Additional names of virtual hosts served by this virtual host configuration.

Listen addresses for this virtual host

Specifies the user under whose account the AuthorizedKeysCommand is run

Additional names of virtual hosts served by this virtual host configuration.

Set the entries to ignore in static /etc/hosts for host completion.

RPC host.

Listen addresses and ports for this virtual host.

If set creates an nginx virtual host for the client

List of protocols sslh will probe for and redirect

A script that will produce a Host Integrity Protection (HIP) report, as described at https://www.infradead.org/openconnect/hip.html

Whether to enable Simple Ollama web UI service; an easy to use web frontend for a Ollama backend service

If given an IP address, it can be a host name ("localhost"), an IPv4 dotted-quad ("127.0.0.1") or an IPv6 address enclosed in square brackets ("[::1]").

(VCL4.1 and higher) If given an absolute Path ("/path/to/listen.sock") or "@" followed by the name of an abstract socket ("@myvarnishd") accept connections on a Unix domain socket

Listen addresses for this virtual host

Network ports to publish from the container to the outer host

Whether a database should be automatically created on the local host

Additional environment file as defined in systemd.exec(5)

If set, all requests for this host are redirected (defaults to 301, configurable with redirectCode) to the given hostname.

With "host", a separate output file is used, based on the hostname of the other endpoint of a connection

Listen addresses for this virtual host

Listen addresses for this virtual host

Additional names of virtual hosts served by this virtual host configuration.

Proxy to use to connect to the wstunnel server (USER:PASS@HOST:PORT).

Listen addresses and ports for this virtual host.

Address (<host>:<port>) on which the Prometheus metrics HTTP server should be listening.

If set, all requests for this host are redirected permanently to the given URL.

An IP address or a network IP address with a mask for IPv4 or IPv6

Type of 9p cache to use when mounting host nix store. "none" provides no caching. "loose" enables Linux's local VFS cache. "fscache" uses Linux's fscache subsystem

Listen addresses for this virtual host

A host of an existing Let's Encrypt certificate to use

Database host port.

If set, all requests for this host are redirected permanently to the given URL.

If enabled, the Nix store in the VM is made writable by layering an overlay filesystem on top of the host's Nix store

Create and use a local Meilisearch instance

Whether to enable the GNOME Shell native host connector

Path to the private key file on the host system

Additional names of virtual hosts served by this virtual host configuration.

Additional names of virtual hosts served by this virtual host configuration.

Listen addresses and ports for this virtual host

URL of the Loki host.

Name of this virtual host

A host of an existing Let's Encrypt certificate to use

Fully qualified domain name of the JMAP service.

mujmap looks up the JMAP SRV record for this host to determine the JMAP session URL

If set, all requests for this host are redirected permanently to the given URL.

A host of an existing Let's Encrypt certificate to use

Environment file as defined in systemd.exec(5)

Runs container in ephemeral mode with the empty root filesystem at boot

Whether a database should be automatically created on the local host

A list of remote servers to which to send each message

Database host port.

Additional lines of configuration appended to this virtual host in the automatically generated Caddyfile.

If set, all requests for this host are redirected permanently to the given URL.

A host of an existing Let's Encrypt certificate to use

Whether to give the container its own private UIDs/GIDs space (user namespacing)

If set, all requests for this host are redirected (defaults to 301, configurable with redirectCode) to the given hostname.

Listen addresses for this virtual host

Listen addresses for this virtual host

The host/domain names that this site can serve.

Secrets like SECRET_KEY_BASE and BASIC_AUTH_PASSWORD should be passed to the service without adding them to the world-readable Nix store

Additionally enable the recommended set of pairwise ciphers

System databases (as described in /etc/nsswitch.conf on GNU/Linux systems) to copy into the chroot from the host.

Listen addresses for this virtual host

Configuration for Static Web Server

A host of an existing Let's Encrypt certificate to use

A host of an existing Let's Encrypt certificate to use

Whether to enable Native Messaging Host for Plasma Browser Integration.

Listen address as host IP and port definition.

Additional names of virtual hosts served by this virtual host configuration.

Additional names of virtual hosts served by this virtual host configuration.

Listen addresses for this virtual host

Listen addresses and ports for this virtual host

Settings to configure backend server

Whether to enable Rosetta support

List of Systemd services to require and wait for when starting the application service, such as the Matrix homeserver if it's running on the same host.

Specifies the action to be done to / on the guests when the host boots

Listen addresses for this virtual host

A host of an existing Let's Encrypt certificate to use

The qemu package to use. pkgs.qemu can emulate alien architectures (e.g. aarch64 on x86) pkgs.qemu_kvm saves disk space allowing to emulate only host architectures.

Environment file as defined in systemd.exec(5)

Whether to set up and configure an nginx virtual host according to upstream's recommendations

If set, all requests for this host are redirected (defaults to 301, configurable with redirectCode) to the given hostname.

Listen addresses for this virtual host

config.yaml configuration as a Nix attribute set