If enabled Rsync will be socket-activated rather than run persistently.

The full path to the PEM encoded TLS certificate

The full path to the PEM encoded TLS certificate

Whether to sync ldap groups into BitWarden.

When enabled, will automatically register the "brscan4" sane backend and bring configuration files to their expected location.

The Apache status page URL

Whether to allow editing the kernel command-line before boot

A file containing the secret used to encrypt secrets for OTP tokens

If enabled, systemd will always respawn dnsmasq even if shut down manually

Enabled IBus engines

Whether to generate SSH host keys

Whether to enable this .link unit

Whether to enable Zsh integration .

Whether to enable Zsh integration .

The domain the Bitwarden/Vaultwarden is accessible on.

Directory where Akkoma will put uploaded files.

LDAP filter for users.

Forcibly import the ZFS root pool(s) during early boot

Whether to enable Bitwarden Directory Connector.

List of hosts entries to configure in /etc/nsswitch.conf

Whether to enable nftables and use nftables based firewall if enabled. nftables is a Linux-based packet filtering framework intended to replace frameworks like iptables

Whether to let the nslcd daemon (nss-pam-ldapd) handle the LDAP lookups for NSS and PAM

If enabled, virtual users will use the same privileges as local users

Whether to enable Zsh integration.

Whether to enable the HTTP/2 protocol

If enabled, the Nix store in the VM is made writable by layering an overlay filesystem on top of the host's Nix store

Options to configure the LDAP connection

Options to configure what gets synced

The sensor type, can be hwmon for standard sensors,

atasmart to read the temperature via S

If enabled, start a Minecraft Server

Whether to enable Bash integration .

Whether to enable Fish integration .

Whether to enable Bash integration .

Whether to enable Fish integration .

List of shadow entries to configure in /etc/nsswitch.conf

Enables Uber's USSH PAM (pam-ussh) module

List of attribute sets containing configuration for each domain

If true, a system-wide PipeWire service and socket is enabled allowing all users in the "pipewire" group to use it simultaneously

Whether to enable Whether add CAP_NET_BIND_SERVICE to the tunnel service, this should be enabled if you want to bind port < 1024.

The path to the file with the password in case SMTP auth is enabled.

If enabled, validates the generated config file.

LDAP filter for groups.

Additional listeners to start when Dovecot is enabled.

Whether to enable Fish integration.

Whether to enable Bash integration.

List of Thunderbird profiles for which this account should be enabled

Path to file that contains LDAP password for user in {option}`ldap.username

When enabled, configures VSCode to be the default editor using the EDITOR environment variable.

Requires libunwind to be available when Suricata is configured and built

Suffix for the email, normally @example.com.

Enable if you are syncing more than 2000 users/groups.

Whether to enable the HTTP/2 protocol

Whether to configure nginx as a reverse proxy for Invidious

Whether to enable the HTTP/2 protocol

Set to false to remove all feedback links from the UI.

When enabled, instructs udisks2 to mount removable drives under /media/ directory, instead of the default, ACL-controlled /run/media/$USER/

Additional plugins dir used to configure nomad.

Whether the LDAP server paginates search results.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Enables support for IEEE 802.11n (WiFi 4, HT)

Whether to periodically update the list of LoTW users

Whether to propagate the legacy options under services.znc.confOptions.* to the znc config

Additional arguments passed to initdb during data dir initialisation.

Additional arguments passed to initdb during data dir initialisation.

List of source directories and files to backup

The bitwarden-directory-connector-cli package to use.

Whether to enable Xonsh integration .

Whether to configure the postgresql database for part-db

The option is dictated by the plugin

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

The user to authenticate as.

Enabled safe options

Class that users must have.

The host the LDAP is accessible on.

Initialization commands to run when completion is enabled.

If Notifications are enabled and an expiry date is set, warn 5 days before expiry

Whether to enable Allow the system to forward packets from easytier

Explicitly install extras provided by matrix-synapse

When enabled, installs neovim and configures neovim to be the default editor using the EDITOR environment variable.

Whether to enable opening the HTTP server port and, if enabled, the HTTPS redirect server port in the firewall. .

Themes to add for Vencord, they can be enabled by setting programs.vesktop.vencord.settings.enabledThemes to [ "THEME_NAME.css" ]

Configuration for ZNC, see https://wiki.znc.in/Configuration for details

Enable CIS Hardening for RKE2

Enables or disables drag lock during tapping behavior

Whether to enable NVIDIA Optimus support using the NVIDIA proprietary driver via reverse PRIME

The hostname at which you wish privatebin to be served

If enabled, the configured environment will be translated to native fish using babelfish

If enabled, the configured environment will be translated to native fish using babelfish

Dynamic configuration files to write

Whether to enable the security plugin, plugins.security.ssl.transport.keystore_filepath or plugins.security.ssl.transport.server.pemcert_filepath and plugins.security.ssl.transport.client.pemcert_filepath must be set for this plugin to be enabled.

Target location for Dictionaries

A class that groups will have.

Sets the send events mode to disabled, enabled, or disabled-on-external-mouse

Enable or disable TLS