Mode in which to run the server.

'monolithic' runs all components, and is suitable for single-node deployments.

'api-server' runs only the API server, and is suitable for clustering.

'garbage-collector' only runs the garbage collector periodically

Heisenbridge is configured over the command line

Default group to store mail for virtual users.

List of remappings.

Users that can access upsd

The joycond package to use.

The path of the web root directory.

The headscale package to use.

Additional lines of configuration appended to this virtual host in the automatically generated Caddyfile.

A file containing the password of the SMTP server account

Extra configuration to be passed in Messages directive.

Add logging rules right before reject and drop rules in the INPUT, FORWARD and OUTPUT chains for the default rules and also final reject and drop rules in zones for the configured link-layer packet type.

Whether to allow login for accounts that have no OTP set (i.e., accounts with no OTP configured or no existing ~/.google_authenticator).

Ports of the service.

The path to the boot directory where the extlinux-compatible configuration files will be written.

The StreamController package to use

TLS private key to use

The port the atuin server should listen on.

Whether to enable HTTPS and reject plain HTTP connections

Address to bind to for http-based Admin UI

The conman package to use.

Which LXQt packages to exclude from the default environment

The room name of the MUC to connect to for control.

The package with which to control brightness; added also to services.dbus.packages. package to use.

Declarative kernel config

Whether to enable the hiding of direnv logging .

The password for this entry

Number of threads used for pushing store paths

The local port to use.

Whether to enable automatic creation of a local postgres database.

Name of the image

Target node name on the IBM TSM server.

Additional arguments for borg compact

Whether to disable the HTTP registration endpoint.

Whether to enable the canto RSS daemon.

TCP Port to bind on for UI connections

Extra environment variables for Docling Serve

Hintstyle is the amount of font reshaping done to line up to the grid.

slight will make the font more fuzzy to line up to the grid but will be better in retaining font shape, while full will be a crisp font that aligns well to the pixel grid but will lose a greater amount of font shape.

Set name cache size for IPv4.

What addresses and ports the server should listen on

Enable the autohinter in place of the default interpreter

Whether to enable Chrysalis.

Dovecot user name.

If the default user "gocd-agent" is configured then this is the primary group of that user.

Whether to enable graphite web frontend.

A list of name servers that should be inserted before the ones configured in NetworkManager or received by DHCP.

If enabled the automatic login will only happen in the first tty once per boot

Configuration file for hockeypuck, here you can override certain settings (loglevel and openpgp.db.dsn) by just setting those values

FQDN for the Kanboard instance.

Whether to enable the rEFInd boot loader.

Whether to enable firejail, a sandboxing tool for Linux.

Path to the configuration file of dnsmasq.

The minipro package to use.

Whether to enable fzf keybindings.

The cassandra package to use.

Bind port for sam endpoint.

The qdmr package to use.

Name of this virtual host

Declaratively provision Grafana's datasources.

The key that should be remapped

A YAML config file which can be used to configure karma instead of the nix-generated file.

The mode can be "file" or "database" that defines where the ACL policies are stored and read from.

Whether to enable nvidia-persistenced a update for NVIDIA GPU headless mode, i.e

Configuration to write to application.yml

The dwl package to use.

The interfaces to bond together

Output DPI configuration.

Type of the route

Whether to ask Let's Encrypt to sign a certificate for this vhost

The beginning of IP range which the subnet allocation should start with

The ryzen-monitor-ng package to use.

Whether to enable the cjdns network encryption and routing engine

The binary IMA measurements (Integrity Measurement Architecture).

Compression algorithm

Select the encapsulation type:

• 6in4: the IPv6 packets are encapsulated using the 6in4 protocol (formerly known as SIT, RFC 4213);

• gue: the IPv6 packets are encapsulated in UDP packets using the Generic UDP Encapsulation (GUE) scheme;

• foo: the IPv6 packets are encapsulated in UDP packets using the Foo over UDP (FOU) scheme.

DEPRECATED, use driverOptions

Whether to enable steam.

Extra lines to be added verbatim to the configuration file.

Whether to open the firewall for the specified port.

Set the MAC address of the interface.

• "XX:XX:XX:XX:XX:XX": MAC address of the interface
• "permanent": Use the permanent MAC address of the device
• "preserve": Don’t change the MAC address of the device upon activation
• "random": Generate a randomized value upon each connect
• "stable": Generate a stable, hashed MAC address

Specifies the port to listen on for Gerbil.

The hatsu package to use.

Directory used to store media files

Additional environment variables to pass to Cage.

List of WAF IP Lists to manage, in the format account-id/list-name. (Experimental feature as of cloudflare-ddns 1.14.0).

Location where JBoss stores its temp files

IP Addresses to bind to

Which principal the rule applies to

dynamic - Each connection will be done via chained proxies all proxies chained in the order as they appear in the list at least one proxy must be online to play in chain (dead proxies are skipped) otherwise EINTR is returned to the app.

strict - Each connection will be done via chained proxies all proxies chained in the order as they appear in the list all proxies must be online to play in chain otherwise EINTR is returned to the app.

random - Each connection will be done via random proxy (or proxy chain, see programs.proxychains.chain.length) from the list.

Whether to install dependencies required for calendar events support

The consul package to use.

The ferretdb package to use.

IPv6 destination.

Prevents the system from sleeping while backing up.

Whether to enable the HTTP/2 protocol

A list of additional patches to apply to the kernel

The port to listen on.

Path to server SSL certificate.

Confd, whether to watch etcd config for changes.