Path to YAML templates configuration

Path to configuration file that can enable TLS or authentication.

Forcibly override any existing configuration for this extension.

automysqlbackup configuration

Specifies the device to use for hardware acceleration.

• cpu: no acceleration just use the CPU
• rocm: supported by modern AMD GPUs
• cuda: supported by modern NVIDIA GPUs
• metal: supported on darwin aarch64 machines

Tabby will try and determine what type of acceleration that is already enabled in your configuration when acceleration = null.

• nixpkgs.config.cudaSupport
• nixpkgs.config.rocmSupport
• if stdenv.hostPlatform.isDarwin && stdenv.hostPlatform.isAarch64

IFF multiple acceleration methods are found to be enabled or if you haven't set either cudaSupport or rocmSupport you will have to specify the device type manually here otherwise it will default to the first from the list above or to cpu.

The file that holds the logging configuration.

Armagetron Advanced server per-round configuration

Extra configuration options to add to the account section.

Public information about clouds

This optional key is used to specify launch on demand sockets that can be used to let launchd know when to run the job

Specify the configuration for Opentelemetry Collector in Nix

Configuration of alertmanager-ntfy

Whether to include the build closure of the whole system in its runtime closure

This is the default directory to look for statically configured secrets like cluster-join-token.key

This is the default directory to look for statically configured secrets like cluster-join-token.key

Grafana mute timings configuration in Nix

Whether to use NetworkManager to obtain an IP address and other configuration for all network interfaces that are not manually configured

Configuration options of collaboration server

Grafana datasource configuration in Nix

Configuration of the netbird management server

postgres-websockets configuration as defined in: https://github.com/diogob/postgres-websockets/blob/master/src/PostgresWebsockets/Config.hs#L71-L87

PGWS_DB_URI is represented as an attribute set, see [`environment

If enabled, causes the following behavior:

• Passes the --ephemeral flag to the runner configuration script
• De-registers and stops the runner with GitHub after it has processed one job
• On stop, systemd wipes the runtime directory (this always happens, even without using the ephemeral option)
• Restarts the service after its successful exit
• On start, wipes the state directory and configures a new runner

You should only enable this option if tokenFile points to a file which contains a personal access token (PAT)

This option provides access to the overridden result of programs.singularity.package

Grafana notification policies configuration in Nix

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Path to the herbstluftwm configuration file

FastCGI parameters to override

Modules to obtain Kerberos configuration from.

Configuration added to the generated NetworkManager.conf, note that you can overwrite settings with this

Default configuration for the loggers used by matrix-synapse and its workers

Additional configuration for the PipeWire server

Extra configuration to be passed in Autochanger directive.

Suricata classification configuration file.

Attribute set of NetBird client daemons, by default each one will:

1. be manageable using dedicated tooling:

• netbird-<name> script,
• NetBird - netbird-<name> graphical interface when appropriate (see ui.enable),

2. run as a netbird-<name>.service,
3. listen for incoming remote connections on the port 51820 (openFirewall by default),
4. manage the netbird-<name> wireguard interface,
5. use the /var/lib/netbird-/config.json configuration file,
6. override /var/lib/netbird-/config.json with values from /etc/netbird-/config.d/*.json,
7. (hardened) be locally manageable by netbird-<name> system group,

With following caveats:

• multiple daemons will interfere with each other's DNS resolution of netbird.cloud, but should remain fully operational otherwise

Polybar configuration

A set of named specialized configurations

Whether to generate Device Tree-related directives in the extlinux configuration

Only clients that are listed here are authorized to access the hidden service

Whether to enable provisioning functionality in the agent

Maximum memory used by the process

Grafana contact points configuration in Nix

Grafana templates configuration in Nix

Files to include in the Kerberos configuration.

Change the paths where mandoc makewhatis(8)generates the manual page index caches. documentation.man.generateCaches should be enabled to allow cache generation

storage.conf configuration

Forcibly override any existing configuration for this extension.

The sort key used for the NixOS bootloader entries

Mapping configuration for the exporter, see https://github.com/prometheus/graphite_exporter#yaml-config for available options.

Configuration for docker daemon

The pathname of the IMAP configuration directory.

See upstream docs: docs/capture-hardware/dpdk and docs/configuration/suricata-yaml.html#data-plane-development-kit-dpdk.

Alertmanager configuration as YAML text

List of paths that should be mounted before this one

The version identifier used to key cache entries; change if the configuration or program changes

Free-form configuration for script_exporter, expressed as a Nix attrset and rendered to YAML.

Migration note: The previous format using script = "sleep 5" is no longer supported

Environmental configuration parameters, set imperatively

If provided, each item on this list will generate an entry on khard configuration file as a separate addressbook (vdir)

Addresses of public STUN services to use to automatically find the public and local addresses of this Jitsi-Videobridge instance without the need for manual configuration

Extra configuration options

Files to load as an environment file just before Traefik starts

Whether to enable Validate configuration file.

This option defines the first version of NixOS you have installed on this particular machine, and is used to maintain compatibility with application data (e.g. databases) created on older NixOS versions

This optional key is used to specify launch on demand sockets that can be used to let launchd know when to run the job

List of Google Compute Engine service discovery configurations

Whether to enable NVIDIA Optimus support using the NVIDIA proprietary driver via reverse PRIME

Extra settings to add to each identity of this Thunderbird account configuration

FastCGI parameters to override

Whether to enable Run InputPlumber service for input management and gamepad configuration. .

Enables dynamic resolving of backchannel URLs, including hostname, scheme, port and context path

If set, will use the Google OS Login PAM modules (pam_oslogin_login, pam_oslogin_admin) to verify possible OS Login users and set sudoers configuration accordingly