Client-side web-app interface settings that override the defaults in interface_config.js

Whether to add Wireshark to the global environment and create a 'wireshark' group

Systemd calendar expression when to check for renewal

Whether to enable udev rules added by input-remapper to handle hotplugged devices

The systemd target that will automatically start the dsearch service

Whether to clear the configuration of the interfaces that were set up in the initrd right before stage 2 takes over

The group to run openvscode-server under

Default settings for lists (list-defaults.yml)

Default lifetime of a session (e.g. login) cookie

If set to false, this unit will be a symlink to /dev/null

By default, nixos will check that programs

A proposal is a set of algorithms

Grants the user, created by the ensureUser attr, login permissions

If the default of yes is used, Mode Config works in pull mode, where the initiator actively requests a virtual IP

An absolute path to an executable to be run for each process killed

MTU size for packets leaving the interface

Whether to enable HTTPS in addition to plain HTTP

Network name for the icecream scheduler

Enables support for IEEE 802.11n (WiFi 4, HT)

What networks are allowed to use us as a resolver

Enables a click method

Files to load suricata-update managed rules, relative to 'default-rule-path'.

Run syncoid at this interval

Declarative configuration of firewall rules

Whether to enable Shorewall IPv6 Firewall.

If set, the MUC rooms will only be accessible to the members by default.

Whether all rooms will be persistent by default: the value of the “persistent” option in the global configuration of each user will be “true”, but the value of each individual room will still default to false

Defines whatever to use an empty string as a default salt

The directory where config.txt and serversettings.json is saved

Open the default ports in the firewall for the media server

Attribute set of environment variables.

https://github.com/Glimesh/broadcast-box#environment-variables

By default we create the sabnzbd configuration read-only, which keeps the nixos configuration as the single source of truth

Neo4j SSL policy for BOLT traffic

The secret used to create cookies

Override default chart values via Nix expressions

This setting configures the default UI language, which must be a supported IETF language tag, such as en-US.

IKE major version to use for connection.

• 1 uses IKEv1 aka ISAKMP,
• 2 uses IKEv2.
• A connection using the default of 0 accepts both IKEv1 and IKEv2 as responder, and initiates the connection actively with IKEv2

Server CoAP listen address

The list of systemd services to call systemctl try-reload-or-restart on.

Whether to enable Howdy and its PAM module for face recognition

The string that will be used for the NH_FLAKE environment variable.

NH_FLAKE is used by nh as the default flake for performing actions, such as nh os switch

Limit how many jobs can be handled concurrently by this service. 0 (default) simply means don't limit.

Chromium default homepage

Whether to run searx in uWSGI as a "vassal", instead of using its built-in HTTP server

If true, a system-wide PipeWire service and socket is enabled allowing all users in the "pipewire" group to use it simultaneously

Whether to enable the Wacom touchscreen/digitizer/tablet

Override default chart values via Nix expressions

Default audio compression method.

Set SCT Error Recovery Control timeout in deciseconds for use in RAID configurations

This defines the system default encryption algorithm for encrypting passwords.

Path to serial port this printer is connected to

How often clamdscan is invoked

Location of the dir with main.css CSS file

The environment file to use when starting Memos.

Log level of the Proton Mail Bridge service

This option defines (see systemd.time for format) when the databases should be dumped

Database host address

Whether to append a minimal default PATH environment variable to the service, containing common system utilities.

Attribute set of lines for the global faxq config file etc/config

Upscale the default X cursor to be more visible on high-density displays

A program name specifying a Postfix service/daemon process

Which LXQt packages to exclude from the default environment

Whether to enable WireGuard.

Which MATE packages to exclude from the default environment

Which packages XFCE should exclude from the default environment

Specifies which users are considered “administrators”, for those actions that require the user to authenticate as an administrator (i.e. have an auth_admin value)

The driver hostapd will use. nl80211 is used with all Linux mac80211 drivers. none is used if building a standalone RADIUS server that does not control any wireless/wired driver

Whether to enable man-db as the default man page viewer.

Videobridge configuration

The server address is of the form: [hostname][:port]

Path to a file that contains the secret to sign web requests using JSON Web Tokens

If set to false, this unit will be a symlink to /dev/null

ZoneMinder can generate quite a lot of data, so in case you don't want to use the default /var/lib/zoneminder, you can override the path here.

The boot entry builder script should be called with exactly one of the following arguments in order to specify its verbosity:

• quiet supresses all messages.

• default adds a simple "Installing Xen Project Hypervisor boot entries...done." message to the script.

• info is the same as default, but it also prints a diff with information on which generations were altered.

  • This option adds two extra dependencies to the script: diffutils and bat.

• debug prints information messages for every single step of the script

Directory for storing certificates to be used by Neo4j for TLS connections

Full (!) list of domains we deliver locally

The amount of time which can elapse after a reboot has been triggered before a watchdog hardware device will automatically reboot the system

Shell code that will be run after all other hooks

Nix daemon process I/O scheduling class

List of binary cache URLs used to obtain pre-built binaries of Nix packages

Configuration for Collabora Online WebSocket Daemon, see https://sdk.collaboraonline.com/docs/installation/Configuration.html, or https://github.com/CollaboraOnline/online/blob/master/coolwsd.xml.in for the default configuration.

The UDP port to open in the firewall

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

Configure the governor used to regulate the frequency of the available CPUs

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

By default pam-u2f module sets the origin to pam://$HOSTNAME

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

Whether to enable nginx virtual host that will serve the javascript application and act as a proxy for the XMPP server

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

Whether to add a separate nginx server block that permanently redirects (301) all plain HTTP traffic to HTTPS

The host name or IP address on which to bind Subsonic

Configuration for Nomad

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

[LEVEL LOW HIGH]

LEVEL is the fan level to use: it can be an integer (0-7 with thinkpad_acpi), "level auto" (to keep the default firmware behavior), "level full-speed" or "level disengaged" (to run the fan as fast as possible)

Do minification on public static files which reduces the size of assets — saving data for the server & users as well as offering a performance improvement

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

Path of a file containing the password for the unifi service user

The group to run Silverbullet under

Whether to add a separate nginx server block that permanently redirects (301) all plain HTTP traffic to HTTPS