This option implements Override local DNS as it is not yet implemented in Tailscaled-on-macOS

When recursive is enabled, adds -ignorelinks flag to lndir

It causes lndir to not treat symbolic links in the source directory specially

A command that prints the user name to standard output.

A command that prints the OAuth credentials to standard output

Enables middle button emulation

Whether to enable the HTTP/2 protocol

Allow clients to create repositories in subdirectories of the specified path

What should happen if synchronization in one direction is impossible due to one storage being read-only

Whitelisted players, only has an effect when services.minecraft-server.declarative is true and the whitelist is enabled via services.minecraft-server.serverProperties by setting white-list to true

Whether to invert the icmp block handling

Determines whether to check for release version mismatch between Home Manager and Nixpkgs

When recursive is enabled, adds -ignorelinks flag to lndir

It causes lndir to not treat symbolic links in the source directory specially

Command to send a mail

Group under which the postfix exporter shall be run

The path specifying a PEM encoded TLS CA certificate(s)

The path specifying a PEM encoded TLS CA certificate(s)

Set the $HYPRSHOT_DIR environment variable to the given location

Will place a separate image per screen when enabled, otherwise a single image will be stretched across all screens.

Path to a keyfile used to unlock the backing encrypted device

Whether the Mattermost config.json is writeable by Mattermost

Elasticsearch host

A command that prints the OAuth credentials to standard output

Whether to enable the systemd-networkd-wait-online service.

systemd-networkd-wait-online can timeout and fail if there are no network interfaces available for it to manage

When recursive is enabled, adds -ignorelinks flag to lndir

It causes lndir to not treat symbolic links in the source directory specially

When recursive is enabled, adds -ignorelinks flag to lndir

It causes lndir to not treat symbolic links in the source directory specially

Names of backends which are enabled by default but should be disabled

Whether the config should be checked at build time

Additional PHP extensions to use for Nextcloud

Enable running shellcheck on the generated scripts for this unit

A command that prints the OAuth credentials to standard output

Logs dropped packets failing the reverse path filter test if the option networking.firewall.checkReversePath is enabled.

Directory below /var/lib to store metrics

HMAC-SHA-256 is used with 128-bit truncation with IPsec

Connection string to postgresql in the [rust postgres crate config format](https://docs.rs/postgres/latest/postgres/config/struct

Whether to enable git integration for riff

Additional packages to generate completions from, if programs.fish.generateCompletions is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Whether to consider the network online when any interface is online, as opposed to all of them

Whether to attach to the default session after being autostarted if a Zellij session already exists

Additional units shipped with systemd that shall be enabled.

Whether generation of Diffie-Hellman parameters should be stateful or not

Each key in this dictionary is the label of another job

Whether to enable git integration for delta

When recursive is enabled, adds -ignorelinks flag to lndir

It causes lndir to not treat symbolic links in the source directory specially

The systemd target that will automatically start quickshell

The collections to synchronize between the storages.

Directory separator for mapping notmuch tags to maildirs.

Enabled collectors

The Quickshell package to use for the greeter

Enables settings required for Tailscale's routing features like subnet routers and exit nodes

Whether all users can write to the consumption dir.

Required for some non-Amazon S3 implementations

The Wayland compositor to run the greeter in

Shell commands to run when file has changed between generations

A command that prints the OAuth credentials to standard output

Whether to enable protontricks, a simple wrapper for running Winetricks commands for Proton-enabled games.

Whether to enable automatic client password generation

Whether to enable msmtp

Whether to enable Zsh integration

Whether to enable Fish integration

Whether to enable Bash integration

Enable running shellcheck on the generated scripts for this unit

The path of a directory which contains a custom landing page.

Hosts for which git-credential-keepassxc is enabled.

The path to the workdir

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Whether to enable Whether video acceleration (VA-API) should be enabled. .

If enabled, the virtual machine will provide a EFI boot manager. useEFIBoot is ignored if useBootLoader == false.

Whether to make sshd look up authorized keys from SSS

When enabled, the clock indicator (which by default is the colon) will flash on and off each second

Command to send a mail

Additional units shipped with systemd that shall be enabled.

The collections to synchronize between the storages.

The activation scripts blocks to run when activating a Home Manager generation

Whether to enable the Firefox Sync storage service

If enabled, when NIX_SSL_CERT_FILE is set on the host, pass the CA certificates from the host to the VM.

Which pinentry package to use

Whether to enable git integration for diff-so-fancy

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Whether to enable Bash completion for all interactive Bash shells

Whether or not SSL verification should be enabled for outgoing connections to the homeserver.

Whether to enable Homebrew to auto-update itself and all formulae when you manually invoke commands like brew install, brew upgrade, brew tap, and brew bundle [install]

Whether to enable git integration for patdiff

ChronyServerAddress of the chrony server side command port. (Not enabled by default.) Defaults to the local unix socket.

If enabled for legacy MBR VMs, the VM image will have a separate boot partition mounted at /boot. useBIOSBoot is ignored if useEFIBoot == true.

The compression level used when compression is enabled. gzip accepts levels 1 to 9. zstd accepts levels 1 to 19.

Enables lxd to use zfs as a storage for containers

The path to the upperdir

Optional

The manual pages to generate caches for if documentation.man.generateCaches is enabled

The package that provides the system-wide resolvconf command

Whether to create symlinks to the system generations under /boot

The list of path(s) to the lowerdir(s)

Whether to enable automatic generation and persistence of keys

The credentials to access the web interface, in case authentication is enabled, in the format username:hash

If enabled, causes the following behavior:

• Passes the --ephemeral flag to the runner configuration script
• De-registers and stops the runner with GitHub after it has processed one job
• Restarts the service after its successful exit
• On start, wipes the state directory and configures a new runner

You should only enable this option if tokenFile points to a file which contains a personal access token (PAT)

Whether to allow other versions of PostgreSQL than the recommended one