Program to run in cage.

The name of the wrapper program

The name of the wrapper program

Whether to enable U2F support in the i3lock program

Program used by SSH to ask for passwords.

Whether to enable hamster, a time tracking program.

Whether to enable GNOME Disks daemon, a program designed to be a UDisks2 graphical front-end.

Path to a program that can be used to set UNIX user passwords.

The init.lua for Yazi itself.

Change history file.

Change history size.

Open ports needed for the functionality of the program.

VI or Emacs style shortcuts.

Whether to install the cdemu GUI (gCDEmu).

The system-wide npm configuration

Whether to enable KMail.

Specifies the MAC (message authentication code) algorithms in order of preference

Theme name

Whether to wrap the rush binary with a SUID-enabled wrapper

Path to the external filter program.

Whether to enable fuse.

Whether to enable iay, a minimalistic shell prompt.

Whether to enable mosh.

Whether to enable npm global config.

Whether to enable nh, yet another Nix CLI helper.

Theme to be used (see vivid themes)

When less closes a file opened in such a way, it will call another program, called the input postprocessor, which may perform any desired clean-up action (such as deleting the replacement file created by LESSOPEN).

Whether to enable Network Block Device (nbd) support.

Whether to enable git, a distributed version control system.

Whether to enable Vi IMproved, an advanced text editor.

Shell script code called during zsh shell initialisation.

Base index for windows and panes.

Whether to enable nix-ld, Documentation: https://github.com/nix-community/nix-ld.

Group that users must be in to use cdemu.

Name of the theme to be used by oh-my-zsh.

Whether to configure system to use Android Debug Bridge (adb).

Whether to add mtr to the global environment and configure a setcap wrapper for it.

Whether to enable bat, a cat(1) clone with wings.

The global statement defines global settings.

Whether to enable Restricted User Shell..

Whether to enable htop process monitor.

Whether to enable foot terminal emulator.

Whether to enable less, a file pager.

Whether to enable skim fuzzy finder.

Whether to configure fish as an interactive shell.

Set the maximum number of FUSE mounts allowed to non-root users.

Whether to enable ALVR, the VR desktop streamer.

Whether to enable KDE PIM base packages.

The nh package to use.

Whether to enable yazi terminal file manager.

The group under which NNCP files shall be owned

Whether to add to gdbinit the python modules required to make Ghidra's debugger work.

Install criu along with necessary kernel options.

Whether to enable Niri, a scrollable-tiling Wayland compositor.

Whether to enable Atop, a tool for monitoring system resources.

Whether to enable binfmt to execute java jar's and classes.

Whether to enable xss-lock.

Shell script code called during bash shell initialisation.

Shell script code called during fish shell initialisation.

Whether to enable TuxClocker, a hardware control and monitoring program .

Whether to enable labwc.

The mtr package to use.

The iay package to use.

The dwl package to use.

Whether to enable zoom.us video conferencing application.

Owner of CCache directory

Whether to enable steam.

Whether to enable dconf.

The npm package to use.

The bat package to use.

The git package to use.

The vim package to use.

The openssh package to use.

Set of fish abbreviations.

Whether to enable bcc, tools for BPF-based Linux IO analysis, networking, monitoring, and more.

The system-wide nano configuration

Whether to enable NNCP (Node to Node copy) utilities and configuration.

Shell script code called during login bash shell logout.

Whether to enable bash-my-aws.

Group owner of CCache directory

Enable oh-my-zsh.

List of flags for zoxide init

Whether to configure LS_COLORS with vivid.

Whether to enable Mepo, a fast, simple and hackable OSM map viewer.

Whether to enable nano, a small user-friendly console text editor.

Whether to configure a setcap wrapper for arp-scan.

Enable Ruby provider.

cdemu for members of programs.cdemu.group.

CCache directory

Whether to enable iftop and setcap wrapper for it.

Whether to enable XPPen PenTablet application.

Whether to enable iotop + setcap wrapper.

Whether to enable git-lfs (Large File Storage).

Whether to configure xonsh as an interactive shell.

Whether to enable msmtp - an SMTP client.

Specifies the ciphers allowed and their order of preference.

Whether to configure system to enable use of dmrconfig

Whether to enable ZMap, a network scanner designed for Internet-wide network surveys.

Whether to enable Ente Auth.

The nix-ld package to use.

Shell script code used to initialise the zsh prompt.

The qdmr package to use.

The atop package to use.

The niri package to use.

The uwsm package to use.

The alvr package to use.

Whether to enable Kontact.

The nano package to use.

The mosh package to use.

Whether to enable Merkuro.

Whether to enable Geary, a Mail client for GNOME.

The nncp package to use.

The rush package to use.

The jdk package to use.

The htop package to use.

The foot package to use.

The less package to use.

The skim package to use.

The yazi package to use.

Enable Node provider.

The tmux package to use.

List of plugins to install.

The fish package to use.

Whether to enable QDMR - a GUI application and command line tool for programming DMR radios.

Whether to enable joycond-cemuhook, a program to enable support for cemuhook's UDP protocol for joycond devices.

Whether to install slock screen locker with setuid wrapper.

Whether to enable river, a dynamic tiling Wayland compositor.

Trace ccache usage to see which derivations use ccache

Alternative colorscheme for ls colors

Use 24 hour clock.

Open ports needed for the functionality of the program.

Symlink vi to nvim binary.

Time in milliseconds for which tmux waits after an escape is input.

How often cleanup is performed

Whether to enable GNOME calls: a phone dialer and call handler .

Lua plugins

The resolved shell path that users can inherit to set rush as their login shell

The zoom-us package to use.

Shell script code used to initialise the bash prompt.

Shell script code used to initialise fish prompt.

Whether to enable Dwl is a compact, hackable compositor for Wayland based on wlroots

Cache directory to be used by oh-my-zsh

Whether to enable KClock.

Whether to enable i3lock.

Pre-made themes

Symlink vim to nvim binary.

Whether to enable rust-motd, a Message Of The Day (MOTD) generator.

The git-lfs package to use.

Whether to enable MikroTik Winbox.

Whether to enable Nixbit configuration.

Whether to enable VSCode editor.

Whether to enable nix-index, a file database for nixpkgs.

Configure zsh options

The rule statement configures a GNU Rush rule

The slock package to use.

The labwc package to use.

The iotop package to use.

The gnupg package to use.

The msmtp package to use.

The vivid package to use.

Whether to enable a setcap wrapper for cnping.

Whether to enable GPaste, a clipboard manager.

Whether to enable sysdig, a tracing tool.

Whether to enable DankMaterialShell, a complete desktop shell for Wayland compositors.

Whether to enable periodic garbage collection with nh clean all.

Shell script code called during zsh login shell initialisation.

Whether to enable the hiding of direnv logging .

Whenever to configure tmux system-wide.

Extra text added to the end of /etc/xonsh/xonshrc, the system-wide control file for xonsh.

Whether to enable Xastir Graphical APRS client.

Whether to enable Setcap for TUN Mode

Whether to enable Thunar, the Xfce file manager.

Whether to enable Evince, the GNOME document viewer.

Whether to enable trippy, a network diagnostic tool.

Whether to enable screen, a basic terminal multiplexer.

List of oh-my-zsh plugins

The oh-my-zsh package to use.

Whether to install Light backlight control command and udev rules granting access to members of the "video" group.

Path to a custom oh-my-zsh package to override config of oh-my-zsh. (Can't be used along with customPkgs).

The ente-auth package to use.

Whether to enable udevil, to mount filesystems without password.

Whether to enable Xfconf, the Xfce configuration storage system.

Whether to enable Throne, a GUI proxy configuration manager.

List of custom packages that should be loaded into oh-my-zsh.

Automatically spawn a session if trying to attach and none are running.

Additional contents of /etc/tmux.conf, to be run after sourcing plugins.

Group which users must be in to use ydotool.

Additional arguments to be passed to cage.

Whether to enable zoxide, a smarter cd command that learns your habits.

Shell script code called during login bash shell initialisation.

Shell script code called during fish login shell initialisation.

Whether to enable Clash Verge.

The dms-shell package to use.

DMS Plugins to install and enable

The nix-index package to use.

Whether to enable wayvnc, VNC server for wlroots based Wayland compositors.

Whether to enable Ghidra, a software reverse engineering (SRE) suite of tools.

Configuration included in $YAZI_CONFIG_HOME.

Whether to configure zsh as an interactive shell

A list of paths to NNCP configuration files that should not be in the Nix store

Size of the font to use for regreet.

Name of the font to use for regreet.

Whether to enable nm-applet, a NetworkManager control applet for GNOME.

CSS Stylesheet for gtklock

Options given to nh clean when the service is run automatically

Whether to enable usbtop and required kernel module, to show estimated USB bandwidth.

Whether to enable CCache, a compiler cache for fast recompilation of C/C++ code.

Defines new command keys.

Parameters to be written to the system-wide bat configuration file.

Number of lines/columns when resizing.

The throne package to use.

The wayvnc package to use.

Whether to enable autoenv.

The pmount package to use.

The evince package to use.

The ghidra package to use.

The winbox package to use.

The weylus package to use.

The nixbit package to use.

The screen package to use.

The waybar package to use.

The zoxide package to use.

Whether to enable Clash Verge auto launch.

The direnv package to use.

Whether to enable weylus, which turns your smart phone into a graphic tablet/touch screen for your computer.

Whether to enable CFS Zen Tweaks.

Whether to enable waybar, a highly customizable Wayland bar for Sway and Wlroots based compositors.

Parameters to be written to /etc/atoprc.

The xonsh package to use

Path to lesskey configuration file.

configFile takes precedence over commands, clearDefaultCommands, lineEditingKeys, and envVariables.

Whenever to configure Bash as an interactive shell

List of thunar plugins to install.

Whether to automatically use angrr before loading .envrc.

Enable Python 3 provider.

The neovim-unwrapped package to use.

Reverse the window split shortcuts.

Allow non-root users to specify the allow_other or allow_root mount options, see mount.fuse3(8).

Ctrl following by this key is used as the main shortcut.

Whether to enable blesh, a full-featured line editor written in pure Bash.

Whether to enable Mediated Device Management.

Set of files that have to be linked in runtime.

Whether to enable the Firefox web browser.

Enable extra colors in directory listings (used by ls and tree).

Whether to enable File Roller, an archive manager for GNOME.

Whether to enable Free and open source software for video recording and live streaming.

thefuck needs an alias to be configured

Optional OBS plugins.

Whether to enable schroot, a lightweight virtualisation tool.

How long to keep the private keys in memory

Whether to enable extra colors in directory listings.

Maximum number of lines held in window history.

Extra configuration text prepended to ssh_config

Whether to start the OpenSSH agent when you log in

Whether to enable pmount, a tool that allows normal users to mount removable devices without requiring root privileges .

Name of the theme to use for regreet.

Defines new line-editing keys.

Whether to enable The AmneziaVPN client.

Whether to enable nekoray, a GUI proxy configuration manager.

Whether to enable Bazecor, the graphical configurator for Dygma Products.

The obs-studio package to use.

Whether to enable Wayfire, a wayland compositor based on wlroots.

Whether to enable gtklock, a GTK-based lockscreen for Wayland.

Whether to enable loading direnv in nix-shell nix shell or nix develop .

Whether to install dependencies required for VPN widgets

Enables GnuPG agent with socket-activation for every user session.

Shell commands executed before the oh-my-zsh is loaded

Use minimal one-liner prompt.

Whether to add wavemon to the global environment and configure a setcap wrapper for it.

Whether to enable thefuck, an app which corrects your previous console command.

Whether to install SpaceFM and create /etc/spacefm/spacefm.conf.

Whether to enable vim as the default editor.

Whether to enable lazygit, a simple terminal UI for git commands.

Store tmux socket under /run, which is more secure than /tmp, but as a downside it doesn't survive user logout.

Whether to enable the AppGate SDP VPN client.

Whether to enable Mininet, an emulator for rapid prototyping of Software Defined Networks.

Whether to enable TUN mode of Throne.

Whether to enable dsearch, a fast filesystem search service with fuzzy matching.

Configuration for gtklock

Network configuration

Whether to enable ydotoold system service and ydotool for members of programs.ydotool.group. .

The vscode package to use

The file-roller package to use.

Extra lines to add to the msmtp configuration verbatim

Whether to configure a setcap wrapper for tcpdump

Set of aliases for zsh shell, which overrides environment.shellAliases

Configuration included in vfs.toml

To enable stylus and multi-touch support, the user you're going to use must be added to this list

Files containing SSH host keys to set as global known hosts. /etc/ssh/ssh_known_hosts (which is generated by programs.ssh.knownHosts) is always included.

This configuration key contains the effective text of the client system-options file "dsm.sys"

The nekoray package to use.

The bazecor package to use.

The oddjob package to use.

The minipro package to use.

The dsearch package to use.

The autoenv package to use.

The wayfire package to use.

The schroot package to use.

gtklock modules to load.

The regreet package to use.

The gtklock package to use.

The lazygit package to use.

Whether to enable angrr direnv integration.

Whether to automatically open the necessary ports in the firewall.

Whether to enable Nautilus as file-chooser for xdg-desktop-portal-gnome.

Set the $TERM variable

Whether to enable automatically sourcing git-prompt.sh

Extra CSS rules to apply on top of the GTK theme

Whether to enable CPU Energy Meter.

Whether to enable PQoS Wrapper for BenchExec.

Whether to set the system sendmail to msmtp's.

Additional command-line arguments to pass to xss-lock.

Whether to enable Sway, the i3-compatible tiling Wayland compositor

Whether to enable the openvpn3 client.

Before less opens a file, it first gives your input preprocessor a chance to modify the way the contents of the file are displayed.

Whether to open the default ports in the firewall for the ALVR server.

Whether to enable liboping.

Whether to enable kbdlight.

Whether to enable immersed.

Whether to enable envision.

Locker to be used with xsslock

Whether to enable autojump.

Whether to enable oddjob, a D-Bus service which runs odd jobs on behalf of client applications.

Source of the plugin package or path

A list of packages which provide dconf profiles and databases in /etc/dconf.

Extra bat scripts to be added to the system configuration.

Whether to enable zsh-autoenv.

Settings on what to generate

Whether to enable k3b, the KDE disk burning application

Whether to enable DroidCam client.

Whether to enable direnv integration

Arguments passed to GameScope on startup.

Install and setup the Java development kit.

Set of aliases for bash shell, which overrides environment.shellAliases

Configuration included in yazi.toml

Set of aliases for fish shell, which overrides environment.shellAliases

Default values applied to all accounts

Absolute path to programs.sqlite

Whether to enable IBM Storage Protect (Tivoli Storage Manager, TSM) client command line applications with a client system-options file "dsm.sys" .

Name of the icon theme to use for regreet.

Additional plugins to use with the wayfire window manager.

The wrapped direnv package.

Whether to enable minipro and its udev rules

The set of system-wide known SSH hosts

Miriway's config

Command line arguments passed to launch Sway

Whether to enable the Ladybird web browser.

The contents of /etc/screenrc file

Default environment variables available to the GameScope process, overridable at runtime.

Whether to enable the Starship shell prompt.

Extra global default configuration for htop which is read on first startup only

Configuration for foot terminal emulator

The amnezia-vpn package to use.

Whether to enable Service Mode.

Whether to enable Neovim

Whether to enable sedutil, to manage self encrypting drives that conform to the Trusted Computing Group OPAL 2.0 SSC specification.

Defines environment variables.

Whether to enable ecryptfs setuid mount wrappers.

Attrset of dconf profiles

Whether to enable firejail, a sandboxing tool for Linux.

Whether to enable virt-manager, an UI for managing virtual machines in libvirt.

Direnv configuration

Whether to configure system to use gphoto2

Text of the file.

Configuration to write to /etc/gitconfig

The tsm-client package to use

Whether to enable sniffnet, a network traffic monitor application.

Whether to enable GameMode to optimise system performance on demand.

The xppen_4 package to use

The Steam package to use

Whether to enable TUN mode of nekoray.

Whether to enable sharing, a CLI tool for sharing files

The i3lock package to use. ::: {.note} The i3lock package must include a i3lock file or link in its out directory in order for the u2fSupport option to work correctly. :::

Whether to enable Whether to enable the corefreq daemon and kernel module.

The virt-manager package to use.

The pqos-wrapper package to use.

Whether to install the image analyzer.

Whether to install and enable the atopgpud daemon to get information about NVIDIA gpus.

Libraries that automatically become available to all programs

Nix top-level packages to be compiled using CCache

Configuration included in theme.toml

The openvpn3 package to use.

Whether to enable Haguichi, a Linux GUI frontend to the proprietary LogMeIn Hamachi.

Whether to enable appimage-run wrapper script for executing appimages on NixOS.

Whether to set the path to xauth for X11-forwarded connections

Whether to enable hyprlock, Hyprland's GPU-accelerated screen locking utility.

The cpu-energy-meter package to use.

Additional packages to add to the Steam environment.

Whether to enable river-classic, a dynamic tiling Wayland compositor.

Which package to use for netatop.

Whether to enable iio-hyprland and iio-sensor-proxy.

Whether to configure SSH_ASKPASS in the environment.

pay-respects needs an alias to be configured

Whether to enable Xwayland (an X server for interfacing X11 apps with the Wayland protocol).

Whether to enable binfmt registration to run appimages via appimage-run seamlessly.

The immersed package to use.

The flashrom package to use.

The corefreq package to use.

The Xwayland package to use.

The envision package to use.

The hyprlock package to use.

The starship package to use.

Xontribs and extra Python packages to be available in xonsh.

The river package to use

The zsh-autoenv package to use.

Whether to enable Seahorse, a GNOME application for managing encryption keys and passwords in the GNOME Keyring.

Extra packages to be installed system wide

Whether to enable policies for chromium based browsers like Chromium, Google Chrome or Brave.

The clash-verge package to use

Whether to enable XWayland.

Group assigned to the device when connected.

The appimage-run package to use.

Custom configuration profiles for schroot.

The string that will be used for the NH_FLAKE environment variable.

NH_FLAKE is used by nh as the default flake for performing actions, such as nh os switch

Log service configuration

The order of the sections in programs.rust-motd.settings

Whether to enable pay-respects, an app which corrects your previous console command.

NNCP configuration, see http://www.nncpgo.org/Configuration.html

This option effectively allows adding setuid/setgid bits, capabilities, changing file ownership and permissions of a program without directly modifying it

Presets files to be merged with settings in order.

Lazygit configuration

Installs flashrom and configures udev rules for programmers used by flashrom

The mouse-actions package to use.

Whether to enable DankMaterialShell systemd startup service.

The package that provides the font given in the name option.

Add cap_sys_nice capability to the GameScope binary so that it may renice itself.

Whether to enable Load the extest library into Steam, to translate X11 input events to uinput events (e.g. for using Steam Input on Wayland) .

Whether to enable cardboard.

Whether to enable Chrysalis.

Whether to enable BenchExec.

ReGreet configuration file

Whether to install and enable the netatop kernel module

The iio-hyprland package to use.

Whether to enable FCast Receiver.

Whether to enable GNOME Terminal.

The pay-respects package to use.

Configuration included in keymap.toml

Whether to let openssh print the result when entering a new ssh-session

Name of the cursor theme to use for regreet.

Enables GnuPG network certificate management daemon with socket-activation for every user session.

The sway package to use

Whether to enable pulseview, a sigrok GUI.

The ryzen-monitor-ng package to use.

Whether to enable this plugin

Whether to enable the atop service responsible for storing statistics for long-term analysis.

Schroot configuration settings

Extra lines to append to the sourced direnvrc

Whether to enable a faster, persistent implementation of use_nix and use_flake, to replace the builtin one .

Whether to enable XWayland.

Whether to install and set up mouse-actions and it's udev rules

Whether rog-control-center should be started automatically.

Whether to enable the rog-control-center application.

The corectrl package to use

When enabled, configures VSCode to be the default editor using the EDITOR environment variable.

Whether to enable the Plotinus GTK 3 plugin

The nix-direnv package to use

Whether to start a user service to run mouse-actions on startup.

Whether to open ports for the MikroTik Neighbor Discovery protocol

The systemd target that will automatically start the Waybar service.

Whether to enable K40-Whisperer.

Whether to enable quark-goldleaf with udev rules applied.

Install systemtap along with necessary kernel options.

The package that provides the theme given in the name option.

Whether fish should source configuration snippets provided by other packages.

Specifies the available KEX (Key Exchange) algorithms.

Enable execution of compinit call for all interactive zsh shells

Path of the source file.

Whether to add bandwhich to the global environment and configure a setcap wrapper for it.

Whether to enable Nexttrace to the global environment and configure a setcap wrapper for it.

Whether to enable gamescope, the SteamOS session compositing window manager.

When enabled, installs neovim and configures neovim to be the default editor using the EDITOR environment variable.

Whether to enable CoreCtrl, a tool to overclock amd graphics cards and processors

Whether to enable yubikey-manager.

Arguments to pass to Firefox wrapper

If enabled, the configured environment will be translated to native fish using babelfish

Configuration for /etc/gnupg/gpg-agent.conf

Whether to enable setting suid bit for throne-core to run as root, which is less secure than default setcap method but closer to upstream assumptions

Whether to enable FLEXOPTIX app + udev rules.

Whether to enable localsend, an open source cross-platform alternative to AirDrop.

The hyprland package to use

Whether to enable libutempter for mosh

Plugins for Evolution.

Whether to enable libutempter for tmux

Whether to enable ns-usbloader application with udev rules applied.

Name of symlink

Whether to enable configuring flashprog udev rules and installing flashprog as system package .

Extra chromium policy options

The cardboard package to use.

The nexttrace package to use.

The dmrconfig package to use.

The wshowkeys package to use.

The Chrysalis package to use.

The flashprog package to use.

The localsend package to use.

The benchexec package to use.

The feedbackd package to use.

The gamescope package to use.

The language packs to install.

Extra packages to be installed system wide

The wireshark-cli package to use.

The fcast-receiver package to use.

Whether to enable systemd's ssh proxy plugin

Enable ReGreet, a clean and customizable greeter for greetd

Whether to enable the atop-rotate timer, which restarts the atop service daily to make sure the data files are rotate.

Whether to enable syntax highlight for various languages.

Enable extra socket for GnuPG agent.

Whether to use indicator instead of status icon

The system-wide spacefm configuration

The full path to a program of your choosing which performs the bootloader installation process

Whether to enable systemd user service for dsearch.

Configuration included in starship.toml

The public key data for the host

Whether to enable fuzzy completion with fzf.

The package that provides the icon theme given in the name option.

Whether to enable Evolution, a Personal information management application that provides integrated mail, calendaring and address book functionality.

Whether to enable CAP_SYS_NICE on gamemoded to support lowering process niceness.

Whether to enable the feedbackd D-BUS service and udev rules

Specifies the key lib.types that will be used for public key authentication.

The flexoptix-app package to use.

The k40-whisperer package to use.

AutoConfig files can be used to set and lock preferences that are not covered by the policies.json for Mac and Linux

Whether to enable AusweisApp.

Whether to enable Goldwarden.

Whether to enable kubeswitch.

List of extensions to install.

A list of additional host names and/or IP numbers used for accessing the host's ssh service

Whether this runtime directory should be generated

The systemd target that will automatically start the DankMaterialShell service

Whether to enable setting suid bit for nekobox_core to run as root, which is less secure than default setcap method but closer to upstream assumptions

the listen address for the SOCKS5 proxy server

Whether to enable the 1Password CLI tool.

The yubikey-manager package to use.

Git repository URL for Nixbit

The shell (/bin/sh) command executed to obtain the DHCP DNS server address

The captive-browser package to use.

Whether to enable fzf keybindings.

Packages providing GDK-Pixbuf modules, for cache generation.

Shell commands executed just before dwl is started.

Font packages to use in Steam

Specifies the host key algorithms that the client wants to use in order of preference.

Whether to configure a setcap wrapper for traceroute.

Whether to enable Goldwarden's SSH Agent.

Whether to enable fuzzy completion with skim.

Default font path

Whether to enable streamdeck-ui.

Force creation of autostart desktop entry when application starts

Whether to enable Hyprland, the dynamic tiling Wayland compositor that doesn't sacrifice on its looks

Whether to enable Miriway, a Mir based Wayland compositor

A comma-separated list of capability clauses to be given to the wrapper program

Whether to enable wshowkeys (displays keypresses on screen on supported Wayland compositors)

Generate your init file from your list of plugins and custom commands

Whether to enable Expose extra paths to the sandbox depending on derivations' requiredSystemFeatures.

Whether streamdeck-ui should be started automatically.

Whether to enable the 1Password GUI application.

Whether to enable captive browser, a dedicated Chrome instance to log into captive portals without messing with DNS settings.

A pattern-list of acceptable paths for PKCS#11 shared libraries that may be used with the -s option to ssh-add.

Whether to enable XWayland.

Whether to enable skim keybindings.

Whether to enable the default ports in the firewall for the WiVRn server.

Whether to install gpu-screen-recorder and generate setcap wrappers for promptless recording.

Users that intend to use BenchExec

Whether to enable the wrapGAppsHook wrapper to execute sway with required environment variables for GTK applications.

A list of host names and/or IP numbers used for accessing the host's ssh service

Whether to add nethoscope to the global environment and configure a setcap wrapper for it.

Whether to enable projecteur, an application for the Logitech Spotlight device (and similar).

System-wide configuration for GameMode (/etc/gamemode.ini)

Whether to enable Enable pure SSH transfer in server side by adding git-lfs-transfer to environment.systemPackages.

Open ports in the firewall for Steam Remote Play.

Additional contents of /etc/tmux.conf, to be run before sourcing plugins.

Launch Hyprland with the UWSM (Universal Wayland Session Manager) session manager

Enable zsh completion for all interactive zsh shells.

Whether to enable Blazingly fast general purpose fuzzy finder TUI.

The gpu-screen-recorder package to use.

Whether to enable uwsm, which wraps standalone Wayland compositors with a set of Systemd units on the fly

The 1Password CLI package to use.

Whether to enable noisetorch (+ setcap wrapper), a virtual microphone device with noise suppression.

Interval in which the motd(5) file is refreshed

The projecteur package to use.

The noisetorch package to use.

The soundmodem package to use.

The goldwarden package to use.

The kubeswitch package to use.

The television package to use.

Specify the program to run to talk to this UPS. apcsmart, bestups, and sec are some examples.

The feedbackd-device-themes package to use.

Whether to add Soundmodem to the global environment and configure a wrapper for 'soundmodemconfig' for users in the 'soundmodem' group.

The kdeconnect-kde package to use.

Users to be added to the idevice group.

Whether to enable system-config-printer, a Graphical user interface for CUPS administration.

Whether to enable extra-container, a tool for running declarative NixOS containers without host system rebuilds .

The package that provides the cursor theme given in the name option.

TCP port of the IBM TSM server

Firefox package to use.

The streamdeck-ui package to use.

The 1Password GUI package to use.

Run a GameScope driven Steam session from your display-manager

Resize the window to the size of the smallest session for which it is the current window.

The percentage value by which to increase/decrease brightness.

Enable browser socket for GnuPG agent.

Setup of xfs_quota projects

Whether to add Wireshark to the global environment and create a 'wireshark' group

Whether to enable the base wrapper to execute extra session commands and prepend a dbus-run-session to the sway command.

Shell commands executed just before Sway is started

The river-classic package to use

Installs and sets up the v4l2loopback kernel module, necessary for OBS to start a virtual camera.

Whether to request X11 forwarding on outgoing connections by default

Enable compatibility with bash's programmable completion system.

Named accounts and their respective configurations

Whether to use components requiring unfree dependencies

Whether to enable Bash completion for all interactive bash shells.

Clear all default commands

Whether to enable XWayland.

The systemd target that will automatically start the dsearch service

Project ID.

Whether to install a setuid wrapper for Atop

Whether to enable Zsh integration for VTE terminals

The name of the command to use

Environmental variables to be passed to GameScope for the session.

Proxy DNS requests - no leak for DNS data.

Initial preferences are used to configure the browser for the first run

Whether to enable KDE Partition Manager.

Whether to enable yubikey-touch-detector.

AutoConfig files can be used to set and lock preferences that are not covered by the policies.json for Mac and Linux

Whether to enable XWayland.

Whether to enable proxychains configuration.

The tsm-client package to use

Server definitions ("stanzas") for the client system-options file

Whether to enable notifications when long-running terminal commands complete.

Arguments to be passed to GameScope for the session.

Whether to enable Thunderbird mail client.

Whether to enable opening the firewall port 53317 for receiving files.

Target node name on the IBM TSM server.

This public key is an SSH certificate authority, rather than an individual host's key.

Enable SSH agent support in GnuPG agent

Connection read time-out in milliseconds.

Whether to enable notification sounds when long-running terminal commands complete.

Whether to enable Bash integration for VTE terminals

Whether to enable Browserpass native messaging host.

Whether to enable Quiet mode (no output from the library).

Options stored in /etc/openvpn3/netcfg.json configuration file

A file in the format described in fstab(5), used to mount filesystems inside the chroot

The bash-completion package to use.

Project directory.

Extra packages to be used as compatibility tools for Steam on Linux

Whether to enable iDescriptor, a cross-platform iDevice management tool.

Whether to install dependencies required for dynamic theming support

The partitionmanager package to use.

Enables verbose logging

The xdg-desktop-portal-hyprland package to use

Whether fish should autoload fish functions provided by other packages.

Whether to enable location detection via gpsd

Whether to install Singularity/Apptainer with system-level overriding such as SUID support.

Whether to enable git-worktree-switcher, switch between git worktrees with speed..

Extra packages to be installed system wide

Whether interactive shells should show which Nix package (if any) provides a missing command

Whether to enable dublin-traceroute (including setcap wrapper).

The idescriptor package to use.

Proxies to be used by proxychains.

The proxychains package to use.

Whether to enable kdeconnect

The singularity package to use.

The thunderbird package to use.

Whether to enable bash completions for xonsh.

Wrap the binaries in firejail and place them in the global path.

Whether to enable miracle-wm, a tiling Mir based Wayland compositor

Whether to enable nautilus-open-any-terminal.

Number of seconds it would take for a command to be considered long-running.

Whether to install dependencies required for calendar events support

Shell script code called during interactive zsh shell initialisation.

The path to the public key file for the host

your public network interface (wlp3s0, wlan0, eth0, ...)

Whether to enable the SUID support of Singularity/Apptainer.

The git-worktree-switcher package to use.

A comma-separated list of capability clauses to be given to the wrapper program

Whether to enable the atopacct service which manages process accounting

The quickshell package to use.

Whether to allow users in the 'wireshark' group to capture USB traffic

Whether to enable foot zsh integration.

Allow changes to the program config made by the program to persist between restarts

Shell script code called during interactive bash shell initialisation.

Shell script code called during interactive fish shell initialisation.

The dublin-traceroute package to use.

If set to true, yubikey-touch-detector will send notifications to a unix socket

Text lines with include.* and exclude.* directives to be used when sending files to the IBM TSM server, or an absolute path pointing to a file with such lines.

Arguments to be passed to Steam for the session.

Whether to enable GameScope Session.

List of rules to be added to /etc/xdg/pay-respects/rules. pay-respects will read the contents of these generated rules to recommend command corrections

Whether to allow users in the 'wireshark' group to capture network traffic

Chromium default homepage

Group policies to install

List of extra arguments (such as --add-flags -v) to pass to the hook's wrapper

The bash-completion package to use.

Chain length for random chain.

Whether to enable foot fish integration.

Whether to enable foot bash integration.

Options stored in /etc/openvpn3/log-service.json configuration file

Whether to install dependencies required for pasting directly from the clipboard history support

Whether to restart the dms.service when the DankMaterialShell package or configuration changes

Whether to enable ryzen_monitor_ng, a userspace application for setting and getting Ryzen SMU (System Management Unit) parameters via the ryzen_smu kernel driver

Whether to enable location detection via geoclue

Whether to open the required firewall ports for the Smartphone as Card Reader (SaC) functionality of AusweisApp.

Whether to enable Zsh integration.

Whether to enable automatic client password generation

Connection time-out in milliseconds.

By default enable localnet for loopback address ranges.

Whether to enable fx_cast support.

Proxy type.

Proxy port

Whether to enable Fish integration.

Whether to enable Bash integration.

Whether to enable Zsh integration.

Whether to enable Zsh integration .

Arguments to be passed to OpenGamepadUI

Set environment path of systemd to include the current system's bin directory

Binds captive-browser to the network interface declared in cfg.interface

Proxy host or IP address.

Hard limit of the project size.

Soft limit of the project size

Whether to install dependencies required for audio wavelength visualization

Additional packages to generate completions from, if programs.fish.generateCompletions is enabled.

Whether to enable Bash integration.

Whether to enable Fish integration.

Whether to enable Bash integration .

Whether to enable Fish integration .

XFS filesystem hosting the xfs_quota project.

Override the hjkl and HJKL bindings for pane navigation and resizing in VI mode.

The default locale

A list of files to copy into the chroot from the host system.

Whether to enable generating completion files from man pages.

A list of users who should be able to integrate 1Password with polkit-based authentication mechanisms.

Whether to enable Xonsh integration.

Whether to enable Xonsh integration .

The hook config, describing which paths to mount for which system features

Local name of the IBM TSM server, must not contain space or more than 64 chars.

Whether to enable PassFF support.

Whether to enable JabRef support.

Whether to enable ff2mpv support.

Open ports in the firewall for Source Dedicated Server.

OpenAFS programs package

Whether to install dependencies required for system monitoring widgets

The terminal emulator to add to context-entry of nautilus

Configuration for UWSM-managed Wayland Compositors

Whether to enable starship only when the shell is interactive

Whether to enable opengamepadui.

Whether fish should use completion files provided by other packages.

Set the class A subnet number to use for the internal remote DNS mapping, uses the reserved 224.x.x.x range by default.

Whether to enable this proxy.

If set to true, yubikey-touch-detctor will send notifications using libnotify

Group policies to install

Whether to enable CoolerControl GUI & its background services.

Which pinentry package to use

The protontricks package to use.

Specifies a program to be used to look up the user's public keys

Whether to enable protontricks, a simple wrapper for running Winetricks commands for Proton-enabled games.

Installs the Digital Bitbox application and enables the complementary hardware module.

If multiple server stanzas are declared with programs.tsmClient.servers, this option may be used to name a default server stanza that IBM TSM uses in the absence of a user-defined dsm.opt file

Whether to enable Web eID support.

Directory that holds the TSM node's password information.

List of chromium extensions to install

The OpenGamepadUI package to use.

Whether to enable zsh-syntax-highlighting.

(Extra) system-wide /**/bin paths for Apptainer/Singularity to find command-line utilities in.

"/run/wrappers/bin" is included by default to make utilities with SUID bit set available to Apptainer/Singularity

The shell (/bin/sh) command executed once the proxy starts

Extra command-line arguments pass to to the compsitor.

Whether to enable Zeyple, an utility program to automatically encrypt outgoing emails with GPG.

Fish code composing the body of the starship_transient_prompt_func function

Chromium default search provider url.

Use systemd-journald

Fish code composing the body of the starship_transient_rprompt_func function

Enable NVIDIA GPU controls for a device by index

Preferences to set from about:config

Whether to enable Bukubrow support.

Enable the default search provider.

The full name of the desktop entry file.

A list of glob patterns, indicating which paths to expose to the sandbox

The digitalbitbox package to use

Specifies custom styles to be highlighted by zsh-syntax-highlighting

The comment field of the desktop entry file.

The status of firefox.preferences.

status can assume the following values:

• "default": Preferences appear as default.
• "locked": Preferences appear as default and can't be changed.
• "user": Preferences appear as changed.
• "clear": Value has no effect

Whether to enable qgroundcontrol.

Whether to enable the --fakeroot support of Singularity/Apptainer

Chromium default search provider url for suggestions.

Additional packages containing native messaging hosts that should be made available to Firefox extensions.

The group of the wrapper program.

The owner of the wrapper program.

How verbose should the logging be

The minimum authorized brightness value, e.g. to avoid the display going dark.

Whether to enable brightness control with keyboard keys

dynamic - Each connection will be done via chained proxies all proxies chained in the order as they appear in the list at least one proxy must be online to play in chain (dead proxies are skipped) otherwise EINTR is returned to the app.

strict - Each connection will be done via chained proxies all proxies chained in the order as they appear in the list all proxies must be online to play in chain otherwise EINTR is returned to the app.

random - Each connection will be done via random proxy (or proxy chain, see programs.proxychains.chain.length) from the list.

Add timestamp log file

Open ports in the firewall for Steam Local Network Game Transfers.

The program to execute to start systemd.

The wayland-compositor binary path that will be called by UWSM

Whether to enable Tridactyl support.

Whether to enable GSConnect support.

Enable support for Nvidia GPUs.

The qgroundcontrol package to use.

Whether to enable Starship's transient prompt feature in fish shells

Open ports needed for the functionality of the program.

Preferences to set from about:config

Whether to enable Zsh integration.

Additional packages to add to the OpenGamepadUI environment.

Whether to enable Bash integration.

Whether to enable Fish integration.

Whether to enable Declare the support for derivations that require an Nvidia GPU to be available, e.g. derivations with requiredSystemFeatures = [ "cuda" ]

Specifies custom patterns to be highlighted by zsh-syntax-highlighting

The nextcloud-occ program preconfigured to target this Nextcloud instance.

The absolute path to the program to be wrapped.

Which requiredSystemFeatures should trigger relaxation of the sandbox

Whether to fetch suggestions asynchronously

System databases (as described in /etc/nsswitch.conf on GNU/Linux systems) to copy into the chroot from the host.

Whether to add the setuid bit the wrapper program.

Whether to add the setgid bit the wrapper program.

Whether to enable Uget Integrator support.

Whether to enable zsh-autosuggestions.

Whether to use top-level directories as LOCALSTATEDIR instead of the store path ones

Whether to enable Native Messaging Host for Plasma Browser Integration.

Font packages to use in OpenGamepadUI

Whether to set up NixOS such that TurboVNC's built-in software OpenGL implementation works

Whether to enable Browserpass support.

The plasma-browser-integration package to use.

Whether to enable the uptime monitoring program web service.

This option provides access to the overridden result of programs.singularity.package

Run a GameScope driven OpenGamepadUI session from your display-manager

Attribute set with additional configuration values

Make Memtest86+, a memory testing program, available from the GRUB boot menu.

This option defines the PAM services

Whether to enable StreamController.

Environmental variables to be passed to GameScope for the session.

Arguments to be passed to GameScope for the session.

This allows you to pass arguments to the child program

Path of the program that implements the service.

The status of thunderbird.preferences.

status can assume the following values:

• "default": Preferences appear as default.
• "locked": Preferences appear as default and can't be changed.
• "user": Preferences appear as changed.
• "clear": Value has no effect

The StreamController package to use

Whether to enable pay-respects' LLM integration

Extra command line arguments to pass to the program.

Whether to enable GameScope Session.

Command-line arguments for the server program.

If enabled, a Fontconfig configuration file will be built pointing to a set of default fonts

Whether to enable Instructs the hook to mount the symlink targets as well, when any of the paths contain symlinks

Flags to append to the program call

Specifies the highlighters to be used by zsh-syntax-highlighting

Highlight style for suggestions ({fore,back}ground color)

Whether to enable thinkfan, a fan control program.

Path to sendmail program

Whether to enable Run InputPlumber service for input management and gamepad configuration. .

Whether to enable Run PowerStation service for TDP control and performance settings. .

Host/domain name or IP address of the IBM TSM server.

The owner of the wrapper program.

The group of the wrapper program.

Make Memtest86+ available from the systemd-boot menu

Attrset that is converted and passed as config file

Whether the service is chrooted to have only access to the services.postfix.queueDir and the closure of store paths specified by the program option.

'Static' authentication secret value (a string) for TURN REST API only

ZSH_AUTOSUGGEST_STRATEGY is an array that specifies how suggestions should be generated

The absolute path to the program to be wrapped.

Disallow ModemManager from interfering with serial connections that QGroundControl might use

A program name specifying a Postfix service/daemon process

The default capture device (i.e. microphone)

Whether to add the setuid bit the wrapper program.

Whether to add the setgid bit the wrapper program.

Configuration for sitespeed-io, see https://www.sitespeed.io/documentation/sitespeed.io/configuration/ for available options

Whether to use systemd-resolved integration

The default playback device

Program to run for sound output.

Backup the stdout of this program instead of filesystem paths

Add D-Bus details in log file/syslog

Whether the service is chrooted to have only access to the services.postfix.queueDir and the closure of store paths specified by the program option.

The permissions of the wrapper program

A program name specifying a Postfix service/daemon process

Run this program in a single process mode for debugging purpose

The compressor to use on the initrd image

User to run the program.

The program to make available as /bin/sh inside the chroot

Additional arguments passed to grub-install

Which program (or internal library) should be used for DHCP.

Program to run for audio input.

External filter program to further filter GC roots matched by this policy.

The permissions of the wrapper program

The interpreter to invoke to run the program

Maximum memory used by the process

(Superseded by uid_attribute) The default program and args to callout to obtain a unique path identifier

Extra command-line arguments pass to the external filter program.

The name-string specifies an external program to be called that will automatically change volumes as required by Bacula

The path to the user's shell

The path to the user's shell

File containing the cluster secret in the format of EnvironmentFile as described by systemd.exec(5)

Whether to enable automatic backups with the IBM Storage Protect (Tivoli Storage Manager, TSM) client

Alias of programs.ssh.knownHosts.

Add AltGr programmation layer like Ergo‑L

Whether to start yubikey-agent when you log in

Whether to enable NNCP TCP synronization daemon

Whether to enable cron'ed NNCP TCP daemon caller

By default, nixos will check that programs

By default, nixos will check that programs

The DankMaterialShell package to use for the greeter

The repository to fetch from

The path to the public key file for the host

If enabled, starts the ArchisSteamFarm service

The Quickshell package to use for the greeter

Whether to enable leaps, a pair programming service.

Sets environment variable NIXOS_XDG_OPEN_USE_PORTAL to 1 This will make xdg-open use the portal to open programs, which resolves bugs involving programs opening inside FHS envs or with unexpected env vars set from wrappers

Whether to enable Nix

Packages added to the PATH environment variable when executing programs from Udev rules.

coreutils, gnu{sed,grep}, util-linux and config.systemd.package are automatically included.

Whether to enable Sandbox for securely executing untrusted programs .

Enable the shadow authentication suite, which provides critical programs such as su, login, passwd

Programs available for use by the vnd.dovecot.pipe extension

Extra packages for btrbk, like compression utilities for stream_compress.

Note: This option will get deprecated in future releases

Whether to enable LDAPS protocol

Configure freetds database entries

A list of files containing trusted root certificates in PEM format

Additional programs to include in the search path of pam_mount

Comma-separated list of fetcher programs that retrieve collectd data.

The path to the xkb compat file

List of eBPF programs to load

Specifies the CLI name of the hardware.nvidia.prime.offload.enableOffloadCmd convenience script for offloading programs to an nvidia device.

Add programs to the buildkite-agent environment

The path to the xkb geometry file

Whether to enable adding a nvidia-offload convenience script to environment.systemPackages for offloading programs to an nvidia device

Whether to enable nftables and use nftables based firewall if enabled. nftables is a Linux-based packet filtering framework intended to replace frameworks like iptables

The Wayland compositor to run the greeter in