Name of the database

Organization ID, default = 1.

Path to an existing toml file to configure hickory-dns with

The directory where SQLite plugin databases should be stored.

List of alert rule UIDs that should be deleted.

Whether to enable captive browser, a dedicated Chrome instance to log into captive portals without messing with DNS settings.

Use execsnoop (otherwise poll the precess list periodically).

URL where SimpleSAMLphp can be reached.

The email for the From: header in emails

Trusted domains, from which the nextcloud installation will be accessible

Trusted proxies, to provide if the nextcloud installation is being proxied to secure against e.g. spoofing.

The path to the file containing the value for sessions.blockkey

User used to connect to the database

List of IP addresses that are allowed to access the debug, stats and metrics endpoints

Allowed principal domains. if an authenticated user's domain is not in this list authentication request will be rejected.

The method used for generating the default value for mynetworks, if that option is unset.

https://www.postfix.org/postconf.5.html#mynetworks_style

Servers trusted with signing server keys.

Address to listen on for snapclient connections.

Set to false to prohibit users from creating new organizations.

Which mode to use for sending mail

Certificates for additional domains.

The base path for plugin endpoints

The polling interval.

If set to spamc, public-inbox-watch(1) will filter spam using SpamAssassin.

Lower free-space threshold: if the percentage of free space drops below this number, additional swapspace is allocated

Boost Pipewire client priorities.

Schema version for the configuration

When false, only superusers will be able to create new organizations after the first

The path to the client key

Organization ID, default = 1.

Set to true to automatically add new users to the main organization (id 1)

The filesystem directory to store your protected store in.

List of datasources to insert/update.

The port to listen on for gRPC traffic.

Whether to enable recommend functionality.

Root path for static assets.

Address to listen on for snapclient connections.

Upper free-space threshold: if the percentage of free space exceeds this number, swapspace will attempt to free up swapspace

Save aggregate report data to Elasticsearch and/or Splunk.

A directory that should contain the policy files, used to customize Botan’s behaviour when negotiating the TLS connections with the IRC servers.

Enable subtitle support on unknown clients.

Default admin password

Name of the template, must be unique

Error count warning threshold

Limits applied to domains whose writes cause other domains' transaction commits to fail

This setting configures the default UI language, which must be a supported IETF language tag, such as en-US.

Url of the datasource.

Process list poll interval, in seconds

Path to private key.

The password to use when connecting to Elasticsearch, if required

Viewers can access and use Explore and perform temporary edits on panels in dashboards they have access to

The interval between announces (in seconds)

Directories containing files to include in the Kerberos configuration.

The path to a TLS certificate bundle used to verify the server's certificate.

Limiter settings for SearXNG.

A file containing a unique secret identifier for the Erlang cluster

This depends on mail_smtpmode

A file containing the password corresponding to database.user.

Only the MySQL driver supports isolation levels in Grafana

Name of the datasource

Datasource type

Location of the key with which IRC passwords are encrypted for storage

Whether maubot should write updated config into extraConfigFile. This will make your Nix module settings have no effect besides the initial config, as extraConfigFile takes precedence over NixOS settings!

sched_cfs_bandwidth_slice_us.

containers.conf configuration

Path to the signing key to sign messages with.

Maximum number of pixels that will be thumbnailed

Directory where uploaded images and attachments are stored.

Frequency to update DERP maps.

See torrc manual.

Alerting with a custom text template

Address to listen on for snapclient connections.

See torrc manual.

Whether to set a timer that applies the undervolt settings every 30s

A file containing a unique base64 encoded secret for the LIVE_VIEW_SIGNING_SALT

Percentage of cache space considered to be "free"

sched_wakeup_granularity_ns.

Custom UID which can be used to reference this datasource in other parts of the configuration, if not specified will be generated automatically.

IP addresses to bind the listener to.

Extra data for datasource plugins.

Compress the btrfs send stream before transferring it from/to remote locations using a compression command.

If set, configure the virtual console keymap from the xserver keyboard settings.

The connection URL for plugin database

List of datasources that should be deleted from the database.

A file containing a unique base64 encoded secret for the COOKIE_SIGNING_SALT

Whether this server federates with other servers.

Whether this server federates with other servers.

End of UDP port range for WebRTC

Initial preferences are used to configure the browser for the first run

A boolean that controls whether site visitors can create new accounts

A printf-style string that is output at the beginning of each log line

Path to noise private key file, generated automatically if it does not exist.

Type of backend configuration

Specifies if mapped OpenID Connect accounts are automatically created upon successful authentication

EasyTier network credential used for verification and encryption

Which principal the rule applies to

List of ipv4 addresses on which to listen for DNS queries.

List of ipv6 addresses on which to listen for DNS queries.

Servers listed here will be used to gather public keys of other servers (notary trusted key servers)

The path to the client cert