The ASF home directory used to store all data

Path to a file containing the initial password for the admin user

Target location for Input Methods

Target location for Screen Savers

An ISO 3166-1 country code which replaces automatic phone-number detection without a country code

Action to perform after a CHILD_SA gets closed by the peer.

• The default of none does not take any action,
• trap installs a trap policy for the CHILD_SA.
• start tries to re-create the CHILD_SA.

close_action does not provide any guarantee that the CHILD_SA is kept alive

This parameter controls the period of time to test for a 'hands off' condition (i.e. when no force is applied) before a drift (noise) calibration occurs

User name under which the chrony exporter shall be run

The user_friendly_names prefix to use for this device type, instead of the default mpath

IP address on which nebula lighthouse should serve DNS. 'localhost' is a good default to ensure the service does not listen on public interfaces; use a Nebula address like 10.0.0.5 to make DNS resolution available to nebula hosts only.

Whether to auto-apply rules when switching to battery power even if the window(s) didn't just lose focus.

The cache directory in which to store mail files while they are being downloaded

The output console devices to pass to the kernel command line via the console parameter, the primary console is the last item of this list

Alloy configuration file/directory path

Default IP for binding vrrpd is the primary IP on interface

Default page layout for the web UI.

The content of this attribute is appended to any address that is missing a host name

Kinds of items to show

Match windows where wm class group contains string.

Whether to give the container its own private UIDs/GIDs space (user namespacing)

Specifies whether vdirsyncer should request vCards in version 4.0

List of extra IPv4 static routes that will be assigned to the interface.

If you want consistency between the two implementations, set the scope of the route manually with networking.interfaces.eth0.ipv4.routes = [{ options.scope = "global"; }] for example.

Whether to enable kernel modesetting when using the NVIDIA proprietary driver

Path used for the database file.

Group under which the chrony exporter shall be run

Sets the temperature unit.

Netfilter mark applied to packets after the inbound IPsec SA processed them

Machine identifier key

Extra integrations from the Datadog core-integrations repository that should be built and included

Whether to enable brightness control with keyboard keys

Object store configuration

Also suspend descendant processes that match this regex.

The email of the default Grafana Admin, created on startup.

Enable automatic-timezoned, simple daemon for keeping the system timezone up-to-date based on the current location

Possible values are:

• yes: checksum validation is forced
• no: checksum validation is disabled
• auto: Suricata uses a statistical approach to detect when checksum off-loading is used. (default) Warning: 'checksum-validation' must be set to yes to have checksum tested.

Automatically create or share folders that this device advertises at the default path

Flags passed verbatim to rtl_433 binary

Whether the config should be checked at build time

Automatically create or share folders that this device advertises at the default path

Environment variables to always set at login

Whether to enable Rosetta support

If the file source is a directory, then this option determines whether the directory should be recursively linked to the target location

Sets the measurement unit.

Signature verification policy file

Name of the user to log in

Sets the system-wide alert sound

Sets the mouse tracking speed

Use IKE fragmentation (proprietary IKEv1 extension or RFC 7383 IKEv2 fragmentation)

Videobridges use the same XMPP account and need to be distinguished by the nickname (aka resource part of the JID)

The SQL server URI

The default XMPP server description

An attribute set that will be used to substitute variables when building the dashboard

List of addresses and ports to listen on (ListenAddress directive in config)

List of Thunderbird profiles for which this account should be enabled

Show the "Develop" menu in Safari's menubar.

ESP proposals to offer for the CHILD_SA

Password for default admin password

How to display the folder before clicked. stack: Stack of file previews. folder: A folder icon

Netfilter mark applied to packets after the outbound IPsec SA processed them

Set the maximum transmission unit in bytes for the wireguard interface

Set this option to true to enable HTTP compression, this can improve transfer speed and bandwidth utilization

Whenever to use precomputated tables for ElGamal. i2pd defaults to false to save 64M of memory (and looses some performance)

If true, the adapter will be disabled by default

What interface to use for hardware acceleration

HT (High Throughput) capabilities given as a list of flags

These options manage the trade-off between battery charging and CPU performance when the USB-C power supply cannot provide sufficient power for both simultaneously:

• charge_battery prioritizes battery charging (driver default)
• performance prioritizes maximum CPU performance

Whether the user has accepted to submit anonymous usage data

Whether to enable copy to clipboard upon selecting text.

Whether the user has accepted to submit anonymous usage data

The USBGuard daemon modifies some attributes of controller devices like the default authorization state of new child device instances

Action to perform after loading the configuration.

• The default of none loads the connection only, which then can be manually initiated or used as a responder configuration.
• The value trap installs a trap policy, which triggers the tunnel as soon as matching traffic has been detected.
• The value start initiates the connection actively.
• Since version 5.9.6 two modes above can be combined with trap|start, to immediately initiate a connection for which trap policies have been installed

Use default configuration for the S3 storage backend.

Station MAC address -based authentication

Similar to networking.getaddrinfo.label, but this option defines entries for the precedence table instead

filterBlocks can be defined to blacklist journal messages which are not errors

The maximum charge level to help reduce battery wear:

• high_capacity charges to 100% (driver default)
• balanced charges to 90%
• stationary charges to 80% (maximum lifespan)

Note: Regardless of the configured charging profile, the operating system will always report the battery as being charged to 100%.

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

If enabled, starts the ArchisSteamFarm service

An extra set of filesystem paths that FoundationDB can read to and write from

The default path selector algorithm to use; they are offered by the kernel multipath target

The keyfile which associates this machine with your tarsnap account

A list of notifications to enable and use in your profiles

Specifies the device to use for hardware acceleration.

• cpu: no acceleration just use the CPU
• rocm: supported by modern AMD GPUs
• cuda: supported by modern NVIDIA GPUs
• metal: supported on darwin aarch64 machines

Tabby will try and determine what type of acceleration that is already enabled in your configuration when acceleration = null.

• nixpkgs.config.cudaSupport
• nixpkgs.config.rocmSupport
• if stdenv.hostPlatform.isDarwin && stdenv.hostPlatform.isAarch64

IFF multiple acceleration methods are found to be enabled or if you haven't set either cudaSupport or rocmSupport you will have to specify the device type manually here otherwise it will default to the first from the list above or to cpu.

This option no longer works on macOS 11 and later

If set to

• "true": all DNS lookups are DNSSEC-validated locally (excluding LLMNR and Multicast DNS)

Maximum memory used for data storage

Options to be added to config.php, as a nix attribute set

The default search engine used in the Private Browsing.

Limit CPU consumption for this factor when on battery power

Specifies the password that must be supplied for the default Bacula Console to be authorized

Specifies the password that must be supplied for the default Bacula Console to be authorized

Address to listen on for the web interface, API and telemetry.

null will default to :9091.

Configures how to restore tmux windows when attaching to a session.

Possible Values

0 : Native windows

1 : Native tabs in a new window

2 : Tabs in the attaching window

If this boolean is false, the port is recycled, thus leaving clients to remain oblivious to the demand nature of job

This optional key is used to control whether your job is to be kept continuously running or to let demand and conditions control the invocation

List of Thunderbird profiles for which this account should be enabled

This is the default directory to look for statically configured secrets like cluster-join-token.key

This is the default directory to look for statically configured secrets like cluster-join-token.key

Key bindings mapping keys to commands in different modes

Configures the rate limiting burst limit (number of messages per interval) that is applied to all messages generated on the system