Background image used for GRUB

If enabled, checks that Nix can parse the generated nix.conf.

The package that provides the default driver set.

Path to root SSL certificate for stapling and client certificates.

Whether to enable the mDNS NSS (Name Service Switch) plug-in for IPv4

Whether to auto-load connection-tracking helpers

Whether to enable the traffic_filters feature for this account.

Whether to start a user service to run mouse-actions on startup.

Chain length for random chain.

The directory where user objects are stored.

Base64 preshared key generated by wg genpsk

Defines the IP address by which CouchDB will be accessible.

Whether to enable GPaste, a clipboard manager.

For sqlite3 only

The mandoc derivation to use

The DNS servers which dnsmasq should query.

The isolate-unwrapped package to use.

Lua plugins

Legit port.

Path to already created certificate.

Enable hardware encoding for video transcoding.

Whether to enable Libreswan IPsec service.

MeshID of interface with type mesh.

Whether to enable the Starship shell prompt.

Whether to enable verbose logging

Free-form settings written to Draupnir's configuration file

Load federated posts

Whether to enable ChromaDB, an open-source AI application database..

Whether to enable the LanguageTool server, a multilingual spelling, style, and grammar checker that helps correct or paraphrase texts.

The default source address.

The audio device to use.

The JDK package to use.

Path to certificate file

CA used to sign the new certificate -- accepts '[file:]fname' or 'env:varname'.

Path the service has access to

The h2o package to use.

Configure nginx as a reverse proxy for dawarich

Whether to enable nm-applet, a NetworkManager control applet for GNOME.

The conman package to use.

The package that provides the icon theme given in the name option.

If this attribute is given with non-zero length, it will set the password identifier for this entry

Basic Auth password file for a vhost

Whether to generate Device Tree-related directives in the extlinux configuration

Address of the LDAP server to use

A unique provider name.

Whether to enable kthxbye alert acknowledgement management daemon.

Whether to enable GNOME Keyring daemon, a service designed to take care of the user's security credentials, such as user names and passwords .

Whether all rooms will be persistent by default: the value of the “persistent” option in the global configuration of each user will be “true”, but the value of each individual room will still default to false

Path to host the API on and forward to the daemon's api port

The UDP port to open in the firewall

Bind port for websockets endpoint.

Whether to open the firewall for the specified port.

The path to the CA certificate to use.

Whether to enable identd service support.

Web Push Notifications configuration

Whether to force the use of a ia32 boot loader on x64 systems

Extra configuration options for diod.conf.

EHT multi user beamformee support

Set to false to prohibit users from creating new organizations.

Additional Apache modules to be used

Configuration for foot terminal emulator

Adds try_files directive.

A list of ACME accounts

System-wide default sans serif font(s)

Cadvisord storage driver database name.

Whether to enable COSMIC desktop environment.

TCP Port to bind on for API connections relayed by the reverse proxy/tls terminator.

Size limit for the /run/wrappers tmpfs

Whether to enable calibre-server (e-book software).

The domain under which the albums frontend will be served.

Database password file for FreshRSS.

Whether to enable debug logging.

Whether to enable CoreCtrl, a tool to overclock amd graphics cards and processors

Specifies the JDBC URL to use when connecting to the database.

List of blocklists

Group under which jellyfin runs.

List of connection-tracking helpers that are auto-loaded

Whether to enable the invidious-router service.

The directory used to store all data for kasmweb.

Whether to ask Let's Encrypt to sign a certificate for this vhost

Directory to store the Froide-Govplan server data.

Configure path to the Calibre's ebook-convert in the DB.

Filesystem location where Nexus should store the subscriber private keys.

TCP port for external connections, like remote control via amule-gui

Whether to enable HTTPS and reject plain HTTP connections

GitLab database name.

Run bitbox-bridge.service only when hardware wallet is plugged, also registers the systemd device unit

Directory to read CSV config files from

Whether to enable Gtk3 support.

The autotier package to use.

The port to listen on

Port to bind on for p2p connections from peers (both TCP and UDP)

Whether to enable a Jibri instance and configure it to connect to Prosody

The firezone-gateway package to use.

If set, all requests for this host are redirected (defaults to 301, configurable with redirectCode) to the given hostname.

DID of mod service

Whether to protect HP/Dell laptop hard drives (not SSDs) in free fall.

key in the setting section for which this entry provides a value

Private key file for the certificate.

The path of a PEM encoded TLS private key