Path to server SSL certificate key.

The address of the remote endpoint to forward traffic over.

Whether to enable the meli mail client for this account

Configuration of radicle-native-ci

IP address, optionally with a netmask: IPADDR[/MASK]

File where radicle-native-ci should write the run log.

The path of the storage.

The type of the storage.

When redirecting from the Kanidm Apps Listing page, some linked applications may need to land on a specific page to trigger oauth2/oidc interactions.

Alias directory for requests

Adds DirectoryIndex directive

Each attribute in this set specifies an option in the [L2TP] section of the unit

Each attribute in this set specifies an option in the [WLAN] section of the unit

Each attribute in this set specifies an option in the [VLAN] section of the unit

Each attribute in this set specifies an option in the [Xfrm] section of the unit

Each attribute in this set specifies an option in the [Bond] section of the unit

Each attribute in this set specifies an option in the [Peer] section of the unit

Path to the certificate authority (CA) for the certificate of your origin

The name-string specifies an external program to be called that will automatically change volumes as required by Bacula

The resulting path of the generated Diffie-Hellman parameters file for other services to reference

Disable target address re-resolution.

The hostname to show in the Datadog dashboard (optional)

Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.

Frequency at which the client will send websocket ping to the server.

Frequency at which the client will send websocket ping to the server.

Authorized clients for a v3 onion service, as a list of public key, in the format:

descriptor:x25519:<base32-public-key>

See torrc manual.

Message Queue Binding address:port.

The list of systemd services to call systemctl try-reload-or-restart on.

Set of accepted cipher suites (encryption algorithms) for pairwise keys (unicast packets)

Node name.

For electing MASTER, highest priority wins

Optional text to provide as a prompt for the first window

Username for basic HTTP authentication

The layer where a new window should spawn.

The state in which a new window should spawn.

The store paths to include in the partition.

Whether to enable RetroArch core.

The name of the organization responsible for the X.509 certificate's /O name.

IP address the RPC server will bind to.

List of URLs of the Nextcloud instance

Whether this account is enabled

Free-form settings written directly to the config.json file

Whether to enable re-emitting unhandled key events.

Adds try_files directive.

FastCGI parameters to override

The prefix to strip from the room's JID domain to derive the call URL.

The filesystem of the unencrypted device.

The domain part of the JID for this Jibri instance.

A list of route sections to be added to the unit

Log Level.

Regular configuration options as described in rclone's documentation https://rclone.org/docs/

Whether to integrate the MCP servers config from programs.mcp.servers into programs.vscode.profiles.<name>.userMcp

Whether to enable lieer Gmail synchronization for notmuch.

Enable hardware offload for this CHILD_SA, if supported by the IPsec implementation

Name of the postgresql database

If set, the filesystem is grown to its maximum size before being mounted. (This is typically the size of the containing partition.) This is currently only supported for ext2/3/4 filesystems that are mounted during early boot.

Path to root SSL certificate for stapling and client certificates.

DEPRECATED, use driverOptions

By default, nixos will check that programs

Commands that should be run right before we try to mount our LUKS device

Text of the file.

Whether to enable a CUPS printer queue for this instance

Packet range from which to choose a random value to subtract from rekey_packets

Whether to set mark_in on the inbound SA

Whether the node should gain focus on creation.

Limit number of concurrent requests for new jobs from GitLab.

Limit number of concurrent requests for new jobs from GitLab.

Specifies which address family to use when connecting.

A video kernel parameter (framebuffer mode) configuration for the specific output:

<xres>x<yres>[M][R][-<bpp>][@<refresh>][i][m][eDd]

See for more information:

• https://docs.kernel.org/fb/modedb.html
• https://wiki.archlinux.org/title/Kernel_mode_setting#Forcing_modes

The scope of the area where this address is valid.

Configuration options used by SimpleSAMLphp

Name the bot should appear with.

Level of TLS verification

An arbitrary list of items such as derivations

If set to false the component will only be woken up if it is used

Default IP for binding vrrpd is the primary IP on interface

Whether this is the primary account

The password for this entry, read from the given file when starting hostapd

Listen addresses for this virtual host

If the file source is a directory, then this option determines whether the directory should be recursively linked to the target location

An arbitrary list of items such as derivations

Similar to requires

Similar to requires

Public SSH keys that are given full write access to this repository

The name of the device that should be remapped

Path to your session secret

A command which prints the passphrase to stdout

Whether to keep the current system generation

By default, nix-darwin will check that programs

User for anonymous PDF creation

Whether or not to enable this module.

Remote configuration for the contacts.

Enable legacy crypto on this client

Number of parallel connections permitted by the server.

Time to schedule CHILD_SA rekeying

The type of interface to create

Password for the user

These lines go to the end of the location verbatim.

Value of decryption passphrase for ECDSA key.

Tag for notmuch to use for messages stored in the mailbox labeled with the Inbox name attribute