This tells pgmanage to only allow users in a certain PostgreSQL group to login to pgmanage

The group to use for settings permissions

Limit access to the ckb daemon to a particular group.

Provisioning of kanidm groups

The name of this group

Authorization group memberships to require

If set to true, you are free to add new users and groups to the system with the ordinary useradd and groupadd commands

Name of the runner group to add this runner to (defaults to the default runner group)

Name of the runner group to add this runner to (defaults to the default runner group)

The group GID

Whether to enable cgroup accounting; see cgroups(7).

Whether the member list should be overwritten each time (true) or appended (false)

Name of the rule group

Whether to add Wireshark to the global environment and create a 'wireshark' group

A list of group names that belong to the organization.

The name of the group

The members of this group

Name of the folder the rule group will be stored in

Whether to allow users in the 'wireshark' group to capture USB traffic

Whether to allow users in the 'wireshark' group to capture network traffic

Ensure that only the given members are part of this group at every server start.

Interval that the rule group should be evaluated at

Count of subordinate group ids

Subordinate group ids that user is allowed to use

Path under which the stats socket is placed

Host of an existing Let's Encrypt certificate to use for SSL

Automatically allocate subordinate user and group ids for this user

List of groups this person should belong to.

This option disables password/group lookups

Start of the range of subordinate group ids that user is allowed to use.

When not set to null this option defines the path at which the unbound remote control socket should be created at

Whether to install Light backlight control command and udev rules granting access to members of the "video" group.

Count of subordinate group ids

Extra permission groups to attach to the KMonad instance for this keyboard

Subordinate group ids that user is allowed to use

HOME_NET variable.

Whether to enable brillo in userspace

Automatically allocate subordinate user and group ids for this user

Whether to enable JACK Audio Connection Kit

Whether to enable i2c devices support

Enables udev rules for BladeRF devices

Whether to enable the systemd JSON user/group record lookup service .

Defines the name of the claim that contains group memberships or role assignments in the provider's userinfo endpoint

Enable saned network daemon for remote connection to scanners.

saned would be run from scanner user; to allow access to hardware that doesn't have scanner group you should add needed groups to this user.

DNP3_SERVER variable.

DNP3_CLIENT variable.

Whether to configure a setcap wrapper for tcpdump

Start of the range of subordinate group ids that user is allowed to use.

ENIP_CLIENT variable.

ENIP_SERVER variable.

Default group to store mail for virtual users.

Control group which subgroups are placed under

DC_SERVERS variable.

Only allow members of the wheel group to execute sudo by setting the executable's permissions accordingly

Whether to preserve the TERMINFO and TERMINFO_DIRS environment variables, for root and the wheel group.

Whether to preserve the TERMINFO and TERMINFO_DIRS environment variables, for root and the admin group.

Hostgroups to declaratively load into FastNetMon Advanced

AIM_SERVERS variable.

DNS_SERVERS variable.

SQL_SERVERS variable.

The user of the file

Only allow members of the wheel group to execute sudo by setting the executable's permissions accordingly

Enables Glasgow udev rules and ensures 'plugdev' group exists

SMTP_SERVERS variable.

HTTP_SERVERS variable.

Whether to enable minipro and its udev rules

Disable checking that at least the root user or a user in the wheel group can log in using a password or an SSH key

MODBUS_CLIENT variable

MODBUS_SERVER variable.

Whether to enable sedutil, to manage self encrypting drives that conform to the Trusted Computing Group OPAL 2.0 SSC specification.

Defines a group of servers to use as proxy target.

Indicates whether this is an account for a “real” user

Whether to enable incusd, a daemon that manages containers and virtual machines

EXTERNAL_NET variable.

Whether to configure system to use gphoto2

Configuration file for persisting runtime changes

Whether to enable PdfDing service

User that runs smokeping and (optionally) thttpd

File holding nginx configuration that sets the nonce used to create secret links

Whether to sync ldap groups into BitWarden.

Range of group IDs used for the creation of regular groups by useradd, groupadd, or newusers.

Range of group IDs used for the creation of regular groups by useradd, groupadd, or newusers.

Path to TLS certificate

All listed users will become part of the timekpr group so they can manage timekpr settings without requiring sudo.

Whether to enable Portunus, a self-contained user/group management and authentication service for LDAP.

GID where the socket should be set when protocol=socket

TELNET_SERVERS variable.

Enables rtl-sdr udev rules, ensures 'plugdev' group exists, and blacklists DVB kernel modules

Enable Docker support

Additional groups under which Traefik runs

Extra configuration lines to add to THIS channel's configuration.

Installs flashrom and configures udev rules for programmers used by flashrom

Usernames to be added to the "openrazer" group, so that they can start and interact with the OpenRazer userspace daemon.