Enables udev rules for Nitrokey devices.

Path of file to link to /etc/rspamd/rspamd.local.lua for local rules written in Lua

This option defines extra ignore rules.

Whether to include Anubis's default bot detection rules via the (data)/meta/default-config.yaml import

Whether to include Anubis's default bot detection rules via the (data)/meta/default-config.yaml import

Extra CSS rules to apply on top of the GTK theme

Per-user rules for creation, deletion and cleaning of volatile and temporary files automatically.

List of paths that should be globally ignored for file picker

Group for Ubertooth's udev rules.

Enables Glasgow udev rules and ensures 'plugdev' group exists

Specify per-host settings

Whether to enable minipro and its udev rules

Wether to enable VictoriaMetrics's vmalert.

vmalert evaluates alerting and recording rules against a data source, sends notifications via Alertmanager.

List of hub appsec rules to install

Whether to allow traffic on the loopback interface

This option defines extra ignore rules for cronjobs.

Directories with extra rules.

Extra nftables rules to prepend to the generated ones

Path to PCAP replay file

Enables rtl-sdr udev rules, ensures 'plugdev' group exists, and blacklists DVB kernel modules

Installs flashrom and configures udev rules for programmers used by flashrom

Whether to enable Ubertooth software and its udev rules.

Depending on the local firewall/NAT rules, you might need to force Miredo to use a fixed UDP port and or IPv4 address.

Whether to enable the Thanos ruler service which evaluates Prometheus rules against given Query nodes, exposing Store API and storing old blocks in bucket.

Whether to enable quark-goldleaf with udev rules applied.

Options used for the default rules, granting root and the wheel group permission to run any command as any user.

Whether to enable FLEXOPTIX app + udev rules.

Interface which is on link-level with router. (Legacy option, use services.ndppd.proxies.<interface>.rules.<network> instead)

Options used for the default rules, granting root and the wheel group permission to run any command as any user.

Whether to install and set up mouse-actions and it's udev rules

Whether to enable ns-usbloader application with udev rules applied.

Enables hackrf udev rules and ensures 'plugdev' group exists

Whether to enable configuring flashprog udev rules and installing flashprog as system package .

Enable udev rules for Steam hardware such as the Steam Controller, other supported controllers and the HTC Vive

Whether to enable the SDRplay API service and udev rules.

Enables sheep_net udev rules, ensures 'sheep_net' group exists, and adds sheep-net to boot.kernelModules and boot.extraModulePackages

Any additional rules files to include in this configuration.

Additional CSS rules.

Whether to enable the feedbackd D-BUS service and udev rules

List of rules that should be disabled.

Location of the dokuwiki acl rules

Variables to be used within the suricata rules.

Enables kryoflux udev rules, ensures 'floppy' group exists

Generate device specific rules including the "via-port" attribute.

Whether to enable udev rules for gnupg smart cards.

Relay rules are used to send certain metrics to a certain backend.

Action for packets that doesn't match any rules.

This will only be used when systemd is used in stage 1.

List of packages containing udev rules that will be copied to stage 1

Whether to enable Shorewall IPv4 Firewall.

Declare systemd-tmpfiles rules to create, delete, and clean up volatile and temporary files and directories

Whether to enable udev rules for devices supported by libjaylink

Whether to configure system to enable use of dmrconfig

Whether to enable udev rules and software for Flipper Zero devices.

Keep or set the specified variables

This will only be used when systemd is used in stage 1.

Packages to search for binaries that are referenced by the udev rules in stage 1

Whether to enable udev rules added by input-remapper to handle hotplugged devices

Whether to enable udev rules for keyboards from ZSA like the ErgoDox EZ, Planck EZ and Moonlander Mark I

An absolute path to an executable to be run for each process killed

Files to load suricata-update managed rules, relative to 'default-rule-path'.

Whether to enable Shorewall IPv6 Firewall.

Spectrwm quicks (custom window rules).

Whether to allow traffic to local networks

List of reader name patterns for the PCSC daemon to ignore

Assign block I/O scheduler by device name pattern

Additional nftables rules to be appended to the input-allow chain

Listen for any Neighbor Solicitation messages on this interface, and respond to them according to a set of rules

Similar to systemd.tmpfiles.settings but the rules are only applied by systemd-tmpfiles before initrd-switch-root.target

Enable this option if you plan on using the webfinger plugin

Whether to enable udev rules for keychron QMK based keyboards.

Install polkit rules to allow Mirakurun to access smart card readers which is commonly used along with tuner devices.

Whether to allow users in the 'wireshark' group to capture USB traffic

Configure Sieve filtering rules on IMAP actions

The framework to use for attaching Jool's translation to the exist kernel packet processing rules

OpenFlow rules to insert into the Open vSwitch

The framework to use for attaching Jool's translation to the exist kernel packet processing rules

Path in which suricata-update managed rules are stored by default.

Wether to enable VictoriaMetrics's vmalert.

vmalert evaluates alerting and recording rules against a data source, sends notifications via Alertmanager.

Whether to run reaction as root

Whether to flush all runtime rules on a reload.

Additional nftables rules to be appended to the forward-allow chain

Server definitions ("stanzas") for the client system-options file

Whether to clean up firewall rules when firewalld stops.

Single or list of files for which rules are defined

Firewall rules for inbound traffic.

Tinyproxy supports filtering of web sites based on URLs or domains

Enables udev rules for Digital Bitbox devices.

A list of routing policy rules sections to be added to the unit

URL remapping rules used by Traffic Server

Caching rules that overrule the origin's caching policy

Path to the directory where firewall rules can be found and will get stored by the NixOS module.

Whether to enable usage of a compatibility bundle

Firewall rules for outbound traffic.

The digitalbitbox package to use