this set specifies an option in the [Timer] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

Each attribute in this set specifies an option in the [Unit] section of the unit

A short description of the user account, typically the user's full name

Aliases of that unit.

Units that want (i.e. depend on) this unit

The user under which Anubis is run

The user ID inside the container.

Whether to enable or disable lingering for this user

Database user.

Unifi service user name.

Specifies the initial hashed password for the user, i.e. the hashed password assigned if the user does not already exist

A set of environment variables to be set on all future processes launched by launchd in the caller's context

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

If the specified units are started, then this unit is stopped and vice versa.

Units that require (i.e. depend on and need to go down with) this unit

Units that require (i.e. depend on and need to go down with) this unit

The user as which to run blockbook-frontend-‹name›.

The user that runs the Amazon CloudWatch Agent.

User account under which FoundationDB runs.

User which runs the matterbridge service.

User account under which Transmission runs.

Keep this unit running as long as the listed units are running

Disable checking that at least the root user or a user in the wheel group can log in using a password or an SSH key

The name of the user for this authelia instance.

Path to file containing password for XMPP user connection.

Path to file containing password for XMPP user connection.

User account under which triggerhappy runs.

SMTP username.

Configure unit start rate limiting

Configure unit start rate limiting

The hosts.hfaxd file entry in the spooling area will be symlinked to the location given here

Username to use for the postgres database.

Each attribute in this set specifies an option for a key in the plist. https://developer.apple.com/legacy/library/documentation/Darwin/Reference/ManPages/man5/launchd.plist.5.html

User accounts for GRUB

To enable stylus and multi-touch support, the user you're going to use must be added to this list

The user to run the Phosh service.

Keeps the specified running while this unit is running

Similar to requires

The full path to a file that contains the hash of the user's password

Database user.

PostgreSQL user.

Database user.

Database user.

Alias of services.tailscaleAuth.user.

Settings for libnss-mysql

A list of one or more units that are activated when this unit enters the "failed" state.

A list of one or more units that are activated when this unit enters the "inactive" state.

A list of user modules to include in the znc.conf file.

The database user for Linkwarden.

Whether to include authentication against LDAP in login PAM.

Automatically start this unit at the given date/time, which must be in the format described in systemd.time(7)

A short description of the user account, typically the user's full name

If the specified units are started, then this unit is stopped and vice versa.

If the specified units are started, then this unit is stopped and vice versa.

The username/email in case SMTP auth is enabled.

Query to find a user in the LDAP database.

Allow non-root users to specify the allow_other or allow_root mount options, see mount.fuse3(8).

Units that require (i.e. depend on and need to go down with) this unit

Units that require (i.e. depend on and need to go down with) this unit

The server username of this account

Indicates if the user is a system user or not

If enabled, use TLS (encryption) over an LDAP (port 389) connection

The user names of the group members, added to the /etc/group file.

User name accepted by anki-sync-server.

The URL of the LDAP server.

Each attribute in this set specifies an option in the [Unit] section of the unit

The path to the file containing the password for the user

By default, nixos will check that programs

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

The user of the file

This optional key specifies the group to run the job as

The username used by netbird to connect to the coturn server.

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

Whether to enable automatic creation of the XDG user directories.

User configuration for Cudatext.

User as which this instance of fcgiwrap will be run

By default, nix-darwin will check that programs

The user's username.

Each attribute in this set specifies an option in the [Socket] section of the unit

Name of user to run the script under.

NNTP-Proxy user configuration

Configure unit start rate limiting

Arguments passed to the main process script

Configure unit start rate limiting

Database username.

Database username.

Username for the influxdb.

Configuration written to Zed's debug.json

The database user (not applicable for sqlite3).

Similar to requires

Similar to requires

Database user.

The group's GID.

Maximum size of all uploaded files per user, in bytes

Configuration written to Zed's tasks.json.

List of tasks that can be run from the command palette.

Whether to enable authentication against an LDAP server.

Alias of users.groups.

For each item in this list, a ListenStream option in the [Socket] section will be created.

Allow the user to do certain things with upsd

How long to wait for started services to fail until their start is considered successful

The user and group to run nebula-lighthouse-service as.

Owner to assign to the SGX provisioning device.

Override default locales within gancio

This optional key specifies what nice(3) value should be applied to the daemon.

Whether to let the nslcd daemon (nss-pam-ldapd) handle the LDAP lookups for NSS and PAM

If the specified units are started, then this unit is stopped and vice versa.

If the specified units are started, then this unit is stopped and vice versa.

Units that require (i.e. depend on and need to go down with) this unit

Units that require (i.e. depend on and need to go down with) this unit

User under which this instance runs.

A system group name for this client instance.

A system group name for this client instance.

The user continuwuity is run as.

The user as which to run the wasabibackend node.

Whether to create the home directory and ensure ownership as well as permissions to match the user.

This required key uniquely identifies the job to launchd.

Username or emaill address for Pandora music service authentication

Whether new or changed services that are wanted by active targets should be started

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

The database user to connect as.

Additional criteria for the query.

If set to false, this unit will be a symlink to /dev/null

Whether to publish user services

Database username.

Similar to requires

An arbitrary list of items such as derivations

Similar to requires

User to be set as owner of the UNIX socket.

Specifies the (clear text) password for the user

Name of the database user to initialise the database with

Custom Floorp user chrome CSS.

Specifies one or more files to use for the user host key database, separated by whitespace

User account under which to run the Spreed signaling server.

The user associated with the reported computation results

RPC user for the bitcoin endpoint.

Configure unit start rate limiting

Unix User to run the server under

Command that is executed when this service is started.

Configuration written to Zed's keymap.json.

Database username.

An arbitrary list of items such as derivations

This optional key specifies that launchd should adjust its log mask temporarily to LOG_DEBUG while dealing with this job.

Specifies the hashed password for the user

This optional key is used to control whether your job is launched once at the time the job is loaded

User name under which the pve exporter shall be run.

User name under which the nut exporter shall be run.

User name under which the kea exporter shall be run.

User name under which the sql exporter shall be run.

User name under which the zfs exporter shall be run.

User name under which the lnd exporter shall be run.

Configure unit start rate limiting

This option defines the default shell assigned to user accounts

The user names of the group members, added to the /etc/group file.

If the specified units are started, then this unit is stopped and vice versa.

Units that require (i.e. depend on and need to go down with) this unit

Group under which to run the service

The preferred method to use when switching from an old to a new version of this service.

Text of the file.

Count of subordinate user ids

User to connect as

User name under which the snmp exporter shall be run.

User name under which the bind exporter shall be run.

User name under which the ipmi exporter shall be run.

User name under which the flow exporter shall be run.

User name under which the nats exporter shall be run.

User name under which the mail exporter shall be run.

User name under which the ping exporter shall be run.

User name under which the bird exporter shall be run.

User name under which the ebpf exporter shall be run.

User name under which the json exporter shall be run.

User name under which the mqtt exporter shall be run.

User name under which the node exporter shall be run.

User name under which the knot exporter shall be run.

An arbitrary list of items such as derivations

An arbitrary list of items such as derivations

Use a user namespace for the container.

The group GID

Change the squash user

User name under which the php-fpm exporter shall be run.

User name under which the chrony exporter shall be run

Each attribute in this set specifies an option in the [Service] section of the unit

The recommended idle time out (in seconds) to pass to the job

ID of the user in initrd.

Whether to enable authentication against a MySQL/MariaDB database.

Custom Floorp user content CSS.

Custom Firefox user chrome CSS.

Description of this unit used in systemd messages and progress indicators.

User owning the certs.

The name of table that maps unique login names to the passwords.

An arbitrary list of items such as derivations

An arbitrary list of items such as derivations

Similar to requires

User name under which the nginx exporter shall be run.

User name under which the kafka exporter shall be run.

User name under which the redis exporter shall be run.

User name under which the fritz exporter shall be run.

User name under which the idrac exporter shall be run.

User name under which the jitsi exporter shall be run.

User name under which the dmarc exporter shall be run.

User name under which the v2ray exporter shall be run.

Unifi service user name.

The name of the column or an SQL expression that indicates the status of the user

Configure unit start rate limiting

Configure unit start rate limiting

This optional key specifies what value should be passed to umask(2) before running the job

User name under which the frr exporter shall be run

User account under which Audiobookshelf runs.

User account under which libretranslate runs.

This optional key causes the job to be started if any one of the listed paths are modified.

Database username.

User to connect to the SMTP server.

The amount of time launchd waits before sending a SIGKILL signal

The user's home directory.

Environment variables passed to the service's processes.

Whether the service should be restarted during a NixOS configuration switch if its definition has changed.

This optional key describes, at a high level, the intended purpose of the job

Username

This optional key causes the job to be started every time a filesystem is mounted.

A set of shell script fragments that are executed by a systemd user service when a NixOS system configuration is activated

Configuration file that correspond to user-mapping.xml.

Configuration file that correspond to user-mapping.xml.

Username for JSON-RPC connections.

Specifies the initial password for the user, i.e. the password assigned if the user does not already exist

Whether to enable the systemd JSON user/group record lookup service .

For each item in this list, a ListenDatagram option in the [Socket] section will be created.

An arbitrary list of items such as derivations

An arbitrary list of items such as derivations

Path to store homebridge user files (needs to be writeable).

Description of this unit used in systemd messages and progress indicators.

Description of this unit used in systemd messages and progress indicators.

Specifies the initial hashed password for the user, i.e. the hashed password assigned if the user does not already exist

Actions to be included in a user.action file

Whether to append a minimal default PATH environment variable to the service, containing common system utilities.

A short human-readable label of the unit.

User name for authentication.

User name under which the statsd exporter shall be run.

User name under which the dnssec exporter shall be run.

User name under which the script exporter shall be run.

User name under which the mysqld exporter shall be run.

User name under which the deluge exporter shall be run.

User name under which the domain exporter shall be run.

User name under which the fastly exporter shall be run.

User name under which the restic exporter shall be run.

User name under which the pihole exporter shall be run.

User name under which the shelly exporter shall be run.

User name under which the rspamd exporter shall be run.

User name under which the tibber exporter shall be run.

Specifies the directory that user data is kept in

Configuration written to Zed's settings.json.

The set of packages that should be made available to the user

The name of the group

The group's name

Custom Firefox user content CSS.

Filters to be included in a user.filter file

Specifies the time limit (in seconds) to use when performing searches

List of user-password pairs to provide to the sync server.

An arbitrary list of items such as derivations

An arbitrary list of items such as derivations

Local Mattermost database username.

Start of the range of subordinate group ids that user is allowed to use.

Configure unit start rate limiting

Configure unit start rate limiting

User name under which the nvidia-gpu exporter shall be run.

The name of the column in the log table to which the name of the user being authenticated is stored.

Database username.

Outgoing SMTP user.

If set, a changed unit is restarted by calling systemctl stop in the old configuration, then systemctl start in the new one

The account UID

User name under which the rtl_433 exporter shall be run.

A short human-readable label of the unit.

A short human-readable label of the unit.

A short human-readable label of the unit.

User name under which the systemd exporter shall be run.

User name under which the bitcoin exporter shall be run.

User name under which the varnish exporter shall be run.

User name under which the apcupsd exporter shall be run.

User name under which the ecoflow exporter shall be run.

User name under which the dovecot exporter shall be run.

User name under which the process exporter shall be run.

User name under which the dnsmasq exporter shall be run.

User name under which the libvirt exporter shall be run.

User name under which the sabnzbd exporter shall be run.

User name under which the mongodb exporter shall be run.

User name under which the postfix exporter shall be run.

User name under which the klipper exporter shall be run.

User name under which the unbound exporter shall be run.

Group the user belongs to in initrd.

Path of the source file.

Description of this unit used in systemd messages and progress indicators.

Description of this unit used in systemd messages and progress indicators.

User to run the program.

Set the date on which the user's account will no longer be accessible

An arbitrary list of items such as derivations

Whether the service should be reloaded during a NixOS configuration switch if its definition has changed

The user's primary group.

This key was used in Mac OS X 10.4 to control whether a job was kept alive or not

This optional key specifies whether the job participates in advanced communication with launchd

User name for authentication.

This optional key specifies whether initgroups(3) should be called before running the job

The SMTP server username.

The IMAP server username.

This configuration file only applies to the hosts listed with this key

Database user.

Linux user to authorize

An arbitrary list of items such as derivations

The default home directory for normal users.

User name under which the py-air-control exporter shall be run.

Whether to generate the password files at build time and store them directly in the system closure, without requiring any services at boot time

List of free form strings that can be used to trigger a service reload during Home Manager activation.

Username for mining server

User name under which the mailman3 exporter shall be run.

Configure unit start rate limiting

Indicates whether this is an account for a “real” user

Custom LibreWolf user chrome CSS.

This key maps to the first argument of execvp(3)

Specifies whether userlistFile is a list of user names to allow or deny access

User name under which the influxdb exporter shall be run.

User name under which the opensense exporter shall be run.

User name under which the smartctl exporter shall be run.

User name under which the fritzbox exporter shall be run.

User name under which the mikrotik exporter shall be run.

User name under which the nginxlog exporter shall be run.

User name under which the postgres exporter shall be run.

User name under which the unpoller exporter shall be run.

User name under which the graphite exporter shall be run.

User name under which the blackbox exporter shall be run.

User name under which the keylight exporter shall be run.

User name under which the collectd exporter shall be run.

Let the user initiate specific instant commands

A short human-readable label of the unit.

A short human-readable label of the unit.

This optional key specifies whether the job can only be run once and only once

Environment variables passed to the service's processes.

User account under which changedetection-io runs.

List of groups owned and managed by nix-darwin

This configuration file only applies to hosts NOT listed with this key

Choose users database file to use for authentication

Description of this unit used in systemd messages and progress indicators.

The user to login as.

This optional key specifies whether the kernel should consider this daemon to be low priority when doing file system I/O.

The full path to a file that contains the hash of the user's password

Attribute set of files to link into the user home.

The server will put all the budget files in this directory as binary blobs.

This optional key specifies what file should be used for data being supplied to stdin when using stdio(3).

User name under which the imap-mailstat exporter shall be run.

The group GID

List of free form strings that can be used to trigger a service restart during Home Manager activation.

Paths to the user dictionary files for MaryTTS.

This optional key specifies what file should be used for data being sent to stdout when using stdio(3).

Database user.

Custom LibreWolf user content CSS.

Set of files that have to be linked in ~/Library/LaunchAgents.

Whether to include lookup against LDAP in NSS.

User name under which the surfboard exporter shall be run.

User name under which the tailscale exporter shall be run.

User name under which the wireguard exporter shall be run.

User name under which the rasdaemon exporter shall be run.

User name under which the borgmatic exporter shall be run.

User name under which the smokeping exporter shall be run.

User name under which the pgbouncer exporter shall be run.

User name under which the nextcloud exporter shall be run.

This optional key specifies that launchd should instruct the kernel to have the job wait for a debugger to attach before any code in the job is executed.

Defines how unit configuration is provided for systemd:

asDropinIfExists creates a unit file when no unit file is provided by the package otherwise it creates a drop-in file named overrides.conf.

asDropin creates a drop-in file named overrides.conf

Defines how unit configuration is provided for systemd:

asDropinIfExists creates a unit file when no unit file is provided by the package otherwise it creates a drop-in file named overrides.conf.

asDropin creates a drop-in file named overrides.conf

Configuration written to Visual Studio Code's mcp.json

A short human-readable label of the unit.

User name under which the junos-czerwonk exporter shall be run.

Specifies the time limit (in seconds) to use when connecting to the directory server

Configures the user domain, if enabled

A list of URIs referencing documentation for this unit or its configuration.

This key specifies that the job should be spawned into a new security audit session rather than the default session for the context is belongs to

This optional key specifies the node to connect(2) or bind(2) to.

Username for database connections.

RPC user information for JSON-RPC connections.

This optional key is used to specify a directory to chroot(2) to before running the job.

If set, a changed unit is never assumed to be socket-activated on configuration switch, even if it might have associated socket units

This optional key tells launchctl what type of socket to create

The name of the group

This flag causes launchd to use the glob(3) mechanism to update the program arguments before invocation.

This optional key specifies what file should be used for data being sent to stderr when using stdio(3).

Whether to enable oomd on all user slices (user@.slice) and all user owned slices.

User name.

This configuration file only applies to sessions of the type specified

Defines how unit configuration is provided for systemd:

asDropinIfExists creates a unit file when no unit file is provided by the package otherwise it creates a drop-in file named overrides.conf.

asDropin creates a drop-in file named overrides.conf

Defines how unit configuration is provided for systemd:

asDropinIfExists creates a unit file when no unit file is provided by the package otherwise it creates a drop-in file named overrides.conf.

asDropin creates a drop-in file named overrides.conf

This optional key implies SockFamily is set to "Unix"

A list of URIs referencing documentation for this unit or its configuration.

A list of URIs referencing documentation for this unit or its configuration.

The name of the database containing the users

User name under which the buildkite-agent exporter shall be run.

User name under which the scaphandre exporter shall be run.

User name under which the storagebox exporter shall be run.

List of URIs referencing documentation for the unit.

This optional key specifies the mode of the socket

The group's members.

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

Configuration written to Visual Studio Code's tasks.json

User part of the JID.

Text of the file.

Resource limits to be imposed on the job

Resource limits to be imposed on the job

Username to connect with psycopg2, set to null when using sqlite3.

Extra configuration options that will be added verbatim at the end of the ldap configuration file (ldap.conf(5))

The maximum amount of cpu time (in seconds) to be used by each process.

The maximum amount of cpu time (in seconds) to be used by each process.

Multiple GitHub Runners

User name under which the exportarr-lidarr exporter shall be run.

User name under which the exportarr-sonarr exporter shall be run.

User name under which the exportarr-radarr exporter shall be run.

User name under which the exportarr-bazarr exporter shall be run.

Defines how unit configuration is provided for systemd:

asDropinIfExists creates a unit file when no unit file is provided by the package otherwise it creates a drop-in file named overrides.conf.

asDropin creates a drop-in file named overrides.conf

Defines how unit configuration is provided for systemd:

asDropinIfExists creates a unit file when no unit file is provided by the package otherwise it creates a drop-in file named overrides.conf.

asDropin creates a drop-in file named overrides.conf

If enabled, produces logs with detailed messages that describes what pam_mysql is doing

If true, requests in the form /~user/page.html are rewritten to take the file public_html/page.html from the home directory of the user.

A list of URIs referencing documentation for this unit or its configuration.

A list of URIs referencing documentation for this unit or its configuration.

List of URIs referencing documentation for the unit.

List of URIs referencing documentation for the unit.

List of URIs referencing documentation for the unit.

The largest size (in bytes) core file that may be created.

The largest size (in bytes) core file that may be created.

This optional key can be used to request that the service be registered with the mDNSResponder(8)

The user's home directory mode in numeric format

Custom Thunderbird user chrome CSS.

Whether to enable user-configurable Samba shares.

Whether to install a user service for the Bloop server

Add the necessary actions for a upsmon process to work

Environment variables available to executed processes.

When a job dies, launchd kills any remaining processes with the same process group ID as the job

This optional key causes the job to be started every N seconds

User name under which the exportarr-readarr exporter shall be run.

Enable running shellcheck on the generated scripts for this unit

User name under which the artifactory exporter shall be run.

The path to the user's shell

The largest size (in bytes) file that may be created.

The largest size (in bytes) file that may be created.

This optional key is used to specify a directory to chdir(2) to before running the job.

This optional key specifies the service on the node to connect(2) or bind(2) to.

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

List of Homebrew formula repositories to tap

List of URIs referencing documentation for the unit.

A short human-readable label of the unit.

List of URIs referencing documentation for the unit.

Defines how unit configuration is provided for systemd:

asDropinIfExists creates a unit file when no unit file is provided by the package otherwise it creates a drop-in file named overrides.conf.

asDropin creates a drop-in file named overrides.conf

Custom Thunderbird user content CSS.

This optional key is used to specify Mach services to be registered with the Mach bootstrap sub-system

Attributes for user's entry in pam_mount.conf.xml

The user agent to report to the server

A list of URIs referencing documentation for this unit or its configuration.

The maximum size (in bytes) of the data segment for a process; this defines how far a program may extend its break with the sbrk(2) system call.

The maximum size (in bytes) of the data segment for a process; this defines how far a program may extend its break with the sbrk(2) system call.

SQL query for the getpwnam syscall.

SQL query for the getgrgid syscall.

SQL query for the getgrnam syscall.

SQL query for the getspnam syscall.

SQL query for the getspent syscall.

SQL query for the getgrent syscall.

SQL query for the getpwuid syscall.

SQL query for the getpwent syscall.

Used for optionally authenticating with Elasticsearch.

The name of the table used for password alteration

Path of the source file.

User name under which the exportarr-prowlarr exporter shall be run.

The user's auxiliary groups.

Specifies higher-level event types to be used as launch-on-demand event sources

This optional key specifies the protocol to be passed to socket(2)

Path to encrypted luks device that contains the user's home directory.

Users to include in initrd.

The distinguished name to use to bind to the LDAP server when the root user tries to modify a user's password.

Name of symlink

Specifies the path to a file containing the clear text password for the account

Group for the default nutmon user

The default encryption method to use for passwordCrypt = 1.

The maximum size (in bytes) of the stack segment for a process; this defines how far a program's stack segment may be extended

The maximum size (in bytes) of the stack segment for a process; this defines how far a program's stack segment may be extended

List of URIs referencing documentation for the unit.

User name under which the modemmanager exporter shall be run.

Username for Loki.

This optional key is used to control whether your job is to be kept continuously running or to let demand and conditions control the invocation

The name of the table to which logs are written.

The user agent to report to the server

Whether this file should be generated

This key maps to the second argument of execvp(3)

Maximum number of concurrent clients allowed.

Database user.

User directory, relative to root.

The duration in time a user invitation remains valid before expiring

The maximum size (in bytes) which a process may lock into memory using the mlock(2) function.

The maximum size (in bytes) which a process may lock into memory using the mlock(2) function.

A short description of the user account, typically the user's full name

Configures environment variables passed to all executed processes.

Sets environment variables just for the manager process itself.

This optional key is a variant of SockPathName

The path to a file containing the credentials with which to bind to the LDAP server if the root user tries to change a user's password.

Whether to install a user service for the Emacs daemon

The maximum number of simultaneous processes for this user id

The maximum number of simultaneous processes for this user id

By default, nixos will check that programs

Configuration written to Visual Studio Code's settings.json

Much like the WatchPaths option, this key will watch the paths for modifications

Username to authenticate with.

How many invites each user is issued upon registration (only applicable if open registration is disabled).

The path to use as hound's $HOME

The admin user username.

This option disables password/group lookups

A command that prints the user name to standard output.

Set the path to file where the user's credentials are stored

Under which user/group the specified command is allowed to run

Specifies if mapped OpenID Connect accounts are automatically created upon successful authentication

Do not allow more than this many server connections per user (regardless of database)

The string to represent the user_text label.

Unifi service user name.

Under which user/group the specified command is allowed to run

A list of verbatim OpenSSH public keys that should be added to the user's authorized keys

A list of verbatim OpenSSH public keys that should be added to the user's authorized keys

The path to a file containing the credentials to use when binding to the LDAP server (if not binding anonymously).

The admin account username.

Whether to allow creation of user namespaces

This key lets one override the default throttling policy imposed on jobs by launchd

This optional key is used to specify launch on demand sockets that can be used to let launchd know when to run the job

A list of files each containing one OpenSSH public key that should be added to the user's authorized keys

A list of files each containing one OpenSSH public key that should be added to the user's authorized keys

The Niri user service unit to bind IIO-Niri's user service unit to.

Username for basic http authentication.

See userlistFile.

Whether to manage whether users linger or not.

Extra configuration options that will be added verbatim at the end of the nslcd configuration file (nslcd.conf(5)).

Mailman3 Core REST API username.

SQL query for the memsbygid syscall.

SQL query for the gidsbymem syscall.

A command that prints the user name to standard output.

When enabled, the stargazer process will be given CAP_SETGID and CAP_SETUID so that it can run cgi processes as a different user

Unprivileged user to drop privileges to.

Enables logging of authentication attempts in the MySQL database.

Ignore the user configures. Warning: When this is enabled, the user config files are totally ignored and the user dict can't be saved and loaded.

Ignore the user configures. Warning: When this is enabled, the user config files are totally ignored and the user dict can't be saved and loaded.

Count of subordinate group ids

List of URIs referencing documentation for the unit.

The maximum number of open files for this process

The maximum number of open files for this process

If true, the user's shell will be set to users.defaultUserShell.

This optional key specifies whether the kernel should consider this daemon to be low priority when doing file system I/O when the process is throttled with the Darwin-background classification.

Absolute path to directory holding application data

If the default user "gocd-agent" is configured then this is the primary group of that user.

The user used for options that previously applied to the user running darwin-rebuild

Newline separated list of names to be allowed/denied if userlistEnable is true

The user under which the container should run.

If a user fails to authenticate with a second factor, Duo Unix will prompt the user to authenticate again

Optional

Specifies the path to a file containing the password hash for the account, generated with grub-mkpasswd-pbkdf2

Whether to enable userborn.

The usernames / UIDs this rule should apply for.

The usernames / UIDs this rule should apply for.

The presence of this key specifies that the daemon expects to be run as if it were launched from inetd.

Specifies the policy to use for reconnecting to an unavailable LDAP server

MQTT server access username.

A list of verbatim principal names that should be added to the user's authorized principals.

The name of the column in the log table to which the description of the performed operation is stored.

This optional key is used to specify additional environment variables to be set before running the job.

The usernames / UIDs this rule should apply for.

This optional key can be used to request that the datagram socket join a multicast group

The following authentication modes are available: Open -- Accept connections from anyone, use NickServ for user authentication

Name of the user on the MySQL/MariaDB server

The name of the column that contains a (encrypted) password string.

Sync account username.

Username for login.

The name of the column in the log table to which the pid of the process utilising the pam_mysql authentication service is stored.

This flag instructs launchd that the job promises to use vproc_transaction_begin(3) and vproc_transaction_end(3) to track outstanding transactions that need to be reconciled before the process can safely terminate

The name of the column in the log table to which the timestamp of the log entry is stored.

Members of this group can control wpa_supplicant.

Password for the user

The path to use as JENKINS_HOME

If the default user "jenkins" is configured then this is the primary group of that user.

If the default user "gocd-server" is configured then this is the primary group of that user.

The maximum size (in bytes) to which a process's resident set size may grow

The maximum size (in bytes) to which a process's resident set size may grow

This optional key is used as a hint to launchctl(1) that it should not submit this job to launchd when loading a job or jobs

Discourse database user.

Whether to enable writing to the Nix store as a remote store via SSH

The path to the user's shell in initrd.

The userborn package to use.

Proxy account name, without the possibility to include domain name ('at' sign is interpreted literally).

Whether users are included.

Absolute path to directory holding application caches

Absolute path to directory holding application states

Whether to enable the Etebase server

Login shell of the remote user

The full path to a file that contains the user's (clear text) password

Path to a file containing the sync account username.

Username to use when connecting to Elasticsearch, if required.

Whether to enable periodic garbage collection for user profile and nix store with nh clean user.

Maximum number of concurrent connections to the proxy for this user

Specification (in the format described by systemd.time(7)) of the time at which the LoTW user update will occur.

Specifies if mapped OpenID Connect accounts are automatically created upon successful authentication

This optional key causes the job to be started every calendar interval as specified

Your yandex.com login name.

This flag corresponds to the "wait" or "nowait" option of inetd

If enabled, users are created with systemd-sysusers instead of with the custom update-users-groups.pl script

Username for the postgresql connection

Username to use when connecting to an external or manually provisioned database; has no effect when a local database is automatically provisioned

Whether to configure zsh as an interactive shell

Allow users of the wpa_supplicant group to control wpa_supplicant through wpa_gui or wpa_cli

Username of the SMTP server for GitLab.

User ID to return

Override the username or UID (and optionally groupname or GID) used in the container.

The name of the column in the log table to which the name of the remote host that initiates the session is stored

The path to use as JENKINS_HOME

Enable saned network daemon for remote connection to scanners.

saned would be run from scanner user; to allow access to hardware that doesn't have scanner group you should add needed groups to this user.

User level flake registry.

Set to false to prohibit users from being able to sign up / create user accounts

This is the config file for managing unprivileged user network administration access in LXC

If the default slave agent user "jenkins" is configured then this is the primary group of that user.

Members of this group can control wpa_supplicant.

Username to authenticate with.

Usernames to be added to the "openrazer" group, so that they can start and interact with the OpenRazer userspace daemon.

Group account under which inadyn runs.

Absolute path to directory holding application configurations

LDAP filter for users.

Whether to require that no two users/groups share the same uid/gid.

Allow normal users to control wpa_supplicant through wpa_gui or wpa_cli

Whether to enable draw user backgrounds.

Name of the group members of which will be allowed to create usershares

This is a comma-separated list of usernames

A list of names of users that have additional rights when connecting to the Nix daemon, such as the ability to specify additional binary caches, or to import unsigned NARs

A list of names of users that have additional rights when connecting to the Nix daemon, such as the ability to specify additional binary caches, or to import unsigned NARs

Attrset of dconf profiles

Specifies the clear text password for the account

A list of names of users (separated by whitespace) that are allowed to connect to the Nix daemon

A list of names of users (separated by whitespace) that are allowed to connect to the Nix daemon

Redis username for authentication (for Redis ACL).

Per-user Pareto Security configuration.

Database user.

Directory of sockets for controlling wpa_supplicant.

Directory names to add to XDG_DATA_DIRS in the user session.

Whether to configure system to use gphoto2

Whether to ensure that this user is present or absent.

The group's description.

Class that users must have.

The set of packages to appear in the user environment.

Username used to connect to registry.

Your factorio.com login credentials

Whether to install a user service for Offlineimap

Specifies the (clear text) password for the MQTT User.

Allow normal users to control wpa_supplicant through wpa_gui or wpa_cli

Username for JSON-RPC connections.

Which user or group the specified command is allowed to run as

Load users and passwords from this file

Grants the user, created by the ensureUser attr, login permissions

List of users granted permission to use CrossMacro.

Username to use when connecting to an external or manually provisioned database; has no effect when a local database is automatically provisioned

Bulk PDF import from consume directory

Users that intend to use BenchExec

Username for accessing the database.

LDAP-attribute that corresponds to the username-attribute in mailman.

Whether to enable exposing OpenSSH public keys defined in userdb

Username for the postgresql connection

If set to "yes", using the bindings file /etc/multipath/bindings to assign a persistent and unique alias to the multipath, in the form of mpath

User part of the JID for the recorder.

The user for connecting to the MySQL database

List of users, use empty list for any.

If false, a PulseAudio server is launched automatically for each user that tries to use the sound system

Attribute for a users email.

Name of the user to log in

Group under which to run the service

Number of nixbld user accounts created to perform secure concurrent builds

Number of nixbld user accounts created to perform secure concurrent builds

List of UIDs of all users for which this application is allowed location info access, Defaults to an empty string to allow it for all users.

Specifies the password hash for the account, generated with grub-mkpasswd-pbkdf2

The user to authenticate as.

SMTP server username for email delivery

Users to be added to the idevice group.

Indicates whether to allow the contents of the dataDir directory to be changed by the user at run-time

Username or user ID of the user allowed to to fetch Tailscale TLS certificates for the node.

Specifies the path to a file containing the clear text password for the MQTT user

SHA-512 password hash (can be generated by mkpasswd -m sha-512 <password>)

Directory names to add to XDG_CONFIG_DIRS in the user session.

Username for JMX

Location of the dokuwiki users file

Your users.yaml as a Nix attribute set

An attrset of clauses to grant to the user

User part of the JID.

User for anonymous PDF creation

Path under which the stats socket is placed

Specifies the hashed password for the MQTT User

Username to authenticate against the SMTP relay

Username used in the machine image

Username used for HQPlayer's WebUI

A list of user names that belong to the organization.

User group under which nscd runs.

Whether to enable Home Manager to define per-user daemons by making use of launchd's LaunchAgents.

User interface scale.

AutoConfig files can be used to set and lock preferences that are not covered by the policies.json for Mac and Linux

The login name of the search user

Whether to allow any user to lock the screen

File containing the password accepted by anki-sync-server for the associated username

The group of the Guix build user pool.

Whether X authentication keys should be passed from the calling user to the target user (e.g. for su)

Specify which claims to derive user information from

Password accepted by anki-sync-server for the associated username. WARNING: This option is not secure

Home directory for coder user.

Primary group of ntfy-sh user.

The method to encrypt the user's password:

• 0 (or "plain"): No encryption

Whether to give the container its own private UIDs/GIDs space (user namespacing)

The group of the file

Whether to enable new users to login if auth is enabled.

Name of the tpm device-owner and service user, set if applyUdevRules is set.

Log directory of the movim user which holds the application’s logs.

Users to provision.

Whether to periodically update the list of LoTW users

Specifies the path to a file containing the hashed password for the MQTT user

Name of the web server user that forwards requests to services.phpfpm.pools.<name>.socket the fastcgi socket for Matomo if the nginx option is not used

The script to run when user log in, usually a window manager, e.g. "icewm", "xfce4-session" This is per-user overridable, if file ~/startwm.sh exists it will be used instead.

The distinguished name to bind to the LDAP server with

Whether to enable npm user config.

Name of a file containing the spiped key

Username for this DDNS provider.

A set of users and their passwords and ACLs.

Allowed users and their secrets

If true, a system-wide PipeWire service and socket is enabled allowing all users in the "pipewire" group to use it simultaneously

List of users who are denied to login via Samba.

The user that you will authenticate with in the Grafana webhook settings

The username to store inside the credentials file.

Home directory of the grocy user which contains the application's state.

Whether to enable Restricted User Shell..

AutoConfig files can be used to set and lock preferences that are not covered by the policies.json for Mac and Linux

Maximum number of concurrent clients allowed.

Arguments to the buserver process

State directory of the movim user which holds the application’s state & data.

Path of a file containing the password for the unifi service user

Username used by SSH to login to remote host.

Initial user account for Apache NiFi

Defines the name of the claim that contains the username in the provider's userinfo endpoint

Whether to enable jjui - A terminal user interface for jujutsu.

Settings to write to specific dconf user databases

Whether to enable fd, a simple, fast and user-friendly alternative to find.

Minimum user ID for auto-login user.

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

The username of the SMTP server.

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Permissions granted for the services.syncoid.user user for local target datasets

If set, then the authenticating user must be a member of this group to use this module.

Whether to enable Newt, user space tunnel client for Pangolin.

Multi User Chat (MUC) configuration

The location of the original password files

Control client access to topics on the broker.

The group of the file

Specifies whether the processes of a user should be killed when the user logs out

Username for accessing the database.

User used to connect to the database

Admin username

Whether to enable nano, a small user-friendly console text editor.

When clone_target is unspecified, this is the name of a formula repository to tap from GitHub using HTTPS

Username for this DDNS provider.

Specifies whether the processes of a user should be killed when the user logs out

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

The username to login with.

By default, pam_mysql keeps the connection to the MySQL database until the session is closed

Run daemons as user.

Password HMAC-SHA-256 for JSON-RPC connections

If set, the service will register a new session with systemd's login manager

Grants the user, created by the ensureUser attr, superuser permissions

A list of verbatim OpenSSH public keys that should be added to the user's authorized keys

Username for the admin account

A list of files each containing one OpenSSH public key that should be added to the user's authorized keys

Path in which to store user data

Whether to enable systemd home area/user account manager.

User to run mailman-web as

Whether to enable user-space rshim driver for the BlueField SoC.

A string identifying a specific variant or edition of the operating system suitable for presentation to the user

This optional key describes, at a high level, the intended purpose of the job

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

If enabled, NixOS will set up a kernel that will boot on crash, and leave the user in systemd rescue to be able to save the crashed kernel dump at /proc/vmcore

Whether to enable Monado user service.

Set to true to automatically add new users to the main organization (id 1)

Delimiter for address extension: so mail to user+test can be handled by ~user/.forward+test

The rshim-user-space package to use.

Additional fields to be added to the end of the user manpath config file.

Mount points to be used by chunkserver for storage (see sfshdd.cfg(5))

The username to connect to the remote InfluxDB server

Path to a custom home page

By default pam-ussh reads the trusted user CA keys from /etc/ssh/trusted_user_ca

When invoked by root the mount.davfs daemon will run as this user

A file containing the password for the user of the MySQL/MariaDB server

A file containing a secure random string

The resolved shell path that users can inherit to set rush as their login shell

Name the bot should appear with.

A list of verbatim principal names that should be added to the user's authorized principals.

Units that want (i.e. depend on) this unit

Enable PAM mount system to mount filesystems on user login.

If true, the user is not required to enter a password.

Whether to enable dwm-status user service.

Whether to enable dwm-status user service.

List of additional package outputs of the packages home.packages that should be installed into the user environment.

IP address on which RabbitMQ will listen for AMQP connections

Text used as placeholder text on login page for login/username input.

Username used to connect to the MQTT server.

When true, any user will be able to register

In case of a virtual device, the user who owns it. null will not set owner, allowing access to any user.

Username for basic HTTP authentication

Admin email.

The name of an existing user group under which the rsync process should run.

Run daemons as moosefs user instead of root for better security.

User initialization file (init.nbt) contents

Specifies the user under whose account the AuthorizedKeysCommand is run

This optional key describes, at a high level, the intended purpose of the job

Do not generate a configuration and use gitea' installation wizard instead

The user file mode creation mask to use on home directories newly created by pam_mkhomedir.

Group assigned to the user and the webroot directory.

Disable various animations and transitions of the user interface.

The user-specific npm configuration

Password for default admin password

Path of a file containing the password for the unifi service user

Whether to enable a user service for the Emacs daemon

The state directory where Guix service will store its data such as its user-specific profiles, cache, and state files.

Message to display to the remote user before authentication is allowed.

XtreemFS home dir for the xtreemfs user.

Whether to enable Zammad, a web-based, open source user support/ticketing solution.

Enables GnuPG agent for every user session.

Whether to enable linking macOS applications to the user environment.

Whether to set up a minimal configuration that will remove all managed files and packages

Username for the scrobble service.

Username for the scrobble service.

This optional key describes, at a high level, the intended purpose of the job

Whether to enable i2c devices support

Group account under which Actual runs

SSH public key allowed to login as user btrbk to run remote backups.

Primary group of the Gitolite user account.

Name of the user to ensure.

Runtime directory of the movim user which holds the application’s caches & temporary files.

Whether to enable the Alot mail user agent

SMTP username

Primary username

Login username for the IMAP connection.

Default user to store mail for virtual users.

Whether to enable please, a Sudo clone which allows a users to execute a command or edit a file as another user .

Group account under which Klipper runs

Enables GnuPG agent with socket-activation for every user session.

Defines extra groups to which the tomcat user belongs.

Whether to enable ZITADEL, a user and identity access management platform.

Whether to enable copying macOS applications to the user environment (works with Spotlight).

Units that want (i.e. depend on) this unit

Store tmux socket under /run, which is more secure than /tmp, but as a downside it doesn't survive user logout.

List of extra groups that the "gocd-agent" user should be a part of.

Group account under which MySQL runs.

State directory of the pixelfed user which holds the application's state and data.

Configuration files to load besides the immutable one defined by the NixOS module

Default admin username.

OIDC userinfo URL endpoint.

Sync users.

output directory; ${HOME} will be expanded to the user's home directory, ${USER} will be expanded to the user name.