These lines go to the end of the location verbatim.

Whether to enable the installation of this Helm chart

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Exclude files and directories matching these patterns.

The nickname for this Jibri instance in the MUC.

Specifies the clear text password for the account

Name of the mute time interval, must be unique

Token lifetime

Username for the scrobble service.

Source ports for the service.

Don't start gpg-agent if it is not running

Whether the application will be allowed access to location information.

Port number to listen on

Path to the built firmware package.

Structural DokuWiki configuration

Set the max number of connected clients at the same time.

If true, the user's shell will be set to users.defaultUserShell.

Create an individual listening socket

Hostname to use

Text of the file.

Adds a return directive, for e.g. redirections.

Use fast/weak handshaking: This reduces the CPU time spent in the initial connection setup, at the expense of losing perfect forward secrecy.

Paths to keyboard devices

The path of Apache's document root directory

The $table_prefix is the value placed in the front of your database tables

Basic Auth password file for a vhost

The end of the port range, inclusive.

Whether to enable HTTPS in addition to plain HTTP

Adds try_files directive.

Adds try_files directive.

Root directory for requests.

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

Adds try_files directive.

vdirsyncer's status path

Either a single port or port range to allow

The password to store inside the credentials file.

IRC server password, such as for a Slack gateway.

Whether to ask Let's Encrypt to sign a certificate for this vhost

Environment variables to add when running the adapter.

Runner-specific command script executed after code is pulled and just after build executes.

Accepted traffic will be forwarded only to this service.

Required number of failures for KO transition.

Required number of successes for OK transition.

Key-value pairs that convey additional parameters about a stream.

Path to firmware config which is generated using klipper-genconf

All actors (users) to provision

An arbitrary list of items such as derivations

An arbitrary list of items such as derivations

A file that contains the server secret for safe session cookies, must be set.

secretKeyFile takes precedence over secretKey

Sync data.

general configuration

Name of the postgresql database

Name of the postgresql database.

Use HTTPS for the tunnel server.

List of groups this person should belong to.

A file containing the password corresponding to database.user.

Add a custom host-to-IP mapping.

Specification of pages to be ignored by web crawlers

Additional names of virtual hosts served by this virtual host configuration.

Per output profile configuration.

Whether to automatically take snapshots.

Whether to enable the HTTP/2 protocol

Additional global flags to pass to all lego commands.

Group under which to run the service

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

IKE identity to expect for authentication round

Advanced options to pass to zfs send

Advanced options to pass to zfs recv

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Section for a certificate candidate to use for authentication

Sync meta data.

URL of a cgit instance

Whether the service should be reloaded during a NixOS configuration switch if its definition has changed

Dynamic configuration for Traefik, written in Nix.

Send empty SSID in beacons and ignore probe request frames that do not specify full SSID, i.e., require stations to know SSID

Create the database and database user locally.

Adds DirectoryIndex directive

Alias directory for requests

Alias directory for requests

Adds DirectoryIndex directive

Whether to ensure that this group is present or absent.

E-mail address of the server administrator.

Whether to enable automatic generation of the defcfg block

Whether to enable HTTPS and reject plain HTTP connections

Directory for the acme challenge which is PUBLIC, don't put certs or keys in here

Select executor, eg. shell, docker, etc

Whether to enable zeroconf discovery.

Whether to automatically prune old snapshots.

Listen addresses and ports for this virtual host

The number of allowed simultaneous connections to the daemon, default 10.

Specify the device name to attach