Which pinentry package to use

Whether to start yubikey-agent when you log in

Program to run in cage.

The name of the wrapper program

The name of the wrapper program

Whether to enable U2F support in the i3lock program

Program used by SSH to ask for passwords.

Whether to enable hamster, a time tracking program.

Whether to enable GNOME Disks daemon, a program designed to be a UDisks2 graphical front-end.

Path to a program that can be used to set UNIX user passwords.

Open ports needed for the functionality of the program.

The init.lua for Yazi itself.

Change history file.

Change history size.

Path to the external filter program.

VI or Emacs style shortcuts.

Whether to enable KMail.

Whether to install the cdemu GUI (gCDEmu).

The system-wide npm configuration

When less closes a file opened in such a way, it will call another program, called the input postprocessor, which may perform any desired clean-up action (such as deleting the replacement file created by LESSOPEN).

Theme name

Whether to enable TuxClocker, a hardware control and monitoring program .

Specifies the MAC (message authentication code) algorithms in order of preference

Whether to enable fuse.

Whether to enable mosh.

Whether to wrap the rush binary with a SUID-enabled wrapper

Whether to enable npm global config.

Whether to enable iay, a minimalistic shell prompt.

Theme to be used (see vivid themes)

Base index for windows and panes.

Whether to enable nh, yet another Nix CLI helper.

Shell script code called during zsh shell initialisation.

Whether to enable git, a distributed version control system.

Whether to enable Vi IMproved, an advanced text editor.

Whether to enable Network Block Device (nbd) support.

Group that users must be in to use cdemu.

Name of the theme to be used by oh-my-zsh.

Whether to enable nix-ld, Documentation: https://github.com/nix-community/nix-ld.

Whether to configure fish as an interactive shell.

The global statement defines global settings.

Whether to enable foot terminal emulator.

Whether to enable htop process monitor.

Whether to enable Restricted User Shell..

Whether to enable skim fuzzy finder.

Whether to enable less, a file pager.

Whether to configure system to enable use of dmrconfig

Whether to configure system to use Android Debug Bridge (adb).

Whether to add mtr to the global environment and configure a setcap wrapper for it.

Whether to enable bat, a cat(1) clone with wings.

Open ports needed for the functionality of the program.

The nh package to use.

Whether to enable joycond-cemuhook, a program to enable support for cemuhook's UDP protocol for joycond devices.

Whether to enable KDE PIM base packages.

Whether to enable ALVR, the VR desktop streamer.

Whether to enable yazi terminal file manager.

Set the maximum number of FUSE mounts allowed to non-root users.

Whether to enable xss-lock.

Set of fish abbreviations.

The vim package to use.

Owner of CCache directory

Whether to enable labwc.

The iay package to use.

The dwl package to use.

Whether to enable steam.

The bat package to use.

The git package to use.

The openssh package to use.

The mtr package to use.

The npm package to use.

Whether to enable dconf.

Install criu along with necessary kernel options.

Shell script code called during bash shell initialisation.

Shell script code called during fish shell initialisation.

Whether to enable Niri, a scrollable-tiling Wayland compositor.

Whether to enable binfmt to execute java jar's and classes.

Whether to enable Atop, a tool for monitoring system resources.

Whether to enable zoom.us video conferencing application.

Whether to add to gdbinit the python modules required to make Ghidra's debugger work.

Whether to configure LS_COLORS with vivid.

Enable oh-my-zsh.

Group owner of CCache directory

Whether to enable bash-my-aws.

List of flags for zoxide init

The group under which NNCP files shall be owned

Whether to enable NNCP (Node to Node copy) utilities and configuration.

Shell script code called during login bash shell logout.

The system-wide nano configuration

Enable Ruby provider.

CCache directory

Whether to enable bcc, tools for BPF-based Linux IO analysis, networking, monitoring, and more.

Whether to configure a setcap wrapper for arp-scan.

cdemu for members of programs.cdemu.group.

Specifies the ciphers allowed and their order of preference.

Whether to configure xonsh as an interactive shell.

Whether to enable iftop and setcap wrapper for it.

Whether to enable XPPen PenTablet application.

Whether to enable msmtp - an SMTP client.

Whether to enable iotop + setcap wrapper.

Whether to enable Mepo, a fast, simple and hackable OSM map viewer.

Whether to enable nano, a small user-friendly console text editor.

The nix-ld package to use.

Whether to enable Ente Auth.

Whether to enable Kontact.

The atop package to use.

The skim package to use.

The niri package to use.

Enable Node provider.

The less package to use.

The nano package to use.

The foot package to use.

The yazi package to use.

The htop package to use.

The mosh package to use.

The qdmr package to use.

The tmux package to use.

The fish package to use.

List of plugins to install.

The rush package to use.

The uwsm package to use.

The alvr package to use.

The nncp package to use.

The jdk package to use.

Whether to enable Merkuro.

Whether to enable git-lfs (Large File Storage).

Shell script code used to initialise the zsh prompt.

Whether to enable Geary, a Mail client for GNOME.

This option effectively allows adding setuid/setgid bits, capabilities, changing file ownership and permissions of a program without directly modifying it

Whether to enable ZMap, a network scanner designed for Internet-wide network surveys.

Use 24 hour clock.

Alternative colorscheme for ls colors

Whether to enable river, a dynamic tiling Wayland compositor.

Whether to install slock screen locker with setuid wrapper.

Trace ccache usage to see which derivations use ccache

Whether to enable QDMR - a GUI application and command line tool for programming DMR radios.

Symlink vi to nvim binary.

Time in milliseconds for which tmux waits after an escape is input.

Lua plugins

The zoom-us package to use.

Whether to enable i3lock.

Whether to enable KClock.

Whether to enable GNOME calls: a phone dialer and call handler .

Shell script code used to initialise the bash prompt.

Shell script code used to initialise fish prompt.

How often cleanup is performed

Pre-made themes

Symlink vim to nvim binary.

The git-lfs package to use.

Whether to enable Nixbit configuration.

Whether to enable VSCode editor.

Whether to enable MikroTik Winbox.

The msmtp package to use.

The gnupg package to use.

The slock package to use.

The labwc package to use.

The iotop package to use.

The vivid package to use.

Whether to enable rust-motd, a Message Of The Day (MOTD) generator.

Cache directory to be used by oh-my-zsh

Whether to enable nix-index, a file database for nixpkgs.

Configure zsh options

Whether to enable a setcap wrapper for cnping.

Whether to enable GPaste, a clipboard manager.

Whether to enable the hiding of direnv logging .

Whether to enable sysdig, a tracing tool.

Whether to enable Dwl is a compact, hackable compositor for Wayland based on wlroots

Shell script code called during zsh login shell initialisation.

Whether to enable periodic garbage collection with nh clean all.

Whether to enable DankMaterialShell, a complete desktop shell for Wayland compositors.

The resolved shell path that users can inherit to set rush as their login shell

Whether to enable Xastir Graphical APRS client.

Whether to enable Thunar, the Xfce file manager.

Whether to enable trippy, a network diagnostic tool.

Whether to enable Evince, the GNOME document viewer.

Whether to enable screen, a basic terminal multiplexer.

List of oh-my-zsh plugins

The oh-my-zsh package to use.

The ente-auth package to use.

Whether to enable Setcap for TUN Mode

Extra text added to the end of /etc/xonsh/xonshrc, the system-wide control file for xonsh.

Whenever to configure tmux system-wide.

Automatically spawn a session if trying to attach and none are running.

List of custom packages that should be loaded into oh-my-zsh.

Whether to enable udevil, to mount filesystems without password.

Whether to enable Xfconf, the Xfce configuration storage system.

Whether to enable Throne, a GUI proxy configuration manager.

Additional contents of /etc/tmux.conf, to be run after sourcing plugins.

Group which users must be in to use ydotool.

The rule statement configures a GNU Rush rule

Additional arguments to be passed to cage.

The nix-index package to use.

The dms-shell package to use.

Whether to enable Clash Verge.

DMS Plugins to install and enable

Whether to install Light backlight control command and udev rules granting access to members of the "video" group.

Path to a custom oh-my-zsh package to override config of oh-my-zsh. (Can't be used along with customPkgs).

Configuration included in $YAZI_CONFIG_HOME.

Shell script code called during fish login shell initialisation.

Shell script code called during login bash shell initialisation.

Whether to enable zoxide, a smarter cd command that learns your habits.

The full path to a program of your choosing which performs the bootloader installation process

Size of the font to use for regreet.

Name of the font to use for regreet.

Defines new command keys.

Number of lines/columns when resizing.

Whether to enable wayvnc, VNC server for wlroots based Wayland compositors.

Whether to enable Ghidra, a software reverse engineering (SRE) suite of tools.

The throne package to use.

The weylus package to use.

The ghidra package to use.

The direnv package to use.

The screen package to use.

The wayvnc package to use.

The winbox package to use.

Whether to enable autoenv.

The zoxide package to use.

The pmount package to use.

The nixbit package to use.

The waybar package to use.

The evince package to use.

Whether to enable nm-applet, a NetworkManager control applet for GNOME.

CSS Stylesheet for gtklock

Parameters to be written to the system-wide bat configuration file.

Whether to enable Clash Verge auto launch.

Whether to enable CCache, a compiler cache for fast recompilation of C/C++ code.

Whether to enable usbtop and required kernel module, to show estimated USB bandwidth.

Parameters to be written to /etc/atoprc.

Whether to enable CFS Zen Tweaks.

Enable Python 3 provider.

Reverse the window split shortcuts.

The neovim-unwrapped package to use.

List of thunar plugins to install.

A list of paths to NNCP configuration files that should not be in the Nix store

Options given to nh clean when the service is run automatically

Whether to automatically use angrr before loading .envrc.

Whether to enable waybar, a highly customizable Wayland bar for Sway and Wlroots based compositors.

Whether to enable weylus, which turns your smart phone into a graphic tablet/touch screen for your computer.

Ctrl following by this key is used as the main shortcut.

A comma-separated list of capability clauses to be given to the wrapper program

The xonsh package to use

Whether to enable Mediated Device Management.

Whether to enable the Firefox web browser.

Set of files that have to be linked in runtime.

Optional OBS plugins.

Enable extra colors in directory listings (used by ls and tree).

Whether to configure zsh as an interactive shell

Allow non-root users to specify the allow_other or allow_root mount options, see mount.fuse3(8).

Whether to enable File Roller, an archive manager for GNOME.

Path to lesskey configuration file.

configFile takes precedence over commands, clearDefaultCommands, lineEditingKeys, and envVariables.

Whether to enable blesh, a full-featured line editor written in pure Bash.

Maximum number of lines held in window history.

Whether to enable extra colors in directory listings.

Whether to enable schroot, a lightweight virtualisation tool.

Name of the theme to use for regreet.

Defines new line-editing keys.

Whether to enable Free and open source software for video recording and live streaming.

The obs-studio package to use.

Whether to enable The AmneziaVPN client.

How long to keep the private keys in memory

thefuck needs an alias to be configured

Whether to enable nekoray, a GUI proxy configuration manager.

Whether to enable Bazecor, the graphical configurator for Dygma Products.

Whether to enable Wayfire, a wayland compositor based on wlroots.

Whether to enable gtklock, a GTK-based lockscreen for Wayland.

Whenever to configure Bash as an interactive shell

Use minimal one-liner prompt.

Whether to enable vim as the default editor.

Whether to enable loading direnv in nix-shell nix shell or nix develop .

Whether to enable pmount, a tool that allows normal users to mount removable devices without requiring root privileges .

Enables GnuPG agent with socket-activation for every user session.

Specify the program to run to talk to this UPS. apcsmart, bestups, and sec are some examples.

Extra configuration text prepended to ssh_config

Whether to enable thefuck, an app which corrects your previous console command.

Whether to add wavemon to the global environment and configure a setcap wrapper for it.

Whether to install SpaceFM and create /etc/spacefm/spacefm.conf.

Whether to enable lazygit, a simple terminal UI for git commands.

Network configuration

Whether to enable TUN mode of Throne.

Whether to enable the AppGate SDP VPN client.

Whether to install dependencies required for VPN widgets

Store tmux socket under /run, which is more secure than /tmp, but as a downside it doesn't survive user logout.

The file-roller package to use.

Whether to enable Mininet, an emulator for rapid prototyping of Software Defined Networks.

Configuration for gtklock

Whether to enable dsearch, a fast filesystem search service with fuzzy matching.

The nekoray package to use.

The bazecor package to use.

gtklock modules to load.

The oddjob package to use.

The minipro package to use.

The regreet package to use.

The schroot package to use.

The wayfire package to use.

The gtklock package to use.

The lazygit package to use.

The dsearch package to use.

The autoenv package to use.

Whether to start the OpenSSH agent when you log in

Configuration included in vfs.toml

Whether to automatically open the necessary ports in the firewall.

Whether to enable angrr direnv integration.

Shell commands executed before the oh-my-zsh is loaded

Whether to enable CPU Energy Meter.

Whether to enable PQoS Wrapper for BenchExec.

Whether to set the system sendmail to msmtp's.

Whether to enable ydotoold system service and ydotool for members of programs.ydotool.group. .

Whether to configure a setcap wrapper for tcpdump

The vscode package to use

Whether to enable the openvpn3 client.

Whether to enable Nautilus as file-chooser for xdg-desktop-portal-gnome.

Whether to enable immersed.

Whether to enable envision.

Whether to enable liboping.

Locker to be used with xsslock

Whether to enable kbdlight.

Whether to enable autojump.

Set of aliases for zsh shell, which overrides environment.shellAliases

Extra lines to add to the msmtp configuration verbatim

Additional command-line arguments to pass to xss-lock.

Set the $TERM variable

Whether to open the default ports in the firewall for the ALVR server.

Extra bat scripts to be added to the system configuration.

Source of the plugin package or path

Whether to enable zsh-autoenv.

Extra CSS rules to apply on top of the GTK theme

Whether to enable automatically sourcing git-prompt.sh

Arguments passed to GameScope on startup.

Whether to enable DroidCam client.

A list of packages which provide dconf profiles and databases in /etc/dconf.

The wrapped direnv package.

Before less opens a file, it first gives your input preprocessor a chance to modify the way the contents of the file are displayed.

Settings on what to generate

Files containing SSH host keys to set as global known hosts. /etc/ssh/ssh_known_hosts (which is generated by programs.ssh.knownHosts) is always included.

Whether to enable oddjob, a D-Bus service which runs odd jobs on behalf of client applications.

Configuration included in yazi.toml

This configuration key contains the effective text of the client system-options file "dsm.sys"

Additional plugins to use with the wayfire window manager.

Name of the icon theme to use for regreet.

Whether to enable the Starship shell prompt.

Whether to enable the Ladybird web browser.

The contents of /etc/screenrc file

Default values applied to all accounts

The amnezia-vpn package to use.

Whether to enable Service Mode.

Absolute path to programs.sqlite

Defines environment variables.

To enable stylus and multi-touch support, the user you're going to use must be added to this list

Set of aliases for fish shell, which overrides environment.shellAliases

Set of aliases for bash shell, which overrides environment.shellAliases

Default environment variables available to the GameScope process, overridable at runtime.

Whether to enable ecryptfs setuid mount wrappers.

Whether to enable firejail, a sandboxing tool for Linux.

Direnv configuration

Miriway's config

Whether to enable minipro and its udev rules

Command line arguments passed to launch Sway

Text of the file.

Whether to enable virt-manager, an UI for managing virtual machines in libvirt.

Whether to enable IBM Storage Protect (Tivoli Storage Manager, TSM) client command line applications with a client system-options file "dsm.sys" .

Whether to enable direnv integration

Attrset of dconf profiles

Whether to enable GameMode to optimise system performance on demand.

Whether to enable sniffnet, a network traffic monitor application.

Configuration for foot terminal emulator

Extra global default configuration for htop which is read on first startup only

Whether to enable TUN mode of nekoray.

Whether to enable sedutil, to manage self encrypting drives that conform to the Trusted Computing Group OPAL 2.0 SSC specification.

Whether to install the image analyzer.

The virt-manager package to use.

The pqos-wrapper package to use.

Whether to enable Sway, the i3-compatible tiling Wayland compositor

The openvpn3 package to use.

The tsm-client package to use

Whether to enable Whether to enable the corefreq daemon and kernel module.

Whether to configure system to use gphoto2

Nix top-level packages to be compiled using CCache

Configuration included in theme.toml

Additional packages to add to the Steam environment.

The cpu-energy-meter package to use.

Whether to enable Neovim

Libraries that automatically become available to all programs

Whether to install and enable the atopgpud daemon to get information about NVIDIA gpus.

Which package to use for netatop.

Whether to configure SSH_ASKPASS in the environment.

Whether to enable appimage-run wrapper script for executing appimages on NixOS.

Whether to enable hyprlock, Hyprland's GPU-accelerated screen locking utility.

Whether to enable Haguichi, a Linux GUI frontend to the proprietary LogMeIn Hamachi.

The immersed package to use.

The flashrom package to use.

The Xwayland package to use.

The envision package to use.

The corefreq package to use.

The hyprlock package to use.

The starship package to use.

Whether to enable river-classic, a dynamic tiling Wayland compositor.

The i3lock package to use. ::: {.note} The i3lock package must include a i3lock file or link in its out directory in order for the u2fSupport option to work correctly. :::

Whether to enable sharing, a CLI tool for sharing files

Whether to set the path to xauth for X11-forwarded connections

Whether to enable iio-hyprland and iio-sensor-proxy.

Install and setup the Java development kit.

Xontribs and extra Python packages to be available in xonsh.

A comma-separated list of capability clauses to be given to the wrapper program

The zsh-autoenv package to use.

The xppen_4 package to use

The Steam package to use

Whether to enable Xwayland (an X server for interfacing X11 apps with the Wayland protocol).

Whether to enable binfmt registration to run appimages via appimage-run seamlessly.

The set of system-wide known SSH hosts

Group assigned to the device when connected.

The appimage-run package to use.

Whether to enable XWayland.

Custom configuration profiles for schroot.

Log service configuration

Whether to enable k3b, the KDE disk burning application

pay-respects needs an alias to be configured

Allow changes to the program config made by the program to persist between restarts

Whether to enable Seahorse, a GNOME application for managing encryption keys and passwords in the GNOME Keyring.

Extra packages to be installed system wide

Whether to enable policies for chromium based browsers like Chromium, Google Chrome or Brave.

Presets files to be merged with settings in order.

Lazygit configuration

The mouse-actions package to use.

Whether to enable pay-respects, an app which corrects your previous console command.

Whether to enable cardboard.

Whether to enable BenchExec.

Whether to enable Chrysalis.

Add cap_sys_nice capability to the GameScope binary so that it may renice itself.

Whether to enable DankMaterialShell systemd startup service.

The package that provides the font given in the name option.

The clash-verge package to use

ReGreet configuration file

Whether to enable GNOME Terminal.

The iio-hyprland package to use.

Whether to enable FCast Receiver.

The pay-respects package to use.

Installs flashrom and configures udev rules for programmers used by flashrom

Configuration included in keymap.toml

Name of the cursor theme to use for regreet.

The ryzen-monitor-ng package to use.

Whether to enable this plugin

Extra lines to append to the sourced direnvrc

Whether to enable pulseview, a sigrok GUI.

The river package to use

Configuration to write to /etc/gitconfig

Whether to enable XWayland.

Whether to enable Load the extest library into Steam, to translate X11 input events to uinput events (e.g. for using Steam Input on Wayland) .

Schroot configuration settings

Enables GnuPG network certificate management daemon with socket-activation for every user session.

Whether to install and enable the netatop kernel module

Whether rog-control-center should be started automatically.

Whether to enable the rog-control-center application.

Whether to enable the atop service responsible for storing statistics for long-term analysis.

Whether to enable a faster, persistent implementation of use_nix and use_flake, to replace the builtin one .

NNCP configuration, see http://www.nncpgo.org/Configuration.html

The nix-direnv package to use

Whether to enable K40-Whisperer.

The corectrl package to use

When enabled, configures VSCode to be the default editor using the EDITOR environment variable.

Whether to start a user service to run mouse-actions on startup.

The systemd target that will automatically start the Waybar service.

Whether to enable quark-goldleaf with udev rules applied.

The package that provides the theme given in the name option.

Install systemtap along with necessary kernel options.

Specifies the available KEX (Key Exchange) algorithms.

Whether to open ports for the MikroTik Neighbor Discovery protocol

Path of the source file.

Whether to install and set up mouse-actions and it's udev rules

Whether to let openssh print the result when entering a new ssh-session

Whether to enable yubikey-manager.

Arguments to pass to Firefox wrapper

Whether fish should source configuration snippets provided by other packages.

Whether to enable gamescope, the SteamOS session compositing window manager.

Whether to add bandwhich to the global environment and configure a setcap wrapper for it.

Whether to enable Nexttrace to the global environment and configure a setcap wrapper for it.

Plugins for Evolution.

Whether to enable the Plotinus GTK 3 plugin

Whether to enable FLEXOPTIX app + udev rules.

When enabled, installs neovim and configures neovim to be the default editor using the EDITOR environment variable.

Whether to enable localsend, an open source cross-platform alternative to AirDrop.

The cardboard package to use.

The localsend package to use.

The nexttrace package to use.

The dmrconfig package to use.

The wshowkeys package to use.

The benchexec package to use.

The gamescope package to use.

The Chrysalis package to use.

The feedbackd package to use.

The flashprog package to use.

The language packs to install.

Whether to enable ns-usbloader application with udev rules applied.

Configuration for /etc/gnupg/gpg-agent.conf

Name of symlink

The hyprland package to use

If enabled, the configured environment will be translated to native fish using babelfish

Enable execution of compinit call for all interactive zsh shells

Whether to enable configuring flashprog udev rules and installing flashprog as system package .

Whether to enable CoreCtrl, a tool to overclock amd graphics cards and processors

The wireshark-cli package to use.

The fcast-receiver package to use.

The order of the sections in programs.rust-motd.settings

The default locale

Enable extra socket for GnuPG agent.

Whether to enable syntax highlight for various languages.

The sway package to use

Whether to enable setting suid bit for throne-core to run as root, which is less secure than default setcap method but closer to upstream assumptions

Whether to enable systemd's ssh proxy plugin

Extra packages to be installed system wide

Whether to enable systemd user service for dsearch.

Configuration included in starship.toml

Extra chromium policy options

Whether to enable libutempter for mosh

Whether to enable libutempter for tmux

Whether to use indicator instead of status icon

Whether to enable fuzzy completion with fzf.

Whether to enable the atop-rotate timer, which restarts the atop service daily to make sure the data files are rotate.

The flexoptix-app package to use.

The k40-whisperer package to use.

Whether to enable Goldwarden.

Whether to enable kubeswitch.

List of extensions to install.

Whether to enable AusweisApp.

Specifies the key lib.types that will be used for public key authentication.

The package that provides the icon theme given in the name option.

Whether to enable CAP_SYS_NICE on gamemoded to support lowering process niceness.

The string that will be used for the NH_FLAKE environment variable.

NH_FLAKE is used by nh as the default flake for performing actions, such as nh os switch

The system-wide spacefm configuration

the listen address for the SOCKS5 proxy server

Whether to enable the 1Password CLI tool.

The captive-browser package to use.

Git repository URL for Nixbit

The yubikey-manager package to use.

Whether to enable fzf keybindings.

Whether to enable Evolution, a Personal information management application that provides integrated mail, calendaring and address book functionality.

Whether to enable the feedbackd D-BUS service and udev rules

Packages providing GDK-Pixbuf modules, for cache generation.

Whether this runtime directory should be generated

Shell commands executed just before dwl is started.

Whether to enable Goldwarden's SSH Agent.

Whether to enable fuzzy completion with skim.

Whether to configure a setcap wrapper for traceroute.

Whether to enable streamdeck-ui.

Specifies the host key algorithms that the client wants to use in order of preference.

A list of additional host names and/or IP numbers used for accessing the host's ssh service

Default font path

Enable ReGreet, a clean and customizable greeter for greetd

Force creation of autostart desktop entry when application starts

The public key data for the host

The systemd target that will automatically start the DankMaterialShell service

Whether to enable the 1Password GUI application.

Whether streamdeck-ui should be started automatically.

Whether to enable skim keybindings.

Whether to enable XWayland.

The shell (/bin/sh) command executed to obtain the DHCP DNS server address

Whether to enable Expose extra paths to the sandbox depending on derivations' requiredSystemFeatures.

Whether to enable the default ports in the firewall for the WiVRn server.

AutoConfig files can be used to set and lock preferences that are not covered by the policies.json for Mac and Linux

Whether to enable setting suid bit for nekobox_core to run as root, which is less secure than default setcap method but closer to upstream assumptions

Whether to install gpu-screen-recorder and generate setcap wrappers for promptless recording.

Specifies a program to be used to look up the user's public keys

Whether to enable captive browser, a dedicated Chrome instance to log into captive portals without messing with DNS settings.

A pattern-list of acceptable paths for PKCS#11 shared libraries that may be used with the -s option to ssh-add.

Generate your init file from your list of plugins and custom commands

Whether to enable wshowkeys (displays keypresses on screen on supported Wayland compositors)

Whether to enable projecteur, an application for the Logitech Spotlight device (and similar).

Whether to add nethoscope to the global environment and configure a setcap wrapper for it.

Open ports in the firewall for Steam Remote Play.

Additional contents of /etc/tmux.conf, to be run before sourcing plugins.

Whether to enable the wrapGAppsHook wrapper to execute sway with required environment variables for GTK applications.

Enable zsh completion for all interactive zsh shells.

The gpu-screen-recorder package to use.

Font packages to use in Steam

The 1Password CLI package to use.

Whether to enable Blazingly fast general purpose fuzzy finder TUI.

Whether to enable Enable pure SSH transfer in server side by adding git-lfs-transfer to environment.systemPackages.

System-wide configuration for GameMode (/etc/gamemode.ini)

The goldwarden package to use.

The projecteur package to use.

The kubeswitch package to use.

The noisetorch package to use.

The television package to use.

The soundmodem package to use.

Whether to enable Hyprland, the dynamic tiling Wayland compositor that doesn't sacrifice on its looks

The feedbackd-device-themes package to use.

Whether to enable noisetorch (+ setcap wrapper), a virtual microphone device with noise suppression.

Users to be added to the idevice group.

The kdeconnect-kde package to use.

Interval in which the motd(5) file is refreshed

Users that intend to use BenchExec

Whether to add Soundmodem to the global environment and configure a wrapper for 'soundmodemconfig' for users in the 'soundmodem' group.

Whether to enable Zeyple, an utility program to automatically encrypt outgoing emails with GPG.

Whether to enable system-config-printer, a Graphical user interface for CUPS administration.

The streamdeck-ui package to use.

The 1Password GUI package to use.

The package that provides the cursor theme given in the name option.

Whether to enable extra-container, a tool for running declarative NixOS containers without host system rebuilds .

Run a GameScope driven Steam session from your display-manager

Resize the window to the size of the smallest session for which it is the current window.

Whether to enable Miriway, a Mir based Wayland compositor

The percentage value by which to increase/decrease brightness.

Enable browser socket for GnuPG agent.

TCP port of the IBM TSM server

A list of host names and/or IP numbers used for accessing the host's ssh service

Setup of xfs_quota projects

Shell commands executed just before Sway is started

Enable compatibility with bash's programmable completion system.

Installs and sets up the v4l2loopback kernel module, necessary for OBS to start a virtual camera.

Whether to enable the base wrapper to execute extra session commands and prepend a dbus-run-session to the sway command.

Whether to enable XWayland.

Project ID.

The name of the command to use

Launch Hyprland with the UWSM (Universal Wayland Session Manager) session manager

Whether to enable Bash completion for all interactive bash shells.

Whether to use components requiring unfree dependencies

Proxy DNS requests - no leak for DNS data.

Environmental variables to be passed to GameScope for the session.

Whether to enable yubikey-touch-detector.

Whether to enable KDE Partition Manager.

Whether to enable XWayland.

Whether to enable proxychains configuration.

Clear all default commands

Whether to enable Zsh integration for VTE terminals

Whether to add Wireshark to the global environment and create a 'wireshark' group

Whether to enable Thunderbird mail client.

Arguments to be passed to GameScope for the session.

The river-classic package to use

Connection read time-out in milliseconds.

Whether to enable notifications when long-running terminal commands complete.

Whether to enable opening the firewall port 53317 for receiving files.

Target node name on the IBM TSM server.

The systemd target that will automatically start the dsearch service

Whether to enable Quiet mode (no output from the library).

Whether to enable Browserpass native messaging host.

This public key is an SSH certificate authority, rather than an individual host's key.

The bash-completion package to use.

Whether to enable notification sounds when long-running terminal commands complete.

Whether to install a setuid wrapper for Atop

Firefox package to use.

Project directory.

Options stored in /etc/openvpn3/netcfg.json configuration file

The group of the wrapper program.

The owner of the wrapper program.

Whether to enable Bash integration for VTE terminals

Initial preferences are used to configure the browser for the first run

The tsm-client package to use

The partitionmanager package to use.

Enables verbose logging

Whether to enable iDescriptor, a cross-platform iDevice management tool.

A file in the format described in fstab(5), used to mount filesystems inside the chroot

The program to execute to start systemd.

AutoConfig files can be used to set and lock preferences that are not covered by the policies.json for Mac and Linux

Enable SSH agent support in GnuPG agent

Whether fish should autoload fish functions provided by other packages.

Whether to enable git-worktree-switcher, switch between git worktrees with speed..

Whether to install Singularity/Apptainer with system-level overriding such as SUID support.

The singularity package to use.

The idescriptor package to use.

The thunderbird package to use.

Proxies to be used by proxychains.

The proxychains package to use.

Whether to enable dublin-traceroute (including setcap wrapper).

Whether to enable bash completions for xonsh.

Wrap the binaries in firejail and place them in the global path.

Whether to install dependencies required for dynamic theming support

Whether to enable nautilus-open-any-terminal.

Whether to enable location detection via gpsd

Open ports needed for the functionality of the program.

Extra packages to be used as compatibility tools for Steam on Linux

Number of seconds it would take for a command to be considered long-running.

Shell script code called during interactive zsh shell initialisation.

Named accounts and their respective configurations

Extra packages to be installed system wide

your public network interface (wlp3s0, wlan0, eth0, ...)

Whether to enable the SUID support of Singularity/Apptainer.

The xdg-desktop-portal-hyprland package to use

The git-worktree-switcher package to use.

The quickshell package to use.

Whether to enable uwsm, which wraps standalone Wayland compositors with a set of Systemd units on the fly

Whether to install dependencies required for calendar events support

Whether to enable foot zsh integration.

The dublin-traceroute package to use.

Whether to enable kdeconnect

Shell script code called during interactive fish shell initialisation.

Shell script code called during interactive bash shell initialisation.

Server definitions ("stanzas") for the client system-options file

Whether to enable the atopacct service which manages process accounting

Arguments to be passed to Steam for the session.

Whether to enable GameScope Session.

Whether to enable miracle-wm, a tiling Mir based Wayland compositor

The nextcloud-occ program preconfigured to target this Nextcloud instance.

If set to true, yubikey-touch-detector will send notifications to a unix socket

Chromium default homepage

Whether to request X11 forwarding on outgoing connections by default

Whether to allow users in the 'wireshark' group to capture USB traffic

Whether to enable foot fish integration.

The bash-completion package to use.

Chain length for random chain.

Whether to enable foot bash integration.

List of extra arguments (such as --add-flags -v) to pass to the hook's wrapper

The absolute path to the program to be wrapped.

Text lines with include.* and exclude.* directives to be used when sending files to the IBM TSM server, or an absolute path pointing to a file with such lines.

Whether to allow users in the 'wireshark' group to capture network traffic

Whether interactive shells should show which Nix package (if any) provides a missing command

Options stored in /etc/openvpn3/log-service.json configuration file

Whether to enable location detection via geoclue

Whether to restart the dms.service when the DankMaterialShell package or configuration changes

Whether to enable Zsh integration.

Whether to install dependencies required for pasting directly from the clipboard history support

List of rules to be added to /etc/xdg/pay-respects/rules. pay-respects will read the contents of these generated rules to recommend command corrections

The path to the public key file for the host

Whether to open the required firewall ports for the Smartphone as Card Reader (SaC) functionality of AusweisApp.

Whether to add the setuid bit the wrapper program.

Whether to add the setgid bit the wrapper program.

Connection time-out in milliseconds.

By default enable localnet for loopback address ranges.

Whether to enable fx_cast support.

Whether to enable Zsh integration .

Proxy type.

Whether to enable Zsh integration.

Whether to enable Fish integration.

Proxy port

Whether to enable Bash integration.

Arguments to be passed to OpenGamepadUI

Hard limit of the project size.

Proxy host or IP address.

Soft limit of the project size

Group policies to install

Whether to enable Bash integration.

Whether to enable Bash integration .

Whether to enable Fish integration.

Whether to enable Fish integration .

Binds captive-browser to the network interface declared in cfg.interface

Additional packages to generate completions from, if programs.fish.generateCompletions is enabled.

XFS filesystem hosting the xfs_quota project.

Whether to install dependencies required for audio wavelength visualization

Set environment path of systemd to include the current system's bin directory

Override the hjkl and HJKL bindings for pane navigation and resizing in VI mode.

Whether to enable automatic client password generation

A list of files to copy into the chroot from the host system.

Whether to enable generating completion files from man pages.

Whether to enable the uptime monitoring program web service.

Whether to enable Xonsh integration.

Whether to enable Xonsh integration .

Whether to enable ryzen_monitor_ng, a userspace application for setting and getting Ryzen SMU (System Management Unit) parameters via the ryzen_smu kernel driver

A list of users who should be able to integrate 1Password with polkit-based authentication mechanisms.

The hook config, describing which paths to mount for which system features

Whether to enable PassFF support.

Whether to enable JabRef support.

Whether to enable ff2mpv support.

OpenAFS programs package

Open ports in the firewall for Source Dedicated Server.

Local name of the IBM TSM server, must not contain space or more than 64 chars.

Whether to enable opengamepadui.

Make Memtest86+, a memory testing program, available from the GRUB boot menu.

This option defines the PAM services

The terminal emulator to add to context-entry of nautilus

Whether to enable starship only when the shell is interactive

Whether to install dependencies required for system monitoring widgets

Whether to enable this proxy.

Whether fish should use completion files provided by other packages.

This allows you to pass arguments to the child program

Path of the program that implements the service.

If set to true, yubikey-touch-detctor will send notifications using libnotify

Set the class A subnet number to use for the internal remote DNS mapping, uses the reserved 224.x.x.x range by default.

Configuration for UWSM-managed Wayland Compositors

Whether to enable CoolerControl GUI & its background services.

The protontricks package to use.

Group policies to install

Installs the Digital Bitbox application and enables the complementary hardware module.

Whether to enable protontricks, a simple wrapper for running Winetricks commands for Proton-enabled games.

Whether to enable Web eID support.

The OpenGamepadUI package to use.

Directory that holds the TSM node's password information.

Whether to enable zsh-syntax-highlighting.

Extra command line arguments to pass to the program.

Extra command-line arguments pass to to the compsitor.

If multiple server stanzas are declared with programs.tsmClient.servers, this option may be used to name a default server stanza that IBM TSM uses in the absence of a user-defined dsm.opt file

Chromium default search provider url.

Command-line arguments for the server program.

Use systemd-journald

(Extra) system-wide /**/bin paths for Apptainer/Singularity to find command-line utilities in.

"/run/wrappers/bin" is included by default to make utilities with SUID bit set available to Apptainer/Singularity

List of chromium extensions to install

Whether to enable Bukubrow support.

Enable the default search provider.

If enabled, a Fontconfig configuration file will be built pointing to a set of default fonts

Enable NVIDIA GPU controls for a device by index

The full name of the desktop entry file.

Fish code composing the body of the starship_transient_prompt_func function

A list of glob patterns, indicating which paths to expose to the sandbox

The comment field of the desktop entry file.

Flags to append to the program call

The digitalbitbox package to use

Whether to enable qgroundcontrol.

Specifies custom styles to be highlighted by zsh-syntax-highlighting

Fish code composing the body of the starship_transient_rprompt_func function

Chromium default search provider url for suggestions.

Whether to enable the --fakeroot support of Singularity/Apptainer

Preferences to set from about:config

The status of firefox.preferences.

status can assume the following values:

• "default": Preferences appear as default.
• "locked": Preferences appear as default and can't be changed.
• "user": Preferences appear as changed.
• "clear": Value has no effect

The shell (/bin/sh) command executed once the proxy starts

Additional packages containing native messaging hosts that should be made available to Firefox extensions.

How verbose should the logging be

Whether to enable thinkfan, a fan control program.

The minimum authorized brightness value, e.g. to avoid the display going dark.

Add timestamp log file

Whether to enable Tridactyl support.

Whether to enable GSConnect support.

Enable support for Nvidia GPUs.

Path to sendmail program

Open ports in the firewall for Steam Local Network Game Transfers.

The qgroundcontrol package to use.

Whether to enable Zsh integration.

Preferences to set from about:config

Additional packages to add to the OpenGamepadUI environment.

The wayland-compositor binary path that will be called by UWSM

Whether to enable Bash integration.

Whether to enable Fish integration.

The owner of the wrapper program.

The group of the wrapper program.

Whether to enable brightness control with keyboard keys

Specifies custom patterns to be highlighted by zsh-syntax-highlighting

Make Memtest86+ available from the systemd-boot menu

Attrset that is converted and passed as config file

Which requiredSystemFeatures should trigger relaxation of the sandbox

dynamic - Each connection will be done via chained proxies all proxies chained in the order as they appear in the list at least one proxy must be online to play in chain (dead proxies are skipped) otherwise EINTR is returned to the app.

strict - Each connection will be done via chained proxies all proxies chained in the order as they appear in the list all proxies must be online to play in chain otherwise EINTR is returned to the app.

random - Each connection will be done via random proxy (or proxy chain, see programs.proxychains.chain.length) from the list.

Whether to enable Starship's transient prompt feature in fish shells

Whether to fetch suggestions asynchronously

Whether to enable Declare the support for derivations that require an Nvidia GPU to be available, e.g. derivations with requiredSystemFeatures = [ "cuda" ]

Whether the service is chrooted to have only access to the services.postfix.queueDir and the closure of store paths specified by the program option.

'Static' authentication secret value (a string) for TURN REST API only

System databases (as described in /etc/nsswitch.conf on GNU/Linux systems) to copy into the chroot from the host.

The absolute path to the program to be wrapped.

Whether to enable Uget Integrator support.

Whether to enable zsh-autosuggestions.

A program name specifying a Postfix service/daemon process

Whether to enable Native Messaging Host for Plasma Browser Integration.

The default capture device (i.e. microphone)

Whether to add the setuid bit the wrapper program.

Whether to add the setgid bit the wrapper program.

Configuration for sitespeed-io, see https://www.sitespeed.io/documentation/sitespeed.io/configuration/ for available options

Whether to enable Browserpass support.

Whether to use top-level directories as LOCALSTATEDIR instead of the store path ones

The plasma-browser-integration package to use.

Font packages to use in OpenGamepadUI

Run a GameScope driven OpenGamepadUI session from your display-manager

Attribute set with additional configuration values

The default playback device

Program to run for sound output.

Whether to set up NixOS such that TurboVNC's built-in software OpenGL implementation works

Whether to enable StreamController.

Backup the stdout of this program instead of filesystem paths

Environmental variables to be passed to GameScope for the session.

Arguments to be passed to GameScope for the session.

This option provides access to the overridden result of programs.singularity.package

The StreamController package to use

The status of thunderbird.preferences.

status can assume the following values:

• "default": Preferences appear as default.
• "locked": Preferences appear as default and can't be changed.
• "user": Preferences appear as changed.
• "clear": Value has no effect

Whether the service is chrooted to have only access to the services.postfix.queueDir and the closure of store paths specified by the program option.

The permissions of the wrapper program

Whether to enable GameScope Session.

A program name specifying a Postfix service/daemon process

Run this program in a single process mode for debugging purpose

The compressor to use on the initrd image

Whether to enable Instructs the hook to mount the symlink targets as well, when any of the paths contain symlinks

Specifies the highlighters to be used by zsh-syntax-highlighting

Highlight style for suggestions ({fore,back}ground color)

Whether to enable pay-respects' LLM integration

Whether to enable Run InputPlumber service for input management and gamepad configuration. .

Whether to enable Run PowerStation service for TDP control and performance settings. .

User to run the program.

The program to make available as /bin/sh inside the chroot

Host/domain name or IP address of the IBM TSM server.

Additional arguments passed to grub-install

Which program (or internal library) should be used for DHCP.

Program to run for audio input.

Disallow ModemManager from interfering with serial connections that QGroundControl might use

ZSH_AUTOSUGGEST_STRATEGY is an array that specifies how suggestions should be generated

External filter program to further filter GC roots matched by this policy.

Whether to use systemd-resolved integration

The permissions of the wrapper program

Add D-Bus details in log file/syslog

The interpreter to invoke to run the program

Maximum memory used by the process

(Superseded by uid_attribute) The default program and args to callout to obtain a unique path identifier

Extra command-line arguments pass to the external filter program.

The name-string specifies an external program to be called that will automatically change volumes as required by Bacula