Exposes EDID files from users-sourced database at https://github.com/linuxhw/EDID

Attribute names will be mapped to EDID filenames <NAME>.bin

The package that provides the font given in the name option.

Registry where to login to.

Automatically remove the container when it is stopped or killed

List of hooks to disable when generating the CDI specification

Networks to attach the container to

Name or GUID of extra ZFS pools that you wish to import during boot

Grants the user, created by the ensureUser attr, createdb permissions

Host name of existing well-known Veilid bootstrap servers for the network to connect to.

Extra options for podman run.

Specifies a list (comma-separated) of addresses where to listen for TCP connections

Device node access modifier

Unifi service user name.

The package that provides the theme given in the name option.

Units that want (i.e. depend on) this unit

Extra options for podman that go before the run argument.

Attribute for a name of group.

This is optional and is by default off, because most users will not need it

The name of the machine

If enabled, lowerdir, upperdir and workdir will be prefixed with /sysroot

Periodically refresh the endpoint hostname or address for all peers

Hostname of the trusted server.

Name of the measurement

Grants the user, created by the ensureUser attr, replication permissions

Logging driver for the container

List of volumes to attach to this container

Primary organization name

Whether the users will be able to use the ad-hoc commands that lets them configure their realname and username.

Grants the user, created by the ensureUser attr, superuser permissions

Give extended privileges to the container

Override the default entrypoint of the image.

Specify the attribute name of the ESP.

Whether to enable Normalize sensor name for device availability metric added by Zigbee2MQTT..

Defines route table names as an attrset of name to number

The package that provides the icon theme given in the name option.

Name of the database

Runs container in ephemeral mode with the empty root filesystem at boot

Determines how podman should notify systemd that the unit is ready

The connection type defines the connection kind, like vpn, wireguard, gsm, wifi and more.

Environment variables to set for this container.

Whether to give the container its own private UIDs/GIDs space (user namespacing)

Periodically re-execute the wg utility every this many seconds in order to let WireGuard notice DNS / hostname changes

The name of the column or an SQL expression that indicates the status of the user

Path to a script that streams the desired image on standard output

Specify the attribute name of the store partition.

Connection string for accessing pgBouncer

This is optional and is by default off, because most users will not need it

A set of NixOS system configurations to be run as lightweight containers

Grants the user, created by the ensureUser attr, createrole permissions

The path to the nixpkgs sources used to build the system

When the dynamic endpoint refresh that is configured via dynamicEndpointRefreshSeconds exits (likely due to a failure), restart that service after this many seconds

Label of the unlocked encrypted device

The package that provides the cursor theme given in the name option.

The distinguished name to use to bind to the LDAP server when the root user tries to modify a user's password.

Grants the user, created by the ensureUser attr, replication permissions

The security model to use for this share:

• passthrough: files are stored using the same credentials as they are created on the guest (this requires QEMU to run as root)
• mapped-xattr: some of the file attributes like uid, gid, mode bits and link target are stored as file attributes
• mapped-file: the attributes are stored in the hidden .virtfs_metadata directory

Takes the path to a file representing a kernel network namespace that the container shall run in

Network ports to publish from the container to the outer host

Defines where FileSender logging is sent

Command to run after become master, the interface name, virtual address and optional extra parameters are passed as arguments.

Capabilities to configure for the container

Keep or set the specified variables

The application_credential_id or application_credential_name fields are required if using an application credential to authenticate

List of packages containing firmware files

Attribute set of XFree86 Modelines automatically converted and exposed as edid/<name>.bin files in initrd

Make Windows bootable from systemd-boot

The name of the command to use

Grant additional capabilities to the container

The device name of the trackpoint

NixOS version name to be used in the names of generated outputs and boot labels

Specify the attribute name of the store's dm-verity hash partition.

Determines how GRUB will identify devices when generating the configuration file

Named accounts and their respective configurations

GRUB entry name instead of default.

The distinguished name to bind to the LDAP server with

Path to file with trusted public keys in OpenSSH's authorized_keys format

Command to run after become backup, the interface name, virtual address and optional extra parameters are passed as arguments.

The name of the external network interface.

Declaratively define NetworkManager profiles

Arbitrary NixOS configuration

List of rules to be added to /etc/xdg/pay-respects/rules. pay-respects will read the contents of these generated rules to recommend command corrections

Specifies the CLI name of the hardware.nvidia.prime.offload.enableOffloadCmd convenience script for offloading programs to an nvidia device.

The id of the bootloader to store in efi nvram

The compressor to use on the initrd image

Disable the DHCP client for any interface whose name matches any of the shell glob patterns in this list

Configuration part of the tabrmd TCTI, like the D-Bus bus name

Enable the DHCP client for any interface whose name matches any of the shell glob patterns in this list

The name of the TPM command transmission interface (TCTI) library to use.

Will regularly ensure that the given CUPS printers are configured as declared here

The sort key used for the NixOS bootloader entries

Device name pattern to exclude from default scheduler assignment through config.hardware.block.defaultScheduler and config.hardware.block.defaultSchedulerRotational

This option enables the newer libvirt_guest NSS module

A template for linked manuals (usually via the Xr macro) in HTML output

The VirtioFS mount tag for the Rosetta runtime, exposed by the host's virtualisation software

This option is for generating PostScript and PDF output

Whether to enable the watch permission system

List of packages to override without doing a full rebuild

Assign block I/O scheduler by device name pattern

Whether to enable killing of processes which have an AppArmor profile enabled (in security.apparmor.policies) but are not confined (because AppArmor can only confine new processes)

List of interfaces that will not be managed by NetworkManager