List of binary cache URLs that non-root users can use (in addition to those specified using nix.settings.substituters) by passing --option binary-caches to Nix commands.

Specifies a list (comma-separated) of addresses where to listen for TCP connections

Address and port the LDAP server is bound to

How long until a logged in session expires.

List of contact points to import or update.

Syncthing can be configured to ignore certain files in a folder using ignore patterns

Configuration for Alertmanager IRC Relay as a Nix attribute set

Source of truth of users

The database connection string

Restrictions for access from non-local IP addresses

Whether synapse should compress HTTP responses to clients that support it

Kea DHCP-DDNS configuration as a path, see https://kea.readthedocs.io/en/kea-3.0.2/arm/ddns.html

Specifies whether password authentication is allowed.

Replace Reddit links with links to this instance (blank to disable).

When set to true, attempts to discover the host's public IP via STUN

sched_cfs_bandwidth_slice_us.

Path to a sendmail-compatible executable for delivery reports.

Force a rescan of shares on every startup.

Whether to disable the frontend.

Settings for podman's default network.

Save forensic report data to Elasticsearch and/or Splunk.

List of templates to import or update.

Extra permission groups to attach to the KMonad instance for this keyboard

Do not monitor the number of processes.

Enable extended host info for this device. Warning: This will heavily increase scrape time.

The largest allowed upload size in bytes

How verbose should the logging be

Whether to use binary caches for downloading store paths

Whether to try a longer UID upon collision.

Name of the contact point

The path to the file containing the value for sessions.hashkey

The list of Elasticsearch nodes to connect to

A path to a SSL CA certificate file in PEM format, or all

URL where SimpleSAMLphp can be reached.

sched_latency_ns.

Add timestamp log file

The principals that 'access' applies to.

The n8n instance timezone

Start of UDP port range for WebRTC

Preemption mode.

sched_nr_latency.

Write logs to a specific Cloudwatch Logs stream

Which mode to use for sending mail

Namespaces to collect the metrics for

Configuration added to the generated NetworkManager.conf, note that you can overwrite settings with this

Use this config directory instead of generating one from the settings option

Path to the certificate used for the HTTPS listener

The server_name is the name of this server

Reference to the matrix-synapse wrapper with all extras (e.g. for oidc or saml2) added to the PYTHONPATH of all executables

The OCaml-based Xen Store Daemon configuration

The file access mode to use when creating this file or directory.

Trusted domains, from which the nextcloud installation will be accessible

Trusted proxies, to provide if the nextcloud installation is being proxied to secure against e.g. spoofing.

Kea Control Agent configuration as a path, see https://kea.readthedocs.io/en/kea-3.0.2/arm/agent.html

Host name of existing well-known Veilid bootstrap servers for the network to connect to.

Name of the template, must be unique

Replace Twitter links with links to this instance (blank to disable).

List of receivers that should be deleted.

Database to use.

The PHP-FPM pool that serves SimpleSAMLphp instance.

Name of the database

The path to the file containing the value for sessions.blockkey

The directory where SQLite plugin databases should be stored.

Lower free-space threshold: if the percentage of free space drops below this number, additional swapspace is allocated

A file containing a unique secret identifier for the Erlang cluster

Path to the Xen Store Daemon PID file.

Use execsnoop (otherwise poll the precess list periodically).

When false, only superusers will be able to create new organizations after the first

List of IP addresses that are allowed to access the debug, stats and metrics endpoints

Schema version for the configuration

Allowed principal domains. if an authenticated user's domain is not in this list authentication request will be rejected.

User used to connect to the database

The method used for generating the default value for mynetworks, if that option is unset.

https://www.postfix.org/postconf.5.html#mynetworks_style

Upper free-space threshold: if the percentage of free space exceeds this number, swapspace will attempt to free up swapspace

Basic Auth username used to protect VictoriaLogs instance by authorization

A directory that should contain the policy files, used to customize Botan’s behaviour when negotiating the TLS connections with the IRC servers.

The port to listen on for gRPC traffic.

Whether to enable recommend functionality.

Servers trusted with signing server keys.

Set to true to automatically add new users to the main organization (id 1)

Set to false to prohibit users from creating new organizations.

Address to listen on for snapclient connections.

A secret file to be sourced for the .env settings

If set to spamc, public-inbox-watch(1) will filter spam using SpamAssassin.

Controls the timeout to connect to a Pi-Hole instance

Create and use a local Meilisearch instance

The interval between announces (in seconds)

Enable subtitle support on unknown clients.

Certificates for additional domains.

Unique identifier for the receiver

Path grafana will watch for dashboards

The polling interval.

The path to the client key

Default admin password

Organization ID, default = 1.

List of alert rule UIDs that should be deleted.

A file containing a unique base64 encoded secret for the LIVE_VIEW_SIGNING_SALT

Whether to enable creating a clickhouse instance.

The domain serving your LibreTranslate instance

File containing the password for the mpd daemon