The permission for settings.dir

This is optional and is by default off, because most users will not need it

Whether to open the default ports in the firewall: TCP/UDP 22000 for transfers and UDP 21027 for discovery

JSON file containing secret keys

Deactivates analytics

FreeType LCD filter

If enabled, spacecookie will hide personal information of users like IP addresses from log output.

Defines whether users see the Register option in the menu of Time Tracker that allows them to self-register and create new organizations (top groups).

List of binary cache URLs that non-root users can use (in addition to those specified using nix.settings.substituters) by passing --option binary-caches to Nix commands.

If you want to prevent node sharing from allowing users to access services across tailnets, declare your expected tailnets domain here.

List of binary cache URLs that non-root users can use (in addition to those specified using nix.settings.substituters) by passing --option binary-caches to Nix commands.

Allow users to register themselves

Whether all users can write to the consumption dir.

The lmtp daemon will make the unix socket group-read/write for users in this group.

Whether to use binary caches for downloading store paths

Converts users profiles and Avatars between old and new formats

Whether new users can register on this server

The manual pages to generate caches for if documentation.man.generateCaches is enabled

Specify SSH host keys to import into the initrd

Whether to enable the headless Transmission BitTorrent daemon

Set of default packages that aren't strictly necessary for a running system, entries can be removed for a more minimal NixOS installation

File containing a secret used to salt the users' password hashes and generate filenames for static content.

Defines one or more team names that auto-provisioned OIDC users shall be added to

Push notifications to inform users of new messages or other pertinent information even when they have no XMPP clients online

Whenever to send wall notifications to all users.

This option enables docker, a daemon that manages linux containers

Set of default packages that aren't strictly necessary for a running system, entries can be removed for a more minimal NixOS installation

Apple menu > System Preferences > Users and Groups > Login Options

Hides the Sleep button on the login screen

The base URL of the API server

Apple menu > System Preferences > Users and Groups > Login Options

Hides the Shut Down button on the login screen

This option enables lxd, a daemon that manages containers

Diffie-Hellman parameters to generate

Whether to enable registration for new users.

Whether to allow registration of new admin users.

Sets transmission's file mode creation mask

Apple menu > System Preferences > Users and Groups > Login Options

Hides the Restart button on the login screen

Set of core packages for a normal interactive system

Identity the EAP/XAuth secret belongs to

Identity the NTLM secret belongs to

This option enables libvirtd, a daemon that manages virtual machines

All actors (users) to provision

An attribute set where the keys name the organisation and the values are a set of lists of users and groups.

Exposes EDID files from users-sourced database at https://github.com/linuxhw/EDID

Attribute names will be mapped to EDID filenames <NAME>.bin

If set, all recipients to users at either "localhost" (the literal string) or the canonical host name (from the me control attribute) are remapped to this address

Whether new users can register on this server

Enable if you are syncing more than 2000 users/groups.

The XEP-0423 defines a set of recommended XEPs to implement for a server

Identity the EAP/XAuth secret belongs to

Whenever to use precomputated tables for ElGamal. i2pd defaults to false to save 64M of memory (and looses some performance)

Set this option to true to enable HTTP compression, this can improve transfer speed and bandwidth utilization

Environment file to be passed to the systemd service

Environment file to be passed to the systemd service

If set, shows a contact email address when rendering error pages

Whether users must authenticate when using the web UI or command-line tool

If set, shows a contact email address when rendering error pages

Enables single account mode

Displays a CAPTCHA challenge for users that register externally.

Whether to use NetworkManager to obtain an IP address and other configuration for all network interfaces that are not manually configured

Make the Podman socket available in place of the Docker socket, so Docker tools can find the Podman socket

Remove users from bitwarden groups if no longer in the ldap group.

Defines one or more team names that auto-provisioned OIDC users shall be added to

If set, users with enabled Google Authenticator (created ~/.google_authenticator) will be required to provide Google Authenticator token to log in.

Point DOCKER_HOST to rootless Docker instance for normal users by default.

The channel in which users will appear in when connecting.

This option defines the first version of NixOS you have installed on this particular machine, and is used to maintain compatibility with application data (e.g. databases) created on older NixOS versions

Outbound email configuration is mandatory for Firezone and supports many different delivery adapters

If set, will use the Google OS Login PAM modules (pam_oslogin_login, pam_oslogin_admin) to verify possible OS Login users and set sudoers configuration accordingly

Source of truth of users

Where to redirect new users upon registration.

At most one of domain_id and domain_name must be provided if using username with Identity V3

Remove and re-add users/groups, See https://bitwarden.com/help/user-group-filters/#overwriting-syncs for more details.

Additional environment file or files as defined in systemd.exec(5)

Whether to enable support for unprivileged users to launch containers.

The configuration of vaultwarden is done through environment variables, therefore it is recommended to use upper snake case (e.g. DISABLE_2FA_REMEMBER)

At most one of domain_id and domain_name must be provided if using username with Identity V3

The name-string specifies an external program to be called that will automatically change volumes as required by Bacula

The directory where the skeleton files are located

Allow users to edit datasources from the UI.

Whether new users can register on this server.

Enable registration for new users.

Default 2FA method for new users and fallback for preferred but disabled methods.

The read permissions to include for this token

The read permissions to include for this token