Paths to the Nix profile

List of pluggable transports.

Enables or disables the laptop keyboard's Function (Fn) lock at boot

The public client ID of your Spotify application

Armagetron Advanced server rules configuration

Interval in which the TuneD daemon is waken up and checks for events (in seconds).

Platform type

Lifespan of errored upload tasks.

IP and port to listen on for HTTP requests, in the format of ip:port

Smallest amount in this currency that can be transferred using the underlying RTGS

The filesystem directory to store blocks for the block store.

The filesystem directory to store your table store within.

Defines the base domain to create the hostnames for MagicDNS

The option "enabled" takes 3 values - "yes", "no", "detection-only". "yes" enables both detection and the parser, "no" disables both, and "detection-only" enables protocol detection only (parser disabled).

SQLAlchemy connection string for the database.

Enable or disable the use of the touchscreen.

Path to PostgreSQL listener certificate.

Unprivileged user to drop privileges to.

Defines the name of the claim that contains group memberships or role assignments in the provider's userinfo endpoint

Whether to automatically set up the database on the local DBMS instance

Whether to enable the reapplying of global sysctls after TuneD sysctls are applied.

List of alert rule UIDs that should be deleted.

Secret key used for signing

The maximum number of encoding jobs that EPGStation would run at the same time.

Directory where incomplete downloading files are stored.

Path to the repository

Name that the server presents to clients.

Which provider to use for full text search

Custom query parameters to send with the Authorize Endpoint request.

The URL to the home server for client-server API calls

Host status after agent shutdown.

All settings expressed as an Nix attrset

Email address of FileSender administrator(s)

The type of versioning

Grafana mute timings configuration in Nix

The path the search index will be created in.

Configure OIDC single sign-on providers.

Lock backend to use: 'local' (single instance), 'redis' (distributed), 'postgres' (distributed, requires PostgreSQL)

Path to the output directory for backups.

The preview providers that should be explicitly enabled.

Enable Tandoor Recipes

The database connection string for the libeufin-bank database.

For target type static: List of GRPC targets to connect to for clustering mode.

The SSH listener is reachable via this port externally.

Name to use for the device.

Text used as placeholder text on login page for password input.

Unique identifier for the rule

A list of TURN servers to use

Additional configuration options for fabricmanager.

This may improve forwarded traffic throughput by enabling nftables flowtable

Sets the default UI theme. system matches the user's system theme.

Grafana notification policies configuration in Nix

If set to false the component will only be woken up if it is used

A changegroup script which is installed in every mercurial repo

Defines one or more team names that auto-provisioned OIDC users shall be added to

Defines the name of the claim that contains the username in the provider's userinfo endpoint

Sets the maximum time using a duration format (5s/5m/5ms) before timing out read of an incoming request and closing idle connections. 0 means there is no timeout for reading the request.

Label to the repository

See torrc manual.

Organization ID, default = 1

Whether to send announcements to the local LAN, also use such announcements to find other devices.

If Notifications are enabled and an expiry date is set, warn 5 days before expiry

LiveKit key file holding one or multiple application secrets

The path to the CA certificate to use.

Automatically download and install updates.

Enables InfluxDB on the host system using the services.influxdb2 NixOS module with default options

URL under which the media proxy is publicly acccessible.

Path to the external filter program.

The HTTP listener is reachable via this port externally.

The path to the file containing the value for turn.apikey

The path to the file containing the value for turn.secret

The endpoint of your web application

The URL of your Immich server.

Maximum bandwidth in bytes(!)/sec (supports prefixes)

How to keep changed/deleted files with Syncthing

Sizes of each new level in the compression algorithm, as a comma-separated list

pantalaimon options (enables E2E Encryption support)

When network connectivity to the server is lost, this option configures the time to wait for the connectivity to get restored

Requires libunwind to be available when Suricata is configured and built

Enable anonymous usage data collection, see https://www.navidrome.org/docs/getting-started/insights/ for details.

The endpoint of your server This api has to be reachable from the device you use the website from not from the server

Defines the path to the data directory

Name of the script.

List of domain names intended for local delivery using /etc/passwd and /etc/aliases.

https://www.postfix.org/postconf.5.html#mydestination

Whether to enable provisioning functionality in the agent

Grafana datasource configuration in Nix

Internal identifier of SSO provider.

This is the default directory to look for statically configured secrets like cluster-join-token.key

List of resources to host on this listener.

Free-form configuration for script_exporter, expressed as a Nix attrset and rendered to YAML.

Migration note: The previous format using script = "sleep 5" is no longer supported

Extra commandline arguments for hddfancontrol

Name of the folder the rule group will be stored in

veilid-server will respond to Python and other JSON client requests.

List of mute time intervals to import or update.

Database connection URI.

Database connection URI.

API key to authenticate with a local crowdsec API

Set to false to prohibit users from being able to sign up / create user accounts

Host status after agent startup.

Define a common behavior for all exception policies