Whether the config should be checked at build time

Whether to enable Rosetta support

Signature verification policy file

Name of the user to log in

Use IKE fragmentation (proprietary IKEv1 extension or RFC 7383 IKEv2 fragmentation)

Videobridges use the same XMPP account and need to be distinguished by the nickname (aka resource part of the JID)

The SQL server URI

The default XMPP server description

An attribute set that will be used to substitute variables when building the dashboard

List of addresses and ports to listen on (ListenAddress directive in config)

ESP proposals to offer for the CHILD_SA

Password for default admin password

Netfilter mark applied to packets after the outbound IPsec SA processed them

Set the maximum transmission unit in bytes for the wireguard interface

Set this option to true to enable HTTP compression, this can improve transfer speed and bandwidth utilization

Whenever to use precomputated tables for ElGamal. i2pd defaults to false to save 64M of memory (and looses some performance)

What interface to use for hardware acceleration

HT (High Throughput) capabilities given as a list of flags

These options manage the trade-off between battery charging and CPU performance when the USB-C power supply cannot provide sufficient power for both simultaneously:

• charge_battery prioritizes battery charging (driver default)
• performance prioritizes maximum CPU performance

Whether the user has accepted to submit anonymous usage data

The USBGuard daemon modifies some attributes of controller devices like the default authorization state of new child device instances

Action to perform after loading the configuration.

• The default of none loads the connection only, which then can be manually initiated or used as a responder configuration.
• The value trap installs a trap policy, which triggers the tunnel as soon as matching traffic has been detected.
• The value start initiates the connection actively.
• Since version 5.9.6 two modes above can be combined with trap|start, to immediately initiate a connection for which trap policies have been installed

Use default configuration for the S3 storage backend.

Station MAC address -based authentication

Similar to networking.getaddrinfo.label, but this option defines entries for the precedence table instead

filterBlocks can be defined to blacklist journal messages which are not errors

The maximum charge level to help reduce battery wear:

• high_capacity charges to 100% (driver default)
• balanced charges to 90%
• stationary charges to 80% (maximum lifespan)

Note: Regardless of the configured charging profile, the operating system will always report the battery as being charged to 100%.

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

If enabled, starts the ArchisSteamFarm service

An extra set of filesystem paths that FoundationDB can read to and write from

The default path selector algorithm to use; they are offered by the kernel multipath target

The keyfile which associates this machine with your tarsnap account

A list of notifications to enable and use in your profiles

Specifies the device to use for hardware acceleration.

• cpu: no acceleration just use the CPU
• rocm: supported by modern AMD GPUs
• cuda: supported by modern NVIDIA GPUs
• metal: supported on darwin aarch64 machines

Tabby will try and determine what type of acceleration that is already enabled in your configuration when acceleration = null.

• nixpkgs.config.cudaSupport
• nixpkgs.config.rocmSupport
• if stdenv.hostPlatform.isDarwin && stdenv.hostPlatform.isAarch64

IFF multiple acceleration methods are found to be enabled or if you haven't set either cudaSupport or rocmSupport you will have to specify the device type manually here otherwise it will default to the first from the list above or to cpu.

If set to

• "true": all DNS lookups are DNSSEC-validated locally (excluding LLMNR and Multicast DNS)

Maximum memory used for data storage

Options to be added to config.php, as a nix attribute set

Specifies the password that must be supplied for the default Bacula Console to be authorized

Specifies the password that must be supplied for the default Bacula Console to be authorized

Address to listen on for the web interface, API and telemetry.

null will default to :9091.

This is the default directory to look for statically configured secrets like cluster-join-token.key

Configures the rate limiting burst limit (number of messages per interval) that is applied to all messages generated on the system

Whether to run shellcheck on the generated scripts for systemd units

Discourse site settings

When IPv6 is enabled with SLAAC, this option controls the use of temporary address (aka privacy extensions) on this interface

Path under which to expose metrics.

null will default to /metrics.

Path to the herbstluftwm configuration file

Organization ID, default = 1

ChronyServerAddress of the chrony server side command port. (Not enabled by default.) Defaults to the local unix socket.

Specifies whether the processes of a user should be killed when the user logs out

The URL where the application service is listening for HS requests, from the Matrix HS perspective.# The default value assumes the bridge runs on the same host as the home server, in the same network.

Specifies a file that lists principal names that are accepted for certificate authentication

Whether to run XDG autostart files for sessions without a desktop manager (with only a window manager), these sessions usually don't handle XDG autostart files by default

By default, all networks will get same priority group (0)

Collectors to enable

Clock format string (as expected by strftime, e.g. "%H:%M") to use with the lightdm gtk greeter panel

Which packages Enlightenment should exclude from the default environment

Additional packages or strings with context to add to the closure of the chroot

Configuration for yggdrasil, as a structured Nix attribute set

JWT signing secret

Collectors to enable

Collectors to disable which are enabled by default.

Collectors to enable or disable

Point DOCKER_HOST to rootless Docker instance for normal users by default.

The sort key used for the NixOS bootloader entries

Sets the amdgpu.ppfeaturemask kernel option

The channel in which users will appear in when connecting.

Collectors to disable which are enabled by default.

The content of this attribute is appended to any host name that does not contain a period (except localhost), including defaulthost and idhost

Consul integration options

Separate database URL for the crypto database

Rendering mode of grafana-image-renderer:

• default: Creates on browser-instance per rendering request.
• reusable: One browser instance will be started and reused for each rendering request.
• clustered: allows to precisely configure how many browser-instances are supposed to be used

Whether to overwrite Jellyfin's encoding.xml configuration file on each service start

Override the default search path for man(1), apropos(1), and makewhatis(8)

Custom compositor configuration to use for the greeter session

(Superseded by uid_attribute) The default program and args to callout to obtain a unique path identifier

If true, a backend match requires the frontend connection be TLS encrypted

Collectors to enable

Default instance (unit) priority.

A template for linked manuals (usually via the Xr macro) in HTML output

Strategy used for allocation of IPs to nodes, available options:

• sequential (default): assigns the next free IP from the previous given IP.
• random: assigns the next free IP from a pseudo-random IP generator (crypto/rand).

A string of relative path used as a template for the output path of linked header files (usually via the In macro) in HTML output

Collect and save data from UniFi anomalies to influxdb and Loki.

Collectors to enable or disable

The directory or URI where MPD reads music from

Use preconfigured default streaming options

"bantime.overalljails" (if true) specifies the search of IP in the database will be executed cross over all jails, if false (default), only current jail of the ban IP will be searched.

If enabled, the boot disk of the virtual machine will be formatted and mounted with the default filesystems for testing

Outbound email configuration is mandatory for Firezone and supports many different delivery adapters

By default any user can create an account on this gitea instance

The type of exporter you'd like to use

Define a common behavior for all exception policies

Whether to enable a workaround for document classifier timeouts

Specifies when a server connection can be reused by other clients.

session Server is released back to pool after client disconnects

Options for configuring workers

Organization ID, default = 1.

Specifies the interface(s) passed to the wg show dump parameter

The address Anubis' metrics server listens to

By default, all allowed IPs and subnets are comma-separated in the allowed_ips field

List of connection-tracking helpers that are auto-loaded