Whether to follow symlinks specified as archives.

Certificate file for client cert authentication to the server.

Extra Java options used when launching Riemann.

Path under which to expose metrics.

Create and use a local Redis instance

Attribute set of paths whose content is copied to the extensions subdirectory of the MediaWiki installation and enabled in configuration

Which port the ollama server listens to.

SMTP server hostname.

Webserver to use.

Listen address.

Whether to enable Nginx Web Server.

See torrc manual.

Specify a filter for iptables to use when services.prometheus.exporters.node-cert.openFirewall is true

IO scheduler class.

Show nginx version in headers and error pages.

Square profile pictures.

Value of the IKE preshared secret

Open port in firewall for incoming connections.

Prefix for API and UI endpoints

Hostname of the instance.

DNSSEC capable resolver to be used for the check.

TCP port where owncast rtmp service listens.

List of endpoints to probe.

Group under which the modemmanager exporter shall be run.

When a room is destroyed, it leaves behind a tombstone which prevents the room being entered or recreated

Open a port in the firewall for the Overseerr web interface.

Whether to run scollector.

An attribute set of options as described in: https://pgbackrest.org/configuration.html

All options can be used

Set the group that traefik runs under

Whether to enable the prometheus idrac exporter.

The location of the system persistent storage file

Whether sshd should check file modes and ownership of directories

Makes this vhost the default.

Order of this location block in relation to the others in the vhost

Extra arguments to pass to the nmbd service.

Log level of the Proton Mail Bridge service

The skill level shown in the server browser.

Group under which the nats exporter shall be run.

User name under which the ping exporter shall be run.

Sets the secret key with the credentials read from the configured file

The prometheus-postfix-exporter package to use.

Name of HTTP request header used for dynamic prefixing of UI links and redirects

Directory for the acme challenge which is PUBLIC, don't put certs or keys in here

The postgresql package that will effectively be used in the system

Whether to enable Web Services Dynamic Discovery host daemon

Root directory for requests.

Port on which RabbitMQ will listen for AMQP connections.

Separator placed between concatenated source label values

Defines the base URI for the Hash and URL feature supported by IKEv2

Configuration options for the Stalwart server

By default, the Drone RPC server will listen on all interfaces and local IPv4 addresses for incoming connections from clients

Listen address for MTR exporter.

Declarative location config

Whether to enable Beacon node http api.

Path to file containing the public key used for Web Push Voluntary Application Server Identification

A specific interface to bind to.

If true, enable cgit (fast web interface for git repositories) as a sub-service in lighttpd.

Whether to enable TuneD.

Whether to enable Grafana Loki.

The address (including host and port) under which we can access the Ollama backend server. !Note that if the the UI service is running under a domain "https://ui.example.org", the Ollama backend service must allow "CORS" requests from this domain, e.g. by adding "services.ollama.environment

Extra Nominatim database connection parameters

Certificate file for MQTT

OpenAFS kernel module package

User name under which the rspamd exporter shall be run.

Domain under which paperless will be available.

Whether to enable rmfakecloud remarkable self-hosted cloud.

Whether to enable chat spam protection.

Path to a file containing sensitive environment variables for Newt

The query string used to match one or more fans: can be a fullpath to the temperature file (single fan) or a fullpath to a driver directory (multiple fans).

sched_cfs_bandwidth_slice_us.

Path to CBZ library

Basic Auth protection for a vhost

Whether the service discovery should list all instances for all projects

Type of virtualhost to use and setup

The DNS suffix which should be applied to target.

When this option is not 0, users ability to control feed purging intervals is disabled and all articles (which are not starred) older than this amount of days are purged.

The listen port for the HTTP API.

Automatic backup of important data to a AWS S3 (or compatible) instance

Alertmanager configuration as nix attribute set

Log format to use.

A host of an existing Let's Encrypt certificate to use

An application timeout on receiving data from the TCP socket.

Address to listen on.

The password used for database authentication.

Specify rules for nftables to add to the input chain when services.prometheus.exporters.junos-czerwonk.openFirewall is true.

Path to root SSL certificate for stapling and client certificates.

Run daemons as moosefs user instead of root for better security.

The path of the web root directory.

If enabled, allow principal names containing (.) dots

Whether to enable streaming via TCP.

File path containing the authentication secret.

See upstream docs: docs/capture-hardware/dpdk and docs/configuration/suricata-yaml.html#data-plane-development-kit-dpdk.

The default syslog.conf file configures a fairly standard setup of log files, which can be extended by means of extraConfig.

A list of attribute sets containing paths to TLS certificates and keys

Additional parameters passed to syslogd.

Port to bind OctoPrint to.

Write logs to a specific Cloudwatch Logs group.

Whether to enable helper service.

Whether to enable the Teleport service.

Minimum length of the password