Whether to enable please, a Sudo clone which allows a users to execute a command or edit a file as another user .

The number of concurrent jobs the build machine supports

Max qps allowed from whitelisted sources. 0 means unlimited

Whether to enable pmount, a tool that allows normal users to mount removable devices without requiring root privileges .

This option allows you to configure Foo Over UDP and Generic UDP Encapsulation endpoints

Group under which the postfix exporter shall be run

How many sync accounts are allowed on this server

Whether to enable udisks2, a DBus service that allows applications to query and manipulate storage devices.

Whether to enable the OpenSSH secure shell daemon, which allows secure remote logins.

Greatest allowed size for individual swapfiles

Smallest allowed size for individual swapfiles

VHT (Very High Throughput) capabilities given as a list of flags

DSCP (differentiated services) value to be assigned to SIP packets

DSCP (differentiated services) value to be assigned to RTP packets

This option allows you to define Generic Routing Encapsulation (GRE) tunnels.

Whether to enable Bonjour auto-discovery, which allows clients over your LAN to automatically discover Mumble servers.

HT (High Throughput) capabilities given as a list of flags

Set to "true" to install pprof debug handlers

This option allows you to define macvlan interfaces which should be automatically created.

This option allows you to define vlan devices that tag packets on top of a physical interface

oauth2-proxy allows passing sensitive configuration via environment variables

Country code (ISO/IEC 3166-1)

Whether to enable ‘oidentd’, an implementation of the Ident protocol (RFC 1413)

Allows the container to create and setup tunnel interfaces by granting the NET_ADMIN capability and enabling access to /dev/net/tun.

This option allows you to define bond devices that aggregate multiple, underlying networking interfaces together

Literal Kismet config lines appended to the site config

This option effectively allows adding setuid/setgid bits, capabilities, changing file ownership and permissions of a program without directly modifying it

A list of files containing additional configuration to be included using the include directive

Allows specifying if weechat should run in TUI or headless mode.

A list of backends from which clients are allowed to connect from

Whether to enable authenticating using a signature performed by the ssh-agent

Whether to run the BitlBee IRC to other chat network gateway

Enable dnsmasq forwarding to nixops-dns

Implements the CSI protocol that allows clients to report their active/inactive state to the server

Files to include into the config file using Taler's @inline@ directive

Whether to enable WINS NSS (Name Service Switch) plug-in

Whether to enable Webhook, a server written in Go that allows you to create HTTP endpoints (hooks), which execute configured commands for any person or service that knows the URL .

Percentage of bandwidth_max that sabnzbd is allowed to use. 0 means no limit.

Allows loading of private environment variables

The group which should be allowed access to the given resource.

This option is opposite to lt-cred-mech. (TURN Server with no-auth option allows anonymous access)

Whether to enable the mDNS NSS (Name Service Switch) plug-in for IPv4

If enabled, causes a leave action to be sent when closing consul

Whether this file locals should be generated

List of overlays to apply to Nixpkgs

This allows you to pass arguments to the child program

Whether this /etc file should be generated

Allows loading of public environment variables, these are emitted to the log so it shouldn't contain secrets.

By default, nginx caches answers using the TTL value of a response

Labels by name to drop before sending to alertmanager

This option allows you to define multipath groups as described in http://christophe.varoqui.free.fr/usage.html.

Mount verity-protected block devices in the initrd

This option allows you to define arrays for use in multipath groups.

Specifies whether password authentication is allowed.

This option allows you to define Ethernet bridge devices that connect physical networks together

The resource to which access should be allowed.

The largest allowed upload size in bytes

Whether this runtime directory should be generated

Allows you to host Umami under a subdirectory

Prefix for API and UI endpoints

This option allows to remove the support of protocol, even if compiled in

This allows to override the default bit size for all of the Diffie-Hellman parameters set in security.dhparams.params.

Path to the file that contains the server salt

A list of filter to restrict traffic

Enables routing of QUIC packets using eBPF

Enable append only mode

Prefix for API and UI endpoints

Whether this file should be generated

Install the SPICE USB redirection helper with setuid privileges

Whether to use components requiring unfree dependencies

Whether to enable Zsh integration for VTE terminals

Configuration for Immich

The organization's buckets which should be allowed to be read

Whether to enable the actkbd key mapping daemon

Controls the file Xorg logs to

List of allowed indicator modules to use for the lightdm gtk greeter panel

The organization's buckets which should be allowed to be written

Restrictions for access from non-local IP addresses

Whether to enable Bash integration for VTE terminals

This option allows you to define Open vSwitches that connect physical networks together

Installing a public key allows firmware signed with a matching private key to be recognized as trusted, which may require less authentication to install than for untrusted files

Specifies whether keyboard-interactive authentication is allowed.

Name of the config adapter to use

Whether this file overrides should be generated

Whether to enable power-profiles-daemon, a DBus daemon that allows changing system behavior based upon user-selected power profiles.

Don't poll the kernel for battery level changes

Whether to enable the atopacct service which manages process accounting

You want that ip-from-header in the nginx setup case

Whether to enable System bus notification support

WARNING: enabling this option (while convenient) should not be done on a machine where you do not trust the other users as it allows any other local user to DoS your session by spamming notifications .

These options tell pgmanage where the TLS Certificate and Key files reside

Whether to enable the mDNS NSS (Name Service Switch) plug-in for IPv6

Allows you to assign a custom name to the tracker script different from the default script.js.

Whether to set mark_in on the inbound SA

Whether the service should be reloaded during a NixOS configuration switch if its definition has changed

Add ImageMagick to server's path; allows for image thumbnailing

Wait for DNS

This option activates the wrapper that allows the use of mullvad-exclude

Named accounts and their respective configurations

Allows interop between older clients that use XEP-0048: Bookmarks in its 1.0 version and recent clients which use it in PEP

If this attribute is not included, or if is set to the wildcard address (ff:ff:ff:ff:ff:ff), the entry is available for any station (client) to use