Whether to enable the HTTP/3 protocol

Whether to enable the HTTP/3 protocol

Name of the network tunneling interface.

Defines the name of the claim that contains group memberships or role assignments in the provider's userinfo endpoint

Name of this Mattermost site.

Group account name under which to run shairport-sync

Overridden configuration files, written into /etc/rspamd/override.d/{name}.

Environment variables to set for this container.

Bind to this device for native ethernet operation. all is a pseudo-name which will try to connect to all devices.

Allow the specified IPs to act as a proxy

The path to the file used for signing derivation data

Domain name of your server.

The hostname the service is reachable via

List of HTTP resources to serve on this listener.

Periodically re-execute the wg utility every this many seconds in order to let WireGuard notice DNS / hostname changes

HTTP username

Absolute path to a file containing environment variables used for gitlab-runner registrations with runner authentication tokens

Name of the nginx virtualhost to use and setup

Name of the nginx virtualhost to use and setup

The fully qualified domain name to bind to

Whether to give the container its own private UIDs/GIDs space (user namespacing)

The domain name of your instance (eg 'hatsu.local').

The host name or IP address the server should listen to.

Name of the directory in /var/lib.

If set, use NixOS-generated ACME certificate with the specified name for TLS

Attribute set of additional plugins that will be symlinked to the plugin subdirectory

Database name to store sms data

Name of database.

Local address(es) to use for IKE communication

Name of the nginx virtual host to use and setup

Path to a script that streams the desired image on standard output

List of nameservers to pass to Tailscale clients.

Instance hostname (base domain name)

Environment files for this container.

This is optional and is by default off, because most users will not need it

Whether to skip validation of the server's certificate.

Basic Auth username used to protect VictoriaLogs instance by authorization

Specify the attribute name of the store partition.

Send certificate request payloads to offer trusted root CA certificates to the peer

LiveKit key file holding one or multiple application secrets

Script to run before taking snapshot.

Include the entire system's configuration

Enable private repos

Time to schedule IKE reauthentication

Controls Link-Local Multicast Name Resolution support (RFC 4795) on the local host

When the dynamic endpoint refresh that is configured via dynamicEndpointRefreshSeconds exits (likely due to a failure), restart that service after this many seconds

Route section name

The path to the nixpkgs sources used to build the system

Name of the mongo database.

Defines the base URI for the Hash and URL feature supported by IKEv2

Domain name under which the derper server is reachable.

A set of NixOS system configurations to be run as lightweight containers

Use childless IKE_SA initiation (allow, prefer, force or never)

Configure the 'namespaces' section of the registration.yml for the bridge and the server

The login name of the search user

Domain name to serve the requests off of.

Whether to skip validation of the server's certificate.

Name of the PostgreSQL database

Required for some non-Amazon implementations.

Label of the unlocked encrypted device

HTTP username

HTTP username

HTTP username

HTTP username

Network ports to publish from the container to the outer host

The security model to use for this share:

• passthrough: files are stored using the same credentials as they are created on the guest (this requires QEMU to run as root)
• mapped-xattr: some of the file attributes like uid, gid, mode bits and link target are stored as file attributes
• mapped-file: the attributes are stored in the hidden .virtfs_metadata directory

Script to run before taking snapshot.

Name of the world to use

Whether to enable Samba's winbindd, which provides a number of services to the Name Service Switch capability found in most modern C libraries, to arbitrary applications via PAM and ntlm_auth and to Samba itself.

The public host name to serve.

Hostname or address where to find the Pi-Hole webinterface

A required list of local or remote repositories with paths and optional labels (which can be used with the --repository flag to select a repository)

GitLab container registry service name.

Common name attribute of allowed peer certificates

Common name attribute of allowed peer certificates

A proposal is a set of algorithms

The short hostname of the machine where SLURM control functions are executed (i.e. the name returned by the command "hostname -s", use "tux001" rather than "tux001.my.com").

Takes the path to a file representing a kernel network namespace that the container shall run in

The name of the path priority routine

Cadvisord storage driver database name.

Whether to enable knot-resolver (version 6) domain name server

A list of backends from which clients are allowed to connect from

Whether to enable the internet_resource feature for this account.

Whether to enable the policy_conditions feature for this account.

Namespace name.

Common name attribute of allowed peer certificates

Capabilities to configure for the container

Zone name, like "example.com", "localhost", or "0.0.127.in-addr.arpa".

Command to run after become master, the interface name, virtual address and optional extra parameters are passed as arguments.

Database user name.

S3 region name.

The output name of the monitor, as shown by xrandr(1) invoked without arguments.

The name of the multipath device

The content of this attribute is appended to any host name that does not contain a period (except localhost), including defaulthost and idhost

Whether to enable the HTTP/3 protocol

Use the X-Forwarded-For (XFF) header as the client IP and not the actual client IP.

Attribute set of vault-agent instances

A file containing the auth key

Whether to enable nominatim

Keep or set the specified variables