Set macOS user defaults

This settings controls how long a tombstone is considered valid

Bar color settings

By default, PgBouncer allows only parameters it can keep track of in startup packets: client_encoding, datestyle, timezone and standard_conforming_strings

For mysql, if the migrationLocking feature toggle is set, specify the time (in seconds) to wait before failing to lock the database for the migrations.

A set of additional system-wide locale settings other than LANG which can be configured with i18n.defaultLocale

Color settings

Extra settings to add to the generated TOML config.

Sets these config files to the default content

Additional settings passed straight through to Vendor.conf

Settings for the webserver.conf file, usually not required. See upstream docs.

Whether to configure the required settings to use postsrsd in the local Postfix instance.

Define a whitelist of allowed IP addresses or domains, with ports, to be used in data source URLs with the Grafana data source proxy

Whether to enable ClamAV on-access scanner

Configure Nginx as a reverse proxy for Cryptpad

Environment variables to set for the service

Agorakit configuration options to set in the .env file

Whether to automatically initialise the database on startup

Create Image Clips from Video extensions when Videos are disabled in Library

Path to a TOML file to be merged with the settings

Bar color settings

This enables AppVMs and related virtualisation settings.

BookStack configuration options to set in the .env file

Enables settings required for NetBird's routing features: Network Resources, Network Routes & Exit Nodes

Enable recommended TLS settings.

FoundationDB locality settings.

Whether to configure the required settings to use postfix-tlspol in the local Postfix instance.

Path to easytier config file

File containing env-vars to be substituted into the final config

This will contain the contents of cups-pdf.conf for this instance, derived from settings

Authentication settings

Filebeat modules provide a quick way to get started processing common log formats

Whether to enable Touch ID with sudo

Whether to recursively snapshot dataset children

Metricbeat modules are responsible for reading metrics from the various sources

Should we bypass any attempt to use system-provided secure storage?

Environment variables to pass to Karakaeep

Kafka server.properties configuration file path

Enable recommended gzip settings

Whether to configure Privoxy to inspect HTTPS requests, meaning all encrypted traffic will be filtered as well

This is the config file for override lxc-net bridge default settings.

Disable creation of admin user on first start of Grafana.

Path to a configuration file to be merged with the settings

Lists of domains that the server will trust as identity servers to verify third party identifiers such as phone numbers and email addresses

Configuration for applications to be exposed to Moonlight

Database settings will be reset to the value set in this module if this is not enabled

Additional settings to put in the discourse.conf file

Enable recommended zstd settings

Authentication settings

List of IP address CIDR ranges that the URL preview spider is denied from accessing.

List of DankMaterialShell configuration files to copy into the greeter data directory at /var/lib/dms-greeter

Whether to enable recommended uwsgi settings if a vhost does not specify the option manually.

Whether to enable recommended proxy settings if a vhost does not specify the option manually.

List of IP address CIDR ranges that the URL preview spider is allowed to access even if they are specified in url_preview_ip_range_blacklist.

Type of ACME challenge to use, currently supported types: HTTP-01 or TLS-ALPN-01.

Use Apple Watch for sudo authentication, for devices without Touch ID or laptops with lids closed, consider using this

Extra settings to add to easytier-‹name›.toml.

Whether to configure Nextcloud to use the recommended Redis settings for small instances.

Whether to use Celsius or Fahrenheit

Whether to enable the "sx" pseudo-display manager, which allows users to start manually via the "sx" command from a vt shell

Extra environment variables to set for the service

Configures the remote read request's TLS settings.

Whether the Mattermost config.json is writeable by Mattermost

An environment file as defined in systemd.exec(5)

Enable recommended brotli settings

Text to append to the corresponding configuration files

Whether a small notification to inform the user that Stash will no longer show a terminal window, and instead will be available in the tray

Configures the remote write request's TLS settings.

Whether to use centimeters (metric) or inches (US, UK) as the measurement unit

Whether to enable and configure a local PostgreSQL server by creating a user and database for weblate

All accounts to provision

Whether to run QEMU with a graphics window, or in nographic mode

Whether to open the UDP port used for multicast peer discovery

This setting configures the name of a mailbox for which administrator scripts are configured

Configure the instance from config server

Whether to base the config declared in services.dnscrypt-proxy2.settings on the upstream example config (https://github.com/DNSCrypt/dnscrypt-proxy/blob/master/dnscrypt-proxy/example-dnscrypt-proxy.toml)

Disable this if you want to declare your dnscrypt config from scratch.

Maximum number of connections per plugin instance.

Enable alpha quality zstd module with recommended settings

An attribute set providing additional container settings in addition to the default properties

Configure this LibreNMS instance as a distributed poller

The duration in time a user invitation remains valid before expiring

Set to true to enable HSTS preloading option

Whether to have the module create the appropriate firewall configuration based on the bouncer settings

List of paths files that follows systemd environmentfile structure

Enables settings required for Tailscale's routing features like subnet routers and exit nodes

Time before an inactive ephemeral node is deleted.

Configure nginx as a reverse proxy for mastodon

Configures the scrape request's TLS settings.

Settings to write to IPC.config

Options to configure the LDAP connection

Options to configure what gets synced

Allow users of the wpa_supplicant group to control wpa_supplicant through wpa_gui or wpa_cli

Allow normal users to control wpa_supplicant through wpa_gui or wpa_cli

Files to load environment variables from

Whether to enable Rosetta support

Learn more at https://docs.stashapp.cc/networking/authentication-required-when-accessing-stash-from-the-internet/

The name of the watcher

Specifies the action to be done to / on the guests when the host boots

Enable recommended optimisation settings.

If "ip" is given, client IP based session affinity is enabled