Path to a json file containing users and folders to load (or update) on startup

If specified, login is denied for all users part of the listed groups

Store messages in an archive and allow users to access it

If specified, login is allowed only for users part of the listed groups

Send a message to users when they log in

Whether to enable minipro and its udev rules

Default group to store mail for virtual users.

The group of the running mount.davfs daemon

If specified, Duo authentication is required only for users whose primary group or supplementary group list matches one of the space-separated pattern lists

Operate in single user mode, disables all functionality related to multiple users and authentication

Enables users to publish their mood, activity, playing music and more

Remap all users to "nobody"

The location for users to install Drupal themes.

When true, any user will be able to register

Text to display when users join

Allow users to set vCards

All listed users will become part of the timekpr group so they can manage timekpr settings without requiring sudo.

Kea DHCP4 configuration as a path, see https://kea.readthedocs.io/en/kea-3.0.2/arm/dhcp4-srv.html

Kea DHCP6 configuration as a path, see https://kea.readthedocs.io/en/kea-3.0.2/arm/dhcp6-srv.html

Kea DHCP-DDNS configuration as a path, see https://kea.readthedocs.io/en/kea-3.0.2/arm/ddns.html

Whether to enable incusd, a daemon that manages containers and virtual machines

Allow users of the wpa_supplicant group to control wpa_supplicant through wpa_gui or wpa_cli

The default realm to be used for the users when no explicit origin/realm relationship was found in the database, or if the TURN server is not using any database (just the commands-line settings and the userdb file)

This option is opposite to lt-cred-mech. (TURN Server with no-auth option allows anonymous access)

Installs flashrom and configures udev rules for programmers used by flashrom

How users are authenticated storage -- save passwords internally pam -- Linux PAM authentication

Whether to prevent sign-up of new users via the web UI

Allow users to have a roster

Which user or group the specified command is allowed to run as

The base DN for your Hologram users

Outgoing email for notifications generated by users.

This is the URL that users will enter to load your instance

The location for users to install Drupal modules.

Whether users are included.

Allow normal users to control wpa_supplicant through wpa_gui or wpa_cli

Kea Control Agent configuration as a path, see https://kea.readthedocs.io/en/kea-3.0.2/arm/agent.html

When this option is not 0, users ability to control feed purging intervals is disabled and all articles (which are not starred) older than this amount of days are purged.

Enables Kerberos PAM modules (pam-krb5, pam-ccreds)

Enables Yubico PAM (yubico-pam) module

Use chfn SUID to allow non-root users to change their account GECOS information.

Whether to enable zeitgeist, a service which logs the users' activities and events.

Only applies if sslEnable is true

Whether or not to enable the headless Aria2 daemon service

Whether to install and set up mouse-actions and it's udev rules

Outgoing email for notifications generated by users.

Whether to enable nonpaying users to submit builds.

The lmtp daemon will make the unix socket group-read/write for users in this group.

Configures the user domain, if enabled

If set, the pam_mysql module will be used to authenticate users against a MySQL/MariaDB database.

Enable acpilight

"From" address used when sending emails to users.

"From" address used when sending Emails to users.

Welcome users who register accounts

Whether to enable tailscale.nginx-auth, to authenticate users via tailscale.

Whether to try to create home directories for users with $HOMEs pointing to nonexistent locations on session login.

Only applies if sslEnable is true

If enabled, spacecookie will hide personal information of users like IP addresses from log output.

Whether users of the wheel group must provide a password to run commands as super user via sudo.

Whether users of the wheel group must provide a password to run commands as super user via doas.

This controls the hostname for the 9front authentication server that users will be authenticated against.

Path to the working directory (used for config and pidfile)

Allow normal users to control wpa_supplicant through wpa_gui or wpa_cli

Whether users of the wheel group must provide a password to run commands as super user via sudo.

Do we ignore the lid state

Some laptops are broken

This tells pgmanage to only allow users in a certain PostgreSQL group to login to pgmanage

Whether to enable API access for mobile apps and third-party clients (Google Reader API and Fever API)

Specifies if mapped OpenID Connect accounts are automatically created upon successful authentication

The following authentication modes are available: Open -- Accept connections from anyone, use NickServ for user authentication

Enable or disable TTY auditing for specified users

If set, users listed in ~/.yubico/authorized_yubikeys are able to log in with the associated Yubikey tokens.

If enabled, starts a Terraria server

Whether users of the wheel group must provide a password to run commands as super user via run0.

Seed settings for users and groups

A list of users which will not be shown in the display manager.

Defines whether users see the Register option in the menu of Time Tracker that allows them to self-register and create new organizations (top groups).

Define resource limits that should apply to users or groups

The lmtp daemon will make the unix socket group-read/write for users in this group.

Window class translation rules. /etc/X11/imwheelrc is generated based on this config which means this config is global for all users

Send announcement to all online users

Number of daemons to serve user requests

Whether to enable provisioning of groups, users and oauth2 resource servers.

Whether to enable non-root access to the firmware of UHK keyboards

Whether to add Soundmodem to the global environment and configure a wrapper for 'soundmodemconfig' for users in the 'soundmodem' group.

Font packages to use in Steam

Whether to enable tailscale.nginx-auth, to authenticate nginx users via tailscale.

File containing a secret used to salt the users' password hashes and generate filenames for static content.

If set, users listed in $XDG_CONFIG_HOME/Yubico/u2f_keys (or $HOME/.config/Yubico/u2f_keys if XDG variable is not set) are able to log in with the associated U2F key

Allow users to register on this server using a client and change passwords

Whether to enable udev rules for devices supported by libjaylink

Whether users of the wheel group must provide a password to run commands or edit files with please and pleaseedit respectively.

Install the SPICE USB redirection helper with setuid privileges

If set, users with an SSH certificate containing an authorized principal in their SSH agent are able to log in

Whether any uploads are permitted to anonymous users.

Newline separated list of names to be allowed/denied if userlistEnable is true

Whether to enable the Howdy PAM module

Users and proxy configuration

Refer to the Tuliprox documentation for available attributes

Launch Hyprland with the UWSM (Universal Wayland Session Manager) session manager

Initial preferences are used to configure the browser for the first run

Enable font antialiasing

List of users allowed to operate with the config. "root" is always implicitly included