Public key at the opposite end of the tunnel.

Whether to enable this cups-pdf instance.

Whether to enable HTTPS in addition to plain HTTP

Mode to be set on the UNIX socket

Commands called after the interface setup.

Settings which are applied to mujmap.toml for the account

Directory for the acme challenge which is PUBLIC, don't put certs or keys in here

An attribute set of database instances as described in: https://pgbackrest.org/configuration.html#section-stanza

Each instance defaults to set pg-host to the attribute's name

If set, all requests for this host are redirected permanently to the given URL.

Whether this file should be generated

Whether to enable zeroconf discovery.

Backup the stdout of this program instead of filesystem paths

A list of address sections to be added to the unit

All policies to provision

As an alternative to specifying config, you can specify the path to the evaluated NixOS system configuration, typically a symlink to a system profile.

Basic Auth password file for a vhost

The path at which to sync the repository

Environment variables to add when running the adapter.

List of kanidm entities (persons, groups, ...) which are part of this group.

Location of the dir with main.css CSS file

This key maps to the first argument of execvp(3)

For each user matching one of comma-separated glob patterns, disable TTY auditing

IPs and subnets that are authorized to connect for this device

Authorization group memberships to require

Address and port to listen on (can be HOST:PORT, unix:PATH).

The type of the interface

Address to forward connections to (can be HOST:PORT or unix:PATH).

A mask to be ANDed with the byte sequence of the file before matching

Key/value pairs where the key is name of radio station and value is URL.

Root directory for requests.

Adds index directive.

Alias directory for requests.

Path to a keyfile used to unlock the backing encrypted device

The $table_prefix is the value placed in the front of your database tables

Helpers for the service.

Version of the service.

Whether to enable audio streaming on sentence boundaries.

IP to listen on. 0.0.0.0 for IPv4 only, * for all.

The maximum size (in bytes) of the stack segment for a process; this defines how far a program's stack segment may be extended

The maximum size (in bytes) of the stack segment for a process; this defines how far a program's stack segment may be extended

Include only files and directories matching these patterns (the empty list includes everything)

Whether to enable Mautrix-Meta, a Matrix <-> Facebook and Matrix <-> Instagram hybrid puppeting/relaybot bridge.

List of Vicinae extensions to install

Modular rule files for Claude Code

Whether to enable automatic generation of the defcfg block

Whether to enable HTTPS and reject plain HTTP connections

The force_run option is used to tell the PAM module for KWallet to forcefully run even if no graphical session (such as a GUI display manager) is detected

This option can be used to store the username / password credentials with the "auth-user-pass" authentication method

This optional key specifies whether the job can only be run once and only once

Base URL of your Gitea/Forgejo instance.

List of commands to run after interface setup.

Path to key used for decryption of images.

Whether to enable process suspend only on battery.

Tag configuration

Value of taint.

Whether to enable Notmuch support in NeoMutt.

Whether to ensure that this user is present or absent.

Adds a return directive, for e.g. redirections.

Adds a return directive, for e.g. redirections.

Adds a return directive, for e.g. redirections.

Group to be set as owner of the UNIX socket.

Adds a return directive, for e.g. redirections.

Cron key taken from the administration page.

Adds a return directive, for e.g. redirections.

Adds a return directive, for e.g. redirections.

Adds a return directive, for e.g. redirections.

The package that provides the theme given in the name option.

Dynamic configuration for Traefik, written in Nix.

Command called before the interface is taken down.

Runner-specific command script executed before code is pulled.

Before suspending, execute this shell script

Create the repository if it does not already exist

If set, all sae password entries that have a non-wildcard MAC associated to them will additionally be used to populate the MAC allow list

Debug mode, return more verbose errors, reload templates on each request.

Identity in CA certificate to accept for authentication

MeshID of interface with type mesh.

Package providing a GNOME Shell theme in $out/share/themes/${name}/gnome-shell.

Additional bot rules appended to the policy

Extra config added to the configuration section for this account in $HOME/.config/aerc/accounts.conf

Peers linked to the interface.

The authelia package to use.

Additional settings for this bridge.

This optional key specifies that launchd should instruct the kernel to have the job wait for a debugger to attach before any code in the job is executed.

Whether to generate and add a script to the system path, that has the same environment variables set as the systemd service

Whether to generate and add a script to the system path, that has the same environment variables set as the systemd service

List of path(s) to respective template(s) which are copied into the 'tpl' directory.

Priority of dlopen ELF notes to include. "required" is minimal, "recommended" includes "required", and "suggested" includes "recommended"

Prevents the system from sleeping while backing up

Custom HTTP headers to send during the upgrade request.

An arbitrary list of items such as derivations

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

A file that contains the server secret for safe session cookies, must be set.

secretKeyFile takes precedence over secretKey

Fixed reqid to use for this CHILD_SA

Path of the source file.

This public key is an SSH certificate authority, rather than an individual host's key.

Additional packages that should be added to the agent's PATH

Path to the unix socket file to use for authentication.

The description of the build.

The description of the image.