File, which is dynamically applied to server-settings.json before startup

Select the encapsulation type:

• ipip to create an IPv4 within IPv4 tunnel (RFC 2003).

• 4in6 to create a 4in6 tunnel (RFC 2473);

• ip6ip6 to create an IPv6 within IPv6 tunnel (RFC 2473);

Whether the container should be restarted during a NixOS configuration switch if its definition has changed.

The domain name for the signal service.

Database name

Path to device node

Force reset of the admin password

The list of interfaces to be moved into the container.

Configure the 'namespaces' section of the registration.yml for the bridge and the server

Hostname of the machine where slurmdbd is running (i.e. name returned by hostname -s).

Configures AWS Signature Version 4 settings.

User account name under which to run shairport-sync

The path to the file used for signing derivation data

Private key to authenticate with.

Local address(es) to use for IKE communication

List of forwarded ports from host to container

Set workgroup name (default WORKGROUP).

DNS name for the urls generated in the cgi.

A file containing the superuser password

Configuration for one or more device IDs

Use childless IKE_SA initiation (allow, prefer, force or never)

Whether the machine is running in an nspawn container

The path to the workdir

Public port number to try to redirect to this machine's Wireguard daemon using UPnP IGD.

Allow normal users to control wpa_supplicant through wpa_gui or wpa_cli

IPv4 address of the interface

IPv6 address of the interface

LiveKit key file holding one or multiple application secrets

Agorakit configuration options to set in the .env file

The IPv4 address assigned to the interface in the container

Name of the corosync cluster.

database name for postgres only

Match displays based on edid instead of name

List of sessions supported with the command used to start each session

Bind to this device for native ethernet operation. all is a pseudo-name which will try to connect to all devices.

Time to schedule IKE reauthentication

Whether to enable ClamAV on-access scanner

If enabled, continuwuity will send a simple GET request periodically to https://continuwuity.org/.well-known/continuwuity/announcements for any new announcements made.

This settings controls how long a tombstone is considered valid

By default, PgBouncer allows only parameters it can keep track of in startup packets: client_encoding, datestyle, timezone and standard_conforming_strings

Name of the default JVB room that will be joined if no special header is included in SIP invite.

Only execute the administrator Sieve scripts for the mailbox configured with services.dovecot2.imapsieve.mailbox..name when the message originates from the indicated mailbox

If both mutableConfig and this option are set, the Nix configuration will take precedence over any settings configured in the server console.

This is the name that will be displayed by NetworkManager and GUIs.

File pointing to preshared key as generated by wg genpsk

Send certificate request payloads to offer trusted root CA certificates to the peer

Protocol to use.

The IPv6 address assigned to the interface in the container

Forcibly import all ZFS pool(s)

A proposal is a set of algorithms

MySQL user name.

Database name to store sms data

The fully qualified domain name to bind to

List of HTTP resources to serve on this listener.

Name of the filter

Automatically assign an IP address to the network interface using the same scheme as virtualisation.vlans.

This option allows you to define Open vSwitches that connect physical networks together

For mysql, if the migrationLocking feature toggle is set, specify the time (in seconds) to wait before failing to lock the database for the migrations.

Only execute the administrator Sieve scripts for the mailbox configured with services.dovecot2.imapsieve.mailbox..name when one of the listed IMAPSIEVE causes apply

Attribute set of additional plugins that will be symlinked to the plugin subdirectory

If set, use NixOS-generated ACME certificate with the specified name for TLS

Sets these config files to the default content

The block device is backed by an encrypted one, adds this device as a initrd luks entry.

Base64 preshared key generated by wg genpsk

User under which mastodon runs

Common name attribute of allowed peer certificates

Common name attribute of allowed peer certificates

Name, your client connects as.

Packaged Helm charts that are linked to /var/lib/rancher/k3s/server/static/charts before k3s starts

Name of the caddy/nginx virtualhost to use and setup.

BookStack configuration options to set in the .env file

Group account name under which to run shairport-sync

Overridden configuration files, written into /etc/rspamd/override.d/{name}.

Controls Link-Local Multicast Name Resolution support (RFC 4795) on the local host

The name of the column in the log table to which the description of the performed operation is stored.

The hostname of the air purification device from which to scrape the metrics.

Whether to wrap the interpreter in a shell script

Defines the base URI for the Hash and URL feature supported by IKEv2

Automatically assign an IP address to the network interface using the same scheme as virtualisation.vlans.

Whether to enable the HTTP/3 protocol

Username for InfluxDB login.

Specifies the initial hashed password for the user, i.e. the hashed password assigned if the user does not already exist

Whether to enable ryzen_smu, a linux kernel driver that exposes access to the SMU (System Management Unit) for certain AMD Ryzen Processors

Subnet mask of the interface, specified as the number of bits in the prefix (64).

Subnet mask of the interface, specified as the number of bits in the prefix (24).

Name of the network tunneling interface.

Server definitions ("stanzas") for the client system-options file

Name of the user the AutoSSH session should run as

List of shells which binaries should be installed to /bin/

HTTP username

The content of this attribute is appended to any address that is missing a host name

Additional arguments passed to each module in addition to ones like lib, config, and pkgs, modulesPath

Enable private repos

The encrypted disk that should be opened before the root filesystem is mounted

Common name attribute of allowed peer certificates

Name of this Mattermost site.

The full path to a file that contains the hash of the user's password

Whether to skip validation of the server's certificate.

Name of database.

Extra settings to add to the generated TOML config.