This key specifies that the job should be spawned into a new security audit session rather than the default session for the context is belongs to

If set to on, the border will be drawn with retina resolution.

List of Homebrew casks to install

A list of permissible login shells for user accounts

This optional key causes the job to be started every time a filesystem is mounted.

This optional key specifies the protocol to be passed to socket(2)

The application ID to match (optional).

Set the size of cursor. 1 for normal, 4 for maximum

List of binary cache URLs used to obtain pre-built binaries of Nix packages

This key lets one override the default throttling policy imposed on jobs by launchd

Configuration for spotifyd, see https://spotifyd.github.io/spotifyd/config/File.html for supported values.

Configuration for Nix, see https://nixos.org/manual/nix/stable/#sec-conf-file for avalaible options

This option specifies the redis package to use

Synapse BitTorrent package to use.

Whether to enable Gitlab Runner.

Whether to automatically rearrange spaces based on most recent use

Whether to show all file extensions in Finder

Whether this file should be generated

When enabled, the clock indicator (which by default is the colon) will flash on and off each second

If enabled, causes the following behavior:

• Passes the --ephemeral flag to the runner configuration script
• De-registers and stops the runner with GitHub after it has processed one job
• Restarts the service after its successful exit
• On start, wipes the state directory and configures a new runner

You should only enable this option if tokenFile points to a file which contains a personal access token (PAT)

List of overlays to apply to Nixpkgs

Config to use for khdrc.

Whether to enable trackpad gestures (three- or four-finger vertical swipe) to show App Exposé

Whether to enable sketchybar.

VAM plugin dictionaries to use for vim_configurable.

Either the fully qualified domain name (FQDN), or just the host name if it does not exists

Whether fish should autoload fish functions provided by other packages.

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

Name of symlink

Environment variables passed to the service's processes.

This public key is an SSH certificate authority, rather than an individual host's key.

The karabiner-elements package to use.

Whether to enable nix-index and its command-not-found helper.

Address on which to listen for clients.

Whether to enable the Synergy server (send keyboard and mouse events).

Name of symlink

List of users owned and managed by nix-darwin

Whether to enable smart dash substitution

Whether to automatically hide and show the dock

Enables swiping left or right with two fingers to navigate backward or forward

Enable recommended proxy settings.

Whether to enable the livekit server.

Whether to configure the required settings to use postfix-tlspol in the local Postfix instance.

API key, which enables the developer API.

Whether to enable opening of the RPC port in the firewall.

Extra arguments passed to restic backup.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

addr:port to listen on for HTTPS clients

Whether to enable automatic nginx and uwsgi setup for mailman-web.

PowerDNS Recursor settings

The type of virtual interface used for the network connection.

The address to listen on.

Administrator emails for system notifications

The content Lua configuration file for PowerDNS Recursor

Whether to open ports in the firewall for the server.

See torrc manual.

Whether to listen for and reject all HTTPS connections to this vhost

IP address or hostname of the remote end (use 0.0.0.0 for a floating/dynamic remote endpoint).

If specified, public-inbox-watch(1) will only process mail containing a matching header.

Environment variables to set for the service

Group under which the exportarr-prowlarr exporter shall be run.

IKE rekeying refreshes key material using a Diffie-Hellman exchange, but does not re-check associated credentials

Whether to open TCP firewall ports, which are specified in services.stalwart.settings.server.listener on all interfaces.

Port on which PdfDing listens

Directory for the acme challenge which is PUBLIC, don't put certs or keys in here

Pretalx plugins to install into the Python environment.

Whether to enable Roon Bridge.

Accept logging through UDP

TLS configuration.

Address on which to start webserver.

By default data is only periodically persisted to disk, enable this option to use an append-only file for improved persistence.

Max qps allowed from whitelisted sources. 0 means unlimited

Whether to enable Sunshine, a self-hosted game stream host for Moonlight.

Port to listen on.

The group pgbouncer is run as.

Port on which RabbitMQ will listen for AMQP connections.

Address to listen on.

UNIX domain socket path to bind.

The place where privatebin stores its state.

The public-facing port that PeerTube will be accessible at (likely 80 or 443 if running behind a reverse proxy)

An attribute set describing an HTTP to GCS proxy that allows us to use GCS bucket via HTTP protocol.

The sitespeed-io package to use.

Whether to send announcements to the local LAN, also use such announcements to find other devices.

The username used to access your metrics.

Whether to enable litestream.

List of UnifiedPush servers

Optional Authorization header configuration.

The ip address to bind to (both listen on and send packets from).

Makes this vhost the default.

Run sanoid at this interval

If temperature is below this, fans will run at minimum speed.

Name of the bucket where uploads should be stored.

Paths to the disks that will be monitored

List of attribute sets containing configuration for each domain

Whether the automatically provisioned Elasticsearch instance should be added as a grafana datasource

IP of the Redis master

Email notification configuration

MODBUS_CLIENT variable

Key / certificate pairs for the virtual host.

Optional proxy URL.