Kea DHCP6 configuration as a path, see https://kea.readthedocs.io/en/kea-3.0.2/arm/dhcp6-srv.html

Kea DHCP4 configuration as a path, see https://kea.readthedocs.io/en/kea-3.0.2/arm/dhcp4-srv.html

This option is opposite to lt-cred-mech. (TURN Server with no-auth option allows anonymous access)

The base DN for your Hologram users

How users are authenticated storage -- save passwords internally pam -- Linux PAM authentication

Whether to prevent sign-up of new users via the web UI

Installs flashrom and configures udev rules for programmers used by flashrom

Allow normal users to control wpa_supplicant through wpa_gui or wpa_cli

The location for users to install Drupal modules.

The default realm to be used for the users when no explicit origin/realm relationship was found in the database, or if the TURN server is not using any database (just the commands-line settings and the userdb file)

Whether users can log in with passwords defined in /etc/shadow.

Whether or not to enable the headless Aria2 daemon service

Whether users are included.

Which user or group the specified command is allowed to run as

Use chfn SUID to allow non-root users to change their account GECOS information.

Allow users to have a roster

When this option is not 0, users ability to control feed purging intervals is disabled and all articles (which are not starred) older than this amount of days are purged.

Whether to enable zeitgeist, a service which logs the users' activities and events.

Kea DHCP-DDNS configuration as a path, see https://kea.readthedocs.io/en/kea-3.0.2/arm/ddns.html

Range of user IDs used for the creation of regular users by useradd or newusers.

Range of user IDs used for the creation of regular users by useradd or newusers.

Whether to install and set up mouse-actions and it's udev rules

Only applies if sslEnable is true

Enables Kerberos PAM modules (pam-krb5, pam-ccreds)

Enable acpilight

If set, the pam_mysql module will be used to authenticate users against a MySQL/MariaDB database.

Kea Control Agent configuration as a path, see https://kea.readthedocs.io/en/kea-3.0.2/arm/agent.html

Allow normal users to control wpa_supplicant through wpa_gui or wpa_cli

Enables Yubico PAM (yubico-pam) module

Range of user IDs used for the creation of system users by useradd or newusers.

Range of user IDs used for the creation of system users by useradd or newusers.

Whether to enable tailscale.nginx-auth, to authenticate users via tailscale.

"From" address used when sending emails to users.

Whether users of the wheel group must provide a password to run commands as super user via run0.

Whether to try to create home directories for users with $HOMEs pointing to nonexistent locations on session login.

"From" address used when sending Emails to users.

Only applies if sslEnable is true

Whether users of the wheel group must provide a password to run commands as super user via sudo.

Path to the working directory (used for config and pidfile)

Whether users of the wheel group must provide a password to run commands as super user via doas.

Welcome users who register accounts

Whether users of the wheel group must provide a password to run commands as super user via sudo.

A list of users which will not be shown in the display manager.

This controls the hostname for the 9front authentication server that users will be authenticated against.

If set, users listed in ~/.yubico/authorized_yubikeys are able to log in with the associated Yubikey tokens.

Seed settings for users and groups

This tells pgmanage to only allow users in a certain PostgreSQL group to login to pgmanage

If enabled, starts a Terraria server

Do we ignore the lid state

Some laptops are broken

The following authentication modes are available: Open -- Accept connections from anyone, use NickServ for user authentication

Enable or disable TTY auditing for specified users

Whether to enable API access for mobile apps and third-party clients (Google Reader API and Fever API)

Whether to add Soundmodem to the global environment and configure a wrapper for 'soundmodemconfig' for users in the 'soundmodem' group.

Number of daemons to serve user requests

Install the SPICE USB redirection helper with setuid privileges

Define resource limits that should apply to users or groups

Send announcement to all online users

When true, any user will be able to register

Font packages to use in Steam

Whether to enable provisioning of groups, users and oauth2 resource servers.

Window class translation rules. /etc/X11/imwheelrc is generated based on this config which means this config is global for all users

Whether to enable udev rules for devices supported by libjaylink

Whether to enable tailscale.nginx-auth, to authenticate nginx users via tailscale.

If set, users listed in $XDG_CONFIG_HOME/Yubico/u2f_keys (or $HOME/.config/Yubico/u2f_keys if XDG variable is not set) are able to log in with the associated U2F key

Whether users of the wheel group must provide a password to run commands or edit files with please and pleaseedit respectively.

Whether to enable non-root access to the firmware of UHK keyboards

Whether any uploads are permitted to anonymous users.

The bare JID of the gateway administrator

Users and proxy configuration

Refer to the Tuliprox documentation for available attributes

If specified, login is allowed only for the listed users

Allow users to register on this server using a client and change passwords

If set, users with an SSH certificate containing an authorized principal in their SSH agent are able to log in

Allow all users to access the FUSE mount points

Gives the verbosity level that is used when logging messages from sshd(8)

If specified, login is denied for all listed users

Newline separated list of names to be allowed/denied if userlistEnable is true

List of public signing keys of users that can access the admin panel

Specifies if mapped OpenID Connect accounts are automatically created upon successful authentication

The duration in time a user invitation remains valid before expiring

An attribute set that maps aliases (the top level attribute names in this option) to command strings or directly to build outputs

Enable font antialiasing

Initial preferences are used to configure the browser for the first run

Whether to enable the Howdy PAM module

List of administrator users

List of users allowed to operate with the config. "root" is always implicitly included

Whether any uploads are permitted to anonymous users.

Whether local users are confined to their home directory.

Launch Hyprland with the UWSM (Universal Wayland Session Manager) session manager

Path to the configuration file containing authorized users credentials to run iperf tests.

Only monitors owned symbolic link target of GC roots.

• "auto": behaves like true for normal users, false for root.
• "true": only monitor GC roots owned by the current user.
• "false": monitor all GC roots.

Whether to enable exposing OpenSSH public keys defined in userdb

If true, a system-wide PipeWire service and socket is enabled allowing all users in the "pipewire" group to use it simultaneously

If specified, login is allowed only for users part of the listed groups

Make your The Lounge instance public

List of reporter objects used to present build status to various users.

If specified, login is denied for all users part of the listed groups

Enable hardened VirtualBox, which ensures that only the binaries in the system path get access to the devices exposed by the kernel modules instead of all users in the vboxusers group.

Whether to enable System bus notification support

WARNING: enabling this option (while convenient) should not be done on a machine where you do not trust the other users as it allows any other local user to DoS your session by spamming notifications .

Do minification on public static files which reduces the size of assets — saving data for the server & users as well as offering a performance improvement

A file containing the secret used to encrypt session keys