Path to root SSL certificate for stapling and client certificates.

Settings for a cups-pdf instance, see the descriptions in the template config file in the cups-pdf package

Path to the .jsk KeyStore or paths to the PKCS#8 certificate and private key, separated by a space (see example)

The ntpd-rs package to use.

Restrict logins to members of this team.

The ringboard package to use.

The pihole-web package to use.

Alias of services.transmission.openPeerPorts.

bypass Nix warning about SCION PKI bootstrapping

Whether to enable Force to use MQTT protocol v5 instead of 3.1.1..

Prefix for all Redis lock keys (only used when Redis is configured).

Whether a Postquantum Preshared Key (PPK) is required for this connection

User account name under which SFTPGo runs.

Scopes for the token request.

Settings which are written into paste.ini.

Additional groups for the systemd service.

Enable Trezor bridge daemon, for use with Trezor hardware bitcoin wallets.

The mptcpd package to use.

Length of a throttling window.

DNS hostname where your server can be reached

The n8n package to use.

Adds a return directive, for e.g. redirections.

Whether to enable the PulseAudio sound server.

The rosenpass package to use.

FQDN for the Oncall instance.

Certificate file for client cert authentication to the server.

The address where the daemon will listen to client connections for this homeserver.

The shoko package to use.

Options for the monica PHP pool

Identity to use as peer identity during EAP authentication

Whether to delete thumbnails and source files on post delete.

List of additional peer IP addresses to connect to.

Number of seconds between reloads triggered by xfrd.

Open port in firewall for incoming connections.

Port to listen on

Whether to enable SlurmDBD service.

The tag to add

Enable recommended proxy settings.

See torrc manual.

Whether to enable the MonetDB database server.

Whether to open the firewall for the soulseek network listen port (not the web interface port).

Whether to enable PipeWire service.

Options for the 'backup' command

Enable support for the insecure SSLv3 protocol.

Whether to enable The Lounge web IRC client.

See the configuration guide for available options.

Environment file to pass secret configuration values

TCP port to bind to.

Automatically create or share folders that this device advertises at the default path

The port for serving HTTP(S) requests

Whether this server federates with other servers.

Whether to enable sillytavern.

Use the given name instead of the hostname to identify ourselves to the server.

Whether to enable the submissions service configured in master.cf

The fallback instance name if not configured into the admin UI

Basic Auth password file for a vhost

List of libraries to be preloaded.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Whether to enable Newt, user space tunnel client for Pangolin.

Hostname of IMAP server to connect to.

List of groups allowed to operate with the config

Separate database URL for the crypto database

Host which to proxy requests to if ACME challenge is not found

The IP address to listen on

Mail "from" email.

reaction's loglevel

Loglevel for logs written to the logfile.

Whether to enable Sshwifty.

Storage path of ruTorrent.

Lifespan of succeeded download tasks.

Reload nginx when configuration file changes (instead of restart)

Port to listen on.

A systemd service name to use (without .service suffix).

Alias directory for requests.

The host that surrealdb will connect to.

NATS monitor endpoint to query.

The php package to use.

Maximum number of open connections to the database (0 = use database-specific defaults).

sched_wakeup_granularity_ns.

Certificate file for client cert authentication to the server.

Refresh interval to re-read file SD files

Certificate file for client cert authentication to the server.

Database host address.

Group under which the idrac exporter shall be run.

HTTP password file

The user to run Reposilite under.

A list of IP subnets that are allowed to stream to the server.

List of packages that provide LV2 plugins in lib/lv2 that should be made available to WirePlumber for [filter chains][wiki-filter-chain]

Arguments to the thanos compact command

See torrc manual.

Prefix for API and UI endpoints

Pair of address:port the proxy server is listening to.

See torrc manual.

User name under which the mysqld exporter shall be run.

Skip authentication for requests matching any of these regular expressions.

Whether to only snapshot child datasets if recursing.

Listening port (UDP).

Use an encrypted SSL/TLS connection.

The host that rustus will connect to.

Whether to enable this cups-pdf instance.