Additional nftables rules to be appended to the rpfilter-allow chain

Allow users to register themselves

Opens up the erlang distribution port of all enabled components to allow reaching the server cluster from the internet

Default action whether to block or allow application internet access.

Allow the installation and updating of apps from the Nextcloud appstore

List of peer public keys to allow incoming peering connections from

Python environment to run jupyterhub

Customizing will affect the packages available in the hub and proxy

The maximum number of processes that EPGStation would allow to run at the same time for encoding or streaming videos.

How to treat USB controller devices that are already connected when the daemon starts

Allow for incus.service to be stopped without affecting running instances.

DEPRECATED

When set to true, the server will only allow clients that have a valid factorio.com account.

Whether to allow registration of new admin users.

Restrictions on the connections that the server will accept

Whether to enable KVMGT (iGVT-g) VGPU support

Description of how to identify the filesystem to be duplicated by this instance of bees

Whether to make ui-lovelace.yaml writable

Allow users of the wpa_supplicant group to control wpa_supplicant through wpa_gui or wpa_cli

For an IPv6-based tunnel, the maximum number of nested encapsulation to allow. 0 means no nesting, "none" unlimited.

If set, all recipients to users at either "localhost" (the literal string) or the canonical host name (from the me control attribute) are remapped to this address

If set to

• "true": all DNS lookups will be encrypted

If enabled, the generated destination NAT (DNAT) rules will NOT accept traffic that was DNAT'd by other entities, e.g. docker

Disables TLS verification of the certificate presented by your origin

Whether to prohibit creating an account in plausible's UI or allow on invite_only.

If you do not enable one of the rpc or httprpc plugins you need to expose an RPC mount through scgi using this option

Allow normal users to control wpa_supplicant through wpa_gui or wpa_cli

The keyfile which associates this machine with your tarsnap account

If set to

• "true": all DNS lookups are DNSSEC-validated locally (excluding LLMNR and Multicast DNS)

Environment file as defined in systemd.exec(5)

Do not allow more than this many server connections per database (regardless of user)

Whether to allow other versions of PostgreSQL than the recommended one

Whether to provide the dependencies to allow using transformer models.

Allow normal users to control wpa_supplicant through wpa_gui or wpa_cli

Change the paths where mandoc makewhatis(8)generates the manual page index caches. documentation.man.generateCaches should be enabled to allow cache generation

Allow dockerd to be restarted without affecting running container

Allow placing blocks inside of players (hitbox logic is simplified)

Address for agnos to listen on

All of these scripts will be executed in lexicographical order before hostapd is started, right after the bss segment was generated and may dynamically append bss options to the generated configuration file

Build VirtualBox web service tool (vboxwebsrv) to allow managing VMs via other webpage frontend tools

Do not allow more than this many server connections per user (regardless of database)

Allow localhost redirects

Set the priority of the system call filter setting

Either a single port or port range to allow

Number of tasks to perform simultaneously

The protocol to allow

Configures the syscall filter for postgresql.service

If set, all sae password entries that have a non-wildcard MAC associated to them will additionally be used to populate the MAC allow list

List of volumes to attach to this container

Allow users to edit datasources from the UI.

Configuration from which XMonad gets compiled

How many server connections to allow per user/database pair

Sets the password for WPA-PSK that will be converted to the pre-shared key

Whether to copy the DSCP (Differentiated Services Field Codepoint) header field to/from the outer IP header in tunnel mode

Use childless IKE_SA initiation (allow, prefer, force or never)

The project_id and project_name fields are optional for the Identity V2 API

The project_id and project_name fields are optional for the Identity V2 API

By default, PgBouncer allows only parameters it can keep track of in startup packets: client_encoding, datestyle, timezone and standard_conforming_strings

The application_credential_id or application_credential_name fields are required if using an application credential to authenticate

The application_credential_id or application_credential_name fields are required if using an application credential to authenticate

By default, all allowed IPs and subnets are comma-separated in the allowed_ips field

Define a lower and upper time value (in HH:MM format) which constitute a time window during which reboots are allowed after an upgrade

What networks are allowed to use us as a resolver

List of servers that should be probed.

Note: if your mailserver has rspamd(8) configured, it can happen that emails from this exporter are marked as spam

Allowed time window for first received packet in seconds (positive number allows packets from history)

List of network interfaces that should be ignored by the avahi-daemon

If pings are allowed, this allows setting rate limits on them

Allowable formats for the RAUC bundle.

addr:port to listen on for HTTPS clients

Storage quota for the repository

The artalk configuration

The allowlisted XMPP servers

Set of accepted cipher suites (encryption algorithms) for pairwise keys (unicast packets)

Whether to open the UDP port used for multicast peer discovery

This option allows modules to define helper functions, constants, etc.

A list of SSH public keys allowed to access the binary cache via SSH.

Set to true to automatically add new users to the main organization (id 1)

The command the user is allowed to run

Denied client IP ranges, these gets evaluated after the allowed IP ranges, defaults to all IPv4 addresses: [ "0.0.0.0/0" ] To block all other access than the allowed.

list of origins allowed to upload

Whether to enable writing to the Nix store as a remote store via SSH

A set of NixOS system configurations to be run as lightweight containers

Set the maximum number of FUSE mounts allowed to non-root users.

Enable uptimed, allowing you to track your highest uptimes.

Specifies the ciphers allowed and their order of preference.

Maximum number of concurrent clients allowed.

Subordinate group ids that user is allowed to use

Subordinate user ids that user is allowed to use

Extra configuration text appended to doas.conf

Mutual TLS - regex for whitelist of allowed client CNs.

Extra arguments to pass to sanoid

Start of the range of subordinate user ids that user is allowed to use.

Start of the range of subordinate group ids that user is allowed to use.

A list of users allowed to access the ifp dbus interface.

Path to TLS certificate

Whether domains on this list should be explicitly allowed, or blocked

Subordinate user ids that user is allowed to use

Subordinate group ids that user is allowed to use

Message to display to the remote user before authentication is allowed.

SSH public key allowed to login as user btrbk to run remote backups.

Define list of allowed domains.