Range of group IDs used for the creation of system groups by useradd, groupadd, or newusers

Range of group IDs used for the creation of system groups by useradd, groupadd, or newusers

Whether or not to enable the headless Aria2 daemon service

Group where a user must be a member of to gain superuser rights.

This option will ensure that team memberships for OpenID Connect users are dynamic and synchronized with membership of OpenID Connect groups or assigned roles

List of rule groups to import or update.

Which LDAP group attribute to search for authorized role ARNs

Options used for the default rules, granting root and the wheel group permission to run any command as any user.

Whether to use NetworkManager to obtain an IP address and other configuration for all network interfaces that are not manually configured

The user of the file

Options used for the default rules, granting root and the wheel group permission to run any command as any user.

User or group to restrict

Whether to install and set up mouse-actions and it's udev rules

Indicates whether this is an account for a “real” user

By default, all networks will get same priority group (0)

A list of names of users that have additional rights when connecting to the Nix daemon, such as the ability to specify additional binary caches, or to import unsigned NARs

A list of names of users that have additional rights when connecting to the Nix daemon, such as the ability to specify additional binary caches, or to import unsigned NARs

Enable acpilight

Data directory for Quickwit

Data directory for Temporal

Instead of synchronizing just the mailboxes that match the farPattern, use it as a prefix which is not matched against the patterns, and is not affected by mailbox list overrides.

Make the Podman socket available in place of the Docker socket, so Docker tools can find the Podman socket

Whether to enable automatically creating the user given in services.dovecot.user and the group given in services.dovecot.group.

Whether to enable CoreCtrl, a tool to overclock amd graphics cards and processors

A changegroup script which is installed in every mercurial repo

IMAP4 patterns for which mailboxes on the remote mail server to sync

Enables sheep_net udev rules, ensures 'sheep_net' group exists, and adds sheep-net to boot.kernelModules and boot.extraModulePackages

Whether users of the wheel group must provide a password to run commands as super user via run0.

Defines the name of the claim that contains group memberships or role assignments in the provider's userinfo endpoint

Name for where mail coming from the remote (far) mail server will end up locally

Whether users of the wheel group must provide a password to run commands as super user via sudo.

Whether users of the wheel group must provide a password to run commands as super user via doas.

Whether to enable the feedbackd D-BUS service and udev rules

Whether users of the wheel group must provide a password to run commands as super user via sudo.

Whether to enable libutempter for mosh

Whether to enable libutempter for tmux

Whether to enable mx-puppet-discord is a discord puppeting bridge for matrix

Enables kryoflux udev rules, ensures 'floppy' group exists

Users to be added to the idevice group.

If enabled, starts a Terraria server

A system group name for this client instance.

A system group name for this client instance.

Set group-write permissions on a USB device

Whether to add Soundmodem to the global environment and configure a wrapper for 'soundmodemconfig' for users in the 'soundmodem' group.

This option will ensure that team memberships for OpenID Connect users are dynamic and synchronized with membership of OpenID Connect groups or assigned roles

Whether to permit root access only to members of group wheel.

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

List of groups to allow access to this vhost, or null to allow all.

Users that intend to use BenchExec

The file mode creation mask for Aria2 service

Whether to enable udev rules for devices supported by libjaylink

The terminal permissions: the login tty will be owned by the TTYGROUP group, and the permissions will be set to TTYPERM

Whether users of the wheel group must provide a password to run commands or edit files with please and pleaseedit respectively.

Whether to enable non-root access to the firmware of UHK keyboards

The user borg is run as

Enable CIS Hardening for RKE2

Whether to assign user roles based on the user's LDAP group memberships

Enable support for attaching AppArmor profiles at the user/group level, e.g., as part of a role based access control scheme.

Include services.beszel.agent.smartmon.package in the Beszel agent path for disk monitoring and add the agent to the disk group.

Data directory for OpenSearch

The user borg serve is run as

A set that will be generated into configuration file, see the SmartDNS README for details of configuration parameters

The terminal permissions: the login tty will be owned by the TTYGROUP group, and the permissions will be set to TTYPERM

If true, a system-wide PipeWire service and socket is enabled allowing all users in the "pipewire" group to use it simultaneously

Specifies which users are considered “administrators”, for those actions that require the user to authenticate as an administrator (i.e. have an auth_admin value)

Whether to enable lemurs, a customizable TUI display/login manager.

Enable hardened VirtualBox, which ensures that only the binaries in the system path get access to the devices exposed by the kernel modules instead of all users in the vboxusers group.

All listed users will become part of the firezone-client group so they can control the tunnel service

The user and group to run nebula-lighthouse-service as.

Name is used as a suffix for the service name, user, and group

When a job dies, launchd kills any remaining processes with the same process group ID as the job

Tell multipathd how to manage path group failback

The systemd KillMode to use for glusterd.

glusterd spawns other daemons like gsyncd

Postgresql database superuser used to create Nominatim database and import data

Whether to enable Google OS Login

Group policies to install

The filepath to the provider secret key

Write logs to a specific Cloudwatch Logs group.

Group policies to install

Username for the postgresql connection

The permission for settings.dir

Specifies a program to be used to look up the user's public keys

When a job dies, launchd kills any remaining processes with the same process group ID as the job

If false, a PulseAudio server is launched automatically for each user that tries to use the sound system

Multiaddr or array of multiaddrs describing the address to serve the local HTTP API on

Number of I/O requests to route to a path before switching to the next in the same path group

If given an IP address, it can be a host name ("localhost"), an IPv4 dotted-quad ("127.0.0.1") or an IPv6 address enclosed in square brackets ("[::1]").

(VCL4.1 and higher) If given an absolute Path ("/path/to/listen.sock") or "@" followed by the name of an abstract socket ("@myvarnishd") accept connections on a Unix domain socket

A list of groups for which targets are retrieved, only supported when targeting the container role

When a job dies, launchd kills any remaining processes with the same process group ID as the job