Specifies if mapped OpenID Connect accounts are automatically created upon successful authentication

Whether to enable exposing OpenSSH public keys defined in userdb

A file containing the secret used to encrypt session keys

If true, a system-wide PipeWire service and socket is enabled allowing all users in the "pipewire" group to use it simultaneously

Whether to allow registration of new admin users.

Whether local users are confined to their home directory.

Whether any uploads are permitted to anonymous users.

Sets transmission's file mode creation mask

Make your The Lounge instance public

The duration in time a user invitation remains valid before expiring

A file containing the secret used to encrypt secrets for OTP tokens

Do minification on public static files which reduces the size of assets — saving data for the server & users as well as offering a performance improvement

An attribute set that maps aliases (the top level attribute names in this option) to command strings or directly to build outputs

Enables U2F PAM (pam-u2f) module

Whether new users can register on this server

All listed users will become part of the firezone-client group so they can control the tunnel service

List of reporter objects used to present build status to various users.

Whether to enable System bus notification support

WARNING: enabling this option (while convenient) should not be done on a machine where you do not trust the other users as it allows any other local user to DoS your session by spamming notifications .

Set this option to true to enable HTTP compression, this can improve transfer speed and bandwidth utilization

Path to the configuration file containing authorized users credentials to run iperf tests.

This option will ensure that team memberships for OpenID Connect users are dynamic and synchronized with membership of OpenID Connect groups or assigned roles

Enable hardened VirtualBox, which ensures that only the binaries in the system path get access to the devices exposed by the kernel modules instead of all users in the vboxusers group.

Enable font hinting

If set, shows a contact email address when rendering error pages

Maximum number of client connections allowed

Maximum amount of users which will be allowed to register on this system. 0 - no limit.

The hosts.hfaxd file entry in the spooling area will be symlinked to the location given here

Makes user-profiles globally available under nextcloud.tld/u/user.name

Paths to the Nix profile

A list of paths that should be included in the system closure but generally not visible to users

If set, shows a contact email address when rendering error pages

Whether to generate the password files at build time and store them directly in the system closure, without requiring any services at boot time

Defines one or more team names that auto-provisioned OIDC users shall be added to

Don't allow users to connect in non-secure mode (without random padding).

Path to a file containing extra ntfy environment variables in the systemd EnvironmentFile format

Frontend configuration

Name of the remote read config, which if specified must be unique among remote read configs

Specify SSH host keys to import into the initrd

This is optional and is by default off, because most users will not need it

Where to redirect new users upon registration.

A list of users who should be able to integrate 1Password with polkit-based authentication mechanisms.

Name of the remote write config, which if specified must be unique among remote write configs

SFTP private key file

Whether new users can register on this server

JSON file containing secret keys

When not set to null this option defines the path at which the unbound remote control socket should be created at

FreeType LCD filter

The set of packages that appear in /run/current-system/sw

Whether to open the default ports in the firewall: TCP/UDP 22000 for transfers and UDP 21027 for discovery

This option will ensure that team memberships for OpenID Connect users are dynamic and synchronized with membership of OpenID Connect groups or assigned roles

The channel in which users will appear in when connecting.

If you want to prevent node sharing from allowing users to access services across tailnets, declare your expected tailnets domain here.

If false, a PulseAudio server is launched automatically for each user that tries to use the sound system

Allow users to register themselves

Whether to enable the dummy "startx" pseudo-display manager, which allows users to start X manually via the startx command from a virtual terminal.

Deactivates analytics

The permission for settings.dir

List of accepted local users

When disabled, unprivileged users will not be able to create new namespaces

This is optional and is by default off, because most users will not need it

Defines one or more team names that auto-provisioned OIDC users shall be added to

Converts users profiles and Avatars between old and new formats

Whether to use binary caches for downloading store paths

The manual pages to generate caches for if documentation.man.generateCaches is enabled

Whether all users can write to the consumption dir.

Source of truth of users

Whenever to send wall notifications to all users.

Whether to enable the headless Transmission BitTorrent daemon

Authentication type

Push notifications to inform users of new messages or other pertinent information even when they have no XMPP clients online

The base URL of the API server

Diffie-Hellman parameters to generate

This option enables docker, a daemon that manages linux containers

This option enables lxd, a daemon that manages containers

Exposes EDID files from users-sourced database at https://github.com/linuxhw/EDID

Attribute names will be mapped to EDID filenames <NAME>.bin

Whether to enable the "sx" pseudo-display manager, which allows users to start manually via the "sx" command from a vt shell

Set of default packages that aren't strictly necessary for a running system, entries can be removed for a more minimal NixOS installation

Identity the EAP/XAuth secret belongs to

Identity the NTLM secret belongs to

All actors (users) to provision

Whether to enable KVMGT (iGVT-g) VGPU support

Whether to enable registration for new users.

LDAP filter for users.

If set, all recipients to users at either "localhost" (the literal string) or the canonical host name (from the me control attribute) are remapped to this address

Identity the EAP/XAuth secret belongs to

A boolean that controls whether site visitors can create new accounts

This option enables libvirtd, a daemon that manages virtual machines

The XEP-0423 defines a set of recommended XEPs to implement for a server

Enable if you are syncing more than 2000 users/groups.

Set of core packages for a normal interactive system

Whenever to use precomputated tables for ElGamal. i2pd defaults to false to save 64M of memory (and looses some performance)

An attribute set where the keys name the organisation and the values are a set of lists of users and groups.

Class that users must have.

Enables single account mode

Environment file to be passed to the systemd service

Environment file to be passed to the systemd service

Font packages to use in OpenGamepadUI

Whether users must authenticate when using the web UI or command-line tool

Allow users to edit datasources from the UI.

Displays a CAPTCHA challenge for users that register externally.