GitLab Runner services.

The IP interface to bind to.

The port for Redis to listen to.

Emacs command/binary to execute.

Tag list.

Set the IPFS_PATH environment variable.

Data directory for the redis database.

Whether to enable the khd window manager.

Whether to enable the khd hotkey daemon.

Config to use for kwmrc.

Config to use for khdrc.

Whether to enable the ipfs daemon.

Limit how many jobs can be handled concurrently by this service. 0 (default) simply means don't limit.

Whether to enable the skhd hotkey daemon.

Overwrite the URL for the GitLab instance

The logfile to use for the ofborg service.

Docker image to be used.

Whether to enable the lorri service.

Whether to enable the Emacs Daemon.

Absolute path to a directory where builds will be stored in context of selected executor (Locally, Docker, SSH).

This option specifies the kwm package to use.

This option specifies the khd package to use.

Whether to enable the yabai window manager.

Whether to enable the redis database service.

The TMPDIR to use for nix-daemon.

Config to use for skhdrc.

The ipfs package to use.

Log directory for Netdata

Runner-specific command script executed before code is pulled.

This option specifies the skhd package to use.

The port on which Synapse BitTorrent listens.

Runner-specific command script executed after code is pulled, just before build executes.

The path to the socket to bind to.

Working directory for Netdata

This option specifies port on which DNSmasq will listen.

This option specifies the interface on which DNSmasq will listen.

Add a custom host-to-IP mapping.

Whether to enable the Mopidy Daemon.

Agent name, usually the same as the hostname.

Runner-specific command script executed after code is pulled and just after build executes.

The yabai package to use.

Key/Value pairs to pass to yabai's 'config' domain, via the configuration file.

Select executor, eg. shell, docker, etc

Whether to enable the ofborg builder service.

Register to run untagged builds; defaults to true when tagList is empty.

Bind-mount a volume and create it if it doesn't exist prior to mounting.

This option specifies the redis package to use

This option specifies the emacs package to use.

Cache directory for Netdata

The logfile to use for the ipfs service

Absolute path to log all stderr and stdout

When set to true Runner will only run on pipelines triggered on protected branches.

Disable all container caching.

Whitelist allowed services.

Additional text to be appended to redis.conf.

Config to use for privoxy

Whether to enable DNSmasq.

Custom configuration for Netdata

Extra arbitrary configuration to append to the configuration file

Whether to enable Netbird daemon.

Whether to enable Netdata daemon.

Whitelist allowed images.

Whether to enable the chunkwm window manager.

This option specifies the mopidy package to use.

Whether to enable the privoxy proxy service.

By default data is only periodically persisted to disk, enable this option to use an append-only file for improved persistence.

The logfile to use for the lorri service

Configuration file for gitlab-runner.

configFile takes precedence over services. checkInterval and concurrent will be ignored too

What is the maximum timeout (in seconds) that will be set for job when using this Runner. 0 (default) simply means don't limit.

Whether to run Synapse BitTorrent Daemon.

When set to true Runner will disable the possibility of using the CI_DEBUG_TRACE feature.

Enable Trezor bridge daemon, for use with Trezor hardware wallets.

Whether to enable the NextDNS DNS/53 to DoH Proxy service.

Whether to enable hotload.

The package to use for netbird

The netdata package to use.

Whether to enable the spacebar.

The package used for the synergy client and server.

This option specifies the chunkwm package to use.

Directory for privoxy files such as .action and .filter.

This option specifies the privoxy package to use.

This option specifies the dnsmasq package to use.

Give extended privileges to container.

Synapse BitTorrent package to use.

Whether to enable telegraf agent.

Whether to enable the spotifyd service.

Whether to enable Gitlab Runner.

Attribute set of buildkite agents

Configuration file to use for ofborg

Additional commands for chunkwmrc.

Package containing cachix executable.

Whether to enable Apple's built-in OpenSSH server

Url to fetch config from

Enable to run Cachix Agent as a system service

Chunkwm Plugins directory.

Extra configuration options for Synapse BitTorrent.

The logfile to use for the nix-daemon service

The TLS certificate to use for encryption.

The TLS certificate to use for encryption.

Chunkwm Plugins to enable.

The spacebar package to use.

Which telegraf derivation to use

The spotifyd package to use.

Key/Value pairs to pass to spacebar's 'config' domain, via the configuration file.

Stdout and sterr of hercules-ci-agent process.

This option specifies the ofborg package to use. eg.

(import <ofborg> {}).ofborg.rs

$ nix-channel --add https://github.com/NixOS/ofborg/archive/released.tar.gz ofborg $ nix-channel --update

Data Source Name for tracking of all system level errors to Sentry.

Directory for privoxy template files.

Gitlab Runner package to use.

Extra configuration text loaded in sshd_config

Extra configuration options for telegraf

The port on which PostgreSQL listens.

Whether the Synergy client should be started automatically.

Whether the Synergy server should be started automatically.

Name of the runner to configure

Whether to enable AeroSpace window manager.

Whether to enable the dnscrypt-proxy service..

Whether to enable Tailscale client daemon.

Download directory for Synapse BitTorrent.

Limit number of concurrent requests for new jobs from GitLab.

Extra arbitrary configuration to append to the configuration file.

List of AutoSSH sessions to start as launchd daemon

User under which to run the service

Whether to enable the Synergy server (send keyboard and mouse events).

The maximum log size.

Name of the local AutoSSH session

Listening port for the Trezor emulator.

The Synergy server configuration file.

Address on which to listen for clients.

Whether to enable the Synergy client (receive keyboard and mouse events from a Synergy server).

Name of the user the AutoSSH session should run as

The aerospace package to use.

The package to use for tailscale

The address and TCP port on which privoxy will listen.

Extra command-line flags passed to gitlab-runner register

The dnscrypt-proxy package to use.

Configuration for spotifyd, see https://spotifyd.github.io/spotifyd/config/File.html for supported values.

Group under which to run the service

Additional arguments to be passed to nextdns run.

List of domains that will be redirected by the DNSmasq.

Use the given name instead of the hostname to identify ourselves to the server.

Tags for the agent.

Use the given name instead of the hostname to identify this screen in the configuration.

The github-runner package to use.

Whether to enable sketchybar.

Whether to enable PostgreSQL Server.

Package containing the bin/hercules-ci-agent executable.

If enabled, disables all logging.

The workdir for the agent

The name of the agent as seen in the buildkite dashboard.

Whether to enable Eternal Terminal server.

The port the server should listen on

Custom environment variables injected to build environment

Working directory, available as $GITHUB_WORKSPACE during workflow runs and used as a default for repository checkouts

Whether to configure i3 style keybindings for kwm.

Enable Trezor emulator support.

List of derivations to put in Offlineimap's path.

Replace any existing runner with the same name

The sketchybar package to use.

PostgreSQL package to use.

Enable to run Hercules CI Agent as a system service.

Hercules CI is a continuous integation service that is centered around Nix

Whether to enable GitHub Actions runner

AeroSpace configuration, see

Extra packages to add to PATH for the gitlab-runner process.

Defines the mapping from system users to database users

Command that buildkite-agent 3 will execute when it spawns a shell.

Absolute path to a file with environment variables used for gitlab-runner registration

Repository to add the runner to

Additional arguments passed to initdb during data dir initialisation.

Whether to enable Whether TLS encryption should be used

Whether to enable Whether TLS encryption should be used

Whether to enable this buildkite agent

Optional key to start offlineimap services each N seconds

List of upstream DNS servers to forward queries to

Contents of sketchybar's configuration file

Attrset that is converted and passed as TOML config file

This option specifies the eternal-terminal package to use.

Whether to enable the Mopidy OSX Media Keys support daemon.

The data directory for PostgreSQL

Extra labels in addition to the default (unless disabled through the noDefaultLabels option)

The session server allows the user to interact with jobs that the Runner is responsible for

Check the syntax of the configuration file at compile time

Name of the runner group to add this runner to (defaults to the default runner group)

Optional tiling plugin configuration.

Optional border plugin configuration.

List of Node.js runtimes the runner should support.

This option specifies the mediakeys package to use.

Whether to make the nix-daemon service socket activated.

Name of the user to ensure.

Which buildkite-agent derivation to use

These settings are written to the agent.toml file

This option specifies additional PATH that the emacs daemon would have

Offlineimap derivation to use.

Whether to enable Offlineimap, a software to dispose your mailbox(es) as a local Maildir(s).

Whether to enable Karabiner-Elements.

The token from your Buildkite "Agents" page

The pre-exit hook will run just before your build job finishes

Time to wait until a graceful shutdown is turned into a forceful one.

Extra packages to add to PATH of the service to make them available to workflows.

Multiple GitHub Runners

Extra lines to be added verbatim to the configuration file.

Specifies whether borders should be drawn above or below windows.

The server address is of the form: [hostname][:port]

Defines the interval length, in seconds, between new jobs check

A printf-style string that is output at the beginning of each log line

List of PostgreSQL plugins

Specifies the style of the border (either round or square).

If set to on, the border will be drawn with retina resolution.

Whether PostgreSQL should listen on all network interfaces

Additional text to be appended to offlineimaprc.

Path to the directory storing the hooks

Extra packages to add to PATH.

Run only quick synchronizations

Disables adding the default labels

A file containing SQL statements to execute on first startup.

The karabiner-elements package to use.

The verbosity level (0-9).

Whether to enable the jankyborders service..

Limits how many jobs globally can be run concurrently

Determines the width of the border

Extra commands to run before starting buildkite.

Do not start AeroSpace at login. (Managed by launchd instead)

Contents of /etc/pam.d/sudo_local

Passes --enable-gc flag to ipfs daemon.

Required file that needs to contain:

export CACHIX_AGENT_TOKEN=...

Contents of the recovery.conf file.

API base URL that the agent will connect to

The jankyborders package to use.

Whether to enable yabai's scripting-addition

The command hook script will replace the default implementation of running the build command.

The pre-command hook will run just before your build command runs

PostgreSQL configuration

OpenSSH private key

A run-time path to the key file, which is supposed to be provisioned outside of Nix store.

The post-command hook will run after the bootstrap script has run your build commands

An internal URL to be used for the session server.

Modify the service

Port where the Node exporter exposes its HTTP interface.

Whether to enable managing /etc/pam.d/sudo_local with nix-darwin.

The pre-artifact hook will run just before artifacts are uploaded

File to load as environment file

Whether to enable reattaching a program to the user's bootstrap session

Commands to run every time focused window or workspace changes.

The post-artifact hook will run just after artifacts are uploaded

If set to true, the (slower) accessibility API is used to resolve the focused window.

Ensures that the specified users exist and have at least the ensured permissions

Keymapping preset.

The pre-checkout hook will run just before your projects source code is checked out from your SCM provider

Add programs to the buildkite-agent environment

The checkout hook script will replace the default checkout routine of the bootstrap.sh script

The post-checkout hook will run after the bootstrap script has checked out your projects source code.

This option implements Override local DNS as it is not yet implemented in Tailscaled-on-macOS

Whether to enable Prometheus Node exporter.

Extra environment variables to set for the runner, as an attrset.

Do not use AeroSpace to run commands after login. (Managed by launchd instead)

A key-value map of user data

Conditions for detecting a window.

How long in seconds the session can stay active after the job completes (which will block the job from finishing).

State directory (secrets, work directory, etc) for agent

Path to a JSON file containing secrets for effects

Ensures that the specified databases exist

Extra commandline options to pass to the Node exporter executable.

The prometheus-node-exporter package to use.

Once this list is populated, only applications listed here are considered for receiving a border

Commands to run every time a new window is detected with optional conditions.

Port to be used by AutoSSH for peer monitoring

Commands to execute when the conditions match (required).

The applications specified here are excluded from being bordered

The directory in which temporary subdirectories are created for task state

Whether to enable Touch ID with sudo

Address (<host>:<port>) on which the Prometheus metrics HTTP server should be listening.

Add commands that run after AeroSpace startup

The application ID to match (optional).

Path to a JSON file containing binary cache secret keys

If enabled, causes the following behavior:

• Passes the --ephemeral flag to the runner configuration script
• De-registers and stops the runner with GitHub after it has processed one job
• Restarts the service after its successful exit
• On start, wipes the state directory and configures a new runner

You should only enable this option if tokenFile points to a file which contains a personal access token (PAT)

Padding between windows in an accordion container.

Arguments to be passed to AutoSSH and retransmitted to SSH process

Use Apple Watch for sudo authentication, for devices without Touch ID or laptops with lids closed, consider using this

Commands to run every time workspace changes.

Finish all remaining jobs before stopping

The URL that the Runner will expose to GitLab to be used to access the session server

Commands to run every time focused monitor changes.

Sets the blur radius applied to the borders or backgrounds with transparency.

Location of the cluster-join-token.key file

Address where Node exporter exposes its HTTP interface

Default layout for the root container.

The environment hook will run before all other commands, and can be used to set up secrets, data, etc

The workspace name to match (optional).

This is the default directory to look for statically configured secrets like cluster-join-token.key

Sets the border color for the focused window (format: 0xAARRGGBB)

Collectors to enable in addition to the ones that are enabled by default.

Regex substring to match the app name (optional).

Collectors to disable from the list of collectors that are enabled by default.

The full path to a file which contains either

• a fine-grained personal access token (PAT),
• a classic PAT
• or a runner registration token

Changing this option or the tokenFile’s content triggers a new runner registration

Permissions to ensure for the user, specified as an attribute set

Whether to check further callbacks after this rule (optional).

Sets the border color for all windows not in focus (format: 0xAARRGGBB)

Number of tasks to perform simultaneously

Substring to match in the window title (optional).

Whether to match during aerospace startup (optional).

Default orientation for the root container.

Defines how users authenticate themselves to the server

Map workspaces to specific monitors

Sets the background fill color for all windows (only 0xAARRGGBB arguments supported).

Target location for Services

Containers that have only one child are "flattened".

The default prefix of the service label

Containers that nest into each other must have opposite orientations.

List of networkservices that should be configured

Hostname to use for sharing services.

The local hostname, or local network name, is displayed beneath the computer's name at the top of the Sharing preferences pane

List of formulae that should be unlinked and their services stopped (if they are installed).

Whether to run brew services start for the formula and register it to launch at login (or boot)

This optional key is used to specify Mach services to be registered with the Mach bootstrap sub-system

This optional key is used to specify Mach services to be registered with the Mach bootstrap sub-system

This optional key is used to specify Mach services to be registered with the Mach bootstrap sub-system

Whether to run brew services restart for the formula and register it to launch at login (or boot)