Path to the working directory (used for config and pidfile)

Whether users of the wheel group must provide a password to run commands as super user via doas.

Welcome users who register accounts

Whether users of the wheel group must provide a password to run commands as super user via sudo.

A list of users which will not be shown in the display manager.

This controls the hostname for the 9front authentication server that users will be authenticated against.

If set, users listed in ~/.yubico/authorized_yubikeys are able to log in with the associated Yubikey tokens.

Seed settings for users and groups

This tells pgmanage to only allow users in a certain PostgreSQL group to login to pgmanage

If enabled, starts a Terraria server

Do we ignore the lid state

Some laptops are broken

The following authentication modes are available: Open -- Accept connections from anyone, use NickServ for user authentication

Enable or disable TTY auditing for specified users

Whether to enable API access for mobile apps and third-party clients (Google Reader API and Fever API)

Whether to add Soundmodem to the global environment and configure a wrapper for 'soundmodemconfig' for users in the 'soundmodem' group.

Number of daemons to serve user requests

Install the SPICE USB redirection helper with setuid privileges

Define resource limits that should apply to users or groups

Send announcement to all online users

When true, any user will be able to register

Font packages to use in Steam

Whether to enable provisioning of groups, users and oauth2 resource servers.

Window class translation rules. /etc/X11/imwheelrc is generated based on this config which means this config is global for all users

Whether to enable udev rules for devices supported by libjaylink

Whether to enable tailscale.nginx-auth, to authenticate nginx users via tailscale.

If set, users listed in $XDG_CONFIG_HOME/Yubico/u2f_keys (or $HOME/.config/Yubico/u2f_keys if XDG variable is not set) are able to log in with the associated U2F key

Whether users of the wheel group must provide a password to run commands or edit files with please and pleaseedit respectively.

Whether to enable non-root access to the firmware of UHK keyboards

Whether any uploads are permitted to anonymous users.

An attribute set that maps aliases (the top level attribute names in this option) to command strings or directly to build outputs

The bare JID of the gateway administrator

Users and proxy configuration

Refer to the Tuliprox documentation for available attributes

If specified, login is allowed only for the listed users

Allow users to register on this server using a client and change passwords

If set, users with an SSH certificate containing an authorized principal in their SSH agent are able to log in

Allow all users to access the FUSE mount points

Gives the verbosity level that is used when logging messages from sshd(8)

If specified, login is denied for all listed users

Newline separated list of names to be allowed/denied if userlistEnable is true

List of public signing keys of users that can access the admin panel

Specifies if mapped OpenID Connect accounts are automatically created upon successful authentication

An attribute set that maps aliases (the top level attribute names in this option) to command strings or directly to build outputs

Enable font antialiasing

Initial preferences are used to configure the browser for the first run

Whether to enable the Howdy PAM module

List of administrator users

List of users allowed to operate with the config. "root" is always implicitly included

Whether any uploads are permitted to anonymous users.

Whether local users are confined to their home directory.

Launch Hyprland with the UWSM (Universal Wayland Session Manager) session manager

Path to the configuration file containing authorized users credentials to run iperf tests.

Only monitors owned symbolic link target of GC roots.

• "auto": behaves like true for normal users, false for root.
• "true": only monitor GC roots owned by the current user.
• "false": monitor all GC roots.

Whether to enable exposing OpenSSH public keys defined in userdb

If true, a system-wide PipeWire service and socket is enabled allowing all users in the "pipewire" group to use it simultaneously

If specified, login is allowed only for users part of the listed groups

Make your The Lounge instance public

List of reporter objects used to present build status to various users.

If specified, login is denied for all users part of the listed groups

The duration in time a user invitation remains valid before expiring

Enable hardened VirtualBox, which ensures that only the binaries in the system path get access to the devices exposed by the kernel modules instead of all users in the vboxusers group.

Whether to enable System bus notification support

WARNING: enabling this option (while convenient) should not be done on a machine where you do not trust the other users as it allows any other local user to DoS your session by spamming notifications .

Do minification on public static files which reduces the size of assets — saving data for the server & users as well as offering a performance improvement

Enable if you want to fetch all, even the read messages from the server

A file containing the secret used to encrypt session keys

All listed users will become part of the firezone-client group so they can control the tunnel service

A list of paths that should be included in the system closure but generally not visible to users

A file containing the secret used to encrypt secrets for OTP tokens

Enable if you want to delete read messages from the server

This is the URL that users will enter to load your instance

Enable font hinting

Maximum amount of users which will be allowed to register on this system. 0 - no limit.

This is optional and is by default off, because most users will not need it

A list of users who should be able to integrate 1Password with polkit-based authentication mechanisms.

Don't allow users to connect in non-secure mode (without random padding).

The hosts.hfaxd file entry in the spooling area will be symlinked to the location given here

Outgoing email for notifications generated by users.

Enables U2F PAM (pam-u2f) module

Frontend configuration

Path to a file containing extra ntfy environment variables in the systemd EnvironmentFile format

Whether to generate the password files at build time and store them directly in the system closure, without requiring any services at boot time

Name of the remote read config, which if specified must be unique among remote read configs

Specifies if mapped OpenID Connect accounts are automatically created upon successful authentication

Outgoing email for notifications generated by users.

Whether to enable nonpaying users to submit builds.

The set of packages that appear in /run/current-system/sw

The set of packages that appear in /run/current-system/sw

SFTP private key file

Name of the remote write config, which if specified must be unique among remote write configs