Configures the user domain, if enabled

The lmtp daemon will make the unix socket group-read/write for users in this group.

Apple menu > System Preferences > Users and Groups > Login Options

Auto login the supplied user on boot

This option will ensure that team memberships for OpenID Connect users are dynamic and synchronized with membership of OpenID Connect groups or assigned roles

The permission for settings.dir

When disabled, unprivileged users will not be able to create new namespaces

This is optional and is by default off, because most users will not need it

When not set to null this option defines the path at which the unbound remote control socket should be created at

Whether to open the default ports in the firewall: TCP/UDP 22000 for transfers and UDP 21027 for discovery

JSON file containing secret keys

Deactivates analytics

FreeType LCD filter

If enabled, spacecookie will hide personal information of users like IP addresses from log output.

If false, a PulseAudio server is launched automatically for each user that tries to use the sound system

Whether to enable configuration for Hyprland, a tiling Wayland compositor that doesn't sacrifice on its looks.

Defines whether users see the Register option in the menu of Time Tracker that allows them to self-register and create new organizations (top groups).

List of binary cache URLs that non-root users can use (in addition to those specified using nix.settings.substituters) by passing --option binary-caches to Nix commands.

If you want to prevent node sharing from allowing users to access services across tailnets, declare your expected tailnets domain here.

List of binary cache URLs that non-root users can use (in addition to those specified using nix.settings.substituters) by passing --option binary-caches to Nix commands.

Whether all users can write to the consumption dir.

List of accepted local users

Allow users to register themselves

The lmtp daemon will make the unix socket group-read/write for users in this group.

Whether to use binary caches for downloading store paths

Authentication type

Converts users profiles and Avatars between old and new formats

Whether new users can register on this server

Whether to enable the dummy "startx" pseudo-display manager, which allows users to start X manually via the startx command from a virtual terminal.

Specify SSH host keys to import into the initrd

The manual pages to generate caches for if documentation.man.generateCaches is enabled

Whether to enable the headless Transmission BitTorrent daemon

Set of default packages that aren't strictly necessary for a running system, entries can be removed for a more minimal NixOS installation

File containing a secret used to salt the users' password hashes and generate filenames for static content.

Defines one or more team names that auto-provisioned OIDC users shall be added to

Whenever to send wall notifications to all users.

Push notifications to inform users of new messages or other pertinent information even when they have no XMPP clients online

This option enables docker, a daemon that manages linux containers

Set of default packages that aren't strictly necessary for a running system, entries can be removed for a more minimal NixOS installation

Apple menu > System Preferences > Users and Groups > Login Options

Hides the Sleep button on the login screen

The base URL of the API server

Apple menu > System Preferences > Users and Groups > Login Options

Hides the Shut Down button on the login screen

This option enables lxd, a daemon that manages containers

This option will ensure that team memberships for OpenID Connect users are dynamic and synchronized with membership of OpenID Connect groups or assigned roles

Whether to enable KVMGT (iGVT-g) VGPU support

Diffie-Hellman parameters to generate

Maximum number of client connections allowed

Whether to enable registration for new users.

Whether to allow registration of new admin users.

Sets transmission's file mode creation mask

Apple menu > System Preferences > Users and Groups > Login Options

Hides the Restart button on the login screen

LDAP filter for users.

Set of core packages for a normal interactive system

Identity the EAP/XAuth secret belongs to

Identity the NTLM secret belongs to

This option enables libvirtd, a daemon that manages virtual machines

All actors (users) to provision

An attribute set where the keys name the organisation and the values are a set of lists of users and groups.

Exposes EDID files from users-sourced database at https://github.com/linuxhw/EDID

Attribute names will be mapped to EDID filenames <NAME>.bin

If set, all recipients to users at either "localhost" (the literal string) or the canonical host name (from the me control attribute) are remapped to this address

Whether new users can register on this server

Enable if you are syncing more than 2000 users/groups.

The XEP-0423 defines a set of recommended XEPs to implement for a server

Whether to enable the "sx" pseudo-display manager, which allows users to start manually via the "sx" command from a vt shell

Identity the EAP/XAuth secret belongs to

Class that users must have.

Set this option to true to enable HTTP compression, this can improve transfer speed and bandwidth utilization

Whenever to use precomputated tables for ElGamal. i2pd defaults to false to save 64M of memory (and looses some performance)

Font packages to use in OpenGamepadUI

Environment file to be passed to the systemd service

Environment file to be passed to the systemd service

Whether users must authenticate when using the web UI or command-line tool

If set, shows a contact email address when rendering error pages

If set, shows a contact email address when rendering error pages

Paths to the Nix profile

Enables single account mode