Enables InfluxDB on the host system using the services.influxdb2 NixOS module with default options

Path to the directory where firewall rules can be found and will get stored by the NixOS module.

The force_run option is used to tell the PAM module for KWallet to forcefully run even if no graphical session (such as a GUI display manager) is detected

Enables the x2goserver module

Use a certificate generated by the NixOS ACME module for the given host

ethercalc, an online collaborative spreadsheet server

Allow the service to create and use its own config file inside the dataDir as configured by services.mediatomb.dataDir

Configuration options for the Stalwart email server

Your configuration.yaml as a Nix attribute set

JSON file containing secret keys

Enables the in-database configuration.

https://docs.postgrest.org/en/stable/references/configuration.html#in-database-configuration

The user under which Anubis is run

If set, use the Duo Security pam module pam_duo for authentication

The final package used by the module

Package to the finalized Nextcloud package, including all installed apps

Disable kernel module loading once the system is fully initialised

List of lighttpd modules to enable

rsnapshot configuration option in addition to the defaults from rsnapshot and this module

The group under which Anubis is run

Use a certificate generated by the NixOS ACME module for the given host

Literal string to append to configFile and the config file generated by the pulseaudio module.

Path to the periphery configuration file

The host name or IP address on which to bind Airsonic

Configuration files to load besides the immutable one defined by the NixOS module

Reference to the matrix-synapse wrapper with all extras (e.g. for oidc or saml2) added to the PYTHONPATH of all executables

OpenAFS programs package

Configuration for the LDAP backend

h2 database is not recommended for a production setup. postgresql this settings it recommended for production setups. manual the module doesn't handle database settings.

By default pam-u2f module does not inform user that he needs to use the u2f device, it just waits without a prompt

Sets the environment variable $HELOHOST which is used by the SMTP protocol module to set the parameter given to the HELO command

IP address on which RabbitMQ will listen for AMQP connections

Enables Uber's USSH PAM (pam-ussh) module

Whether to load the Memcached module into PHP

Extra contents appended to the jupyterhub configuration

Jupyterhub configuration is a normal python file using Traitlets. https://jupyterhub.readthedocs.io/en/stable/getting-started/config-basics.html

Whether to load the acpi_call kernel module

List of maintainers of each module

If set, then the authenticating user must be a member of this group to use this module.

Enable in-memory compressed devices and swap space provided by the zram kernel module

The SQL server URI

Database settings will be reset to the value set in this module if this is not enabled

Enable the OATH (one-time password) PAM module.

The river package to use

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Configure the default calendar

The XEP-0423 defines a set of recommended XEPs to implement for a server

The sway package to use

Add module allowners, any user in chat is able to kick other

The configuration of vaultwarden is done through environment variables, therefore it is recommended to use upper snake case (e.g. DISABLE_2FA_REMEMBER)

Whether to enable manual usage of the rsnapshot command with this module.

Wildcard path of the hwmon pwm file

Whether to enable the msr (Model-Specific Registers) kernel module and configure udev rules for its devices (usually /dev/cpu/*/msr).

The time to wait for a remote module listed above to complete sending a message before killing it and trying again, in seconds

Path under which the stats socket is placed

Settings whose options overwrite fields in .config/transmission-daemon/settings.json (each time the service starts)

Whether to enable the open source NVIDIA kernel module.

Plugin settings for dovecot in general, e.g. sieve, sieve_default, etc

Connection string to postgresql in the [rust postgres crate config format](https://docs.rs/postgres/latest/postgres/config/struct

Whether to enable the dp9ik pam module provided by tlsclient

Whether to enable the Howdy PAM module

Add module allowners, any user in chat is able to kick other

This option sets the pam "control" used for this module.

This option sets the PAM "control" used for this module.

Whether to enable the umask PAM module.

Whether to enable the OTPW (one-time password) PAM module.

Enable alpha quality zstd module with recommended settings

Parameters for the msr kernel module.

Instances of SimpleSAMLphp

Whether to enable the ImageMagick module for PHP

Whether to enable PN5xx kernel module with udev rules, libnfc-nci userland, and optional ifdnfc-nci PC/SC driver.

File containing the secret token when using the Synapse HTTP Antispam module to be used in place of services.draupnir.settings.web.synapseHTTPAntispam.authorization

Whether to have the module create the appropriate firewall configuration based on the bouncer settings

The set of kernel modules in the initial ramdisk used during the boot process

Enables P11 PAM (pam_p11) module

config.ini contents

Syncthing can be configured to ignore certain files in a folder using ignore patterns

The archisteamfarm package to use. ::: {.warning} Should always be the latest version, for security reasons, since this module uses very new features and to not get out of sync with the Steam API. :::

By default pam-u2f module sets the application ID to pam://$HOSTNAME

The river-classic package to use

Declarative instance config

Options to pass to the PAM module

Literal string to append to configFile and the config file generated by the plymouth module.

Enables Yubico PAM (yubico-pam) module

The bcachefs-tools package to use

Whether to enable usbtop and required kernel module, to show estimated USB bandwidth.

Add network connectivity support to initrd

Whether to enable Google OS Login

Whether to enable nftables and use nftables based firewall if enabled. nftables is a Linux-based packet filtering framework intended to replace frameworks like iptables

Enables U2F PAM (pam-u2f) module

Whether to install and enable the netatop kernel module

Options to pass to the pam_rssh module

Whether to enable setting suid bit for throne-core to run as root, which is less secure than default setcap method but closer to upstream assumptions

Whether to enable Trusted Platform Module 2 support.

By default pam-u2f module sets the origin to pam://$HOSTNAME

Whether to enable Facter dhcp module.

Enables improved Linux module drivers for Logitech driving wheels

LiteLLM Module settings

Whether to enable Neovim

Set of modules that are always loaded by the initrd

Whether to enable the AppArmor Mandatory Access Control system