···

       
95
       
 
       
              minimal, "recommended" includes "required", and

     

       
96
       
 
       
              "suggested" includes "recommended".

     

       
97
       
 
       


     

       
98
       
-
       
              See: https://systemd.io/ELF_DLOPEN_METADATA/

     

       
99
       
 
       
            '';

     

       
100
       
 
       
          };

     

       
101
       
 
       


     

···

       
95
       
 
       
              minimal, "recommended" includes "required", and

     

       
96
       
 
       
              "suggested" includes "recommended".

     

       
97
       
 
       


     

       
98
       
+
       
              See: <https://systemd.io/ELF_DLOPEN_METADATA/>

     

       
99
       
 
       
            '';

     

       
100
       
 
       
          };

     

       
101
       
 
       


     

···

       
27
       
 
       
    config = lib.mkOption {

     

       
28
       
 
       
      default = { };

     

       
29
       
 
       
      description = ''

     

       
30
       
-
       
        Additional config entries for the fw-fanctrl service (documentation: https://github.com/TamtamHero/fw-fanctrl/blob/main/doc/configuration.md)

     

       
31
       
 
       
      '';

     

       
32
       
 
       
      type = lib.types.submodule {

     

       
33
       
 
       
        freeformType = configFormat.type;

     

···

       
27
       
 
       
    config = lib.mkOption {

     

       
28
       
 
       
      default = { };

     

       
29
       
 
       
      description = ''

     

       
30
       
+
       
        Additional config entries for the fw-fanctrl service (documentation: <https://github.com/TamtamHero/fw-fanctrl/blob/main/doc/configuration.md>)

     

       
31
       
 
       
      '';

     

       
32
       
 
       
      type = lib.types.submodule {

     

       
33
       
 
       
        freeformType = configFormat.type;

     

···

       
139
       
 
       
      default = defaultSettings;

     

       
140
       
 
       
      description = ''

     

       
141
       
 
       
        Configuration to be written to the libncf-nci configuration files.

     

       
142
       
-
       
        To understand the configuration format, refer to https://github.com/NXPNFCLinux/linux_libnfc-nci/tree/master/conf.

     

       
143
       
 
       
      '';

     

       
144
       
 
       
      type = lib.types.attrs;

     

       
145
       
 
       
    };

     

···

       
139
       
 
       
      default = defaultSettings;

     

       
140
       
 
       
      description = ''

     

       
141
       
 
       
        Configuration to be written to the libncf-nci configuration files.

     

       
142
       
+
       
        To understand the configuration format, refer to <https://github.com/NXPNFCLinux/linux_libnfc-nci/tree/master/conf>.

     

       
143
       
 
       
      '';

     

       
144
       
 
       
      type = lib.types.attrs;

     

       
145
       
 
       
    };

     

···

       
229
       
 
       


     

       
230
       
 
       
        Warning: This feature is relatively new, depending on your system this might

     

       
231
       
 
       
        work poorly. AMD support, especially so.

     

       
232
       
-
       
        See: https://forums.developer.nvidia.com/t/the-all-new-outputsink-feature-aka-reverse-prime/129828

     

       
233
       
 
       


     

       
234
       
 
       
        Note that this option only has any effect if the "nvidia" driver is specified

     

       
235
       
 
       
        in {option}`services.xserver.videoDrivers`, and it should preferably

     

···

       
229
       
 
       


     

       
230
       
 
       
        Warning: This feature is relatively new, depending on your system this might

     

       
231
       
 
       
        work poorly. AMD support, especially so.

     

       
232
       
+
       
        See: <https://forums.developer.nvidia.com/t/the-all-new-outputsink-feature-aka-reverse-prime/129828>

     

       
233
       
 
       


     

       
234
       
 
       
        Note that this option only has any effect if the "nvidia" driver is specified

     

       
235
       
 
       
        in {option}`services.xserver.videoDrivers`, and it should preferably

     

···

       
268
       
 
       
        AutoConfig files can be used to set and lock preferences that are not covered

     

       
269
       
 
       
        by the policies.json for Mac and Linux. This method can be used to automatically

     

       
270
       
 
       
        change user preferences or prevent the end user from modifiying specific

     

       
271
       
-
       
        preferences by locking them. More info can be found in https://support.mozilla.org/en-US/kb/customizing-firefox-using-autoconfig.

     

       
272
       
 
       
      '';

     

       
273
       
 
       
    };

     

       
274
       
 
       


     
···

       
279
       
 
       
        AutoConfig files can be used to set and lock preferences that are not covered

     

       
280
       
 
       
        by the policies.json for Mac and Linux. This method can be used to automatically

     

       
281
       
 
       
        change user preferences or prevent the end user from modifiying specific

     

       
282
       
-
       
        preferences by locking them. More info can be found in https://support.mozilla.org/en-US/kb/customizing-firefox-using-autoconfig.

     

       
283
       
 
       


     

       
284
       
 
       
        Files are concated and autoConfig is appended.

     

       
285
       
 
       
      '';

     

···

       
268
       
 
       
        AutoConfig files can be used to set and lock preferences that are not covered

     

       
269
       
 
       
        by the policies.json for Mac and Linux. This method can be used to automatically

     

       
270
       
 
       
        change user preferences or prevent the end user from modifiying specific

     

       
271
       
+
       
        preferences by locking them. More info can be found in <https://support.mozilla.org/en-US/kb/customizing-firefox-using-autoconfig>.

     

       
272
       
 
       
      '';

     

       
273
       
 
       
    };

     

       
274
       
 
       


     
···

       
279
       
 
       
        AutoConfig files can be used to set and lock preferences that are not covered

     

       
280
       
 
       
        by the policies.json for Mac and Linux. This method can be used to automatically

     

       
281
       
 
       
        change user preferences or prevent the end user from modifiying specific

     

       
282
       
+
       
        preferences by locking them. More info can be found in <https://support.mozilla.org/en-US/kb/customizing-firefox-using-autoconfig>.

     

       
283
       
 
       


     

       
284
       
 
       
        Files are concated and autoConfig is appended.

     

       
285
       
 
       
      '';

     

···

       
22
       
 
       
      description = ''

     

       
23
       
 
       
        Lazygit configuration.

     

       
24
       
 
       


     

       
25
       
-
       
        See https://github.com/jesseduffield/lazygit/blob/master/docs/Config.md for documentation.

     

       
26
       
 
       
      '';

     

       
27
       
 
       
    };

     

       
28
       
 
       
  };

     

···

       
22
       
 
       
      description = ''

     

       
23
       
 
       
        Lazygit configuration.

     

       
24
       
 
       


     

       
25
       
+
       
        See <https://github.com/jesseduffield/lazygit/blob/master/docs/Config.md> for documentation.

     

       
26
       
 
       
      '';

     

       
27
       
 
       
    };

     

       
28
       
 
       
  };

     

···

       
17
       
 
       
      default = null;

     

       
18
       
 
       
      description = ''

     

       
19
       
 
       
        The terminal emulator to add to context-entry of nautilus. Supported terminal

     

       
20
       
-
       
        emulators are listed in https://github.com/Stunkymonkey/nautilus-open-any-terminal#supported-terminal-emulators.

     

       
21
       
 
       
      '';

     

       
22
       
 
       
    };

     

       
23
       
 
       
  };

     

···

       
17
       
 
       
      default = null;

     

       
18
       
 
       
      description = ''

     

       
19
       
 
       
        The terminal emulator to add to context-entry of nautilus. Supported terminal

     

       
20
       
+
       
        emulators are listed in <https://github.com/Stunkymonkey/nautilus-open-any-terminal#supported-terminal-emulators>.

     

       
21
       
 
       
      '';

     

       
22
       
 
       
    };

     

       
23
       
 
       
  };

     

···

       
18
       
 
       


     

       
19
       
 
       
        SMU Set and Get for many parameters and CO counts.

     

       
20
       
 
       


     

       
21
       
-
       
        https://github.com/mann1x/ryzen_monitor_ng

     

       
22
       
 
       


     

       
23
       
 
       
        WARNING: Damage cause by use of your AMD processor outside of official AMD specifications or outside of factory settings are not covered under any AMD product warranty and may not be covered by your board or system manufacturer's warranty

     

       
24
       
 
       
      '';

     

···

       
18
       
 
       


     

       
19
       
 
       
        SMU Set and Get for many parameters and CO counts.

     

       
20
       
 
       


     

       
21
       
+
       
        <https://github.com/mann1x/ryzen_monitor_ng>

     

       
22
       
 
       


     

       
23
       
 
       
        WARNING: Damage cause by use of your AMD processor outside of official AMD specifications or outside of factory settings are not covered under any AMD product warranty and may not be covered by your board or system manufacturer's warranty

     

       
24
       
 
       
      '';

     

···

       
62
       
 
       
      description = ''

     

       
63
       
 
       
        Configuration included in `starship.toml`.

     

       
64
       
 
       


     

       
65
       
-
       
        See https://starship.rs/config/#prompt for documentation.

     

       
66
       
 
       
      '';

     

       
67
       
 
       
    };

     

       
68
       
 
       


     

···

       
62
       
 
       
      description = ''

     

       
63
       
 
       
        Configuration included in `starship.toml`.

     

       
64
       
 
       


     

       
65
       
+
       
        See <https://starship.rs/config/#prompt> for documentation.

     

       
66
       
 
       
      '';

     

       
67
       
 
       
    };

     

       
68
       
 
       


     

···

       
37
       
 
       
                    description = ''

     

       
38
       
 
       
                      Configuration included in `${name}.toml`.

     

       
39
       
 
       


     

       
40
       
-
       
                      See https://yazi-rs.github.io/docs/configuration/${name}/ for documentation.

     

       
41
       
 
       
                    '';

     

       
42
       
 
       
                  }

     

       
43
       
 
       
                )

     
···

       
71
       
 
       
      description = ''

     

       
72
       
 
       
        Lua plugins.

     

       
73
       
 
       


     

       
74
       
-
       
        See https://yazi-rs.github.io/docs/plugins/overview/ for documentation.

     

       
75
       
 
       
      '';

     

       
76
       
 
       
      example = lib.literalExpression ''

     

       
77
       
 
       
        {

     
···

       
92
       
 
       
      description = ''

     

       
93
       
 
       
        Pre-made themes.

     

       
94
       
 
       


     

       
95
       
-
       
        See https://yazi-rs.github.io/docs/flavors/overview/ for documentation.

     

       
96
       
 
       
      '';

     

       
97
       
 
       
      example = lib.literalExpression ''

     

       
98
       
 
       
        {

     

···

       
37
       
 
       
                    description = ''

     

       
38
       
 
       
                      Configuration included in `${name}.toml`.

     

       
39
       
 
       


     

       
40
       
+
       
                      See <https://yazi-rs.github.io/docs/configuration/${name}/> for documentation.

     

       
41
       
 
       
                    '';

     

       
42
       
 
       
                  }

     

       
43
       
 
       
                )

     
···

       
71
       
 
       
      description = ''

     

       
72
       
 
       
        Lua plugins.

     

       
73
       
 
       


     

       
74
       
+
       
        See <https://yazi-rs.github.io/docs/plugins/overview/> for documentation.

     

       
75
       
 
       
      '';

     

       
76
       
 
       
      example = lib.literalExpression ''

     

       
77
       
 
       
        {

     
···

       
92
       
 
       
      description = ''

     

       
93
       
 
       
        Pre-made themes.

     

       
94
       
 
       


     

       
95
       
+
       
        See <https://yazi-rs.github.io/docs/flavors/overview/> for documentation.

     

       
96
       
 
       
      '';

     

       
97
       
 
       
      example = lib.literalExpression ''

     

       
98
       
 
       
        {

     

···

       
117
       
 
       
        default = "";

     

       
118
       
 
       
        description = ''

     

       
119
       
 
       
          Shell commands executed before the `oh-my-zsh` is loaded.

     

       
120
       
-
       
          For example, to disable async git prompt write `zstyle ':omz:alpha:lib:git' async-prompt no` (more information https://github.com/ohmyzsh/ohmyzsh?tab=readme-ov-file#async-git-prompt)

     

       
121
       
 
       
        '';

     

       
122
       
 
       
      };

     

       
123
       
 
       
    };

     

···

       
117
       
 
       
        default = "";

     

       
118
       
 
       
        description = ''

     

       
119
       
 
       
          Shell commands executed before the `oh-my-zsh` is loaded.

     

       
120
       
+
       
          For example, to disable async git prompt write `zstyle ':omz:alpha:lib:git' async-prompt no` (more information <https://github.com/ohmyzsh/ohmyzsh?tab=readme-ov-file#async-git-prompt>)

     

       
121
       
 
       
        '';

     

       
122
       
 
       
      };

     

       
123
       
 
       
    };

     

···

       
109
       
 
       
          will be merged into these options by RabbitMQ at runtime to

     

       
110
       
 
       
          form the final configuration.

     

       
111
       
 
       


     

       
112
       
-
       
          See https://www.rabbitmq.com/configure.html#config-items

     

       
113
       
-
       
          For the distinct formats, see https://www.rabbitmq.com/configure.html#config-file-formats

     

       
114
       
 
       
        '';

     

       
115
       
 
       
      };

     

       
116
       
 
       


     
···

       
127
       
 
       
          The contents of this option will be merged into the `configItems`

     

       
128
       
 
       
          by RabbitMQ at runtime to form the final configuration.

     

       
129
       
 
       


     

       
130
       
-
       
          See the second table on https://www.rabbitmq.com/configure.html#config-items

     

       
131
       
-
       
          For the distinct formats, see https://www.rabbitmq.com/configure.html#config-file-formats

     

       
132
       
 
       
        '';

     

       
133
       
 
       
      };

     

       
134
       
 
       


     

···

       
109
       
 
       
          will be merged into these options by RabbitMQ at runtime to

     

       
110
       
 
       
          form the final configuration.

     

       
111
       
 
       


     

       
112
       
+
       
          See <https://www.rabbitmq.com/configure.html#config-items>

     

       
113
       
+
       
          For the distinct formats, see <https://www.rabbitmq.com/configure.html#config-file-formats>

     

       
114
       
 
       
        '';

     

       
115
       
 
       
      };

     

       
116
       
 
       


     
···

       
127
       
 
       
          The contents of this option will be merged into the `configItems`

     

       
128
       
 
       
          by RabbitMQ at runtime to form the final configuration.

     

       
129
       
 
       


     

       
130
       
+
       
          See the second table on <https://www.rabbitmq.com/configure.html#config-items>

     

       
131
       
+
       
          For the distinct formats, see <https://www.rabbitmq.com/configure.html#config-file-formats>

     

       
132
       
 
       
        '';

     

       
133
       
 
       
      };

     

       
134
       
 
       


     

···

       
278
       
 
       
        The content of the system-wide ALSA configuration (/etc/asound.conf).

     

       
279
       
 
       


     

       
280
       
 
       
        Documentation of the configuration language and examples can be found

     

       
281
       
-
       
        in the unofficial ALSA wiki: https://alsa.opensrc.org/Asoundrc

     

       
282
       
 
       
      '';

     

       
283
       
 
       
    };

     

       
284
       
 
       


     

···

       
278
       
 
       
        The content of the system-wide ALSA configuration (/etc/asound.conf).

     

       
279
       
 
       


     

       
280
       
 
       
        Documentation of the configuration language and examples can be found

     

       
281
       
+
       
        in the unofficial ALSA wiki: <https://alsa.opensrc.org/Asoundrc>

     

       
282
       
 
       
      '';

     

       
283
       
 
       
    };

     

       
284
       
 
       


     

···

       
131
       
 
       


     

       
132
       
 
       
    settings = lib.mkOption {

     

       
133
       
 
       
      description = ''

     

       
134
       
-
       
        See https://torsion.org/borgmatic/docs/reference/configuration/

     

       
135
       
 
       
      '';

     

       
136
       
 
       
      default = null;

     

       
137
       
 
       
      type = lib.types.nullOr cfgType;

     
···

       
139
       
 
       


     

       
140
       
 
       
    configurations = lib.mkOption {

     

       
141
       
 
       
      description = ''

     

       
142
       
-
       
        Set of borgmatic configurations, see https://torsion.org/borgmatic/docs/reference/configuration/

     

       
143
       
 
       
      '';

     

       
144
       
 
       
      default = { };

     

       
145
       
 
       
      type = lib.types.attrsOf cfgType;

     

···

       
131
       
 
       


     

       
132
       
 
       
    settings = lib.mkOption {

     

       
133
       
 
       
      description = ''

     

       
134
       
+
       
        See <https://torsion.org/borgmatic/docs/reference/configuration/>

     

       
135
       
 
       
      '';

     

       
136
       
 
       
      default = null;

     

       
137
       
 
       
      type = lib.types.nullOr cfgType;

     
···

       
139
       
 
       


     

       
140
       
 
       
    configurations = lib.mkOption {

     

       
141
       
 
       
      description = ''

     

       
142
       
+
       
        Set of borgmatic configurations, see <https://torsion.org/borgmatic/docs/reference/configuration/>

     

       
143
       
 
       
      '';

     

       
144
       
 
       
      default = { };

     

       
145
       
 
       
      type = lib.types.attrsOf cfgType;

     

···

       
293
       
 
       
          description = ''

     

       
294
       
 
       
            Extra HelmChart field definitions that are merged with the rest of the HelmChart

     

       
295
       
 
       
            custom resource. This can be used to set advanced fields or to overwrite

     

       
296
       
-
       
            generated fields. See https://docs.k3s.io/helm#helmchart-field-definitions

     

       
297
       
 
       
            for possible fields.

     

       
298
       
 
       
          '';

     

       
299
       
 
       
        };

     

···

       
293
       
 
       
          description = ''

     

       
294
       
 
       
            Extra HelmChart field definitions that are merged with the rest of the HelmChart

     

       
295
       
 
       
            custom resource. This can be used to set advanced fields or to overwrite

     

       
296
       
+
       
            generated fields. See <https://docs.k3s.io/helm#helmchart-field-definitions>

     

       
297
       
 
       
            for possible fields.

     

       
298
       
 
       
          '';

     

       
299
       
 
       
        };

     

···

       
86
       
 
       


     

       
87
       
 
       
      configurators = lib.mkOption {

     

       
88
       
 
       
        type = lib.types.listOf lib.types.str;

     

       
89
       
-
       
        description = "Configurator Steps, see https://docs.buildbot.net/latest/manual/configuration/configurators.html";

     

       
90
       
 
       
        default = [ ];

     

       
91
       
 
       
        example = [

     

       
92
       
 
       
          "util.JanitorConfigurator(logHorizon=timedelta(weeks=4), hour=12, dayOfWeek=6)"

     

···

       
86
       
 
       


     

       
87
       
 
       
      configurators = lib.mkOption {

     

       
88
       
 
       
        type = lib.types.listOf lib.types.str;

     

       
89
       
+
       
        description = "Configurator Steps, see <https://docs.buildbot.net/latest/manual/configuration/configurators.html>";

     

       
90
       
 
       
        default = [ ];

     

       
91
       
 
       
        example = [

     

       
92
       
 
       
          "util.JanitorConfigurator(logHorizon=timedelta(weeks=4), hour=12, dayOfWeek=6)"

     

···

       
126
       
 
       
          settings = mkOption {

     

       
127
       
 
       
            description = ''

     

       
128
       
 
       
              Configuration for `act_runner daemon`.

     

       
129
       
-
       
              See https://gitea.com/gitea/act_runner/src/branch/main/internal/pkg/config/config.example.yaml for an example configuration

     

       
130
       
 
       
            '';

     

       
131
       
 
       


     

       
132
       
 
       
            type = types.submodule {

     

···

       
126
       
 
       
          settings = mkOption {

     

       
127
       
 
       
            description = ''

     

       
128
       
 
       
              Configuration for `act_runner daemon`.

     

       
129
       
+
       
              See <https://gitea.com/gitea/act_runner/src/branch/main/internal/pkg/config/config.example.yaml> for an example configuration

     

       
130
       
 
       
            '';

     

       
131
       
 
       


     

       
132
       
 
       
            type = types.submodule {

     

···

       
75
       
 
       
        type = settingsFormat.type;

     

       
76
       
 
       
        default = { };

     

       
77
       
 
       
        description = ''

     

       
78
       
-
       
          Contents of the dgraph config. For more details see https://dgraph.io/docs/deploy/config

     

       
79
       
 
       
        '';

     

       
80
       
 
       
      };

     

       
81
       
 
       


     

···

       
75
       
 
       
        type = settingsFormat.type;

     

       
76
       
 
       
        default = { };

     

       
77
       
 
       
        description = ''

     

       
78
       
+
       
          Contents of the dgraph config. For more details see <https://dgraph.io/docs/deploy/config>

     

       
79
       
 
       
        '';

     

       
80
       
 
       
      };

     

       
81
       
 
       


     

···

       
56
       
 
       
- psql >= 15 instead gives only the database owner create permissions

     

       
57
       
 
       
- Even on psql < 15 (or databases migrated to >= 15), it is

     

       
58
       
 
       
  recommended to manually assign permissions along these lines

     

       
59
       
-
       
  - https://www.postgresql.org/docs/release/15.0/

     

       
60
       
-
       
  - https://www.postgresql.org/docs/15/ddl-schemas.html#DDL-SCHEMAS-PRIV

     

       
61
       
 
       


     

       
62
       
 
       
### Assigning ownership {#module-services-postgres-initializing-ownership}

     

       
63
       
 
       


     

···

       
56
       
 
       
- psql >= 15 instead gives only the database owner create permissions

     

       
57
       
 
       
- Even on psql < 15 (or databases migrated to >= 15), it is

     

       
58
       
 
       
  recommended to manually assign permissions along these lines

     

       
59
       
+
       
  - <https://www.postgresql.org/docs/release/15.0/>

     

       
60
       
+
       
  - <https://www.postgresql.org/docs/15/ddl-schemas.html#DDL-SCHEMAS-PRIV>

     

       
61
       
 
       


     

       
62
       
 
       
### Assigning ownership {#module-services-postgres-initializing-ownership}

     

       
63
       
 
       


     

···

       
25
       
 
       
      enable = lib.mkEnableOption "Blackfire profiler agent";

     

       
26
       
 
       
      settings = lib.mkOption {

     

       
27
       
 
       
        description = ''

     

       
28
       
-
       
          See https://blackfire.io/docs/up-and-running/configuration/agent

     

       
29
       
 
       
        '';

     

       
30
       
 
       
        type = lib.types.submodule {

     

       
31
       
 
       
          freeformType = with lib.types; attrsOf str;

     
···

       
36
       
 
       
              description = ''

     

       
37
       
 
       
                Sets the server id used to authenticate with Blackfire

     

       
38
       
 
       


     

       
39
       
-
       
                You can find your personal server-id at https://blackfire.io/my/settings/credentials

     

       
40
       
 
       
              '';

     

       
41
       
 
       
            };

     

       
42
       
 
       


     
···

       
45
       
 
       
              description = ''

     

       
46
       
 
       
                Sets the server token used to authenticate with Blackfire

     

       
47
       
 
       


     

       
48
       
-
       
                You can find your personal server-token at https://blackfire.io/my/settings/credentials

     

       
49
       
 
       
              '';

     

       
50
       
 
       
            };

     

       
51
       
 
       
          };

     

···

       
25
       
 
       
      enable = lib.mkEnableOption "Blackfire profiler agent";

     

       
26
       
 
       
      settings = lib.mkOption {

     

       
27
       
 
       
        description = ''

     

       
28
       
+
       
          See <https://blackfire.io/docs/up-and-running/configuration/agent>

     

       
29
       
 
       
        '';

     

       
30
       
 
       
        type = lib.types.submodule {

     

       
31
       
 
       
          freeformType = with lib.types; attrsOf str;

     
···

       
36
       
 
       
              description = ''

     

       
37
       
 
       
                Sets the server id used to authenticate with Blackfire

     

       
38
       
 
       


     

       
39
       
+
       
                You can find your personal server-id at <https://blackfire.io/my/settings/credentials>

     

       
40
       
 
       
              '';

     

       
41
       
 
       
            };

     

       
42
       
 
       


     
···

       
45
       
 
       
              description = ''

     

       
46
       
 
       
                Sets the server token used to authenticate with Blackfire

     

       
47
       
 
       


     

       
48
       
+
       
                You can find your personal server-token at <https://blackfire.io/my/settings/credentials>

     

       
49
       
 
       
              '';

     

       
50
       
 
       
            };

     

       
51
       
 
       
          };

     

···

       
126
       
 
       
      type = lib.types.str;

     

       
127
       
 
       
      description = ''

     

       
128
       
 
       
        Password to use with notebook.

     

       
129
       
-
       
        Can be generated following: https://jupyter-server.readthedocs.io/en/stable/operators/public-server.html#preparing-a-hashed-password

     

       
130
       
 
       
      '';

     

       
131
       
 
       
      example = "argon2:$argon2id$v=19$m=10240,t=10,p=8$48hF+vTUuy1LB83/GzNhUg$J1nx4jPWD7PwOJHs5OtDW8pjYK2s0c1R3rYGbSIKB54";

     

       
132
       
 
       
    };

     

···

       
126
       
 
       
      type = lib.types.str;

     

       
127
       
 
       
      description = ''

     

       
128
       
 
       
        Password to use with notebook.

     

       
129
       
+
       
        Can be generated following: <https://jupyter-server.readthedocs.io/en/stable/operators/public-server.html#preparing-a-hashed-password>

     

       
130
       
 
       
      '';

     

       
131
       
 
       
      example = "argon2:$argon2id$v=19$m=10240,t=10,p=8$48hF+vTUuy1LB83/GzNhUg$J1nx4jPWD7PwOJHs5OtDW8pjYK2s0c1R3rYGbSIKB54";

     

       
132
       
 
       
    };

     

···

       
64
       
 
       
        Extra contents appended to the jupyterhub configuration

     

       
65
       
 
       


     

       
66
       
 
       
        Jupyterhub configuration is a normal python file using

     

       
67
       
-
       
        Traitlets. https://jupyterhub.readthedocs.io/en/stable/getting-started/config-basics.html. The

     

       
68
       
 
       
        base configuration of this module was designed to have sane

     

       
69
       
 
       
        defaults for configuration but you can override anything since

     

       
70
       
 
       
        this is a python file.

     

···

       
64
       
 
       
        Extra contents appended to the jupyterhub configuration

     

       
65
       
 
       


     

       
66
       
 
       
        Jupyterhub configuration is a normal python file using

     

       
67
       
+
       
        Traitlets. <https://jupyterhub.readthedocs.io/en/stable/getting-started/config-basics.html>. The

     

       
68
       
 
       
        base configuration of this module was designed to have sane

     

       
69
       
 
       
        defaults for configuration but you can override anything since

     

       
70
       
 
       
        this is a python file.

     

···

       
201
       
 
       


     

       
202
       
 
       
        description = ''

     

       
203
       
 
       
          Configuration for MCHPRS via `Config.toml`.

     

       
204
       
-
       
          See https://github.com/MCHPR/MCHPRS/blob/master/README.md for documentation.

     

       
205
       
 
       
        '';

     

       
206
       
 
       
      };

     

       
207
       
 
       


     

···

       
201
       
 
       


     

       
202
       
 
       
        description = ''

     

       
203
       
 
       
          Configuration for MCHPRS via `Config.toml`.

     

       
204
       
+
       
          See <https://github.com/MCHPR/MCHPRS/blob/master/README.md> for documentation.

     

       
205
       
 
       
        '';

     

       
206
       
 
       
      };

     

       
207
       
 
       


     

···

       
74
       
 
       
## Pulling files from linuxhw/EDID database {#module-hardware-display-edid-linuxhw}

     

       
75
       
 
       


     

       
76
       
 
       
`hardware.display.edid.linuxhw` utilizes `pkgs.linuxhw-edid-fetcher` to extract EDID files

     

       
77
       
-
       
from https://github.com/linuxhw/EDID based on simple string/regexp search identifying exact entries:

     

       
78
       
 
       


     

       
79
       
 
       
```nix

     

       
80
       
 
       
{

     

···

       
74
       
 
       
## Pulling files from linuxhw/EDID database {#module-hardware-display-edid-linuxhw}

     

       
75
       
 
       


     

       
76
       
 
       
`hardware.display.edid.linuxhw` utilizes `pkgs.linuxhw-edid-fetcher` to extract EDID files

     

       
77
       
+
       
from <https://github.com/linuxhw/EDID> based on simple string/regexp search identifying exact entries:

     

       
78
       
 
       


     

       
79
       
 
       
```nix

     

       
80
       
 
       
{

     

···

       
141
       
 
       
                An EDID filename to be used for configured display, as in `edid/<filename>`.

     

       
142
       
 
       
                See for more information:

     

       
143
       
 
       
                - `hardware.display.edid.packages`

     

       
144
       
-
       
                - https://wiki.archlinux.org/title/Kernel_mode_setting#Forcing_modes_and_EDID

     

       
145
       
 
       
              '';

     

       
146
       
 
       
            };

     

       
147
       
 
       
            mode = lib.mkOption {

     
···

       
153
       
 
       
                    <xres>x<yres>[M][R][-<bpp>][@<refresh>][i][m][eDd]

     

       
154
       
 
       


     

       
155
       
 
       
                See for more information:

     

       
156
       
-
       
                - https://docs.kernel.org/fb/modedb.html

     

       
157
       
-
       
                - https://wiki.archlinux.org/title/Kernel_mode_setting#Forcing_modes

     

       
158
       
 
       
              '';

     

       
159
       
 
       
              example = lib.literalExpression ''

     

       
160
       
 
       
                "e"

     

···

       
141
       
 
       
                An EDID filename to be used for configured display, as in `edid/<filename>`.

     

       
142
       
 
       
                See for more information:

     

       
143
       
 
       
                - `hardware.display.edid.packages`

     

       
144
       
+
       
                - <https://wiki.archlinux.org/title/Kernel_mode_setting#Forcing_modes_and_EDID>

     

       
145
       
 
       
              '';

     

       
146
       
 
       
            };

     

       
147
       
 
       
            mode = lib.mkOption {

     
···

       
153
       
 
       
                    <xres>x<yres>[M][R][-<bpp>][@<refresh>][i][m][eDd]

     

       
154
       
 
       


     

       
155
       
 
       
                See for more information:

     

       
156
       
+
       
                - <https://docs.kernel.org/fb/modedb.html>

     

       
157
       
+
       
                - <https://wiki.archlinux.org/title/Kernel_mode_setting#Forcing_modes>

     

       
158
       
 
       
              '';

     

       
159
       
 
       
              example = lib.literalExpression ''

     

       
160
       
 
       
                "e"

     

···

       
42
       
 
       
          USB_BLACKLIST_PHONE = 1;

     

       
43
       
 
       
        };

     

       
44
       
 
       
        description = ''

     

       
45
       
-
       
          Options passed to TLP. See https://linrunner.de/tlp for all supported options..

     

       
46
       
 
       
        '';

     

       
47
       
 
       
      };

     

       
48
       
 
       


     

···

       
42
       
 
       
          USB_BLACKLIST_PHONE = 1;

     

       
43
       
 
       
        };

     

       
44
       
 
       
        description = ''

     

       
45
       
+
       
          Options passed to TLP. See <https://linrunner.de/tlp> for all supported options..

     

       
46
       
 
       
        '';

     

       
47
       
 
       
      };

     

       
48
       
 
       


     

···

       
42
       
 
       
      default = [ ];

     

       
43
       
 
       
      description = ''

     

       
44
       
 
       
        Extra arguments to pass to the matter-server executable.

     

       
45
       
-
       
        See https://github.com/home-assistant-libs/python-matter-server?tab=readme-ov-file#running-the-development-server for options.

     

       
46
       
 
       
      '';

     

       
47
       
 
       
    };

     

       
48
       
 
       
  };

     

···

       
42
       
 
       
      default = [ ];

     

       
43
       
 
       
      description = ''

     

       
44
       
 
       
        Extra arguments to pass to the matter-server executable.

     

       
45
       
+
       
        See <https://github.com/home-assistant-libs/python-matter-server?tab=readme-ov-file#running-the-development-server> for options.

     

       
46
       
 
       
      '';

     

       
47
       
 
       
    };

     

       
48
       
 
       
  };

     

···

       
48
       
 
       
After this has been done and appropriate DNS records have been

     

       
49
       
 
       
set up, the Postorius mailing list manager and the Hyperkitty

     

       
50
       
 
       
archive browser will be available at

     

       
51
       
-
       
https://lists.example.org/. Note that this setup is not

     

       
52
       
 
       
sufficient to deliver emails to most email providers nor to

     

       
53
       
 
       
avoid spam -- a number of additional measures for authenticating

     

       
54
       
 
       
incoming and outgoing mails, such as SPF, DMARC and DKIM are

     

···

       
48
       
 
       
After this has been done and appropriate DNS records have been

     

       
49
       
 
       
set up, the Postorius mailing list manager and the Hyperkitty

     

       
50
       
 
       
archive browser will be available at

     

       
51
       
+
       
`https://lists.example.org/`. Note that this setup is not

     

       
52
       
 
       
sufficient to deliver emails to most email providers nor to

     

       
53
       
 
       
avoid spam -- a number of additional measures for authenticating

     

       
54
       
 
       
incoming and outgoing mails, such as SPF, DMARC and DKIM are

     

···

       
68
       
 
       
        '';

     

       
69
       
 
       
        description = ''

     

       
70
       
 
       
          Password file for the postgresql connection.

     

       
71
       
-
       
          Must be formatted according to PostgreSQL .pgpass standard (see https://www.postgresql.org/docs/current/libpq-pgpass.html)

     

       
72
       
 
       
          but only one line, no comments and readable by user `nginx`.

     

       
73
       
 
       
          Ignored if `database.host` is set to `localhost`, as peer authentication will be used.

     

       
74
       
 
       
        '';

     

···

       
68
       
 
       
        '';

     

       
69
       
 
       
        description = ''

     

       
70
       
 
       
          Password file for the postgresql connection.

     

       
71
       
+
       
          Must be formatted according to PostgreSQL .pgpass standard (see <https://www.postgresql.org/docs/current/libpq-pgpass.html>)

     

       
72
       
 
       
          but only one line, no comments and readable by user `nginx`.

     

       
73
       
 
       
          Ignored if `database.host` is set to `localhost`, as peer authentication will be used.

     

       
74
       
 
       
        '';

     

···

       
225
       
 
       
            description = ''

     

       
226
       
 
       
              The language most likely to be used on the server - used when indexing, to

     

       
227
       
 
       
              ensure the returned results match expectations. A full list of possible languages

     

       
228
       
-
       
              can be found at https://github.com/blevesearch/bleve/tree/master/analysis/lang

     

       
229
       
 
       
            '';

     

       
230
       
 
       
          };

     

       
231
       
 
       
        };

     

···

       
225
       
 
       
            description = ''

     

       
226
       
 
       
              The language most likely to be used on the server - used when indexing, to

     

       
227
       
 
       
              ensure the returned results match expectations. A full list of possible languages

     

       
228
       
+
       
              can be found at <https://github.com/blevesearch/bleve/tree/master/analysis/lang>

     

       
229
       
 
       
            '';

     

       
230
       
 
       
          };

     

       
231
       
 
       
        };

     

···

       
33
       
 
       
4. Optionally, set `services.maubot.pythonPackages` to a list of python3

     

       
34
       
 
       
   packages to make available for Maubot plugins.

     

       
35
       
 
       
5. Optionally, set `services.maubot.plugins` to a list of Maubot

     

       
36
       
-
       
   plugins (full list available at https://plugins.maubot.xyz/):

     

       
37
       
 
       
   ```nix

     

       
38
       
 
       
   {

     

       
39
       
 
       
     services.maubot.plugins = with config.services.maubot.package.plugins; [

     

···

       
33
       
 
       
4. Optionally, set `services.maubot.pythonPackages` to a list of python3

     

       
34
       
 
       
   packages to make available for Maubot plugins.

     

       
35
       
 
       
5. Optionally, set `services.maubot.plugins` to a list of Maubot

     

       
36
       
+
       
   plugins (full list available at <https://plugins.maubot.xyz/>):

     

       
37
       
 
       
   ```nix

     

       
38
       
 
       
   {

     

       
39
       
 
       
     services.maubot.plugins = with config.services.maubot.package.plugins; [

     

···

       
66
       
 
       
          };

     

       
67
       
 
       
        };

     

       
68
       
 
       
        description = ''

     

       
69
       
-
       
          Config options for dwm-status, see https://github.com/Gerschtli/dwm-status#configuration

     

       
70
       
 
       
          for available options.

     

       
71
       
 
       
        '';

     

       
72
       
 
       
      };

     

···

       
66
       
 
       
          };

     

       
67
       
 
       
        };

     

       
68
       
 
       
        description = ''

     

       
69
       
+
       
          Config options for dwm-status, see <https://github.com/Gerschtli/dwm-status#configuration>

     

       
70
       
 
       
          for available options.

     

       
71
       
 
       
        '';

     

       
72
       
 
       
      };

     

···

       
199
       
 
       
        };

     

       
200
       
 
       
      settings = lib.mkOption {

     

       
201
       
 
       
        description = ''

     

       
202
       
-
       
          See https://app.radicle.xyz/nodes/seed.radicle.garden/rad:z3gqcJUoA1n9HaHKufZs5FCSGazv5/tree/radicle/src/node/config.rs#L275

     

       
203
       
 
       
        '';

     

       
204
       
 
       
        default = { };

     

       
205
       
 
       
        example = lib.literalExpression ''

     

···

       
199
       
 
       
        };

     

       
200
       
 
       
      settings = lib.mkOption {

     

       
201
       
 
       
        description = ''

     

       
202
       
+
       
          See <https://app.radicle.xyz/nodes/seed.radicle.garden/rad:z3gqcJUoA1n9HaHKufZs5FCSGazv5/tree/radicle/src/node/config.rs#L275>

     

       
203
       
 
       
        '';

     

       
204
       
 
       
        default = { };

     

       
205
       
 
       
        example = lib.literalExpression ''

     

···

       
75
       
 
       
        Extra environment variables to export to the Renovate process

     

       
76
       
 
       
        from the systemd unit configuration.

     

       
77
       
 
       


     

       
78
       
-
       
        See https://docs.renovatebot.com/config-overview for available environment variables.

     

       
79
       
 
       
      '';

     

       
80
       
 
       
      example = {

     

       
81
       
 
       
        LOG_LEVEL = "debug";

     
···

       
104
       
 
       
        Renovate's global configuration.

     

       
105
       
 
       
        If you want to pass secrets to renovate, please use {option}`services.renovate.credentials` for that.

     

       
106
       
 
       


     

       
107
       
-
       
        See https://docs.renovatebot.com/config-overview for available settings.

     

       
108
       
 
       
      '';

     

       
109
       
 
       
    };

     

       
110
       
 
       
  };

     

···

       
75
       
 
       
        Extra environment variables to export to the Renovate process

     

       
76
       
 
       
        from the systemd unit configuration.

     

       
77
       
 
       


     

       
78
       
+
       
        See <https://docs.renovatebot.com/config-overview> for available environment variables.

     

       
79
       
 
       
      '';

     

       
80
       
 
       
      example = {

     

       
81
       
 
       
        LOG_LEVEL = "debug";

     
···

       
104
       
 
       
        Renovate's global configuration.

     

       
105
       
 
       
        If you want to pass secrets to renovate, please use {option}`services.renovate.credentials` for that.

     

       
106
       
 
       


     

       
107
       
+
       
        See <https://docs.renovatebot.com/config-overview> for available settings.

     

       
108
       
 
       
      '';

     

       
109
       
 
       
    };

     

       
110
       
 
       
  };

     

···

       
70
       
 
       
          $ sudo chown -R tabby:tabby /var/lib/tabby/models/

     

       
71
       
 
       


     

       
72
       
 
       
          See for Model Options:

     

       
73
       
-
       
          > https://github.com/TabbyML/registry-tabby

     

       
74
       
 
       
        '';

     

       
75
       
 
       
      };

     

       
76
       
 
       


     
···

       
114
       
 
       
          Enable sending anonymous usage data.

     

       
115
       
 
       


     

       
116
       
 
       
          See for more details:

     

       
117
       
-
       
          > https://tabby.tabbyml.com/docs/configuration#usage-collection

     

       
118
       
 
       
        '';

     

       
119
       
 
       
      };

     

       
120
       
 
       
    };

     

···

       
70
       
 
       
          $ sudo chown -R tabby:tabby /var/lib/tabby/models/

     

       
71
       
 
       


     

       
72
       
 
       
          See for Model Options:

     

       
73
       
+
       
          > <https://github.com/TabbyML/registry-tabby>

     

       
74
       
 
       
        '';

     

       
75
       
 
       
      };

     

       
76
       
 
       


     
···

       
114
       
 
       
          Enable sending anonymous usage data.

     

       
115
       
 
       


     

       
116
       
 
       
          See for more details:

     

       
117
       
+
       
          > <https://tabby.tabbyml.com/docs/configuration#usage-collection>

     

       
118
       
 
       
        '';

     

       
119
       
 
       
      };

     

       
120
       
 
       
    };

     

···

       
45
       
 
       
        default = { };

     

       
46
       
 
       
        description = ''

     

       
47
       
 
       
          GLPI Agent configuration options.

     

       
48
       
-
       
          See https://glpi-agent.readthedocs.io/en/latest/configuration.html for all available options.

     

       
49
       
 
       


     

       
50
       
 
       
          The 'server' option is mandatory and must point to your GLPI server.

     

       
51
       
 
       
        '';

     

···

       
45
       
 
       
        default = { };

     

       
46
       
 
       
        description = ''

     

       
47
       
 
       
          GLPI Agent configuration options.

     

       
48
       
+
       
          See <https://glpi-agent.readthedocs.io/en/latest/configuration.html> for all available options.

     

       
49
       
 
       


     

       
50
       
 
       
          The 'server' option is mandatory and must point to your GLPI server.

     

       
51
       
 
       
        '';

     

···

       
1904
       
 
       
      default = null;

     

       
1905
       
 
       
      description = ''

     

       
1906
       
 
       
        Specifies which file should be used as web.config.file and be passed on startup.

     

       
1907
       
-
       
        See https://prometheus.io/docs/prometheus/latest/configuration/https/ for valid options.

     

       
1908
       
 
       
      '';

     

       
1909
       
 
       
    };

     

       
1910
       
 
       


     

···

       
1904
       
 
       
      default = null;

     

       
1905
       
 
       
      description = ''

     

       
1906
       
 
       
        Specifies which file should be used as web.config.file and be passed on startup.

     

       
1907
       
+
       
        See <https://prometheus.io/docs/prometheus/latest/configuration/https/> for valid options.

     

       
1908
       
 
       
      '';

     

       
1909
       
 
       
    };

     

       
1910
       
 
       


     

···

       
29
       
 
       
      type = types.path;

     

       
30
       
 
       
      default = /etc/ecoflow-access-key;

     

       
31
       
 
       
      description = ''

     

       
32
       
-
       
        Path to the file with your personal api access string from the Ecoflow development website https://developer-eu.ecoflow.com.

     

       
33
       
 
       
        Do to share or commit your plaintext scecrets to a public repo use: agenix or soaps.

     

       
34
       
 
       
      '';

     

       
35
       
 
       
    };

     
···

       
37
       
 
       
      type = types.path;

     

       
38
       
 
       
      default = /etc/ecoflow-secret-key;

     

       
39
       
 
       
      description = ''

     

       
40
       
-
       
        Path to the file with your personal api secret string from the Ecoflow development website https://developer-eu.ecoflow.com.

     

       
41
       
 
       
        Do to share or commit your plaintext scecrets to a public repo use: agenix or soaps.

     

       
42
       
 
       
      '';

     

       
43
       
 
       
    };

     

···

       
29
       
 
       
      type = types.path;

     

       
30
       
 
       
      default = /etc/ecoflow-access-key;

     

       
31
       
 
       
      description = ''

     

       
32
       
+
       
        Path to the file with your personal api access string from the Ecoflow development website <https://developer-eu.ecoflow.com>.

     

       
33
       
 
       
        Do to share or commit your plaintext scecrets to a public repo use: agenix or soaps.

     

       
34
       
 
       
      '';

     

       
35
       
 
       
    };

     
···

       
37
       
 
       
      type = types.path;

     

       
38
       
 
       
      default = /etc/ecoflow-secret-key;

     

       
39
       
 
       
      description = ''

     

       
40
       
+
       
        Path to the file with your personal api secret string from the Ecoflow development website <https://developer-eu.ecoflow.com>.

     

       
41
       
 
       
        Do to share or commit your plaintext scecrets to a public repo use: agenix or soaps.

     

       
42
       
 
       
      '';

     

       
43
       
 
       
    };

     

···

       
82
       
 
       
        needs to have read access to files owned by the PgBouncer process. Depends on

     

       
83
       
 
       
        the availability of /proc.

     

       
84
       
 
       


     

       
85
       
-
       
        https://prometheus.io/docs/instrumenting/writing_clientlibs/#process-metrics.

     

       
86
       
 
       


     

       
87
       
 
       
      '';

     

       
88
       
 
       
    };

     

···

       
82
       
 
       
        needs to have read access to files owned by the PgBouncer process. Depends on

     

       
83
       
 
       
        the availability of /proc.

     

       
84
       
 
       


     

       
85
       
+
       
        <https://prometheus.io/docs/instrumenting/writing_clientlibs/#process-metrics>.

     

       
86
       
 
       


     

       
87
       
 
       
      '';

     

       
88
       
 
       
    };

     

···

       
38
       
 
       


     

       
39
       
 
       
        The environment file should NOT be stored in /nix/store as it contains passwords and/or keys in plain text.

     

       
40
       
 
       


     

       
41
       
-
       
        Environment reference: https://github.com/prometheus-pve/prometheus-pve-exporter#authentication

     

       
42
       
 
       
      '';

     

       
43
       
 
       
    };

     

       
44
       
 
       


     
···

       
53
       
 
       


     

       
54
       
 
       
        If both configFile and environmentFile are provided, the configFile option will be ignored.

     

       
55
       
 
       


     

       
56
       
-
       
        Configuration reference: https://github.com/prometheus-pve/prometheus-pve-exporter/#authentication

     

       
57
       
 
       
      '';

     

       
58
       
 
       
    };

     

       
59
       
 
       


     

···

       
38
       
 
       


     

       
39
       
 
       
        The environment file should NOT be stored in /nix/store as it contains passwords and/or keys in plain text.

     

       
40
       
 
       


     

       
41
       
+
       
        Environment reference: <https://github.com/prometheus-pve/prometheus-pve-exporter#authentication>

     

       
42
       
 
       
      '';

     

       
43
       
 
       
    };

     

       
44
       
 
       


     
···

       
53
       
 
       


     

       
54
       
 
       
        If both configFile and environmentFile are provided, the configFile option will be ignored.

     

       
55
       
 
       


     

       
56
       
+
       
        Configuration reference: <https://github.com/prometheus-pve/prometheus-pve-exporter/#authentication>

     

       
57
       
 
       
      '';

     

       
58
       
 
       
    };

     

       
59
       
 
       


     

···

       
16
       
 
       
      default = null;

     

       
17
       
 
       
      description = ''

     

       
18
       
 
       
        Add here the path to your personal Tibber API Token ('Bearer Token') File.

     

       
19
       
-
       
        Get your personal Tibber API Token here: https://developer.tibber.com

     

       
20
       
 
       
        Do not share your personal plaintext Tibber API Token via github. (see: ryantm/agenix, mic92/sops)

     

       
21
       
 
       
      '';

     

       
22
       
 
       
    };

     

···

       
16
       
 
       
      default = null;

     

       
17
       
 
       
      description = ''

     

       
18
       
 
       
        Add here the path to your personal Tibber API Token ('Bearer Token') File.

     

       
19
       
+
       
        Get your personal Tibber API Token here: <https://developer.tibber.com>

     

       
20
       
 
       
        Do not share your personal plaintext Tibber API Token via github. (see: ryantm/agenix, mic92/sops)

     

       
21
       
 
       
      '';

     

       
22
       
 
       
    };

     

···

       
26
       
 
       
          "raft"

     

       
27
       
 
       
          "crdt"

     

       
28
       
 
       
        ];

     

       
29
       
-
       
        description = "Consensus protocol - 'raft' or 'crdt'. https://cluster.ipfs.io/documentation/guides/consensus/";

     

       
30
       
 
       
      };

     

       
31
       
 
       


     

       
32
       
 
       
      dataDir = lib.mkOption {

     
···

       
44
       
 
       
      openSwarmPort = lib.mkOption {

     

       
45
       
 
       
        type = lib.types.bool;

     

       
46
       
 
       
        default = false;

     

       
47
       
-
       
        description = "Open swarm port, secured by the cluster secret. This does not expose the API or proxy. https://cluster.ipfs.io/documentation/guides/security/";

     

       
48
       
 
       
      };

     

       
49
       
 
       


     

       
50
       
 
       
      secretFile = lib.mkOption {

     

···

       
26
       
 
       
          "raft"

     

       
27
       
 
       
          "crdt"

     

       
28
       
 
       
        ];

     

       
29
       
+
       
        description = "Consensus protocol - 'raft' or 'crdt'. <https://cluster.ipfs.io/documentation/guides/consensus/>";

     

       
30
       
 
       
      };

     

       
31
       
 
       


     

       
32
       
 
       
      dataDir = lib.mkOption {

     
···

       
44
       
 
       
      openSwarmPort = lib.mkOption {

     

       
45
       
 
       
        type = lib.types.bool;

     

       
46
       
 
       
        default = false;

     

       
47
       
+
       
        description = "Open swarm port, secured by the cluster secret. This does not expose the API or proxy. <https://cluster.ipfs.io/documentation/guides/security/>";

     

       
48
       
 
       
      };

     

       
49
       
 
       


     

       
50
       
 
       
      secretFile = lib.mkOption {

     

···

       
186
       
 
       
          description = ''

     

       
187
       
 
       
            Configuration of XtreemFS DIR service.

     

       
188
       
 
       
            WARNING: configuration is saved as plaintext inside nix store.

     

       
189
       
-
       
            For more options: https://www.xtreemfs.org/xtfs-guide-1.5.1/index.html

     

       
190
       
 
       
          '';

     

       
191
       
 
       
        };

     

       
192
       
 
       
        replication = {

     
···

       
228
       
 
       
            description = ''

     

       
229
       
 
       
              Configuration of XtreemFS DIR replication plugin.

     

       
230
       
 
       
              WARNING: configuration is saved as plaintext inside nix store.

     

       
231
       
-
       
              For more options: https://www.xtreemfs.org/xtfs-guide-1.5.1/index.html

     

       
232
       
 
       
            '';

     

       
233
       
 
       
          };

     

       
234
       
 
       
        };

     
···

       
335
       
 
       
          description = ''

     

       
336
       
 
       
            Configuration of XtreemFS MRC service.

     

       
337
       
 
       
            WARNING: configuration is saved as plaintext inside nix store.

     

       
338
       
-
       
            For more options: https://www.xtreemfs.org/xtfs-guide-1.5.1/index.html

     

       
339
       
 
       
          '';

     

       
340
       
 
       
        };

     

       
341
       
 
       
        replication = {

     
···

       
377
       
 
       
            description = ''

     

       
378
       
 
       
              Configuration of XtreemFS MRC replication plugin.

     

       
379
       
 
       
              WARNING: configuration is saved as plaintext inside nix store.

     

       
380
       
-
       
              For more options: https://www.xtreemfs.org/xtfs-guide-1.5.1/index.html

     

       
381
       
 
       
            '';

     

       
382
       
 
       
          };

     

       
383
       
 
       
        };

     
···

       
454
       
 
       
          description = ''

     

       
455
       
 
       
            Configuration of XtreemFS OSD service.

     

       
456
       
 
       
            WARNING: configuration is saved as plaintext inside nix store.

     

       
457
       
-
       
            For more options: https://www.xtreemfs.org/xtfs-guide-1.5.1/index.html

     

       
458
       
 
       
          '';

     

       
459
       
 
       
        };

     

       
460
       
 
       
      };

     

···

       
186
       
 
       
          description = ''

     

       
187
       
 
       
            Configuration of XtreemFS DIR service.

     

       
188
       
 
       
            WARNING: configuration is saved as plaintext inside nix store.

     

       
189
       
+
       
            For more options: <https://www.xtreemfs.org/xtfs-guide-1.5.1/index.html>

     

       
190
       
 
       
          '';

     

       
191
       
 
       
        };

     

       
192
       
 
       
        replication = {

     
···

       
228
       
 
       
            description = ''

     

       
229
       
 
       
              Configuration of XtreemFS DIR replication plugin.

     

       
230
       
 
       
              WARNING: configuration is saved as plaintext inside nix store.

     

       
231
       
+
       
              For more options: <https://www.xtreemfs.org/xtfs-guide-1.5.1/index.html>

     

       
232
       
 
       
            '';

     

       
233
       
 
       
          };

     

       
234
       
 
       
        };

     
···

       
335
       
 
       
          description = ''

     

       
336
       
 
       
            Configuration of XtreemFS MRC service.

     

       
337
       
 
       
            WARNING: configuration is saved as plaintext inside nix store.

     

       
338
       
+
       
            For more options: <https://www.xtreemfs.org/xtfs-guide-1.5.1/index.html>

     

       
339
       
 
       
          '';

     

       
340
       
 
       
        };

     

       
341
       
 
       
        replication = {

     
···

       
377
       
 
       
            description = ''

     

       
378
       
 
       
              Configuration of XtreemFS MRC replication plugin.

     

       
379
       
 
       
              WARNING: configuration is saved as plaintext inside nix store.

     

       
380
       
+
       
              For more options: <https://www.xtreemfs.org/xtfs-guide-1.5.1/index.html>

     

       
381
       
 
       
            '';

     

       
382
       
 
       
          };

     

       
383
       
 
       
        };

     
···

       
454
       
 
       
          description = ''

     

       
455
       
 
       
            Configuration of XtreemFS OSD service.

     

       
456
       
 
       
            WARNING: configuration is saved as plaintext inside nix store.

     

       
457
       
+
       
            For more options: <https://www.xtreemfs.org/xtfs-guide-1.5.1/index.html>

     

       
458
       
 
       
          '';

     

       
459
       
 
       
        };

     

       
460
       
 
       
      };

     

···

       
26
       
 
       
        type = lib.types.bool;

     

       
27
       
 
       
        default = false;

     

       
28
       
 
       
        description = ''

     

       
29
       
-
       
          Whether to enable Yandex-disk client. See https://disk.yandex.ru/

     

       
30
       
 
       
        '';

     

       
31
       
 
       
      };

     

       
32
       
 
       


     

···

       
26
       
 
       
        type = lib.types.bool;

     

       
27
       
 
       
        default = false;

     

       
28
       
 
       
        description = ''

     

       
29
       
+
       
          Whether to enable Yandex-disk client. See <https://disk.yandex.ru/>

     

       
30
       
 
       
        '';

     

       
31
       
 
       
      };

     

       
32
       
 
       


     

···

       
85
       
 
       
        example = "/run/secrets/aria2-rpc-token.txt";

     

       
86
       
 
       
        description = ''

     

       
87
       
 
       
          A file containing the RPC secret authorization token.

     

       
88
       
-
       
          Read https://aria2.github.io/manual/en/html/aria2c.html#rpc-auth to know how this option value is used.

     

       
89
       
 
       
        '';

     

       
90
       
 
       
      };

     

       
91
       
 
       
      downloadDirPermission = lib.mkOption {

     
···

       
121
       
 
       
          Generates the `aria2.conf` file. Refer to [the documentation][0] for

     

       
122
       
 
       
          all possible settings.

     

       
123
       
 
       


     

       
124
       
-
       
          [0]: https://aria2.github.io/manual/en/html/aria2c.html#synopsis

     

       
125
       
 
       
        '';

     

       
126
       
 
       
        default = { };

     

       
127
       
 
       
        type = lib.types.submodule {

     

···

       
85
       
 
       
        example = "/run/secrets/aria2-rpc-token.txt";

     

       
86
       
 
       
        description = ''

     

       
87
       
 
       
          A file containing the RPC secret authorization token.

     

       
88
       
+
       
          Read <https://aria2.github.io/manual/en/html/aria2c.html#rpc-auth> to know how this option value is used.

     

       
89
       
 
       
        '';

     

       
90
       
 
       
      };

     

       
91
       
 
       
      downloadDirPermission = lib.mkOption {

     
···

       
121
       
 
       
          Generates the `aria2.conf` file. Refer to [the documentation][0] for

     

       
122
       
 
       
          all possible settings.

     

       
123
       
 
       


     

       
124
       
+
       
          [0]: <https://aria2.github.io/manual/en/html/aria2c.html#synopsis>

     

       
125
       
 
       
        '';

     

       
126
       
 
       
        default = { };

     

       
127
       
 
       
        type = lib.types.submodule {

     

···

       
43
       
 
       
      };

     

       
44
       
 
       


     

       
45
       
 
       
      settings = lib.mkOption {

     

       
46
       
-
       
        description = "Crab-holes config. See big example https://github.com/LuckyTurtleDev/crab-hole/blob/main/example-config.toml";

     

       
47
       
 
       


     

       
48
       
 
       
        example = {

     

       
49
       
 
       
          downstream = [

     

···

       
43
       
 
       
      };

     

       
44
       
 
       


     

       
45
       
 
       
      settings = lib.mkOption {

     

       
46
       
+
       
        description = "Crab-holes config. See big example <https://github.com/LuckyTurtleDev/crab-hole/blob/main/example-config.toml>";

     

       
47
       
 
       


     

       
48
       
 
       
        example = {

     

       
49
       
 
       
          downstream = [

     

···

       
69
       
 
       
}

     

       
70
       
 
       
```

     

       
71
       
 
       


     

       
72
       
-
       
See a full configuration in https://github.com/m13253/dns-over-https/blob/master/doh-server/doh-server.conf.

     

···

       
69
       
 
       
}

     

       
70
       
 
       
```

     

       
71
       
 
       


     

       
72
       
+
       
See a full configuration in <https://github.com/m13253/dns-over-https/blob/master/doh-server/doh-server.conf>.

     

···

       
116
       
 
       
        listen = [ ":8153" ];

     

       
117
       
 
       
        upstream = [ "udp:127.0.0.1:53" ];

     

       
118
       
 
       
      };

     

       
119
       
-
       
      description = "Configuration of doh-server in toml. See example in https://github.com/m13253/dns-over-https/blob/master/doh-server/doh-server.conf";

     

       
120
       
 
       
    };

     

       
121
       
 
       


     

       
122
       
 
       
    useACMEHost = lib.mkOption {

     

···

       
116
       
 
       
        listen = [ ":8153" ];

     

       
117
       
 
       
        upstream = [ "udp:127.0.0.1:53" ];

     

       
118
       
 
       
      };

     

       
119
       
+
       
      description = "Configuration of doh-server in toml. See example in <https://github.com/m13253/dns-over-https/blob/master/doh-server/doh-server.conf>";

     

       
120
       
 
       
    };

     

       
121
       
 
       


     

       
122
       
 
       
    useACMEHost = lib.mkOption {

     

···

       
31
       
 
       


     

       
32
       
 
       
        You can also use the following website:

     

       
33
       
 
       
        - metacubexd:

     

       
34
       
-
       
          - https://d.metacubex.one

     

       
35
       
-
       
          - https://metacubex.github.io/metacubexd

     

       
36
       
-
       
          - https://metacubexd.pages.dev

     

       
37
       
 
       
        - yacd:

     

       
38
       
-
       
          - https://yacd.haishan.me

     

       
39
       
 
       
        - clash-dashboard:

     

       
40
       
-
       
          - https://clash.razord.top

     

       
41
       
 
       
      '';

     

       
42
       
 
       
    };

     

       
43
       
 
       


     

···

       
31
       
 
       


     

       
32
       
 
       
        You can also use the following website:

     

       
33
       
 
       
        - metacubexd:

     

       
34
       
+
       
          - <https://d.metacubex.one>

     

       
35
       
+
       
          - <https://metacubex.github.io/metacubexd>

     

       
36
       
+
       
          - <https://metacubexd.pages.dev>

     

       
37
       
 
       
        - yacd:

     

       
38
       
+
       
          - <https://yacd.haishan.me>

     

       
39
       
 
       
        - clash-dashboard:

     

       
40
       
+
       
          - <https://clash.razord.top>

     

       
41
       
 
       
      '';

     

       
42
       
 
       
    };

     

       
43
       
 
       


     

···

       
80
       
 
       
          Path to a text file containing IPs to block.

     

       
81
       
 
       
          Useful to prevent DDoS/deanonymization attacks.

     

       
82
       
 
       


     

       
83
       
-
       
          https://github.com/monero-project/meta/issues/1124

     

       
84
       
 
       
        '';

     

       
85
       
 
       
        example = lib.literalExpression ''

     

       
86
       
 
       
          builtins.fetchurl {

     
···

       
222
       
 
       
        default = false;

     

       
223
       
 
       
        description = ''

     

       
224
       
 
       
          Whether to prune the blockchain.

     

       
225
       
-
       
          https://www.getmonero.org/resources/moneropedia/pruning.html

     

       
226
       
 
       
        '';

     

       
227
       
 
       
      };

     

       
228
       
 
       


     

···

       
80
       
 
       
          Path to a text file containing IPs to block.

     

       
81
       
 
       
          Useful to prevent DDoS/deanonymization attacks.

     

       
82
       
 
       


     

       
83
       
+
       
          <https://github.com/monero-project/meta/issues/1124>

     

       
84
       
 
       
        '';

     

       
85
       
 
       
        example = lib.literalExpression ''

     

       
86
       
 
       
          builtins.fetchurl {

     
···

       
222
       
 
       
        default = false;

     

       
223
       
 
       
        description = ''

     

       
224
       
 
       
          Whether to prune the blockchain.

     

       
225
       
+
       
          <https://www.getmonero.org/resources/moneropedia/pruning.html>

     

       
226
       
 
       
        '';

     

       
227
       
 
       
      };

     

       
228
       
 
       


     

···

       
21
       
 
       


     

       
22
       
 
       
    services.morty = {

     

       
23
       
 
       


     

       
24
       
-
       
      enable = mkEnableOption "Morty proxy server. See https://github.com/asciimoo/morty";

     

       
25
       
 
       


     

       
26
       
 
       
      ipv6 = mkOption {

     

       
27
       
 
       
        type = types.bool;

     

···

       
21
       
 
       


     

       
22
       
 
       
    services.morty = {

     

       
23
       
 
       


     

       
24
       
+
       
      enable = mkEnableOption "Morty proxy server. See <https://github.com/asciimoo/morty>";

     

       
25
       
 
       


     

       
26
       
 
       
      ipv6 = mkOption {

     

       
27
       
 
       
        type = types.bool;

     

···

       
49
       
 
       
      type = lib.types.bool;

     

       
50
       
 
       
      default = true;

     

       
51
       
 
       
      description = ''

     

       
52
       
-
       
        Adds the hosted peers from https://github.com/threefoldtech/mycelium#hosted-public-nodes.

     

       
53
       
 
       
      '';

     

       
54
       
 
       
    };

     

       
55
       
 
       
    extraArgs = lib.mkOption {

     

···

       
49
       
 
       
      type = lib.types.bool;

     

       
50
       
 
       
      default = true;

     

       
51
       
 
       
      description = ''

     

       
52
       
+
       
        Adds the hosted peers from <https://github.com/threefoldtech/mycelium#hosted-public-nodes>.

     

       
53
       
 
       
      '';

     

       
54
       
 
       
    };

     

       
55
       
 
       
    extraArgs = lib.mkOption {

     

···

       
44
       
 
       
        type = with lib.types; nullOr path;

     

       
45
       
 
       
        default = null;

     

       
46
       
 
       
        description = ''

     

       
47
       
-
       
          Path to a file containing sensitive environment variables for Newt. See https://docs.fossorial.io/Newt/overview#cli-args

     

       
48
       
 
       
          These will overwrite anything defined in the config.

     

       
49
       
 
       
          The file should contain environment-variable assignments like:

     

       
50
       
 
       
          NEWT_ID=2ix2t8xk22ubpfy

     

···

       
44
       
 
       
        type = with lib.types; nullOr path;

     

       
45
       
 
       
        default = null;

     

       
46
       
 
       
        description = ''

     

       
47
       
+
       
          Path to a file containing sensitive environment variables for Newt. See <https://docs.fossorial.io/Newt/overview#cli-args>

     

       
48
       
 
       
          These will overwrite anything defined in the config.

     

       
49
       
 
       
          The file should contain environment-variable assignments like:

     

       
50
       
 
       
          NEWT_ID=2ix2t8xk22ubpfy

     

···

       
28
       
 
       
      description = ''

     

       
29
       
 
       
        List of nghttpx backend patterns.

     

       
30
       
 
       


     

       
31
       
-
       
        Please see https://nghttp2.org/documentation/nghttpx.1.html#cmdoption-nghttpx-b

     

       
32
       
 
       
        for more information on the pattern syntax and nghttpxs behavior.

     

       
33
       
 
       
      '';

     

       
34
       
 
       
    };

     

···

       
28
       
 
       
      description = ''

     

       
29
       
 
       
        List of nghttpx backend patterns.

     

       
30
       
 
       


     

       
31
       
+
       
        Please see <https://nghttp2.org/documentation/nghttpx.1.html#cmdoption-nghttpx-b>

     

       
32
       
 
       
        for more information on the pattern syntax and nghttpxs behavior.

     

       
33
       
 
       
      '';

     

       
34
       
 
       
    };

     

···

       
11
       
 
       
        Enable or disable TLS. If true (enabled) the key and

     

       
12
       
 
       
        certificate must be configured for nghttpx.

     

       
13
       
 
       


     

       
14
       
-
       
        Please see https://nghttp2.org/documentation/nghttpx.1.html#cmdoption-nghttpx-f

     

       
15
       
 
       
        for more detail.

     

       
16
       
 
       
      '';

     

       
17
       
 
       
    };

     
···

       
24
       
 
       
        name received from the client is used instead of the request

     

       
25
       
 
       
        host. See --backend option about the pattern match.

     

       
26
       
 
       


     

       
27
       
-
       
        Please see https://nghttp2.org/documentation/nghttpx.1.html#cmdoption-nghttpx-f

     

       
28
       
 
       
        for more detail.

     

       
29
       
 
       
      '';

     

       
30
       
 
       
    };

     
···

       
37
       
 
       
        dynamically modify nghttpx at run-time therefore this feature

     

       
38
       
 
       
        is disabled by default and should be turned on with care.

     

       
39
       
 
       


     

       
40
       
-
       
        Please see https://nghttp2.org/documentation/nghttpx.1.html#cmdoption-nghttpx-f

     

       
41
       
 
       
        for more detail.

     

       
42
       
 
       
      '';

     

       
43
       
 
       
    };

     
···

       
49
       
 
       
        Make this frontend a health monitor endpoint. Any request

     

       
50
       
 
       
        received on this frontend is responded to with a 200 OK.

     

       
51
       
 
       


     

       
52
       
-
       
        Please see https://nghttp2.org/documentation/nghttpx.1.html#cmdoption-nghttpx-f

     

       
53
       
 
       
        for more detail.

     

       
54
       
 
       
      '';

     

       
55
       
 
       
    };

     
···

       
60
       
 
       
      description = ''

     

       
61
       
 
       
        Accept PROXY protocol version 1 on frontend connection.

     

       
62
       
 
       


     

       
63
       
-
       
        Please see https://nghttp2.org/documentation/nghttpx.1.html#cmdoption-nghttpx-f

     

       
64
       
 
       
        for more detail.

     

       
65
       
 
       
      '';

     

       
66
       
 
       
    };

     

···

       
11
       
 
       
        Enable or disable TLS. If true (enabled) the key and

     

       
12
       
 
       
        certificate must be configured for nghttpx.

     

       
13
       
 
       


     

       
14
       
+
       
        Please see <https://nghttp2.org/documentation/nghttpx.1.html#cmdoption-nghttpx-f>

     

       
15
       
 
       
        for more detail.

     

       
16
       
 
       
      '';

     

       
17
       
 
       
    };

     
···

       
24
       
 
       
        name received from the client is used instead of the request

     

       
25
       
 
       
        host. See --backend option about the pattern match.

     

       
26
       
 
       


     

       
27
       
+
       
        Please see <https://nghttp2.org/documentation/nghttpx.1.html#cmdoption-nghttpx-f>

     

       
28
       
 
       
        for more detail.

     

       
29
       
 
       
      '';

     

       
30
       
 
       
    };

     
···

       
37
       
 
       
        dynamically modify nghttpx at run-time therefore this feature

     

       
38
       
 
       
        is disabled by default and should be turned on with care.

     

       
39
       
 
       


     

       
40
       
+
       
        Please see <https://nghttp2.org/documentation/nghttpx.1.html#cmdoption-nghttpx-f>

     

       
41
       
 
       
        for more detail.

     

       
42
       
 
       
      '';

     

       
43
       
 
       
    };

     
···

       
49
       
 
       
        Make this frontend a health monitor endpoint. Any request

     

       
50
       
 
       
        received on this frontend is responded to with a 200 OK.

     

       
51
       
 
       


     

       
52
       
+
       
        Please see <https://nghttp2.org/documentation/nghttpx.1.html#cmdoption-nghttpx-f>

     

       
53
       
 
       
        for more detail.

     

       
54
       
 
       
      '';

     

       
55
       
 
       
    };

     
···

       
60
       
 
       
      description = ''

     

       
61
       
 
       
        Accept PROXY protocol version 1 on frontend connection.

     

       
62
       
 
       


     

       
63
       
+
       
        Please see <https://nghttp2.org/documentation/nghttpx.1.html#cmdoption-nghttpx-f>

     

       
64
       
 
       
        for more detail.

     

       
65
       
 
       
      '';

     

       
66
       
 
       
    };

     

···

       
77
       
 
       
        is used. In the single process mode, the signal handling

     

       
78
       
 
       
        feature is disabled.

     

       
79
       
 
       


     

       
80
       
-
       
        Please see https://nghttp2.org/documentation/nghttpx.1.html#cmdoption-nghttpx--single-process

     

       
81
       
 
       
      '';

     

       
82
       
 
       
    };

     

       
83
       
 
       


     
···

       
87
       
 
       
      description = ''

     

       
88
       
 
       
        Listen backlog size.

     

       
89
       
 
       


     

       
90
       
-
       
        Please see https://nghttp2.org/documentation/nghttpx.1.html#cmdoption-nghttpx--backlog

     

       
91
       
 
       
      '';

     

       
92
       
 
       
    };

     

       
93
       
 
       


     
···

       
104
       
 
       
        only IPv4 address is considered. If "IPv6" is given, only IPv6

     

       
105
       
 
       
        address is considered.

     

       
106
       
 
       


     

       
107
       
-
       
        Please see https://nghttp2.org/documentation/nghttpx.1.html#cmdoption-nghttpx--backend-address-family

     

       
108
       
 
       
      '';

     

       
109
       
 
       
    };

     

       
110
       
 
       


     
···

       
114
       
 
       
      description = ''

     

       
115
       
 
       
        Set the number of worker threads.

     

       
116
       
 
       


     

       
117
       
-
       
        Please see https://nghttp2.org/documentation/nghttpx.1.html#cmdoption-nghttpx-n

     

       
118
       
 
       
      '';

     

       
119
       
 
       
    };

     

       
120
       
 
       


     
···

       
127
       
 
       
        the platforms which lack thread support. If threading is

     

       
128
       
 
       
        disabled, this option is always enabled.

     

       
129
       
 
       


     

       
130
       
-
       
        Please see https://nghttp2.org/documentation/nghttpx.1.html#cmdoption-nghttpx--single-thread

     

       
131
       
 
       
      '';

     

       
132
       
 
       
    };

     

       
133
       
 
       


     
···

       
138
       
 
       
        Set maximum number of open files (RLIMIT_NOFILE) to \<N\>. If 0

     

       
139
       
 
       
        is given, nghttpx does not set the limit.

     

       
140
       
 
       


     

       
141
       
-
       
        Please see https://nghttp2.org/documentation/nghttpx.1.html#cmdoption-nghttpx--rlimit-nofile

     

       
142
       
 
       
      '';

     

       
143
       
 
       
    };

     

       
144
       
 
       
  };

     

···

       
77
       
 
       
        is used. In the single process mode, the signal handling

     

       
78
       
 
       
        feature is disabled.

     

       
79
       
 
       


     

       
80
       
+
       
        Please see <https://nghttp2.org/documentation/nghttpx.1.html#cmdoption-nghttpx--single-process>

     

       
81
       
 
       
      '';

     

       
82
       
 
       
    };

     

       
83
       
 
       


     
···

       
87
       
 
       
      description = ''

     

       
88
       
 
       
        Listen backlog size.

     

       
89
       
 
       


     

       
90
       
+
       
        Please see <https://nghttp2.org/documentation/nghttpx.1.html#cmdoption-nghttpx--backlog>

     

       
91
       
 
       
      '';

     

       
92
       
 
       
    };

     

       
93
       
 
       


     
···

       
104
       
 
       
        only IPv4 address is considered. If "IPv6" is given, only IPv6

     

       
105
       
 
       
        address is considered.

     

       
106
       
 
       


     

       
107
       
+
       
        Please see <https://nghttp2.org/documentation/nghttpx.1.html#cmdoption-nghttpx--backend-address-family>

     

       
108
       
 
       
      '';

     

       
109
       
 
       
    };

     

       
110
       
 
       


     
···

       
114
       
 
       
      description = ''

     

       
115
       
 
       
        Set the number of worker threads.

     

       
116
       
 
       


     

       
117
       
+
       
        Please see <https://nghttp2.org/documentation/nghttpx.1.html#cmdoption-nghttpx-n>

     

       
118
       
 
       
      '';

     

       
119
       
 
       
    };

     

       
120
       
 
       


     
···

       
127
       
 
       
        the platforms which lack thread support. If threading is

     

       
128
       
 
       
        disabled, this option is always enabled.

     

       
129
       
 
       


     

       
130
       
+
       
        Please see <https://nghttp2.org/documentation/nghttpx.1.html#cmdoption-nghttpx--single-thread>

     

       
131
       
 
       
      '';

     

       
132
       
 
       
    };

     

       
133
       
 
       


     
···

       
138
       
 
       
        Set maximum number of open files (RLIMIT_NOFILE) to \<N\>. If 0

     

       
139
       
 
       
        is given, nghttpx does not set the limit.

     

       
140
       
 
       


     

       
141
       
+
       
        Please see <https://nghttp2.org/documentation/nghttpx.1.html#cmdoption-nghttpx--rlimit-nofile>

     

       
142
       
 
       
      '';

     

       
143
       
 
       
    };

     

       
144
       
 
       
  };

     

···

       
84
       
 
       
                  The NetworkManager configuration settings reference roughly corresponds to connection types.

     

       
85
       
 
       
                  More might be available on your system depending on the installed plugins.

     

       
86
       
 
       


     

       
87
       
-
       
                  https://networkmanager.dev/docs/api/latest/ch01.html

     

       
88
       
 
       
                '';

     

       
89
       
 
       
                type = lib.types.nullOr lib.types.str;

     

       
90
       
 
       
                default = null;

     

···

       
84
       
 
       
                  The NetworkManager configuration settings reference roughly corresponds to connection types.

     

       
85
       
 
       
                  More might be available on your system depending on the installed plugins.

     

       
86
       
 
       


     

       
87
       
+
       
                  <https://networkmanager.dev/docs/api/latest/ch01.html>

     

       
88
       
 
       
                '';

     

       
89
       
 
       
                type = lib.types.nullOr lib.types.str;

     

       
90
       
 
       
                default = null;

     

···

       
43
       
 
       
          Enable Docker support. Needed for Nomad's docker driver.

     

       
44
       
 
       


     

       
45
       
 
       
          Note that the docker group membership is effectively equivalent

     

       
46
       
-
       
          to being root, see https://github.com/moby/moby/issues/9976.

     

       
47
       
 
       
        '';

     

       
48
       
 
       
      };

     

       
49
       
 
       


     

···

       
43
       
 
       
          Enable Docker support. Needed for Nomad's docker driver.

     

       
44
       
 
       


     

       
45
       
 
       
          Note that the docker group membership is effectively equivalent

     

       
46
       
+
       
          to being root, see <https://github.com/moby/moby/issues/9976>.

     

       
47
       
 
       
        '';

     

       
48
       
 
       
      };

     

       
49
       
 
       


     

···

       
81
       
 
       
          Extra config to be appended to the interface config. It should

     

       
82
       
 
       
          contain long-format options as would be accepted on the command

     

       
83
       
 
       
          line by `openconnect`

     

       
84
       
-
       
          (see https://www.infradead.org/openconnect/manual.html).

     

       
85
       
 
       
          Non-key-value options like `deflate` can be used by

     

       
86
       
 
       
          declaring them as booleans, i. e. `deflate = true;`.

     

       
87
       
 
       
        '';

     

···

       
81
       
 
       
          Extra config to be appended to the interface config. It should

     

       
82
       
 
       
          contain long-format options as would be accepted on the command

     

       
83
       
 
       
          line by `openconnect`

     

       
84
       
+
       
          (see <https://www.infradead.org/openconnect/manual.html>).

     

       
85
       
 
       
          Non-key-value options like `deflate` can be used by

     

       
86
       
 
       
          declaring them as booleans, i. e. `deflate = true;`.

     

       
87
       
 
       
        '';

     

···

       
181
       
 
       
      default = "validate";

     

       
182
       
 
       
      description = ''

     

       
183
       
 
       
        Controls the level of DNSSEC processing done by the PowerDNS Recursor.

     

       
184
       
-
       
        See https://doc.powerdns.com/md/recursor/dnssec/ for a detailed explanation.

     

       
185
       
 
       
      '';

     

       
186
       
 
       
    };

     

       
187
       
 
       


     

···

       
181
       
 
       
      default = "validate";

     

       
182
       
 
       
      description = ''

     

       
183
       
 
       
        Controls the level of DNSSEC processing done by the PowerDNS Recursor.

     

       
184
       
+
       
        See <https://doc.powerdns.com/md/recursor/dnssec/> for a detailed explanation.

     

       
185
       
 
       
      '';

     

       
186
       
 
       
    };

     

       
187
       
 
       


     

···

       
763
       
 
       
          Force certificate authentication for server-to-server connections?

     

       
764
       
 
       
          This provides ideal security, but requires servers you communicate

     

       
765
       
 
       
          with to support encryption AND present valid, trusted certificates.

     

       
766
       
-
       
          For more information see https://prosody.im/doc/s2s#security

     

       
767
       
 
       
        '';

     

       
768
       
 
       
      };

     

       
769
       
 
       


     

···

       
763
       
 
       
          Force certificate authentication for server-to-server connections?

     

       
764
       
 
       
          This provides ideal security, but requires servers you communicate

     

       
765
       
 
       
          with to support encryption AND present valid, trusted certificates.

     

       
766
       
+
       
          For more information see <https://prosody.im/doc/s2s#security>

     

       
767
       
 
       
        '';

     

       
768
       
 
       
      };

     

       
769
       
 
       


     

···

       
30
       
 
       
        };

     

       
31
       
 
       
        default = { };

     

       
32
       
 
       
        description = ''

     

       
33
       
-
       
          The sing-box configuration, see https://sing-box.sagernet.org/configuration/ for documentation.

     

       
34
       
 
       


     

       
35
       
 
       
          Options containing secret data should be set to an attribute set

     

       
36
       
 
       
          containing the attribute `_secret` - a string pointing to a file

     

···

       
30
       
 
       
        };

     

       
31
       
 
       
        default = { };

     

       
32
       
 
       
        description = ''

     

       
33
       
+
       
          The sing-box configuration, see <https://sing-box.sagernet.org/configuration/> for documentation.

     

       
34
       
 
       


     

       
35
       
 
       
          Options containing secret data should be set to an attribute set

     

       
36
       
 
       
          containing the attribute `_secret` - a string pointing to a file

     

···

       
60
       
 
       
      description = ''

     

       
61
       
 
       
        Settings to be rendered into the configuration file. If this is set, no configuration is possible from the web UI.

     

       
62
       
 
       


     

       
63
       
-
       
        See https://docs.lizardbyte.dev/projects/sunshine/en/latest/about/advanced_usage.html#configuration for syntax.

     

       
64
       
 
       
      '';

     

       
65
       
 
       
      example = literalExpression ''

     

       
66
       
 
       
        {

     
···

       
73
       
 
       
          type = port;

     

       
74
       
 
       
          default = defaultPort;

     

       
75
       
 
       
          description = ''

     

       
76
       
-
       
            Base port -- others used are offset from this one, see https://docs.lizardbyte.dev/projects/sunshine/en/latest/about/advanced_usage.html#port for details.

     

       
77
       
 
       
          '';

     

       
78
       
 
       
        };

     

       
79
       
 
       
      });