config.yaml for evdevremapkeys

Enable automatic generation of account keys

Skydns path of TLS client certificate - public key.

Whether to enable brightness control with keyboard keys

This is a small wrapper over systemd's LoadCredential

Skydns path of TLS certificate authority public key.

Full public URL of gitea server.

Content of the Stubby configuration file

Build veilid-server.conf with nix expression

The string to prefix to keys.

The selector to use for DKIM key identification

Wait for a keystroke before hiding the cursor

Settings for MaryTTS

The group under which NNCP files shall be owned

The length of time to ensure that keys will be correct; no action will be taken to create new keys to be activated after this time.

The public URL of the server, for password reset links.

Servers trusted with signing server keys.

Whether to enable Lightweight selfhosted Firefox Send alternative without public upload.

The config directory, for the access keys and other settings.

Public facing base URL of the service

This setting is required for any of the following features:

• attachments (to return a download URL)
• e-mail sending (for the topic URL in the email footer)
• iOS push notifications for self-hosted servers (to calculate the Firebase poll_request topic)
• Matrix Push Gateway (to validate that the pushkey is correct)

Full public URL of Forgejo server.

By default pam-ussh reads the trusted user CA keys from /etc/ssh/trusted_user_ca

SSH public key allowed to login as user btrbk to run remote backups.

Use Tailscale Funnel to make tsidp available on the public internet so it works with SaaS products.

Whether to enable automatic generation and persistence of keys

Configuration options for the Default Terminal Execution Specification

Load public posts

Which port the sks-keyserver is listening on.

Passkeys required to access the periphery API

SSH keys that should be able to make or push snapshots on this system remotely with btrbk

Public GitLab server URL.

The location of the system persistent storage file

If enabled, pam_gnupg will attempt to automatically unlock the user's GPG keys with the login password via gpg-agent

Defines new command keys.

Select whether rathole needs to be run as a client or a server

The path to load the secretKey for signing narinfos

Legacy RSA public key of the host in PEM format, including start and end markers

JSON file containing secret keys

Email domains handled by this instance

WireGuard public key corresponding to the remote Rosenpass peer.

OpenPGP public key.

Whether to enable pgpkeyserver-lite on a nginx vHost proxying to a gpg keyserver.

Web interface root public URL, including scheme and port (if non-default).

Whether to run searx in uWSGI as a "vassal", instead of using its built-in HTTP server

Enables P11 PAM (pam_p11) module

Defines new line-editing keys.

Kafka broker configuration server.properties

The pgpkeyserver-lite package to use.

List of peers to exchange keys with.

Public network interface

How long to keep the private keys in memory

The public facing domain name used to access grafana from a browser

Whether to filter IPv6 traffic with 6to4 destination addresses that correspond to IPv4 addresses that should not be routed over the public internet.

Which IP address the sks-keyserver is listening on.

Whether to enable Kanidm SSH keys login.

If using a Cloudfront/Cloudflare distribution or similar it can be set using this option

Authorized clients for a v3 onion service, as a list of public key, in the format:

descriptor:x25519:<base32-public-key>

See torrc manual.

Configure nginx as a reverse proxy for mastodon

Key type to use for private keys

List of peers to connect to, in the formats:

• quic://[2001:0db8::1]:9651
• quic://192.0.2.1:9651
• tcp://[2001:0db8::1]:9651
• tcp://192.0.2.1:9651

If addHostedPublicNodes is set to true, the hosted public nodes will also be added.

Path to the server's public key.

The hostname part of the public URL used as base for all frontend requests

Whether to enable nginx or not

Public address for p2p connections from peers (if TCP is used)

Attribute set of environment variables.

https://github.com/Glimesh/broadcast-box#environment-variables

Which hostname to set the vHost to that is proxying to sks.

Influences logging

Configuration files to load besides the immutable one defined by the NixOS module

Whether to start the OpenSSH agent when you log in

The public websocket URL for livekit

Settings serialized into config.yml before build

Files containing SSH host keys to set as global known hosts. /etc/ssh/ssh_known_hosts (which is generated by programs.ssh.knownHosts) is always included.

The maximum expiry delay in seconds to force in public mode.

Enables or disables the laptop keyboard's Function (Fn) lock at boot

Wireguard public key of this peer.

Public URL of the API address of the reverse proxy/tls terminator

Where to bind the PostgREST web server.

The trusted servers to download signing keys from.

The public URIs of the TURN server to give to clients

The path that opendkim should put its generated private keys into

Paths to the signing keys to use for signing the cache

The path to the TLS key.

  nix-shell -p dendrite --command "generate-keys --tls-cert server.crt --tls-key server.key"

Prefix for all Redis lock keys (only used when Redis is configured).

Path to keystore (combined PEM with cert/key, or PKCS12 keystore)

A list of files containing additional configuration to be included using the include directive

Specifies the key lib.types that will be used for public key authentication.

Whether to enable authenticating using a signature performed by the ssh-agent

Public server registration name, and also the name of the Root channel

Path to TLS certificate

Path to the SSH host public key.

The public-facing port that PeerTube will be accessible at (likely 80 or 443 if running behind a reverse proxy)

The path to the TLS certificate.

  nix-shell -p dendrite --command "generate-keys --tls-cert server.crt --tls-key server.key"

Whether to enable evdevremapkeys, a daemon to remap events on linux input devices.

Key policy for zone signing keys

Key policy for key signing keys

NixOS can automatically generate SSH host keys

Whether to enable Seahorse, a GNOME application for managing encryption keys and passwords in the GNOME Keyring.

Configuration for filebeat

Public domain of the API address of the reverse proxy/tls terminator.

ActivityPub public key