Log directory of the movim user which holds the application’s logs.

Users to provision.

Whether to periodically update the list of LoTW users

Specifies the path to a file containing the hashed password for the MQTT user

Name of the web server user that forwards requests to services.phpfpm.pools.<name>.socket the fastcgi socket for Matomo if the nginx option is not used

The script to run when user log in, usually a window manager, e.g. "icewm", "xfce4-session" This is per-user overridable, if file ~/startwm.sh exists it will be used instead.

The distinguished name to bind to the LDAP server with

Whether to enable npm user config.

Name of a file containing the spiped key

Username for this DDNS provider.

A set of users and their passwords and ACLs.

Allowed users and their secrets

If true, a system-wide PipeWire service and socket is enabled allowing all users in the "pipewire" group to use it simultaneously

List of users who are denied to login via Samba.

The user that you will authenticate with in the Grafana webhook settings

The username to store inside the credentials file.

Home directory of the grocy user which contains the application's state.

Whether to enable Restricted User Shell..

AutoConfig files can be used to set and lock preferences that are not covered by the policies.json for Mac and Linux

Maximum number of concurrent clients allowed.

Arguments to the buserver process

State directory of the movim user which holds the application’s state & data.

Path of a file containing the password for the unifi service user

Username used by SSH to login to remote host.

Defines the name of the claim that contains the username in the provider's userinfo endpoint

Initial user account for Apache NiFi

Whether to enable jjui - A terminal user interface for jujutsu.

Settings to write to specific dconf user databases

Whether to enable fd, a simple, fast and user-friendly alternative to find.

Minimum user ID for auto-login user.

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

The username of the SMTP server.

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Permissions granted for the services.syncoid.user user for local target datasets

If set, then the authenticating user must be a member of this group to use this module.

Multi User Chat (MUC) configuration

Whether to enable Newt, user space tunnel client for Pangolin.

The location of the original password files

Control client access to topics on the broker.

The group of the file

Specifies whether the processes of a user should be killed when the user logs out

Username for accessing the database.

User used to connect to the database

Admin username

Whether to enable nano, a small user-friendly console text editor.

When clone_target is unspecified, this is the name of a formula repository to tap from GitHub using HTTPS

Username for this DDNS provider.

Specifies whether the processes of a user should be killed when the user logs out

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

The username to login with.

By default, pam_mysql keeps the connection to the MySQL database until the session is closed

Run daemons as user.

Password HMAC-SHA-256 for JSON-RPC connections

If set, the service will register a new session with systemd's login manager

Grants the user, created by the ensureUser attr, superuser permissions

A list of verbatim OpenSSH public keys that should be added to the user's authorized keys

Username for the admin account

A list of files each containing one OpenSSH public key that should be added to the user's authorized keys

Path in which to store user data

Whether to enable systemd home area/user account manager.

User to run mailman-web as

Whether to enable user-space rshim driver for the BlueField SoC.

A string identifying a specific variant or edition of the operating system suitable for presentation to the user

This optional key describes, at a high level, the intended purpose of the job

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

If enabled, NixOS will set up a kernel that will boot on crash, and leave the user in systemd rescue to be able to save the crashed kernel dump at /proc/vmcore

Whether to enable Monado user service.

Set to true to automatically add new users to the main organization (id 1)

Delimiter for address extension: so mail to user+test can be handled by ~user/.forward+test

The rshim-user-space package to use.

Additional fields to be added to the end of the user manpath config file.

Mount points to be used by chunkserver for storage (see sfshdd.cfg(5))

The username to connect to the remote InfluxDB server

Path to a custom home page

When invoked by root the mount.davfs daemon will run as this user

By default pam-ussh reads the trusted user CA keys from /etc/ssh/trusted_user_ca

A file containing the password for the user of the MySQL/MariaDB server

A file containing a secure random string

The resolved shell path that users can inherit to set rush as their login shell

Name the bot should appear with.

A list of verbatim principal names that should be added to the user's authorized principals.

Units that want (i.e. depend on) this unit

If true, the user is not required to enter a password.

Enable PAM mount system to mount filesystems on user login.

Whether to enable dwm-status user service.

List of additional package outputs of the packages home.packages that should be installed into the user environment.

Whether to enable dwm-status user service.

IP address on which RabbitMQ will listen for AMQP connections

Username used to connect to the MQTT server.

Text used as placeholder text on login page for login/username input.

When true, any user will be able to register