Whether to enable HTTPS and reject plain HTTP connections

server secret for safe session cookies, must be set

Address and port to listen on

Whether the volume should be preserved if it is removed from the configuration

A list of additional host names and/or IP numbers used for accessing the host's ssh service

Use a certificate generated by the NixOS ACME module for the given host

Whether the network should be internal

If enabled, pam_gnupg will attempt to automatically unlock the user's GPG keys with the login password via gpg-agent

Absolute path to a directory where builds will be stored in context of selected executor (Locally, Docker, SSH).

Absolute path to a directory where builds will be stored in context of selected executor (Locally, Docker, SSH).

Whether to support proxying websocket connections with HTTP/1.1.

Root directory for requests.

A list of extra flags to be passed to Anubis.

These lines go to the end of the upstream verbatim.

Systemd configuration specific to this syncoid service.

Whether to produce verbose logging output.

Whether to enable this vault-agent instance.

"Agent" hooks to install

command that will be execute

The port on which the introducer will listen.

Let the user initiate specific instant commands

Docker image to be used.

Docker image to be used.

Whether to bypass cgit and use git-http-backend for HTTP clones

Configuration other than defcfg

Options for the WordPress PHP pool

Basic Auth protection for a vhost

Tag for notmuch to use for the IANA $Phishing keyword

The resource to which access should be allowed.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Like ‘requires’, but in addition, if the specified units unexpectedly disappear, this unit will be stopped as well.

Similar to requires

Identifier of the UPS to monitor, in this form: <upsname>[@<hostname>[:<port>]] See upsmon.conf for details.

URL for JSON-RPC connections.

Environment variables to set for the kernel.

Whether to automatically take snapshots.

Whether to enable the virtual host

Server address and port to connect to.

The command that should be executed when the hook is triggered.

The group ID inside the container.

A mapping of ports between host and container

Text of the file.

Which algorithm to use for DNSSEC

Resolution refresh time for the target socket, in seconds.

Whether to enable kTLS support

The amount of filesystem space to not use for storage.

This option provides a simple way to serve individual, static files.

Whether the service should be restarted during a NixOS configuration switch if its definition has changed.

Command that buildkite-agent 3 will execute when it spawns a shell.

Tell nylon which interface to listen for client requests on, default is "lo".

Command that buildkite-agent 3 will execute when it spawns a shell.

Whether to add a separate nginx server block that permanently redirects (301) all plain HTTP traffic to HTTPS

A host of an existing Let's Encrypt certificate to use

A host of an existing Let's Encrypt certificate to use

These lines go to httpd.conf verbatim

Keeps the specified running while this unit is running

Keeps the specified running while this unit is running

If the specified units are started at the same time as this unit, delay them until this unit has started.

If the specified units are started at the same time as this unit, delay them until this unit has started.

Whether to run the machine in rootful mode

If set, a changed unit is restarted by calling systemctl stop in the old configuration, then systemctl start in the new one

Akkoma frontend package.

Number of monthly snapshots.

existing configuration file

Port to use for mbuffer

This optional key specifies the service on the node to connect(2) or bind(2) to.

Container color.

Indicates whether this is an account for a “real” user

Whether to enable this v4l2-relayd instance.

Source of the plugin package or path

Enable SSL.

ZNC network modules to load.

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

User name

Whether to begin the synchronisation by running notmuch new locally.

The pre-exit hook will run just before your build job finishes

Output scaling method.

Attribute set of values for the given modem

Group name of file owner

MQTT server access username.

Name/description of the runner.

The group borg serve is run as

Whether to append a minimal default PATH environment variable to the service, containing common system utilities.

Command to run after snapshots are taken on the source dataset, e.g. for database unlocking

Destination directory.

This optional key specifies the service on the node to connect(2) or bind(2) to.

Extra command line arguments to pass to wstunnel

Extra command line arguments to pass to wstunnel

Shell commands to run just before exit

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

User part of the JID for the recorder.

Extra settings to add to easytier-‹name›.toml.

When you have multiple UPSes on your system, you usually need to turn them off in a certain order. upsdrvctl shuts down all the 0s, then the 1s, 2s, and so on

Use HTTPS for the tunnel server.

List of errbot plugin derivations.

Prevents the system from sleeping while backing up.

Environment variables to send from the local host to the server.

The hostname the service is reachable via

URL where SimpleSAMLphp can be reached.

Secret key of the onion service