Whether the automatically provisioned Elasticsearch instance should be added as a grafana datasource

Warn if Notmuch is not also enabled for this account

When set to false, disables checking for new versions of Grafana from Grafana's GitHub repository

Determines whether a process should detect changes to the configuration file since it was last read

Collectors to disable which are enabled by default.

Whether this interface should be configured with DHCP

If networking.firewall.logRefusedPackets and this option are enabled, then only log packets specifically directed at this machine, i.e., not broadcasts or multicasts.

Whether to overwrite Jellyfin's encoding.xml configuration file on each service start

Install the SPICE USB redirection helper with setuid privileges

Warn if Notmuch is not also enabled for this account

Mount nvidia-docker-1 directories on containers: /usr/local/nvidia/lib and /usr/local/nvidia/lib64.

What to do in case of a conflict between the storages

Optional

Collectors to disable which are enabled by default.

Whether to set up and configure an nginx virtual host according to upstream's recommendations

Whether to enable jujutsu integration for delta

Path to file that contains Client ID.

Enable per-CPU CHILD_SAs

Collectors to disable from the list of collectors that are enabled by default.

Which codecs to enable for hardware encoding. h264 is always enabled.

When enabled, force overwriting of the Atuin configuration file ($XDG_CONFIG_HOME/atuin/config.toml)

Whether to enable the --fakeroot support of Singularity/Apptainer

Whether to enable IPv6 Privacy Extensions for interfaces not configured explicitly in networking.interfaces._name_.tempAddress

If set, users with enabled Google Authenticator (created ~/.google_authenticator) will be required to provide Google Authenticator token to log in.

Collectors to enable or disable

What to do in case of a conflict between the storages

The system-wide memory allocator

Whether to persist metrics to a file

If enabled, causes the following behavior:

• Passes the --ephemeral flag to the runner configuration script
• De-registers and stops the runner with GitHub after it has processed one job
• On stop, systemd wipes the runtime directory (this always happens, even without using the ephemeral option)
• Restarts the service after its successful exit
• On start, wipes the state directory and configures a new runner

You should only enable this option if tokenFile points to a file which contains a personal access token (PAT)

By default, all allowed IPs and subnets are comma-separated in the allowed_ips field

Whether to enable kernel modesetting when using the NVIDIA proprietary driver

Whether to periodically prune Podman resources

Whether to periodically prune Docker resources

An attribute set of option values passed to rclone mount

Whether to run QEMU with a graphics window, or in nographic mode

Target location for Internet Plugins

Whether to enable Starship's transient prompt feature in fish shells

When enabled dockerd is started on boot

Name of the voice model to use

Whether to enable loading the wireless regulatory database at boot.

Collectors to disable which are enabled by default

Override the default working directory for the container.

Whether to enable git integration for diff-highlight

Type of 9p cache to use when mounting host nix store. "none" provides no caching. "loose" enables Linux's local VFS cache. "fscache" uses Linux's fscache subsystem

If enabled, lowerdir, upperdir and workdir will be prefixed with /sysroot

If enabled, sets the ATH_USER_REGD kernel config switch to true to disable the enforcement of EEPROM regulatory restrictions for ath drivers

If enabled, copies the NixOS configuration file (usually /etc/nixos/configuration.nix) and symlinks it from the resulting system (getting to /run/current-system/configuration.nix)

When enabled, alerts will be tried to dispatch with an error message regarding faulty templating or missing fields to help debugging.

Whether to enable four-finger pinch gesture (spread shows the Desktop, pinch shows the Launchpad): 0 to disable, 2 to enable

When enabled, alerts are presented in HTML format and include colorized status (FIR|RES), alert start time, and a link to the generator of the alert.

When using the SLiRP user networking (default), this option allows to forward ports to/from the host/guest.

Encrypt swap device with a random key

Change the paths where mandoc makewhatis(8)generates the manual page index caches. documentation.man.generateCaches should be enabled to allow cache generation

When enabled, n8n sends notifications of new versions and security updates.

Whether to enable three-finger vertical swipe gesture (down for Mission Control, up for App Exposé): 0 to disable, 2 to enable

When recursive is enabled, adds -ignorelinks flag to lndir

It causes lndir to not treat symbolic links in the source directory specially

Path to file that contains Client Secret.

If this option is enabled, the guest will be isolated, i.e. it will not be able to contact the host and no guest IP packets will be routed over the host to the outside

Whether to use NetworkManager to obtain an IP address and other configuration for all network interfaces that are not manually configured

Target location for Audio Unit Plugins

The client TLS security level.

https://www.postfix.org/postconf.5.html#smtp_tls_security_level

Configure the launchd agent to manage the AeroSpace process

List of source directories and files to backup

Enable IPComp compression before encryption

Set syntax highlighters

Whether to include the build closure of the whole system in its runtime closure

Whether to enable "Natural" scrolling direction

The name of the connection to mediate this connection through

Whether to generate Device Tree-related directives in the extlinux configuration

Whether to enable killing of processes which have an AppArmor profile enabled (in security.apparmor.policies) but are not confined (because AppArmor can only confine new processes)

XFRM interface ID set on inbound policies/SA, can be overridden by child config, see there for details

Configure whether HTTP requests follow HTTP 3xx redirects

Configure whether HTTP requests follow HTTP 3xx redirects

Number of seconds we're willing to wait for a guest to shut down

When enabled, programs.floorp.profiles.<profile>.extensions.settings.<extensionID>.permissions must specify the exact set of permissions that the extension will request

Custom ordering of accounts and local folders in Thunderbird's folder pane

Runs container in ephemeral mode with the empty root filesystem at boot

Custom ordering of calendar accounts

Whether to assign predictable names to network interfaces

XFRM interface ID set on outbound policies/SA, can be overridden by child config, see there for details

If this attribute is given, SAE-PK will be enabled for this connection

Encrypt swap device with a random key

Configure whether HTTP requests follow HTTP 3xx redirects

Configure whether HTTP requests follow HTTP 3xx redirects

When enabled, programs.firefox.profiles.<profile>.extensions.settings.<extensionID>.permissions must specify the exact set of permissions that the extension will request

If not null and --rga-accurate is enabled, mime type matching is used instead of file name matching

If enabled, the boot disk of the virtual machine will be formatted and mounted with the default filesystems for testing

Configure whether HTTP requests follow HTTP 3xx redirects

Configure whether HTTP requests follow HTTP 3xx redirects

Configure whether HTTP requests follow HTTP 3xx redirects

Configure whether HTTP requests follow HTTP 3xx redirects

When set to false, disables checking for new versions of installed plugins from https://grafana.com

Send certificate request payloads to offer trusted root CA certificates to the peer

When enabled, programs.librewolf.profiles.<profile>.extensions.settings.<extensionID>.permissions must specify the exact set of permissions that the extension will request

XFRM interface ID set on inbound policies/SA

When enabled, the container is automatically started on boot

Configure whether HTTP requests follow HTTP 3xx redirects

Set to true if you want to enable HTTP Strict-Transport-Security (HSTS) response header

When enabled, the user must authorize requested permissions for all extensions from programs.floorp.profiles.<profile>.extensions.packages in programs.floorp.profiles.<profile>.extensions.settings.<extensionID>.permissions

When enabled, the user must authorize requested permissions for all extensions from programs.firefox.profiles.<profile>.extensions.packages in programs.firefox.profiles.<profile>.extensions.settings.<extensionID>.permissions