If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

Error count warning threshold

Percentage of cache space considered to be "free"

Network device to bind to.

The absolute path to the program to be wrapped.

Additional virtual host specific configuration

Listen on local and forwards traffic from remote.

The kwallet-pam package to use.

Extra lines to be added verbatim to the configuration file.

Whether to use mbuffer.

Optional numeric identifier by which authentication rounds are sorted

server secret for safe session cookies, must be set

Whether the service should be reloaded during a NixOS configuration switch if its definition has changed

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Start the specified units when this unit is started, and stop this unit when the specified units are stopped or fail.

Absolute path to a directory where builds will be stored in context of selected executor (Locally, Docker, SSH).

Log format for Apache's log files

File system ID (must be unique within configuration).

Set to true to automatically add new users to the main organization (id 1)

String to be appended to the config verbatim

Read only representation of the final configuration.

Phoneme length value.

Process list poll interval, in seconds

List of receivers that should be deleted.

Path to private key.

IP addresses to bind the listener to.

Restrict the TLS protocol versions of this policy to those defined here.

Whether to enable serving ~/public_html as /~«username».

Apache configuration can be done by adapting services.httpd.virtualHosts.

ID of a specific speaker in a multi-speaker model.

Storage quota for the repository

Declarative location config

An ipset.

Ports to forward in the zone.

systemd timer configuration

The vault package to use.

A file containing a unique base64 encoded secret for the SECRET_KEY_BASE

A file containing a unique base64 encoded secret for the TOKENS_KEY_BASE

This setting configures the default UI language, which must be a supported IETF language tag, such as en-US.

Local address (and optionally device) to bind to using the given port.

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

Extra command line arguments to pass to wstunnel

Extra command line arguments to pass to wstunnel

Shell commands to run just before exit

Favicons settings for SearXNG.

Location of the dir with main.css CSS file

Whether to listen for and reject all HTTPS connections to this vhost

Backups jobs to schedule for this stanza as described in: https://pgbackrest.org/user-guide.html#quickstart/schedule-backup

Opens port in firewall for fedimintd's api port

A unique identifier for this authentication token

Defines the address and other parameters of the upstream servers

Default admin password

Additional flags to pass to lego run.

Viewers can access and use Explore and perform temporary edits on panels in dashboards they have access to

User part of the JID for the recorder.

The path to a TLS certificate bundle used to verify the server's certificate.

The password to use when connecting to Elasticsearch, if required

Host which to proxy requests to if ACME challenge is not found

The address of the remote endpoint to forward traffic over.

The option to use this LUKS device with a GPG encrypted luks password by the GPG Smartcard

Set a specific keyfile for this archive

Path to serial port this printer is connected to

Identifier of the UPS to monitor, in this form: <upsname>[@<hostname>[:<port>]] See upsmon.conf for details.

Keep this unit running as long as the listed units are running

Keep this unit running as long as the listed units are running

Defines the name of the claim that contains the username in the provider's userinfo endpoint

Optional configuration string for this interface.

Whether to give the container its own private virtual Ethernet interface

This directory is used for uploads of pictures

Extra flags passed to the systemd-nspawn command

IP Address of a database server

Listen on remote and forwards traffic from local

Debug mode, return more verbose errors, reload templates on each request.

The end of the port range, inclusive.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Path to certificate private key (PEM with private key)

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

An arbitrary list of items such as derivations

List of certificates to accept for authentication

Whether to enable HTTP 2

Boost Pipewire client priorities.

Units that require (i.e. depend on and need to go down with) this unit

Units that require (i.e. depend on and need to go down with) this unit

Either a single port or port range to allow

Set the date on which the user's account will no longer be accessible

Only the MySQL driver supports isolation levels in Grafana

IPv6 interface to bind to.

IPv4 interface to bind to.

The width to read from input-stream.

A printf-style string that is output at the beginning of each log line

File name in the rsa folder for which this passphrase should be used.

Optional numeric identifier by which authentication rounds are sorted

Videobridges use the same XMPP account and need to be distinguished by the nickname (aka resource part of the JID)

The filesystem directory to store your protected store in.

Additional names of virtual hosts served by this virtual host configuration.