File containing the credentials to access the repository, in the format of an EnvironmentFile as described by systemd.exec(5)

Whether to enable the headless Transmission BitTorrent daemon

The path to load specific local geoip/geosite db files

Additional environment file as defined in systemd.exec(5)

The opentracker package to use.

Whether to enable OctoPrint, web interface for 3D printers.

Whether to lock screen with physlock just before hibernate.

Whether to make sshd look up authorized keys from SSS

SMTP server address

Create the database and database user locally.

Redis host.

Specifies the port for the admin server, which can be used for healthchecks.

https://docs.postgrest.org/en/stable/references/admin_server.html#admin-server

Runner name declared to the PeerTube instance.

Whether to generate and add a script to the system path, that has the same environment variables set as the systemd service

Whether to enable HTTPS and reject plain HTTP connections

config.xml configuration as a Nix attribute set

Path where Postfix places its showq socket.

The unclutter package to use.

Listen address for MTR exporter.

Address to listen on.

Data directory for OpenSearch

If true, requests in the form /~user/page.html are rewritten to take the file public_html/page.html from the home directory of the user.

Path to the baseq3 files (pak*.pk3)

Enable recommended uwsgi settings.

Whether to enable fix for Intel CPU throttling.

Whether the service's sockets and storage directory is restricted to be only available via the mail system

The final user-facing URL

The radicle-native-ci package to use.

The directory spacecookie should serve via gopher

Options to pass to rclone to control its behavior

Options for ruTorrent's PHP pool

Optional slot number of the token that stores the certificate.

Directory for storing user uploads and similar data.

User account under which this pool runs.

Specify a filter for iptables to use when services.prometheus.exporters.exportarr-bazarr.openFirewall is true

Which provider to use for full text search

Rauc configuration that will be converted to INI

Whether to open TCP firewall ports, which are specified in services.stalwart.settings.server.listener on all interfaces.

Screego settings passed as Nix attribute set, they will be merged with the defaults

The application_credential_secret field is required if using an application credential to authenticate.

See torrc manual.

Whether to enable the sshguard service.

Systemd calendar expression when to run

Whether to enable lldap, a lightweight authentication server that provides an opinionated, simplified LDAP interface for authentication.

Whether to enable Web Services Dynamic Discovery host daemon

Log level of the NetBird daemon.

Remote public key in hexadecimal form.

Options for the 'annotate' command

Specify the DNS server that Traffic Server should use under specific conditions

Address to which spiped should connect.

Path under which to expose metrics.

contents of check_client_access for overriding dnsBlacklists

Additional command line flags to pass to the minetest executable.

Makes this vhost the default.

The expiration time of client certificates in days or null for no expiration time.

Whether to enable OrangeFS client daemon.

Open port in firewall for incoming connections.

Makes this vhost the default.

Whether to enable the prometheus node exporter.

File name in the pkcs12 folder for which this passphrase should be used.

Extra commandline options to pass to the collectd exporter.

IP address the LLaMA C++ server listens on.

llama-swap configuration

Whether PostgreSQL should listen on all network interfaces

The host:port combination or the path to the UNIX socket of a memcached instance

Name of the postfix systemd slice

Specify rules for nftables to add to the input chain when services.prometheus.exporters.kafka.openFirewall is true.

User under which pyLoad runs, and which owns the download directory.

Matrix room ID

The directory where old plugin versions and conflicting plugins should be moved

The path of Apache's document root directory

Port number to listen on

User under which pretix should run.

The photoprism package to use.

User name under which the fritz exporter shall be run.

Whether to enable verbose logging mode for prometheus-wireguard-exporter.

User from which you run MAME binary.

The directory where Monero stores its data files.

The domain under which the management API runs.

Whether to enable ShellHub Agent daemon.

If set to true, disables single account mode

User account under which both the service and the web-application run.

Updown script to invoke on CHILD_SA up and down events.

The memory_limit of PHP is equal to services.nextcloud.maxUploadSize

Group under which LubeLogger runs.

Bind to this address to listen for connections from Socks-speaking applications.

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests

Set to false if you want to run OpenGFW on FORWARD chain. (e.g. on a router)

One of the four parameters of supporting path check based on accounting IO error such as intermittent error

Filename for unix-command socket.

IP address or hostname of the remote end (use 0.0.0.0 for a floating/dynamic remote endpoint).

Configuration for the server

Enables settings required for Tailscale's routing features like subnet routers and exit nodes

Action to perform based on regex matching

The server_name is the name of this server

Verbatim additional configuration variables for TLP

Whether or not SSL verification should be enabled for outgoing connections to the homeserver.

Basic Auth protection for a vhost

Whether to enable Sanoid ZFS snapshotting service.

Options for the 'stanza-upgrade' command