···

       
58
       
 
       
    firmwarePartitionOffset = mkOption {

     

       
59
       
 
       
      type = types.int;

     

       
60
       
 
       
      default = 8;

     

       
61
       
-
       
      description = ''

     

       
62
       
 
       
        Gap in front of the /boot/firmware partition, in mebibytes (1024×1024

     

       
63
       
 
       
        bytes).

     

       
64
       
 
       
        Can be increased to make more space for boards requiring to dd u-boot

     

···

       
58
       
 
       
    firmwarePartitionOffset = mkOption {

     

       
59
       
 
       
      type = types.int;

     

       
60
       
 
       
      default = 8;

     

       
61
       
+
       
      description = lib.mdDoc ''

     

       
62
       
 
       
        Gap in front of the /boot/firmware partition, in mebibytes (1024×1024

     

       
63
       
 
       
        bytes).

     

       
64
       
 
       
        Can be increased to make more space for boards requiring to dd u-boot

     

···

       
7
       
 
       
in {

     

       
8
       
 
       
  options = {

     

       
9
       
 
       
    programs.feedbackd = {

     

       
10
       
-
       
      enable = mkEnableOption ''

     

       
11
       
 
       
        Whether to enable the feedbackd D-BUS service and udev rules.

     

       
12
       
 
       


     

       
13
       
 
       
        Your user needs to be in the `feedbackd` group to trigger effects.

     

       
14
       
-
       
      '';

     

       
15
       
 
       
      package = mkOption {

     

       
16
       
 
       
        description = lib.mdDoc ''

     

       
17
       
 
       
          Which feedbackd package to use.

     

···

       
7
       
 
       
in {

     

       
8
       
 
       
  options = {

     

       
9
       
 
       
    programs.feedbackd = {

     

       
10
       
+
       
      enable = mkEnableOption (lib.mdDoc ''

     

       
11
       
 
       
        Whether to enable the feedbackd D-BUS service and udev rules.

     

       
12
       
 
       


     

       
13
       
 
       
        Your user needs to be in the `feedbackd` group to trigger effects.

     

       
14
       
+
       
      '');

     

       
15
       
 
       
      package = mkOption {

     

       
16
       
 
       
        description = lib.mdDoc ''

     

       
17
       
 
       
          Which feedbackd package to use.

     

···

       
182
       
 
       
        pruneOpts = mkOption {

     

       
183
       
 
       
          type = types.listOf types.str;

     

       
184
       
 
       
          default = [ ];

     

       
185
       
-
       
          description = ''

     

       
186
       
-
       
            A list of options (--keep-* et al.) for 'restic forget

     

       
187
       
 
       
            --prune', to automatically prune old snapshots.  The

     

       
188
       
 
       
            'forget' command is run *after* the 'backup' command, so

     

       
189
       
-
       
            keep that in mind when constructing the --keep-* options.

     

       
190
       
 
       
          '';

     

       
191
       
 
       
          example = [

     

       
192
       
 
       
            "--keep-daily 7"

     

···

       
182
       
 
       
        pruneOpts = mkOption {

     

       
183
       
 
       
          type = types.listOf types.str;

     

       
184
       
 
       
          default = [ ];

     

       
185
       
+
       
          description = lib.mdDoc ''

     

       
186
       
+
       
            A list of options (--keep-\* et al.) for 'restic forget

     

       
187
       
 
       
            --prune', to automatically prune old snapshots.  The

     

       
188
       
 
       
            'forget' command is run *after* the 'backup' command, so

     

       
189
       
+
       
            keep that in mind when constructing the --keep-\* options.

     

       
190
       
 
       
          '';

     

       
191
       
 
       
          example = [

     

       
192
       
 
       
            "--keep-daily 7"

     

···

       
316
       
 
       
      paths = mkOption {

     

       
317
       
 
       
        type = with types; attrsOf (submodule pathOpts);

     

       
318
       
 
       
        default = { };

     

       
319
       
-
       
        description = ''

     

       
320
       
 
       
          Attribute set of paths to rotate. The order each block appears in the generated configuration file

     

       
321
       
-
       
          can be controlled by the <link linkend="opt-services.logrotate.paths._name_.priority">priority</link> option

     

       
322
       
 
       
          using the same semantics as `lib.mkOrder`. Smaller values have a greater priority.

     

       
323
       
-
       
          This setting has been deprecated in favor of <link linkend="opt-services.logrotate.settings">logrotate settings</link>.

     

       
324
       
 
       
        '';

     

       
325
       
 
       
        example = literalExpression ''

     

       
326
       
 
       
          {

     

···

       
316
       
 
       
      paths = mkOption {

     

       
317
       
 
       
        type = with types; attrsOf (submodule pathOpts);

     

       
318
       
 
       
        default = { };

     

       
319
       
+
       
        description = lib.mdDoc ''

     

       
320
       
 
       
          Attribute set of paths to rotate. The order each block appears in the generated configuration file

     

       
321
       
+
       
          can be controlled by the [priority](#opt-services.logrotate.paths._name_.priority) option

     

       
322
       
 
       
          using the same semantics as `lib.mkOrder`. Smaller values have a greater priority.

     

       
323
       
+
       
          This setting has been deprecated in favor of [logrotate settings](#opt-services.logrotate.settings).

     

       
324
       
 
       
        '';

     

       
325
       
 
       
        example = literalExpression ''

     

       
326
       
 
       
          {

     

···

       
45
       
 
       
        type = types.str;

     

       
46
       
 
       
        example = "selector1";

     

       
47
       
 
       
        description =

     

       
48
       
-
       
          ''

     

       
49
       
 
       
            The selector to use for DKIM key identification.

     

       
50
       
 
       


     

       
51
       
 
       
            For example, if 'selector1' is used here, then for each domain

     

···

       
45
       
 
       
        type = types.str;

     

       
46
       
 
       
        example = "selector1";

     

       
47
       
 
       
        description =

     

       
48
       
+
       
          lib.mdDoc ''

     

       
49
       
 
       
            The selector to use for DKIM key identification.

     

       
50
       
 
       


     

       
51
       
 
       
            For example, if 'selector1' is used here, then for each domain

     

···

       
239
       
 
       
      server = mkOption {

     

       
240
       
 
       
        type = enum [ "nginx" "none" ];

     

       
241
       
 
       
        default = "nginx";

     

       
242
       
-
       
        description = ''

     

       
243
       
 
       
          The webserver used for the Sympa web interface. Set it to `none` if you want to configure it yourself.

     

       
244
       
 
       
          Further nginx configuration can be done by adapting

     

       
245
       
-
       
          <option>services.nginx.virtualHosts.«name»</option>.

     

       
246
       
 
       
        '';

     

       
247
       
 
       
      };

     

       
248
       
 
       


     

···

       
239
       
 
       
      server = mkOption {

     

       
240
       
 
       
        type = enum [ "nginx" "none" ];

     

       
241
       
 
       
        default = "nginx";

     

       
242
       
+
       
        description = lib.mdDoc ''

     

       
243
       
 
       
          The webserver used for the Sympa web interface. Set it to `none` if you want to configure it yourself.

     

       
244
       
 
       
          Further nginx configuration can be done by adapting

     

       
245
       
+
       
          {option}`services.nginx.virtualHosts.«name»`.

     

       
246
       
 
       
        '';

     

       
247
       
 
       
      };

     

       
248
       
 
       


     

···

       
76
       
 
       
        type = with types; attrsOf

     

       
77
       
 
       
          (submodule {

     

       
78
       
 
       
            options = {

     

       
79
       
-
       
              enable = mkEnableOption ''

     

       
80
       
 
       
                building of firmware and addition of klipper-flash tools for manual flashing.

     

       
81
       
 
       
                This will add `klipper-flash-$mcu` scripts to your environment which can be called to flash the firmware.

     

       
82
       
-
       
              '';

     

       
83
       
 
       
              configFile = mkOption {

     

       
84
       
 
       
                type = path;

     

       
85
       
 
       
                description = lib.mdDoc "Path to firmware config which is generated using `klipper-genconf`";

     

···

       
76
       
 
       
        type = with types; attrsOf

     

       
77
       
 
       
          (submodule {

     

       
78
       
 
       
            options = {

     

       
79
       
+
       
              enable = mkEnableOption (lib.mdDoc ''

     

       
80
       
 
       
                building of firmware and addition of klipper-flash tools for manual flashing.

     

       
81
       
 
       
                This will add `klipper-flash-$mcu` scripts to your environment which can be called to flash the firmware.

     

       
82
       
+
       
              '');

     

       
83
       
 
       
              configFile = mkOption {

     

       
84
       
 
       
                type = path;

     

       
85
       
 
       
                description = lib.mdDoc "Path to firmware config which is generated using `klipper-genconf`";

     

···

       
38
       
 
       
        options.general.min_fan1_speed = mkOption {

     

       
39
       
 
       
          type = types.nullOr types.int;

     

       
40
       
 
       
          default = 2000;

     

       
41
       
-
       
          description = ''

     

       
42
       
 
       
            You can check minimum and maximum fan limits with

     

       
43
       
-
       
            "cat /sys/devices/platform/applesmc.768/fan*_min" and

     

       
44
       
-
       
            "cat /sys/devices/platform/applesmc.768/fan*_max" respectively.

     

       
45
       
 
       
            Setting to null implies using default value from applesmc.

     

       
46
       
 
       
          '';

     

       
47
       
 
       
        };

     

···

       
38
       
 
       
        options.general.min_fan1_speed = mkOption {

     

       
39
       
 
       
          type = types.nullOr types.int;

     

       
40
       
 
       
          default = 2000;

     

       
41
       
+
       
          description = lib.mdDoc ''

     

       
42
       
 
       
            You can check minimum and maximum fan limits with

     

       
43
       
+
       
            `cat /sys/devices/platform/applesmc.768/fan*_min` and

     

       
44
       
+
       
            `cat /sys/devices/platform/applesmc.768/fan*_max` respectively.

     

       
45
       
 
       
            Setting to null implies using default value from applesmc.

     

       
46
       
 
       
          '';

     

       
47
       
 
       
        };

     

···

       
66
       
 
       
in {

     

       
67
       
 
       
  options = {

     

       
68
       
 
       
    services.zoneminder = with lib; {

     

       
69
       
-
       
      enable = lib.mkEnableOption ''

     

       
70
       
 
       
        ZoneMinder

     

       
71
       
 
       


     

       
72
       
 
       
        If you intend to run the database locally, you should set

     
···

       
75
       
 
       
        and database user as well as populate the database yourself.

     

       
76
       
 
       
        Additionally, you will need to run `zmupdate.pl` yourself when

     

       
77
       
 
       
        upgrading to a newer version.

     

       
78
       
-
       
      '';

     

       
79
       
 
       


     

       
80
       
 
       
      webserver = mkOption {

     

       
81
       
 
       
        type = types.enum [ "nginx" "none" ];

     

···

       
66
       
 
       
in {

     

       
67
       
 
       
  options = {

     

       
68
       
 
       
    services.zoneminder = with lib; {

     

       
69
       
+
       
      enable = lib.mkEnableOption (lib.mdDoc ''

     

       
70
       
 
       
        ZoneMinder

     

       
71
       
 
       


     

       
72
       
 
       
        If you intend to run the database locally, you should set

     
···

       
75
       
 
       
        and database user as well as populate the database yourself.

     

       
76
       
 
       
        Additionally, you will need to run `zmupdate.pl` yourself when

     

       
77
       
 
       
        upgrading to a newer version.

     

       
78
       
+
       
      '');

     

       
79
       
 
       


     

       
80
       
 
       
      webserver = mkOption {

     

       
81
       
 
       
        type = types.enum [ "nginx" "none" ];

     

···

       
116
       
 
       
      mode = mkOption {

     

       
117
       
 
       
        default = "standalone";

     

       
118
       
 
       
        type = types.str;

     

       
119
       
-
       
        description = ''

     

       
120
       
 
       
          The MODE determines which part of the NUT is to be started, and

     

       
121
       
 
       
          which configuration files must be modified.

     

       
122
       
 
       


     

···

       
116
       
 
       
      mode = mkOption {

     

       
117
       
 
       
        default = "standalone";

     

       
118
       
 
       
        type = types.str;

     

       
119
       
+
       
        description = lib.mdDoc ''

     

       
120
       
 
       
          The MODE determines which part of the NUT is to be started, and

     

       
121
       
 
       
          which configuration files must be modified.

     

       
122
       
 
       


     

···

       
59
       
 
       
      interface = mkOption {

     

       
60
       
 
       
        type = types.str;

     

       
61
       
 
       
        default = "127.0.0.1";

     

       
62
       
-
       
        description = ''

     

       
63
       
-
       
          The interface the BitlBee deamon will be listening to.  If `127.0.0.1',

     

       
64
       
-
       
          only clients on the local host can connect to it; if `0.0.0.0', clients

     

       
65
       
 
       
          can access it from any network interface.

     

       
66
       
 
       
        '';

     

       
67
       
 
       
      };

     

···

       
59
       
 
       
      interface = mkOption {

     

       
60
       
 
       
        type = types.str;

     

       
61
       
 
       
        default = "127.0.0.1";

     

       
62
       
+
       
        description = lib.mdDoc ''

     

       
63
       
+
       
          The interface the BitlBee deamon will be listening to.  If `127.0.0.1`,

     

       
64
       
+
       
          only clients on the local host can connect to it; if `0.0.0.0`, clients

     

       
65
       
 
       
          can access it from any network interface.

     

       
66
       
 
       
        '';

     

       
67
       
 
       
      };

     

···

       
65
       
 
       
                  exit-node = [ "example.loki" ];              # maps all exit traffic to example.loki

     

       
66
       
 
       
                  exit-node = [ "example.loki:100.0.0.0/24" ]; # maps 100.0.0.0/24 to example.loki

     

       
67
       
 
       
                '';

     

       
68
       
-
       
                description = ''

     

       
69
       
 
       
                  Specify a `.loki` address and an optional ip range to use as an exit broker.

     

       
70
       
-
       
                  See <link xlink:href="http://probably.loki/wiki/index.php?title=Exit_Nodes"/> for

     

       
71
       
 
       
                  a list of exit nodes.

     

       
72
       
 
       
                '';

     

       
73
       
 
       
              };

     

···

       
65
       
 
       
                  exit-node = [ "example.loki" ];              # maps all exit traffic to example.loki

     

       
66
       
 
       
                  exit-node = [ "example.loki:100.0.0.0/24" ]; # maps 100.0.0.0/24 to example.loki

     

       
67
       
 
       
                '';

     

       
68
       
+
       
                description = lib.mdDoc ''

     

       
69
       
 
       
                  Specify a `.loki` address and an optional ip range to use as an exit broker.

     

       
70
       
+
       
                  See <http://probably.loki/wiki/index.php?title=Exit_Nodes> for

     

       
71
       
 
       
                  a list of exit nodes.

     

       
72
       
 
       
                '';

     

       
73
       
 
       
              };

     

···

       
11
       
 
       
      type = types.bool;

     

       
12
       
 
       
      default = false;

     

       
13
       
 
       
      description =

     

       
14
       
-
       
        ''

     

       
15
       
 
       
          Whether to enable nftables.  nftables is a Linux-based packet

     

       
16
       
 
       
          filtering framework intended to replace frameworks like iptables.

     

       
17
       
 
       


     
···

       
21
       
 
       
          Note that if you have Docker enabled you will not be able to use

     

       
22
       
 
       
          nftables without intervention. Docker uses iptables internally to

     

       
23
       
 
       
          setup NAT for containers. This module disables the ip_tables kernel

     

       
24
       
-
       
          module, however Docker automatically loads the module. Please see [1]

     

       
0
       
 
       

     

       
25
       
 
       
          for more information.

     

       
26
       
 
       


     

       
27
       
 
       
          There are other programs that use iptables internally too, such as

     

       
28
       
-
       
          libvirt. For information on how the two firewalls interact, see [2].

     

       
29
       
-
       


     

       
30
       
-
       
          [1]: https://github.com/NixOS/nixpkgs/issues/24318#issuecomment-289216273

     

       
31
       
-
       
          [2]: https://wiki.nftables.org/wiki-nftables/index.php/Troubleshooting#Question_4._How_do_nftables_and_iptables_interact_when_used_on_the_same_system.3F

     

       
32
       
 
       
        '';

     

       
33
       
 
       
    };

     

       
34
       
 
       
    networking.nftables.ruleset = mkOption {

     

···

       
11
       
 
       
      type = types.bool;

     

       
12
       
 
       
      default = false;

     

       
13
       
 
       
      description =

     

       
14
       
+
       
        lib.mdDoc ''

     

       
15
       
 
       
          Whether to enable nftables.  nftables is a Linux-based packet

     

       
16
       
 
       
          filtering framework intended to replace frameworks like iptables.

     

       
17
       
 
       


     
···

       
21
       
 
       
          Note that if you have Docker enabled you will not be able to use

     

       
22
       
 
       
          nftables without intervention. Docker uses iptables internally to

     

       
23
       
 
       
          setup NAT for containers. This module disables the ip_tables kernel

     

       
24
       
+
       
          module, however Docker automatically loads the module. Please see

     

       
25
       
+
       
          <https://github.com/NixOS/nixpkgs/issues/24318#issuecomment-289216273>

     

       
26
       
 
       
          for more information.

     

       
27
       
 
       


     

       
28
       
 
       
          There are other programs that use iptables internally too, such as

     

       
29
       
+
       
          libvirt. For information on how the two firewalls interact, see

     

       
30
       
+
       
          <https://wiki.nftables.org/wiki-nftables/index.php/Troubleshooting#Question_4._How_do_nftables_and_iptables_interact_when_used_on_the_same_system.3F>.

     

       
0
       
 
       

     

       
0
       
 
       

     

       
31
       
 
       
        '';

     

       
32
       
 
       
    };

     

       
33
       
 
       
    networking.nftables.ruleset = mkOption {

     

···

       
47
       
 
       
      interfaces = mkOption {

     

       
48
       
 
       
        type = types.listOf types.str;

     

       
49
       
 
       
        default = [ "127.0.0.1" ];

     

       
50
       
-
       
        description = ''

     

       
51
       
-
       
          The interfaces the Quassel daemon will be listening to.  If `[ 127.0.0.1 ]',

     

       
52
       
-
       
          only clients on the local host can connect to it; if `[ 0.0.0.0 ]', clients

     

       
53
       
 
       
          can access it from any network interface.

     

       
54
       
 
       
        '';

     

       
55
       
 
       
      };

     

···

       
47
       
 
       
      interfaces = mkOption {

     

       
48
       
 
       
        type = types.listOf types.str;

     

       
49
       
 
       
        default = [ "127.0.0.1" ];

     

       
50
       
+
       
        description = lib.mdDoc ''

     

       
51
       
+
       
          The interfaces the Quassel daemon will be listening to.  If `[ 127.0.0.1 ]`,

     

       
52
       
+
       
          only clients on the local host can connect to it; if `[ 0.0.0.0 ]`, clients

     

       
53
       
 
       
          can access it from any network interface.

     

       
54
       
 
       
        '';

     

       
55
       
 
       
      };

     

···

       
131
       
 
       
    seahubExtraConf = mkOption {

     

       
132
       
 
       
      default = "";

     

       
133
       
 
       
      type = types.lines;

     

       
134
       
-
       
      description = ''

     

       
135
       
 
       
        Extra config to append to `seahub_settings.py` file.

     

       
136
       
-
       
        Refer to <link xlink:href="https://manual.seafile.com/config/seahub_settings_py/"/>

     

       
137
       
 
       
        for all available options.

     

       
138
       
 
       
      '';

     

       
139
       
 
       
    };

     

···

       
131
       
 
       
    seahubExtraConf = mkOption {

     

       
132
       
 
       
      default = "";

     

       
133
       
 
       
      type = types.lines;

     

       
134
       
+
       
      description = lib.mdDoc ''

     

       
135
       
 
       
        Extra config to append to `seahub_settings.py` file.

     

       
136
       
+
       
        Refer to <https://manual.seafile.com/config/seahub_settings_py/>

     

       
137
       
 
       
        for all available options.

     

       
138
       
 
       
      '';

     

       
139
       
 
       
    };

     

···

       
79
       
 
       
    acceptProxyIP = mkOption {

     

       
80
       
 
       
      type = types.listOf types.str;

     

       
81
       
 
       
      default = [];

     

       
82
       
-
       
      description = ''

     

       
83
       
 
       
        Allow the specified IPs to act as a proxy. Proxys have the ability to

     

       
84
       
 
       
        overwrite the remote and local connection addresses (via the X-Forwarded-\*

     

       
85
       
 
       
        HTTP header fields). The special name "localhost" accepts the loopback

     

···

       
79
       
 
       
    acceptProxyIP = mkOption {

     

       
80
       
 
       
      type = types.listOf types.str;

     

       
81
       
 
       
      default = [];

     

       
82
       
+
       
      description = lib.mdDoc ''

     

       
83
       
 
       
        Allow the specified IPs to act as a proxy. Proxys have the ability to

     

       
84
       
 
       
        overwrite the remote and local connection addresses (via the X-Forwarded-\*

     

       
85
       
 
       
        HTTP header fields). The special name "localhost" accepts the loopback

     

···

       
22
       
 
       
  ];

     

       
23
       
 
       


     

       
24
       
 
       
  options.services.x2goserver = {

     

       
25
       
-
       
    enable = mkEnableOption "x2goserver" // {

     

       
26
       
 
       
      description = ''

     

       
27
       
 
       
        Enables the x2goserver module.

     

       
28
       
 
       
        NOTE: This will create a good amount of symlinks in `/usr/local/bin`

     

···

       
22
       
 
       
  ];

     

       
23
       
 
       


     

       
24
       
 
       
  options.services.x2goserver = {

     

       
25
       
+
       
    enable = mkEnableOption (lib.mdDoc "x2goserver") // {

     

       
26
       
 
       
      description = ''

     

       
27
       
 
       
        Enables the x2goserver module.

     

       
28
       
 
       
        NOTE: This will create a good amount of symlinks in `/usr/local/bin`

     

···

       
72
       
 
       
    enableNotifications = mkOption {

     

       
73
       
 
       
      type = types.bool;

     

       
74
       
 
       
      default = false;

     

       
75
       
-
       
      description = ''

     

       
76
       
 
       
        Send notifications about killed processes via the system d-bus.

     

       
77
       
 
       


     

       
78
       
 
       
        WARNING: enabling this option (while convenient) should *not* be done on a

     
···

       
80
       
 
       
        local user to DoS your session by spamming notifications.

     

       
81
       
 
       


     

       
82
       
 
       
        To actually see the notifications in your GUI session, you need to have

     

       
83
       
-
       
        <literal>systembus-notify</literal> running as your user, which this

     

       
84
       
-
       
        option handles by enabling <option>services.systembus-notify</option>.

     

       
85
       
 
       


     

       
86
       
-
       
        See <link xlink:href="https://github.com/rfjakob/earlyoom#notifications">README</link> for details.

     

       
87
       
 
       
      '';

     

       
88
       
 
       
    };

     

       
89
       
 
       


     

···

       
72
       
 
       
    enableNotifications = mkOption {

     

       
73
       
 
       
      type = types.bool;

     

       
74
       
 
       
      default = false;

     

       
75
       
+
       
      description = lib.mdDoc ''

     

       
76
       
 
       
        Send notifications about killed processes via the system d-bus.

     

       
77
       
 
       


     

       
78
       
 
       
        WARNING: enabling this option (while convenient) should *not* be done on a

     
···

       
80
       
 
       
        local user to DoS your session by spamming notifications.

     

       
81
       
 
       


     

       
82
       
 
       
        To actually see the notifications in your GUI session, you need to have

     

       
83
       
+
       
        `systembus-notify` running as your user, which this

     

       
84
       
+
       
        option handles by enabling {option}`services.systembus-notify`.

     

       
85
       
 
       


     

       
86
       
+
       
        See [README](https://github.com/rfjakob/earlyoom#notifications) for details.

     

       
87
       
 
       
      '';

     

       
88
       
 
       
    };

     

       
89
       
 
       


     

···

       
8
       
 
       
in

     

       
9
       
 
       
{

     

       
10
       
 
       
  options.services.systembus-notify = {

     

       
11
       
-
       
    enable = mkEnableOption ''

     

       
12
       
 
       
      System bus notification support

     

       
13
       
 
       


     

       
14
       
 
       
      WARNING: enabling this option (while convenient) should *not* be done on a

     

       
15
       
 
       
      machine where you do not trust the other users as it allows any other

     

       
16
       
 
       
      local user to DoS your session by spamming notifications.

     

       
17
       
-
       
    '';

     

       
18
       
 
       
  };

     

       
19
       
 
       


     

       
20
       
 
       
  config = mkIf cfg.enable {

     

···

       
8
       
 
       
in

     

       
9
       
 
       
{

     

       
10
       
 
       
  options.services.systembus-notify = {

     

       
11
       
+
       
    enable = mkEnableOption (lib.mdDoc ''

     

       
12
       
 
       
      System bus notification support

     

       
13
       
 
       


     

       
14
       
 
       
      WARNING: enabling this option (while convenient) should *not* be done on a

     

       
15
       
 
       
      machine where you do not trust the other users as it allows any other

     

       
16
       
 
       
      local user to DoS your session by spamming notifications.

     

       
17
       
+
       
    '');

     

       
18
       
 
       
  };

     

       
19
       
 
       


     

       
20
       
 
       
  config = mkIf cfg.enable {

     

···

       
108
       
 
       
            type = types.str;

     

       
109
       
 
       
            default = "127.0.0.1";

     

       
110
       
 
       
            example = "0.0.0.0";

     

       
111
       
-
       
            description = ''

     

       
112
       
 
       
              Where to listen for RPC connections.

     

       
113
       
-
       
              Use \"0.0.0.0\" to listen on all interfaces.

     

       
114
       
 
       
            '';

     

       
115
       
 
       
          };

     

       
116
       
 
       
          options.rpc-port = mkOption {

     

···

       
108
       
 
       
            type = types.str;

     

       
109
       
 
       
            default = "127.0.0.1";

     

       
110
       
 
       
            example = "0.0.0.0";

     

       
111
       
+
       
            description = lib.mdDoc ''

     

       
112
       
 
       
              Where to listen for RPC connections.

     

       
113
       
+
       
              Use `0.0.0.0` to listen on all interfaces.

     

       
114
       
 
       
            '';

     

       
115
       
 
       
          };

     

       
116
       
 
       
          options.rpc-port = mkOption {

     

···

       
463
       
 
       
            type = types.enum [ "host" "guest" ];

     

       
464
       
 
       
            default = "host";

     

       
465
       
 
       
            description =

     

       
466
       
-
       
              ''

     

       
467
       
 
       
                Controls the direction in which the ports are mapped:

     

       
468
       
 
       


     

       
469
       
-
       
                - <literal>"host"</literal> means traffic from the host ports

     

       
470
       
-
       
                is forwarded to the given guest port.

     

       
471
       
-
       


     

       
472
       
-
       
                - <literal>"guest"</literal> means traffic from the guest ports

     

       
473
       
-
       
                is forwarded to the given host port.

     

       
474
       
 
       
              '';

     

       
475
       
 
       
          };

     

       
476
       
 
       
          options.proto = mkOption {

     

···

       
463
       
 
       
            type = types.enum [ "host" "guest" ];

     

       
464
       
 
       
            default = "host";

     

       
465
       
 
       
            description =

     

       
466
       
+
       
              lib.mdDoc ''

     

       
467
       
 
       
                Controls the direction in which the ports are mapped:

     

       
468
       
 
       


     

       
469
       
+
       
                - `"host"` means traffic from the host ports

     

       
470
       
+
       
                  is forwarded to the given guest port.

     

       
471
       
+
       
                - `"guest"` means traffic from the guest ports

     

       
472
       
+
       
                  is forwarded to the given host port.

     

       
0
       
 
       

     

       
473
       
 
       
              '';

     

       
474
       
 
       
          };

     

       
475
       
 
       
          options.proto = mkOption {