Enables rtl-sdr udev rules, ensures 'plugdev' group exists, and blacklists DVB kernel modules

Configuration file for persisting runtime changes

The user of the file

User that runs smokeping and (optionally) thttpd

Indicates whether this is an account for a “real” user

Disable checking that at least the root user or a user in the wheel group can log in using a password or an SSH key

Path to the Unbound control socket certificate

All listed users will become part of the timekpr group so they can manage timekpr settings without requiring sudo.

GID where the socket should be set when protocol=socket

Whether to enable Portunus, a self-contained user/group management and authentication service for LDAP.

DNP3_SERVER variable.

DNP3_CLIENT variable.

Enable Docker support

Extra x509 Subject Alternative Names to be added to the kubernetes apiserver tls cert.

Group where a user must be a member of to gain superuser rights.

The certificates may use a relative path from the swanctl x509ca directory or an absolute path

ENIP_SERVER variable.

ENIP_CLIENT variable.

Whether to enable incusd, a daemon that manages containers and virtual machines

Certificate file for client cert authentication to the server.

Installs flashrom and configures udev rules for programmers used by flashrom

Whether to configure system to use gphoto2

Usernames to be added to the "openrazer" group, so that they can start and interact with the OpenRazer userspace daemon.

Path to the certificate used for the HTTPS listener

DC_SERVERS variable.

Account certificate file, necessary to create, delete and manage tunnels

AIM_SERVERS variable.

SQL_SERVERS variable.

DNS_SERVERS variable.

Directory for storing certificates to be used by Neo4j for TLS connections

Certificates for additional domains.

HTTP_SERVERS variable.

SMTP_SERVERS variable.

Which LDAP group attribute to search for authorized role ARNs

Whether to install and set up mouse-actions and it's udev rules

Whether or not to enable the headless Aria2 daemon service

Certificate to authenticate with.

The user of the file

Output path for the full chain including the acquired certificate

User or group to restrict

Path to private key.

MODBUS_SERVER variable.

MODBUS_CLIENT variable

Certificate file for client cert authentication to the server.

Certificate file for client cert authentication to the server.

Certificate file for client cert authentication to the server.

Data directory for Temporal

Data directory for Quickwit

Section for a CA certificate to accept for authentication

The path to a TLS certificate bundle used to verify the server's certificate.

Additional groups under which Traefik runs

A list of names of users that have additional rights when connecting to the Nix daemon, such as the ability to specify additional binary caches, or to import unsigned NARs

A list of names of users that have additional rights when connecting to the Nix daemon, such as the ability to specify additional binary caches, or to import unsigned NARs

EXTERNAL_NET variable.

Indicates whether this is an account for a “real” user

Defines the name of the claim that contains group memberships or role assignments in the provider's userinfo endpoint

Enable acpilight

Whether to configure Privoxy to inspect HTTPS requests, meaning all encrypted traffic will be filtered as well

Whether to enable CoreCtrl, a tool to overclock amd graphics cards and processors

Optional slot number of the token that stores the certificate.

This option will ensure that team memberships for OpenID Connect users are dynamic and synchronized with membership of OpenID Connect groups or assigned roles

TELNET_SERVERS variable.

Enables sheep_net udev rules, ensures 'sheep_net' group exists, and adds sheep-net to boot.kernelModules and boot.extraModulePackages

Whether to use NetworkManager to obtain an IP address and other configuration for all network interfaces that are not manually configured

Make the Podman socket available in place of the Docker socket, so Docker tools can find the Podman socket

Whether to enable libutempter for mosh

Whether to enable libutempter for tmux

Whether to enable the feedbackd D-BUS service and udev rules

Certificate file for client cert authentication to the server.

Absolute path to the certificate to load

Optional PKCS#11 module name.

Hostgroups to declaratively load into FastNetMon Advanced

By default, all networks will get same priority group (0)

Enables kryoflux udev rules, ensures 'floppy' group exists

List of rule groups to import or update.

A system group name for this client instance.

A system group name for this client instance.

Whether to enable mx-puppet-discord is a discord puppeting bridge for matrix

If enabled, starts a Terraria server

Whether to enable automatically creating the user given in services.dovecot.user and the group given in services.dovecot.group.

The common name field of the certificate used by the mysql or postgres server

Path to a cert file for connecting to kubelet.

Set group-write permissions on a USB device

Send certificate payloads when using certificate authentication.

• With the default of ifasked the daemon sends certificate payloads only if certificate requests have been received.
• never disables sending of certificate payloads altogether,
• always causes certificate payloads to be sent unconditionally whenever certificate authentication is used

Hex-encoded CKA_ID or handle of the certificate on a token or TPM, respectively

Whether to sync ldap groups into BitWarden.

The login method

Users to be added to the idevice group.

Whether to enable non-root access to the firmware of UHK keyboards

Certificate file for client cert authentication to the server.

Whether to add Soundmodem to the global environment and configure a wrapper for 'soundmodemconfig' for users in the 'soundmodem' group.

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

Extra configuration lines to add to THIS channel's configuration.

Include services.beszel.agent.smartmon.package in the Beszel agent path for disk monitoring and add the agent to the disk group.

Users that intend to use BenchExec

This option will ensure that team memberships for OpenID Connect users are dynamic and synchronized with membership of OpenID Connect groups or assigned roles

Whether to enable udev rules for devices supported by libjaylink

A changegroup script which is installed in every mercurial repo

The user borg is run as