Marks session cookies as "secure" as a hint for browsers to only send them via HTTPS

Name is used as a suffix for the service name, user, and group

When set to true, disables the Background Plugin Installer, which runs before Grafana starts

The harmonia package to use.

Verbosity of the initrd

Path of the file GNS3 Server should log to.

identd listen port

Which packages gnome should exclude from the default environment

Group under which httpd children processes run.

Guaranteed minimum hops for ‹name› tunnels.

Directory for the ACME challenge, which is public

Number of simultaneous exploratory tunnels.

Use systemd-journald

Whether to enable Bash integration.

Periodically re-execute the wg utility every this many seconds in order to let WireGuard notice DNS / hostname changes

When false, the HTTP header X-Frame-Options: deny will be set in Grafana HTTP responses which will instruct browsers to not allow rendering Grafana in a <frame>, <iframe>, <embed> or <object>

Whether to enable Jitsi Meet - Secure, Simple and Scalable Video Conferences.

Enable billing Cron-Jobs on the local instance

Enables udev rules for Nitrokey devices.

File containing the password for the user.

The executable of the window manager to use.

The port to listen on for HTTP requests.

Configuration for gtklock

Whether to enable Apache Kafka event streaming broker.

Whether to load additional drivers for certain vendors (I

Port to listen on.

Specifies the Buildbot directory.

The filebeat package to use.

The host name or IP address on which to bind Airsonic

A file containing a unique base64 encoded secret for the TOKENS_KEY_BASE

Name of the accessory

Whether to enable I2P router.

The amazon-ssm-agent package to use.

Listen addresses for this virtual host

Verbatim Exim configuration

Extra arguments to pass to coredns.

Whether to start the Keybase service.

Whether to enable heartbeat, uptime monitoring.

Whether to enable the incron daemon

Whether to enable creation of database on the instance.

Verbatim configuration text appended to the generated gitweb.conf file.

Attribute set of arbitrary config options

The iay package to use.

Root path for the Gotenberg API.

Whether to enable a virtualhost to serve homer through caddy.

The terminal emulator to add to context-entry of nautilus

Whether to display a TOTP during boot using tpm2-totp and Plymouth.

Configuration for the default logger

Hostname alias(es).

Host which to proxy requests to if ACME challenge is not found

Set the path to file where the user's credentials are stored

Environment variables which are loaded from the contents of files at a file paths, mainly used for secrets

Access key id for the S3 storage backend.

Configuration options for cross-seed

Commands called at the start of the interface setup.

It is recommended you keep your secrets separate from the configuration

Defines new line-editing keys.

Username of the SMTP server for GitLab.

The name of this resource

Whether to enable the icingaweb2 monitoring module.

Whether to enable XWayland.

How to name the created archives

Remove mountpoints created by pam_mount after logout

Group to set for devices of the msr kernel subsystem.

Assign a icinga instance to this transport

Extra packages to be installed system wide

User under which Govee2MQTT should run.

Extra DNS records to expose to clients.

Whether to enable setting the system time.

Whether to configure nginx as a reverse proxy.

An extra CSS file to be loaded by the client.

Seconds after which script is considered to have failed.

Proxy URL for NTCP transport.

The input method configure in profile file in ini format.

User account under which cgminer runs

The redis host Dawarich will connect to.

Whether to enable killing/restarting processes.

Configurations for the fwupd daemon.

URL of the GoCD Server to attach the Go

Defines the scopes to request for OpenID Connect

The address to listen on for HTTP requests.

The number of parallel deletes to run.

Location of hardware kiss tnc for this interface.

Whether to enable jmusicbot, a Discord music bot that's easy to set up and run yourself.

Configure Nginx as a reverse proxy for Cryptpad

Maximum number of latest generations in the boot menu

Set a router bandwidth limit integer in KBps

Whether to add to gdbinit the python modules required to make Ghidra's debugger work.

User account under which FoundationDB runs.

Enable delete for manifests and blobs.

The drupal package to use.

Open ports in the firewall for deluge web daemon

Class that users must have.

Enable logging

Limit access to the ckb daemon to a particular group.

Set the class A subnet number to use for the internal remote DNS mapping, uses the reserved 224.x.x.x range by default.

Open the port in the firewall for FlareSolverr.

Extra environment variables

Configuration for IPTSD