Whether to periodically upload logs to Clublog

Whether to periodically prune gitlab runner's Docker resources

Name of HTTP request header used for dynamic prefixing of UI links and redirects

Storage quota for the repository

Directory that holds the TSM node's password information.

Bulk PDF import from consume directory

List of sudoers entries to configure in /etc/nsswitch.conf

Default working directory for server (server-working-dir in rserver.conf).

Ignore the user configures. Warning: When this is enabled, the user config files are totally ignored and the user dict can't be saved and loaded.

Allow the service to create and use its own config file inside the dataDir as configured by services.mediatomb.dataDir

Path to the file containing the password for the root user if auth is enabled.

If a user has no email address, combine a username prefix with a suffix value to form an email.

Remove users from bitwarden groups if no longer in the ldap group.

When enabled, the stargazer process will be given CAP_SETGID and CAP_SETUID so that it can run cgi processes as a different user

Whether to periodically update the Clublog SCP database

If a Store doesn't send any data in this specified duration then a Store will be ignored and partial data will be returned if it's enabled. 0 disables timeout

Plugins to enable

If enabled, pam_wallet will attempt to automatically unlock the user's default KDE wallet upon login

Conditions to make outbound packets go through this redsocks instance

The meilisearch package to use

Name of HTTP request header used for dynamic prefixing of UI links and redirects

Define a lower and upper time value (in HH:MM format) which constitute a time window during which reboots are allowed after an upgrade

The DankMaterialShell package to use for the greeter

Whether to open the firewall ports for Reposilite

When enabled, will automatically register the "dsseries" SANE backend

If enabled, a Fontconfig configuration file will be built pointing to a set of default fonts

Whether to enable intra-zone forwarding

The pathname of the IMAP configuration directory.

List of forwarded ports from the external interface to internal destinations by using DNAT

Attribute for a name of group.

Attribute for a users email.

Directory to write the output to.

Whether to run shellcheck on the generated scripts for systemd units

Whether to enable U2F support in the i3lock program

Check redirects for manualHTML.

Attribute that lists members in a LDAP group.

If GitLab container registry should be enabled by default for projects.

Enable billing Cron-Jobs on the local instance

Some servers have invalid or self-signed certificates

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Allow localhost redirects

Maximum estimated error threshold for the rtcautotrim command

Environment variables which are read by healthchecks (local)_settings.py

Whether the service should be reloaded during a NixOS configuration switch if its definition has changed

If enabled, periodically check the journal with journalwatch and report the results by mail.

Whether to enable hardware accelerated graphics drivers

Atomically update the host OS, container images, portable service images or other sources

If inspectHttps is enabled, the time generated HTTPS certificates will be stored in a temporary directory for reuse

Whether to clear the configuration of the interfaces that were set up in the initrd right before stage 2 takes over

Enables middle button emulation

Additional Munin plugins to activate

Whether or not SSL verification should be enabled for outgoing connections to the homeserver.

Environment variables which are read by healthchecks (local)_settings.py

Set of paths that should be intercepted and rewritten while checking the ruleset using pkgs.buildPackages.libredirect.

Directory for storing certificates to be used by Neo4j for TLS connections

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

The hostname at which you wish firefly-iii-data-importer to be served

The attribute that contains the users username.

Whether to enable the HTTP/2 protocol

Enables settings required for NetBird's routing features: Network Resources, Network Routes & Exit Nodes

Enable automatic config reload on config change

Whether the service should be reloaded during a NixOS configuration switch if its definition has changed

When IPv6 is enabled with SLAAC, this option controls the use of temporary address (aka privacy extensions) on this interface

Enables or disables drag lock during tapping behavior

In direct boot situations, you may want to influence the initrd to load to use your own customized payload

PostgreSQL package to use

Provides a custom seed for the RANDSTRUCT security option of the Linux kernel

Environment variables to set for the service

Whether to enable render offload support using the NVIDIA proprietary driver via PRIME

Enables MOBIKE on IKEv2 connections

The package that provides the 32-bit driver set

Additional Munin plugins to autoconfigure, using munin-node-configure --suggest

Whether to enable nginx reverse proxy for derper

Remove and re-add users/groups, See https://bitwarden.com/help/user-group-filters/#overwriting-syncs for more details.

When not set to null this option defines the path at which the unbound remote control socket should be created at

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Whether to enable tournament mode

If enabled, pam_gnome_keyring will attempt to automatically unlock the user's default Gnome keyring upon login

Attribute that lists a user's creation date.

Unless enabled, encryption keys can be easily recovered by an attacker with physical access to any machine with PCMCIA, ExpressCard, ThunderBolt or FireWire port

Adds uwsgi_pass directive and sets recommended proxy headers if recommendedUwsgiSettings is enabled.

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Attribute set of paths whose content is copied to the extensions subdirectory of the MediaWiki installation and enabled in configuration

If enabled, allow principal names containing (.) dots

Address to access the nginx status page