FastCGI parameters to override

Optional fixed priority for IPsec policies

In case of connection failures, temporarily disable this server. (See sabnzbd's documentation for usage guides).

List of remote selectors to include in CHILD_SA

Time range from which to choose a random value to subtract from rekey_time

Domain of the host to serve davis under

Set the resolver to use for performing recursive DNS queries

Address or CIDR subnets

StrongSwan default: []

Address or CIDR subnets

StrongSwan default: []

Adds a return directive, for e.g. redirections.

Custom headers to send in the upgrade request

UUID of the stratis pool that the fs is located in

This is only relevant if you are using stratis.

Whether to enable this Woodpecker-Agent

Node name.

This option defines the PAM services

Client-server API URL

Ingress rules

Catch-all service if no ingress matches

Port of the remote MQTT broker.

Network name to connect to

Length of the new salt in byte (64 is the effective maximum).

Authentication to perform locally.

• The default pubkey uses public key authentication using a private key associated to a usable certificate.
• psk uses pre-shared key authentication.
• The IKEv1 specific xauth is used for XAuth or Hybrid authentication,
• while the IKEv2 specific eap keyword defines EAP authentication.
• For xauth, a specific backend name may be appended, separated by a dash

Basic Auth protection for a vhost

Whether to add a separate nginx server block that permanently redirects (301) all plain HTTP traffic to HTTPS

Maps kanidm groups to returned oauth scopes

What is the maximum timeout (in seconds) that will be set for job when using this Runner. 0 (default) simply means don't limit

Whether to enable keys to run shell commands.

Opens UDP port in firewall for fedimintd's API Iroh endpoint

Override (NetBIOS) hostname to be used (default hostname).

If this attribute is not included, or if is set to the wildcard address (ff:ff:ff:ff:ff:ff), the entry is available for any station (client) to use

16-bit port for listening

These lines go to the end of the location verbatim.

The language used to to parse words and sentences.

User-visible description for the repository.

Extra command-line options passed to the daemon

Environment for the netbird service, used to pass configuration options.

Environment for the netbird service, used to pass configuration options.

The systemd unit (a service or a target) for other services to depend on if they need to be started after matrix-synapse

Specifies the password hash for the account, generated with grub-mkpasswd-pbkdf2

Whether to enable or disable lingering for this user

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

The redirect URL of the service

User part of the JID.

Reduce memory consumption by a factor of 2 beyond what lowmem does, at the cost of significantly slowing down the archiving process.

Defines the name of the claim that contains the username in the provider's userinfo endpoint

Location of the HTML templates

Time in seconds to wait for the YubiKey.

If this attribute is given, SAE-PK will be enabled for this connection

The store paths to include in the partition.

Port the RPC server will bind to.

Basic Auth password file for a vhost

Number of processes to prefork.

Path to an environment file, containing the TOKEN environment variable, that holds a token to register at the configured Gitea/Forgejo instance.

Description for the zone.

Path to server SSL certificate key.

If this attribute is given, all clients using this entry will get tagged with the given VLAN ID.

Whether this lighthouse node should serve DNS.

List of roles for this stream

The duration in seconds for which the bucket will retain data (0 is infinite).

The list of systemd services to call systemctl try-reload-or-restart on.

Expected hostname for WebUI.

Listen addresses for this virtual host

Peers to connect initially

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

Basic Auth password file for a vhost

The full name of the desktop entry file.

Domain under which ZeroTier records will be available.

Hostaccess variable to pass to updown script

An optional description for resource address, usually a full link to the resource including a schema.

Hostname for either nginx or httpd.

It is recommended you keep your secrets separate from the configuration

Specify the local database filename to store persistent data

Extra config for <StorageHints> section.

The base XMPP domain.

Whether to invert the icmp block handling

Name of the voice model to use

Add programs to the buildkite-agent environment

config.yaml configuration as a Nix attribute set

Modify the systemd service

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Your Authelia config.yml as a Nix attribute set

An IP address or a network IP address with a mask for IPv4 or IPv6

RPC password for JSON-RPC connections

spool directory

file containing the credentials to access the repository, in the format of an EnvironmentFile as described by systemd.exec(5)

JID of the MUC to join

The resulting path of the generated Diffie-Hellman parameters file for other services to reference

DEPRECATED, use driverOptions

By default, nixos will check that programs

These lines go to the end of the location verbatim.