When disabled, unprivileged users will not be able to create new namespaces

List of accepted local users

This is optional and is by default off, because most users will not need it

Converts users profiles and Avatars between old and new formats

Defines one or more team names that auto-provisioned OIDC users shall be added to

Whether to use binary caches for downloading store paths

The manual pages to generate caches for if documentation.man.generateCaches is enabled

Whether all users can write to the consumption dir.

Whenever to send wall notifications to all users.

Authentication type

Whether to enable the headless Transmission BitTorrent daemon

Push notifications to inform users of new messages or other pertinent information even when they have no XMPP clients online

Source of truth of users

The base URL of the API server

Apple menu > System Preferences > Users and Groups > Login Options

Hides the Sleep button on the login screen

Apple menu > System Preferences > Users and Groups > Login Options

Hides the Shut Down button on the login screen

Diffie-Hellman parameters to generate

This option enables docker, a daemon that manages linux containers

Set of default packages that aren't strictly necessary for a running system, entries can be removed for a more minimal NixOS installation

This option enables lxd, a daemon that manages containers

Exposes EDID files from users-sourced database at https://github.com/linuxhw/EDID

Attribute names will be mapped to EDID filenames <NAME>.bin

Set of default packages that aren't strictly necessary for a running system, entries can be removed for a more minimal NixOS installation

Whether to enable the "sx" pseudo-display manager, which allows users to start manually via the "sx" command from a vt shell

Identity the EAP/XAuth secret belongs to

Identity the NTLM secret belongs to

Apple menu > System Preferences > Users and Groups > Login Options

Hides the Restart button on the login screen

All actors (users) to provision

Whether to enable KVMGT (iGVT-g) VGPU support

Whether to enable registration for new users.

LDAP filter for users.

If set, all recipients to users at either "localhost" (the literal string) or the canonical host name (from the me control attribute) are remapped to this address

Identity the EAP/XAuth secret belongs to

This option enables libvirtd, a daemon that manages virtual machines

The XEP-0423 defines a set of recommended XEPs to implement for a server

Enable if you are syncing more than 2000 users/groups.

Set of core packages for a normal interactive system

Whenever to use precomputated tables for ElGamal. i2pd defaults to false to save 64M of memory (and looses some performance)

An attribute set where the keys name the organisation and the values are a set of lists of users and groups.

A boolean that controls whether site visitors can create new accounts

Class that users must have.

Enables single account mode

Environment file to be passed to the systemd service

Environment file to be passed to the systemd service

Font packages to use in OpenGamepadUI

Whether users must authenticate when using the web UI or command-line tool

Apple menu > System Preferences > Users and Groups > Login Options

If set to true, the Power Off menu item will be disabled when the user is logged in

Displays a CAPTCHA challenge for users that register externally.

Allow users to edit datasources from the UI.

Whether to use NetworkManager to obtain an IP address and other configuration for all network interfaces that are not manually configured

Make the Podman socket available in place of the Docker socket, so Docker tools can find the Podman socket

The directory where the skeleton files are located

Remove users from bitwarden groups if no longer in the ldap group.

If set, users with enabled Google Authenticator (created ~/.google_authenticator) will be required to provide Google Authenticator token to log in.

Point DOCKER_HOST to rootless Docker instance for normal users by default.

Outbound email configuration is mandatory for Firezone and supports many different delivery adapters

This option defines the first version of NixOS you have installed on this particular machine, and is used to maintain compatibility with application data (e.g. databases) created on older NixOS versions

Attribute for a users email.

Whether new users can register on this server.

Send notifications about killed processes via the system d-bus

The attribute that contains the users username.

If set, will use the Google OS Login PAM modules (pam_oslogin_login, pam_oslogin_admin) to verify possible OS Login users and set sudoers configuration accordingly

If set, will use the pam_oslogin_login's user authentication methods to authenticate users using 2FA

Enable registration for new users.

Remove and re-add users/groups, See https://bitwarden.com/help/user-group-filters/#overwriting-syncs for more details.

The configuration of vaultwarden is done through environment variables, therefore it is recommended to use upper snake case (e.g. DISABLE_2FA_REMEMBER)

Additional environment file or files as defined in systemd.exec(5)

Whenever to send systembus-notify notifications

Default 2FA method for new users and fallback for preferred but disabled methods.

Whether to enable support for unprivileged users to launch containers.

The name-string specifies an external program to be called that will automatically change volumes as required by Bacula

Whether the users will be able to use the ad-hoc commands that lets them configure their realname and username.

If not null, is used as the permissions set by system.activationScripts.transmission-daemon on the directories services.transmission.settings.download-dir, services.transmission.settings.incomplete-dir. and services.transmission.settings.watch-dir

Do not allow more than this many server connections per user (regardless of database)

The read permissions to include for this token

The read permissions to include for this token