Configure unit start rate limiting

Adds try_files directive.

An arbitrary list of items such as derivations

FastCGI parameters to override

FastCGI parameters to override

FastCGI parameters to override

The cache allows tarsnap to identify previously stored data blocks, reducing archival time and bandwidth usage

The path to the file containing the value for clients.internalsecret

Start of UDP port range for WebRTC

The store paths to include in the partition.

List of certificate policy OIDs the peer's certificate must have

Maximum lifetime before CHILD_SA gets closed

Basic Auth protection for a vhost

Whether to ask Let's Encrypt to sign a certificate for this vhost

Path to certificate.

Set the resolver to use for performing recursive DNS queries

Each attribute in this set specifies an option in the [Match] section of the unit

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Whether to allow logging into accounts that have no password set (i.e., have an empty password field in /etc/passwd or /etc/group)

If set the URL specified in bitcoin.rpc.url will get the content of this file added as an URL password, so http://user@example.com will turn into http://user:SOMESECRET@example.com

Authorized password to the opposite end of the tunnel.

Ingress rules

Authorized password to the opposite end of the tunnel.

Catch-all service if no ingress matches

Port of the remote MQTT broker.

MQTT server access username.

Text of the file.

An arbitrary list of items such as derivations

An arbitrary list of items such as derivations

Whether to overwrite Jellyfin's encoding.xml configuration file on each service start

Additional configurations to be appended to coin.conf

Listen addresses and ports for this virtual host.

If set, all the required runtime store paths for this service are bind-mounted into a tmpfs-based chroot(2).

See torrc manual.

Extra environment variables to set for the runner, as an attrset.

An optional description for resource address, usually a full link to the resource including a schema.

Allow clients to create repositories in subdirectories of the specified path

Units that require (i.e. depend on and need to go down with) this unit

Units that require (i.e. depend on and need to go down with) this unit

Byte range from which to choose a random value to subtract from rekey_bytes

Path to a file containing the default admin password

The list of systemd services to call systemctl try-reload-or-restart on.

Opens UDP port in firewall for fedimintd's API Iroh endpoint

Datasource specific secure configuration

Enable registration for new users.

User-visible description for the repository.

FastCGI parameters to override

The program to make available as /bin/sh inside the chroot

Whether to enable this Woodpecker-Agent

Environment for the netbird service, used to pass configuration options.

Environment for the netbird service, used to pass configuration options.

Adds DirectoryIndex directive

Alias directory for requests

User part of the JID.

Whether the container should be restarted during a NixOS configuration switch if its definition has changed.

Description of this unit used in systemd messages and progress indicators.

The trusted servers to download signing keys from.

Extra command-line options passed to the daemon

A host of an existing Let's Encrypt certificate to use

These lines go to the end of the location verbatim.

Address or CIDR subnets

StrongSwan default: []

These lines go to the end of the location verbatim.

The simplesamlphp package to use.

Description for the zone.

Each attribute in this set specifies an option in the [Bond] section of the unit

Each attribute in this set specifies an option in the [Xfrm] section of the unit

Each attribute in this set specifies an option in the [Peer] section of the unit

Each attribute in this set specifies an option in the [WLAN] section of the unit

Each attribute in this set specifies an option in the [L2TP] section of the unit

Each attribute in this set specifies an option in the [VLAN] section of the unit

Create an individual listening socket

Enable running shellcheck on the generated scripts for this unit

Path to server SSL certificate key.

Adds try_files directive.

Path to device node

Whether to disable the HTTP registration endpoint.

List of forwarded ports from host to container

Reduce memory consumption by a factor of 2 beyond what lowmem does, at the cost of significantly slowing down the archiving process.

These lines go to httpd.conf verbatim

The list of interfaces to be moved into the container.

Exchange that is suggested to wallets when withdrawing

The external location that the introducer should listen on

Whether to generate new thumbnails on the fly to precisely match the resolution requested by the client

Length of the LUKS slot key derived with PBKDF2 in byte.

Whether to use a passphrase and a YubiKey (true), or only a YubiKey (false).

These lines go to the end of the location verbatim.

The base XMPP domain.

Path to directory of X.509 certificates in PEM format for trusted parties

Path to an environment file, containing the TOKEN environment variable, that holds a token to register at the configured Gitea/Forgejo instance.

XFRM interface ID set on inbound policies/SA

Set of characters used as the delimiters for address extensions

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Niceness.

Niceness.

Basic Auth protection for a vhost

When enabled Grafana will send anonymous usage statistics to stats.grafana.org

Optional description for the bucket.