Combination of Alertmanager receiver(s) and rooms for the bot to join

The pre-existing network namespace in which the WireGuard interface is created, and which retains the socket even if the interface is moved via interfaceNamespace

When enabled, programs.firefox.profiles.<profile>.extensions.settings.<extensionID>.permissions must specify the exact set of permissions that the extension will request

Optional

Interval in seconds to send keepalive packets

What to do in case of a conflict between the storages

Whether to set the machine hostname based on the information received from the DHCP server.

Commandline arguments to pass to the image's entrypoint.

The path of the directory to share, can be a shell variable

The mount point of the directory inside the virtual machine

Name of the shell wrapper to be called.

Specifies the initial hashed password for the user, i.e. the hashed password assigned if the user does not already exist

Command writing the passphrase to standard output.

Name of the default cryptographic profile chosen from the profile_dir directory.

Extra config to be appended to the interface config

Extra integrations from the Datadog core-integrations repository that should be built and included

List of Vicinae extensions to install

Local tag to which the remote Gmail 'TRASH' label is translated.

User name under which the exportarr-readarr exporter shall be run.

OCI image to run.

User name under which the artifactory exporter shall be run.

By default, H2O, without prejudice, will use as many TLS versions & cipher suites as it & the TLS library (OpenSSL) can support

The user under which the container should run.

Override the username or UID (and optionally groupname or GID) used in the container.

Grants the user ownership to a database with the same name

Lua plugins

Prefix added to the metric name.

Allow client if common name appears in the list.

Name of the InfluxDB database.

What to do in case of a conflict between the storages

Allow client if organizational unit name appears in the list.

A list of additional patches to apply to the kernel

Image pull policy for the container

List of hooks to enable when generating the CDI specification

Pre-made themes

Certificate to authenticate with.

The mechanism used to pass the credential to the VM.

Specifies the initial password for the user, i.e. the password assigned if the user does not already exist

Secrets to append to the initrd

Allow client if URI subject alternative name appears in the list.

Allow client if DNS subject alternative name appears in the list.

The name of the window manager to show in the session chooser.

Domain name to request a TLS certificate for.

Custom hooks for Claude Code

Labels to attach to the container at runtime.

config.yaml configuration as a Nix attribute set

Base64 preshared key generated by wg genpsk

Configure the domain name of this Warpgate instance

name of the qdrant collection used to store documents.

API key to authenticate with a local crowdsec API

User name under which the exportarr-prowlarr exporter shall be run.

DEPRECATED, use driverOptions

When enabled, programs.librewolf.profiles.<profile>.extensions.settings.<extensionID>.permissions must specify the exact set of permissions that the extension will request

Exposes EDID files from users-sourced database at https://github.com/linuxhw/EDID

Attribute names will be mapped to EDID filenames <NAME>.bin

The workspace name to match (optional).

Podman-specific settings in OCI containers

The 'domain' part for user IDs on this home server

The package that provides the font given in the name option.

List of devices to attach to this container.

List of hooks to disable when generating the CDI specification

Configures the name of the Google Cloud project to which to forward journald logs

Name of auth backend to use by default.

Override the default working directory for the container.

The pre-existing network namespace the WireGuard interface is moved to

Automatically disallow all clients using # or + in their name/id.

An attribute set where the keys name the organisation and the values are a set of lists of users and groups.

The list of nameservers

Section defining IKE connection configurations, each in its own subsection with an arbitrary yet unique name

When enabled, the container is automatically started on boot

Name to register the bouncer as to the CrowdSec API

Section defining complementary attributes of certification authorities, each in its own subsection with an arbitrary yet unique name

User name under which the modemmanager exporter shall be run.

Display name for OIDC authentication.

Maximum number of client connections allowed

Grants the user created inherit permissions

A list of repositories to use when resolving dependencies

Configures the syscall filter for postgresql.service

Registry where to login to.

Device node access modifier

SSO provider name displayed on login page.

Default user name to use.

Name or GUID of extra ZFS pools that you wish to import during boot

Whether to run the post script if the pre script fails

Automatically remove the container when it is stopped or killed

Specifies the initial password for the user, i.e. the password assigned if the user does not already exist

When enabled, the user must authorize requested permissions for all extensions from programs.floorp.profiles.<profile>.extensions.packages in programs.floorp.profiles.<profile>.extensions.settings.<extensionID>.permissions

Networks to attach the container to

Units that want (i.e. depend on) this unit

Key/value pairs where the key is name of radio station and value is URL.

The package that provides the theme given in the name option.

Extra options for podman run.

Whether to run the post script if the pre script fails

When enabled, the user must authorize requested permissions for all extensions from programs.firefox.profiles.<profile>.extensions.packages in programs.firefox.profiles.<profile>.extensions.settings.<extensionID>.permissions

If set to "yes", using the bindings file /etc/multipath/bindings to assign a persistent and unique alias to the multipath, in the form of mpath

Package providing a GNOME Shell theme in $out/share/themes/${name}/gnome-shell.

The name of the machine

Shell command which will print a password to stdout for basic HTTP authentication

The name of the artifact.

Grants the user, created by the ensureUser attr, createdb permissions

Extra options for podman that go before the run argument.