Defines the name of the claim that contains group memberships or role assignments in the provider's userinfo endpoint

Enable saned network daemon for remote connection to scanners.

saned would be run from scanner user; to allow access to hardware that doesn't have scanner group you should add needed groups to this user.

Whether to configure a setcap wrapper for tcpdump

Start of the range of subordinate group ids that user is allowed to use.

SMTP_SERVERS variable.

HTTP_SERVERS variable.

Default group to store mail for virtual users.

Control group which subgroups are placed under

MODBUS_CLIENT variable

MODBUS_SERVER variable.

Only allow members of the wheel group to execute sudo by setting the executable's permissions accordingly

Whether to preserve the TERMINFO and TERMINFO_DIRS environment variables, for root and the wheel group.

The user of the file

EXTERNAL_NET variable.

Only allow members of the wheel group to execute sudo by setting the executable's permissions accordingly

Enables Glasgow udev rules and ensures 'plugdev' group exists

Whether to sync ldap groups into BitWarden.

Whether to enable minipro and its udev rules

Disable checking that at least the root user or a user in the wheel group can log in using a password or an SSH key

TELNET_SERVERS variable.

Whether to enable sedutil, to manage self encrypting drives that conform to the Trusted Computing Group OPAL 2.0 SSC specification.

Defines a group of servers to use as proxy target.

Indicates whether this is an account for a “real” user

Whether to enable incusd, a daemon that manages containers and virtual machines

Whether to configure system to use gphoto2

Configuration file for persisting runtime changes

Whether to enable PdfDing service

User that runs smokeping and (optionally) thttpd

File holding nginx configuration that sets the nonce used to create secret links

Range of group IDs used for the creation of regular groups by useradd, groupadd, or newusers.

Range of group IDs used for the creation of regular groups by useradd, groupadd, or newusers.

Path to TLS certificate

All listed users will become part of the timekpr group so they can manage timekpr settings without requiring sudo.

Whether to enable Portunus, a self-contained user/group management and authentication service for LDAP.

GID where the socket should be set when protocol=socket

List of rule groups to import or update.

Enables rtl-sdr udev rules, ensures 'plugdev' group exists, and blacklists DVB kernel modules

Enable Docker support

Additional groups under which Traefik runs

Installs flashrom and configures udev rules for programmers used by flashrom

Usernames to be added to the "openrazer" group, so that they can start and interact with the OpenRazer userspace daemon.

Range of group IDs used for the creation of system groups by useradd, groupadd, or newusers

Range of group IDs used for the creation of system groups by useradd, groupadd, or newusers

Whether or not to enable the headless Aria2 daemon service

Group where a user must be a member of to gain superuser rights.

This option will ensure that team memberships for OpenID Connect users are dynamic and synchronized with membership of OpenID Connect groups or assigned roles

Which LDAP group attribute to search for authorized role ARNs

Options used for the default rules, granting root and the wheel group permission to run any command as any user.

Whether to use NetworkManager to obtain an IP address and other configuration for all network interfaces that are not manually configured

The user of the file

Options used for the default rules, granting root and the wheel group permission to run any command as any user.

User or group to restrict

Whether to install and set up mouse-actions and it's udev rules

Indicates whether this is an account for a “real” user

A changegroup script which is installed in every mercurial repo

By default, all networks will get same priority group (0)

A list of names of users that have additional rights when connecting to the Nix daemon, such as the ability to specify additional binary caches, or to import unsigned NARs

Enable acpilight

Data directory for Quickwit

Data directory for Temporal

Make the Podman socket available in place of the Docker socket, so Docker tools can find the Podman socket

Whether to enable automatically creating the user given in services.dovecot.user and the group given in services.dovecot.group.

Whether to enable CoreCtrl, a tool to overclock amd graphics cards and processors

Enables sheep_net udev rules, ensures 'sheep_net' group exists, and adds sheep-net to boot.kernelModules and boot.extraModulePackages

Whether users of the wheel group must provide a password to run commands as super user via run0.

Defines the name of the claim that contains group memberships or role assignments in the provider's userinfo endpoint

Whether users of the wheel group must provide a password to run commands as super user via sudo.

Whether users of the wheel group must provide a password to run commands as super user via doas.

Whether to enable the feedbackd D-BUS service and udev rules

Whether users of the wheel group must provide a password to run commands as super user via sudo.

Whether to enable libutempter for mosh

Whether to enable libutempter for tmux

Whether to enable mx-puppet-discord is a discord puppeting bridge for matrix

Enables kryoflux udev rules, ensures 'floppy' group exists

List of groups to allow access to this vhost, or null to allow all.

Users to be added to the idevice group.

If enabled, starts a Terraria server

A system group name for this client instance.

A system group name for this client instance.

Set group-write permissions on a USB device

Whether to add Soundmodem to the global environment and configure a wrapper for 'soundmodemconfig' for users in the 'soundmodem' group.

This option will ensure that team memberships for OpenID Connect users are dynamic and synchronized with membership of OpenID Connect groups or assigned roles

Whether to permit root access only to members of group wheel.

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

Primary name for use (as a suffix) in:

• systemd service name,
• hardened user name and group,
• systemd *Directory= names,
• desktop application identification,

Users that intend to use BenchExec

The file mode creation mask for Aria2 service

Whether to enable udev rules for devices supported by libjaylink

The terminal permissions: the login tty will be owned by the TTYGROUP group, and the permissions will be set to TTYPERM

Whether users of the wheel group must provide a password to run commands or edit files with please and pleaseedit respectively.

Whether to enable non-root access to the firmware of UHK keyboards

The user borg is run as

Enable CIS Hardening for RKE2

Whether to assign user roles based on the user's LDAP group memberships

Enable support for attaching AppArmor profiles at the user/group level, e.g., as part of a role based access control scheme.

Include services.beszel.agent.smartmon.package in the Beszel agent path for disk monitoring and add the agent to the disk group.

Data directory for OpenSearch

The user borg serve is run as

A set that will be generated into configuration file, see the SmartDNS README for details of configuration parameters

The terminal permissions: the login tty will be owned by the TTYGROUP group, and the permissions will be set to TTYPERM