Enable recommended uwsgi settings.

Syncthing can be configured to ignore certain files in a folder using ignore patterns

List of OCSP URIs

Username for JMX

If the default of yes is used, Mode Config works in pull mode, where the initiator actively requests a virtual IP

Name of this virtual host

Only execute the administrator Sieve scripts for the mailbox configured with services.dovecot2.imapsieve.mailbox..name when one of the listed IMAPSIEVE causes apply

Defines the name of the claim that contains group memberships or role assignments in the provider's userinfo endpoint

Only execute the administrator Sieve scripts for the mailbox configured with services.dovecot2.imapsieve.mailbox..name when the message originates from the indicated mailbox

File path containing the authentication secret.

Path to file containing password for optionally authenticating with Elasticsearch.

The path to the signing private key file, used to sign requests and events.

  nix-shell -p dendrite --command "generate-keys --private-key matrix_key.pem"

Path to certificate private key (PEM with private key)

Path to certificate (PEM with certificate chain)

Clients' authorizations for a v3 onion service, as a list of files containing each one private key, in the format:

descriptor:x25519:<base32-private-key>

See torrc manual.

Remote address(es) to use for IKE communication

Skydns list of nameservers to forward DNS requests to when not authoritative for a domain.

Require pg_receivewal to use an existing replication slot (see Section 26.2.6 of the PostgreSQL manual)

Enable recommended uwsgi settings.

Enable recommended proxy settings.

Path to a JSON file to be merged with the settings

An absolute file path (which should be outside the Nix-store) to a base64-encoded Ed25519 key for signing webhook payloads

Base path for the media proxy

Disables chunked transfer encoding

Base64 preshared key generated by wg genpsk

IP or DNS name of the MooseFS master server.

Cell name.

Whether to enable the nixops-dns resolution of NixOps virtual machines via dnsmasq and fake domain name.

mjpg-streamer group name.

Whether to configure zsh as an interactive shell

Domain name of the XMMP server to which to connect as a component

The name of the column in the log table to which the timestamp of the log entry is stored.

Name of the filter

Additional environment variables to provide to authelia

Disable client authentication, no client certificate will be required.

Path to the systemd journal.

List of ports that this worker should listen on, their purpose and their configuration.

Password for the api transport

SOCKS5 username

Configures name servers used to resolve names of upstream servers into addresses

If this instance is part of a replica set, set its name here

Mail "from" name.

Name of the php-fpm pool to use and setup

User name who owns the socket file.

The name of the column in the log table to which the pid of the process utilising the pam_mysql authentication service is stored.

The pre-existing network namespace the WireGuard interface is moved to

ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1

Assign a icinga instance to this transport

The list of nameservers

Path to a file containing the JWT secret.

Path to the file containing the URI for the repository to monitor.

The path to the file containing the value for turn.secret

Path under which to expose metrics.

The path to the file containing the value for turn.apikey

Path to the hardware acceleration device that Jellyfin should use

Extra packages to add to PATH for the docker daemon process.

Hostname of the daemon in the icecream infrastructure

Username to authenticate against the SMTP relay

SSH identity resource for the remote transport

IKE major version to use for connection.

• 1 uses IKEv1 aka ISAKMP,
• 2 uses IKEv2.
• A connection using the default of 0 accepts both IKEv1 and IKEv2 as responder, and initiates the connection actively with IKEv2

Optional username to use for authentication.

The path to a file containing the API key

Directory of static files

Section for a local authentication round

Specifies the initial password for the user, i.e. the password assigned if the user does not already exist

The webserver used for the Sympa web interface

Specify the backend to attach

Whether to enable PowerDNS domain name server.

Name of cluster

The group of the running mount.davfs daemon

Name of the group used to run the jupyter service

Name of the nginx virtualhost to use and setup

Profile name, defaults to 'system' (NixOS).

The domain name serving your Weblate instance.

Path to the file with your personal ecoflow app login email address

The URL path to handle requests on.

Defines the path to the data directory

Path to the herbstluftwm configuration file

Maximum number of idle keepalive connections between Tunnel and your origin

The type of the listener, usually http.

ServerName extension to indicate the name of the server. http://tools.ietf.org/html/rfc4366#section-3.1

A file containing the superuser password

Maps kanidm groups to additionally returned oauth scopes

The token from your Buildkite "Agents" page

The port to listen for HTTP(S) requests on.

File permissions on the UNIX domain socket.

Whether to support proxying websocket connections with HTTP/1.1.

Path to the RAS daemon machine check event database.

Path to PgBouncer pid file

File path containing the authentication secret.

Path to the file containing rclone configuration

Each attribute in this set specifies an option in the [EnhancedTransmissionSelection] section of the unit

Cell name, this server will serve.

Real name of the owner of the instance

GitLab database name.

Name of the nginx virtual host to use and setup

User under which dawarich runs

Cachix binary cache name

Name of the screen session for weechat.

The user name used to log in to the ZNC web admin interface.