Shell script code called during zsh login shell initialisation.

This is the URL that users will enter to load your instance

Bind address for socksproxy endpoint.

Whether to enable http3-ytproxy for faster loading of images and video playback

Whether to enable Drupal web application.

Settings to include in /etc/buffyboard.conf

The homer package to use.

API tokens to provision for the user in this organization.

Account certificate file, necessary to create, delete and manage tunnels

Host which to proxy requests to if ACME challenge is not found

A list of files containing the various secrets

If set, all requests for this host are redirected (defaults to 301, configurable with redirectCode) to the given hostname.

Cloudflare tunnels.

Whether to fallback to interactive passphrase prompt if the keyfile cannot be found

Time in seconds to wait for the GPG Smartcard.

A host of an existing Let's Encrypt certificate to use. Note that this option does not create any certificates, nor it does add subdomains to existing ones – you will need to create them manually using security.acme.certs.

Owner to set for devices of the msr kernel subsystem.

Allow Type-1 fonts

The domain(s) to update in DuckDNS (without the .duckdns.org suffix)

Whether to enable Cloudlog.

URL to the server

Your email address

Path to certificate file

Where the webroot of the HTTP vhost is located. .well-known/acme-challenge/ directory will be created below the webroot if it doesn't exist. http://example.org/.well-known/acme-challenge/ must also be available (notice unencrypted HTTP).

The calibre package to use.

Location for the SQLite database.

Compression level

The permission for settings.dir

The time allowed for all jobs to finish before Sidekiq is killed forcefully.

Whether to enable Miriway, a Mir based Wayland compositor

Override the default TLS port for this virtual host.

Will be inserted in the Default section of the config file.

Proxies to be used by proxychains.

The gitlab-pages package to use.

Extra command-line arguments to be passed to earlyoom

DEPRECATED, use driverOptions

Disable file downloads from Code.

Set the interval how often full repairs are run, i.e. nodetool repair --full is executed

Port number anki-sync-server listens to.

IPv4 address of the interface

List of hub parsers to install

interface name of the NetworkManager connection

Create the database and database user locally.

Address or interface to bind to and tell other Cassandra nodes to connect to

Automatically restart the service on config change

Whether to publish privacy-sensitive authentication credentials

Attribute set of filesystem paths

The gitolite home directory used to store all repositories

Whether to enable GameScope Session.

Whether to enable bepasty, a binary pastebin server.

Enable rendering

Additional policy settings merged into the policy file

Whether to enable opening port in the firewall.

Server name domain suffixes.

Private key file for the certificate.

Extra configuration options appended to the default asterisk.conf file.

Options for Cloudlog's PHP-FPM pool.

List of domain names (FQDNs) to manage

Whether to enable DNS-over-HTTPS server.

FQDN of the Jitsi Meet instance.

Root directory for requests.

Enable specific user icons for history view

The protocol to allow

Whether to enable Ceph global configuration.

Enable recommended uwsgi settings.

Whether to enable rust-motd, a Message Of The Day (MOTD) generator.

Whether to enable Wi-Fi power saving.

Whether to enable Klipper, the 3D printer firmware.

The path to the signing private key file, used to sign requests and events.

  nix-shell -p dendrite --command "generate-keys --private-key matrix_key.pem"

Whether to prevent replacing the running kernel image.

These lines go to the end of the vhost verbatim.

Enables left-handed button orientation, i.e. swapping left and right buttons.

Whether to mount a tmpfs on /tmp during boot.

Root of the certificate directory.

The crowdsec-firewall-bouncer package to use.

The path to a file containing a newline-separated list of DuckDNS domain(s) to be updated (without the .duckdns.org suffix)

Elasticsearch listen address.

The name that will be given to this DNSCrypt resolver.

Specify the port (a positive integer) on which the Director daemon will listen for Bacula Console connections

If set, all requests for this host are redirected (defaults to 301, configurable with redirectCode) to the given hostname.

The port to listen on.

Whether to enable nginx virtualhost definition.

The resolution of the console

Type of the file system

Open ports in the firewall for the atuin server.

Open port in the firewall for the Jellyseerr web interface.

Desktop IDs (without the .desktop extension) of whitelisted agents.

Whether to enable ryzen_smu, a linux kernel driver that exposes access to the SMU (System Management Unit) for certain AMD Ryzen Processors

Default font path

If enabled, NixOS will set up a kernel that will boot on crash, and leave the user in systemd rescue to be able to save the crashed kernel dump at /proc/vmcore

(key=value) Configuration to be written to runtime.properties of the druid Druid Broker https://druid.apache.org/docs/latest/configuration/index.html

The data dir for ipfs-cluster.

DNS address to use for this server

The IP addresses of DNS servers to configure.

A host of an existing Let's Encrypt certificate to use

Whether to skip certificates issued before the first launch of Cert Spotter

FastCGI parameters to override

Number of simultaneous exploratory tunnels.

Group account under which libretranslate runs.

This is optional and is by default off, because most users will not need it