If Monitor is set to no, this director will have full access to this Storage daemon

Shell commands to run when file has changed between generations

Shell commands to run when file has changed between generations

Target location for Services

The cache directory in which to store mail files while they are being downloaded

Select the enabled input method

If set, all requests for this host are redirected (defaults to 301, configurable with redirectCode) to the given hostname.

Enable restrictions on the use of the well-known prefix (64:ff9b::/96) - prevents translation of non-global IPv4 ranges when using the well-known prefix

If set, all requests for this host are redirected (defaults to 301, configurable with redirectCode) to the given hostname.

Extra lines added to .dir_colors file.

Iptables filters that if matched will get the packet off of redsocks.

If enabled, spacecookie will hide personal information of users like IP addresses from log output.

If enabled, protect SSH logins with Duo Security.

A shell application which will produce an nvd diff of the system closure with and without facter enabled.

Run node as a replica

If enabled, spacecookie will not print timestamps at the beginning of every log line.

HTTP status used by globalRedirect and forceSSL

Whether to enable the HTTP/2 protocol

Whether to enable the HTTP/2 protocol

Whether to enable the HTTP/2 protocol

If set, all requests for this host are redirected permanently to the given URL.

The username/email in case SMTP auth is enabled.

HTTP status used by globalRedirect and forceSSL

How often to run vdirsyncer

If true, requests in the form /~user/page.html are rewritten to take the file public_html/page.html from the home directory of the user.

vdirsyncer storage configurations

AppArmor mode for dbus.

enabled enables mediation when it's supported in the kernel, disabled always disables AppArmor even with kernel support, and required fails when AppArmor was not found in the kernel.

When enabled, configures emacsclient to be the default editor using the EDITOR environment variable.

Path to a keyfile used to unlock the backing encrypted device

Maildir configuration for this account.

Whether to enable the HTTP/2 protocol

Start the daemon automatically using XDG autostart

Whether to enable the fail2ban service

Directory to store export.

If enabled, each virtual host gets its own access.log and error.log, namely suffixed by the hostName of the virtual host.

Whether to automatically update DERP maps on a set frequency.

Prompt for login with an html login mask if enabled, otherwise prompt for basic auth (useful for SSO)

List of derivations that provide container images

When to hide the bottom bar when hideBottomBar is enabled.

If enabled, protect logins with Duo Security using PAM support.

If enabled, causes a leave action to be sent when closing consul

Configures the keyboard control behavior

Path to the TLS certificate for the web UI

Whether to enable script-directory.

A command that prints the OAuth credentials to standard output

If enabled, abbreviations will be preferred over aliases when other modules define aliases for fish.

Whether to enable swaylock

Changes the Intel Turbo feature status (1 is disabled and 0 is enabled).

The root directory for file URLs used with the Cypher LOAD CSV clause

Whether to enable XDG desktop integration

Run yes | vdirsyncer discover prior to vdirsyncer sync

The vdirsyncer package to use.

The filesystem directory to store your protected store in.

Path of the database plugin directory

Path to a keyfile used to unlock the backing encrypted device

Location of the riemann-base dir

With this option, you can customize an H2O virtual host which already has sensible defaults for Dolibarr

Whether to enable the Alot mail user agent

Require email validation before sign up completes.

If enabled, the agent creates a swap file (/swapfile) on the resource disk and adds it to the system swap space

Whether to enable the HTTP/2 protocol

Whether to enable the HTTP/2 protocol

Whether to enable the HTTP/2 protocol

Whether to enable the HTTP/2 protocol

Whether to enable the HTTP/2 protocol

The TLS mode to use

Unix command socket that can be used to pass commands to Suricata

What interface to use for hardware acceleration.

• null: default behavior
  • if nixpkgs.config.rocmSupport is enabled, uses "rocm"
  • if nixpkgs.config.cudaSupport is enabled, uses "cuda"
  • otherwise defaults to false
• false: disable GPU, only use CPU
• "rocm": supported by most modern AMD GPUs
  • may require overriding gpu type with services.ollama.rocmOverrideGfx if rocm doesn't detect your AMD gpu
• "cuda": supported by most modern NVIDIA GPUs

Shell commands to run when file has changed between generations

A shell application which will produce a nix-diff of the system closure with and without facter enabled.

The list of hostnames and/or IP addresses from which the Mailman Web UI will accept requests

Define the client configurations

Whether to disable send and accept redirects for all network interfaces

A directory that should contain the policy files, used to customize Botan’s behaviour when negotiating the TLS connections with the IRC servers.

Key bindings for actkbd

Path to maildir directory where mail for this account is stored

The cache allows tarsnap to identify previously stored data blocks, reducing archival time and bandwidth usage

If set, all requests for this host are redirected permanently to the given URL.

With this option, you can customize an nginx virtualHost which already has sensible defaults for Matomo

Verify peer certificate

Verify peer certificate

List of enabled daemon modules

Directories containing files to include in the Kerberos configuration.

The script-directory package to use.

Enable gitolite management under the gitolite user

Whether to enable starting the POP3 listener (when Dovecot is enabled).

Whether to periodically upgrade NixOS to the latest version

Whether the nix-channel command and state files are made available on the machine

If enabled, starts a Minetest Server.

The hostname at which you wish firefly-iii to be served

Enables the use of the ~/.ssh/authorized_keys file

If set, all requests for this host are redirected (defaults to 301, configurable with redirectCode) to the given hostname.

If set, Nix will perform builds in a sandboxed environment that it will set up automatically for each build

If we should send notifications to the desktop

Whether to enable the beets music library manager

Target location for Preference Panes

Target location for QuickLook Plugins

Whether to enable starting the IMAP listener (when Dovecot is enabled).

Whether to enable starting the LMTP listener (when Dovecot is enabled).

Enables routing of QUIC packets using eBPF