Indicate if login is allowed if we can't cd to the home directory.

Trayer configuration as a set of attributes

The default home directory for normal users.

The default locale

The default locale character set.

Index of the default menu item to be booted

Default font for all GTK versions.

Makes this vhost the default.

Makes this vhost the default.

Makes this vhost the default.

Group for the default nutmon user

Makes this vhost the default.

Default unit started when the system boots; see systemd.special(7).

Makes this vhost the default.

Makes this vhost the default.

Makes this vhost the default.

Makes this vhost the default.

Makes this vhost the default.

This option specifies the default value for httpProxy, httpsProxy, ftpProxy and rsyncProxy.

systemd service that is enabled by default

Makes this vhost the default.

Makes this vhost the default.

Makes this vhost the default.

Makes this vhost the default.

Makes this vhost the default.

Makes this vhost the default.

Makes this vhost the default.

Default theme for GTK 2/3.

Default MIME types for NGINX, as MIME types definitions from NGINX are very incomplete, we use by default the ones bundled in the mailcap package, used by most of the other Linux distributions.

Default number of days to show calendar entries for

Makes this vhost the default.

Service type

The default base keymap to use.

Makes this vhost the default.

Makes this vhost the default.

Whether to enable vim as the default editor.

This option defines the default shell assigned to user accounts

Makes this vhost the default.

Default PPD profile.

Makes this vhost the default.

Whether to create and use the default podman machine

Makes this vhost the default.

The command that gets executed as the default source for fzf when running.

Extra command line options given to fzf by default.

Default icon theme for all GTK versions.

If hosts do not specify listen.port, use these ports for SSL by default.

Default colour depth.

Whether to configure vim as the default editor using the EDITOR and VISUAL environment variables.

When enabled, configures emacsclient to be the default editor using the EDITOR environment variable.

Extra command line options given to skim by default.

The command that gets executed as the default source for skim when running.

If hosts do not specify listen.port, use these ports for HTTP by default.

The default model to use for the CLI

Default preferences for ne

Whether this should be the default profile.

Default username for FreshRSS.

The default cursor file to use within the package.

Path to the SSH key to be used by default

Change the default search scope

The default capture device (i.e. microphone)

The default CA host:port to use.

default guac token to use.

Default options for all instances of Anubis.

When enabled, configures VSCode to be the default editor using the EDITOR environment variable.

If vhosts do not specify listen.port, use these ports for SSL by default.

Whether to configure emacsclient as the default editor using the EDITOR and VISUAL environment variables.

Options to set by default

Whether to configure hx as the default editor using the EDITOR and VISUAL environment variables.

Screen resolution in modedb format

Makes this vhost the default.

The world used by the default map ruleset

Options used for the default rules, granting root and the wheel group permission to run any command as any user.

Name of the default JVB room that will be joined if no special header is included in SIP invite.

Options used for the default rules, granting root and the wheel group permission to run any command as any user.

When enabled, installs neovim and configures neovim to be the default editor using the EDITOR environment variable.

If vhosts do not specify listen.port, use these ports for HTTP by default.

If vhosts do not specify listen, use these addresses by default

The default playback device

The default search engine used in the address bar and search bar.

Profiles to be applied by default

Whether to configure nvim as the default editor using the EDITOR and VISUAL environment variables.

The default search engine used in the address bar and search bar.

Default font path

Default UDP port for clients to connect to virtual servers - used for first virtual server, subsequent ones will open on incrementing port numbers by default.

The default output format

This allows to override the default bit size for all of the Diffie-Hellman parameters set in security.dhparams.params.

Specifies whether local printers are shared by default.

Default network interface to listen for incoming connections

Whether to configure kak as the default editor using the EDITOR and VISUAL environment variables.

The default Nix expression search path, used by the Nix evaluator to look up paths enclosed in angle brackets (e.g. <nixpkgs>).

Makes this vhost the default.

The default syslog.conf file configures a fairly standard setup of log files, which can be extended by means of extraConfig.

The wine/proton package to set as the default for lutris

default manager token to use.

Extra configuration options added to the DEFAULT section.

Change the default folder shown in Finder windows. "Other" corresponds to the value of NewWindowTargetPath

The default source address.

The default source address.

The default gateway

Set the default session name.

The default gateway metric/preference.

default user password to use.

The default gateway metric/preference.

Name of the network interface to use for all peers by default.

Default color scheme for all GTK versions

Default cursor theme for all GTK versions.

The default search engine used in the address bar and search bar.

The default ipv6 gateway

Whether to enable Monado as the default OpenXR runtime on the system

The log level. i2pd defaults to "info" but that generates copious amounts of log messages

The physical location of the server

Selects the default theme on boot

The default syslog.conf file configures a fairly standard setup of log files, which can be extended by means of extraConfig.

The default workspace to show when sway is launched

default admin password to use.

Default block I/O scheduler

The default gateway address.

The default gateway address.

Device name pattern to exclude from default scheduler assignment through config.hardware.block.defaultScheduler and config.hardware.block.defaultSchedulerRotational

The default workspace to show when i3 is launched

The default interface language

Whether to enable WiVRn as the default OpenXR runtime on the system

Makes this vhost the default.

Sets the default applications for given mimetypes

Override default locales within gancio

With this option, you can customize an H2O virtual host which already has sensible defaults for Movim

System-wide default serif font(s)

Per-user default serif font(s)

scx package to use. scx.full, which includes all schedulers, is the default

Default strategy to use

Show only open applications in the Dock

Whether to include Anubis's default bot detection rules via the (data)/meta/default-config.yaml import

The window size of the default gateway

The configuration to give rss2email

List of site names for which statistics should be exported

If set, the pkgs argument to all NixOS modules is the value of this option, extended with nixpkgs.overlays, if that is also set

Default values applied to all accounts

Whether to automatically rearrange spaces based on most recent use

Location for DOT_SAGE

System-wide default sans serif font(s)

If vhosts do not specify listenAddresses, use these addresses by default

Per-user default sans serif font(s)

Enable SSL.

The default search engine used in the address bar and search bar.

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

With this option, you can customize an Nginx virtual host which already has sensible defaults for Movim

The URL to an InfluxDB server that serves as the default database

Path in which suricata-update managed rules are stored by default.

Settings for mc/mc.ext.ini file

IP address.

Port number.

Whether to allow quitting of the Finder

Set the time a cache entry is valid to the given number of seconds.

The default gateway interface.

The default gateway interface.

Show recent applications in the dock

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Set the day to start week on in the Calendar

Size of the icons in the dock

Override feh's default mouse button mapping

If GitLab container registry should be enabled by default for projects.

The default application to be used for a given mimetype

Settings for mc/filehighlight.ini file

If enabled (the default), checks for data type mismatches and that Nix can parse the generated nix.conf.

If enabled (the default), checks for data type mismatches and that Nix can parse the generated nix.conf.

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Whether k3s should run as a server or agent

Scroll up on a Dock icon to show all Space's opened windows for an app, or open stack

Change the default finder view. "icnv" = Icon view, "Nlsv" = List view, "clmv" = Column View, "Flwv" = Gallery View The default is icnv.

The default logging directory

Whether to automatically hide and show the dock

Additional bot rules appended to the policy

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Whether or not to enable the headless Aria2 daemon service

Show the day of the week

Show the AM/PM label

Set the time a cache entry used for SSH keys is valid to the given number of seconds.

Configuration to include in the Emacs default init file

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

This option is opposite to lt-cred-mech. (TURN Server with no-auth option allows anonymous access)

This is a modular service, which can be imported into a NixOS configuration using the system.services option.

Whether to group windows by application in Mission Control's Exposé

It is occasionally necessary for Home Manager to change configuration defaults in a way that is incompatible with stateful data

Configuration file to use with nohang

Whether to enable drag lock

Directory where the sage.init file will be stored

Chromium default search provider url.

When enabled, the clock indicator (which by default is the colon) will flash on and off each second

Name of the image

Default values inheritable by all configured certs

Show a 24-hour clock, instead of a 12-hour clock

Show the day of the month

Catch-all service if no ingress matches

System-wide default monospace font(s)

Enable the default search provider.

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Units that want (i.e. depend on) this unit

Per-user default monospace font(s)

With this option, you can customize an H2O virtual host which already has sensible defaults for Dolibarr

Comma-separated list of language codes to prefer for cask installation

Show an analog clock instead of a digital one

Show the full date

Show path breadcrumbs in finder windows

Whether to always show hidden files

Magnified icon size on hover

The time zone used when displaying times and dates

If multiple server stanzas are declared with programs.tsmClient.servers, this option may be used to name a default server stanza that IBM TSM uses in the absence of a user-defined dsm.opt file

Whether to use expanded save panel by default

Maximum memory used by the process

Whether to use expanded save panel by default

Set a default value for the maximum lifetime in seconds of identities added to the agent.

Settings to merge with the default configuration

Whether to autohide the menu bar

Set the minimize/maximize window effect

Sets the speed of the autohide delay

Show status bar at bottom of finder windows with item/disk space stats

Chromium default search provider url for suggestions.

Default URI to display.

Controls the routing table to which routes are added

Units that want (i.e. depend on) this unit

Packages whose .desktop files will be used to establish default mimetype associations

Whether to enable setting suid bit for throne-core to run as root, which is less secure than default setcap method but closer to upstream assumptions

Whether to listen for and reject all HTTPS connections to this vhost

Whether to listen for and reject all HTTPS connections to this vhost

Whether to listen for and reject all HTTPS connections to this vhost

Default config (default.conf) for new containers, i.e. for network config

The configuration file passed to ukify(1) to create the UKI

With this option, you can customize an nginx virtual host which already has sensible defaults for Pixelfed

Whether to listen for and reject all HTTPS connections to this vhost

default registration token to use.

Common default options for explicitly monitored (listed in services.smartd.devices) devices

The status of firefox.preferences.

status can assume the following values:

• "default": Preferences appear as default.
• "locked": Preferences appear as default and can't be changed.
• "user": Preferences appear as changed.
• "clear": Value has no effect

System-wide default emoji font(s)

Set of default packages that aren't strictly necessary for a running system, entries can be removed for a more minimal NixOS installation

Per-user default emoji font(s)

Each attribute in this option names an apcupsd event and the string value it contains will be executed in a shell, in response to that event (prior to the default action)

With this option, you can customize an NGINX virtual host which already has sensible defaults for Kanboard

Whether to show the full POSIX filepath in the window title

Auto hide stage strip showing recent apps

Whether to show icons on the desktop or not

Defines a default currency symbol for new groups

Defines one or more team names that auto-provisioned OIDC users shall be added to

Units that want (i.e. depend on) this unit

With this option, you can customize an nginx virtualHost which already has sensible defaults for Matomo

Allow for slow-motion minimize effect while holding Shift key

Alias of home.pointerCursor.x11.defaultCursor.

Theme settings to add to the themes folder in ~/.config/vicinae/themes

Whether to serve a default robots.txt that denies access to common AI bots by name and all other bots by wildcard.

Set of default packages that aren't strictly necessary for a running system, entries can be removed for a more minimal NixOS installation

Whether to enable setting suid bit for nekobox_core to run as root, which is less secure than default setcap method but closer to upstream assumptions

Whether to listen for and reject all HTTPS connections to this vhost

Whether to listen for and reject all HTTPS connections to this vhost

Whether to listen for and reject all HTTPS connections to this vhost

Whether to listen for and reject all HTTPS connections to this vhost

Whether to listen for and reject all HTTPS connections to this vhost

Configuration options for the Default Terminal Execution Specification

Keep folders on top when sorting by name

Show the clock with second precision, instead of minutes

Remove items in the trash after 30 days

default permissions for all unauthenticated accesses.

Number of boot attempts before this UKI is considered bad

Specifies the time limit (in seconds) to use when performing searches

The default Nix expression search path, used by the Nix evaluator to look up paths enclosed in angle brackets (e.g. <nixpkgs>)

Whether to enable the default included frontend with a dashboard.

Whether to use the expanded print panel by default

Type of proxy to use

Whether to enable this instance of Anubis.

Animate opening applications from the Dock

Configuration options for the Default Terminal Execution Specification

Whether to use the expanded print panel by default

Turn on time zone support

The default log level: can be overridden in an output section

Set the default-shell tmux variable.

The file mode creation mask for Aria2 service

With this option, you can customize an nginx virtual host which already has sensible defaults for Dolibarr

Name of the mongo database.

When enabled, instructs udisks2 to mount removable drives under /media/ directory, instead of the default, ACL-controlled /run/media/$USER/

Whether to enable or disable lingering for this user

Whether to make icons of hidden applications tranclucent

Anubis policy configuration

Whether to always show hidden files

Whether to enable tap to drag

Whether to enable tap to click

If set, the pkgs argument to all nix-darwin modules is the value of this option, extended with nixpkgs.overlays, if that is also set

Whether to save new documents to iCloud by default

The user under which Anubis is run

A list of extra flags to be passed to Anubis.

TCP connection port

This section defines default values for attributes which are used whenever no values are given in the appropriate device or multipath sections.

Controls the file Xorg logs to

Default data folder for Fider.

User to run upsmon as. upsmon.conf will have its owner set to this user

Strings to prefix to the default system.nixos.label

Directory where the zsh configuration and more should be located, relative to the users home directory

Installing a public key allows firmware signed with a matching private key to be recognized as trusted, which may require less authentication to install than for untrusted files

Fallback if no monitor layout can be detected

Keep or set the specified variables

The path to the default configuration options the PulseAudio server should use

The restriction flags to be set by default

Default block I/O scheduler for rotational drives (e.g. hard disks)

Defines Anuko Time Tracker default language

Working directory, available as $GITHUB_WORKSPACE during workflow runs and used as a default for repository checkouts

Default Sympa language

Set default evaluation interval for sub queries

The group under which Anubis is run

The path of the Searx server settings.yml file

Configure Subsonic to use this folder for music

The script to run when user log in, usually a window manager, e.g. "icewm", "xfce4-session" This is per-user overridable, if file ~/startwm.sh exists it will be used instead.

Whether to show hard disks on desktop

Sets the logical button mapping for this device, see XSetPointerMapping(3)

The name of an existing user account to use to own the ZNC server process

The user's home directory

Default search engine.

Default layout for the root container.

Enable PROXY protocol.

Position of the dock on screen

Resize columns to fit filenames

With this option, you can customize an nginx virtual host which already has sensible defaults for radicle-httpd

Whether to enable or disable lingering for this user

PHP package to use for php-fpm

Whether to hide Dashboard as a Space

Whether to use the metric system

Override the default port on which to listen for connections.

The default port to listen on for HTTP traffic.

Address to bind to

How many milliseconds ksmd should sleep between scans

The group to run oCIS under

Set the resolver to use for performing recursive DNS queries

Whether to listen for and reject all HTTPS connections to this vhost

Whether to listen for and reject all HTTPS connections to this vhost

Whether to listen for and reject all HTTPS connections to this vhost

Whether to listen for and reject all HTTPS connections to this vhost

Whether to listen for and reject all HTTPS connections to this vhost

Attestation quote type.

Whether to listen for and reject all HTTPS connections to this vhost

Whether to listen for and reject all HTTPS connections to this vhost

Show calendar list

Selects the non-default graphics card used for PRIME render offloading

Enable ntopng, a high-speed web-based traffic analysis and flow collection tool

Sets the speed speed of window resizing

Directory holding configuration and by default also incoming and temporary files

What port to listen for client requests, default is 1080.

The default prefix of the service label

Authentication settings

Extra configuration to append to the default ~/.gitolite.rc

Sets the URI to open when NewWindowTarget is "Other"

Whether to use 24-hour or 12-hour time

Override feh's default keybindings

Whether to listen for and reject all HTTPS connections to this vhost

Whether to enable two-finger pinch gesture for zooming in and out

Defines the interval length, in seconds, between new jobs check

Whether to enable haptic feedback

Address:Port to bind to for HTTP (default: 0.0.0.0:8080).

Timeout (in seconds) until loader boots the default menu item

The path to use as hound's $HOME

Name of existing phpfpm pool that is used to run web-application

Directory where the uploaded files will be stored when the http_upload module is used

Socket to use for connecting to SNMP master agent

Sets the speed of the animation when hiding/showing the Dock

Which column to sort the main activity page (such as "CPUUsage")

Whether to listen for and reject all HTTPS connections to this vhost

Whether to listen for and reject all HTTPS connections to this vhost

Settings to write to app.json

Settings for podman's default network.

Configure Subsonic to use this folder for Podcasts

Enables the in-database configuration.

https://docs.postgrest.org/en/stable/references/configuration.html#in-database-configuration

PHP FPM configuration

Enable spring loading for all Dock items

Whether to enable two-finger rotation gesture

Profiles allow multiple colima configurations

Makes user-profiles globally available under nextcloud.tld/u/user.name

Only use TLSv1.3 (default also allows TLSv1.2).

Name of existing phpfpm pool that is used to run web-application

The user to run oCIS as

Whether to enable starting the service by default.

The status of thunderbird.preferences.

status can assume the following values:

• "default": Preferences appear as default.
• "locked": Preferences appear as default and can't be changed.
• "user": Preferences appear as changed.
• "clear": Value has no effect

Whether to listen for and reject all HTTPS connections to this vhost

Sets these config files to the default content

Named accounts and their respective configurations

File containing the MINIO_ROOT_USER, default is "minioadmin", and MINIO_ROOT_PASSWORD (length >= 8), default is "minioadmin"; in the format of an EnvironmentFile=, as described by systemd.exec(5).

Chooses what happens when you press the Fn key on the keyboard

Keep folders on top when sorting by name on the desktop

Sets the logical button mapping for this device, see XSetPointerMapping(3)

The 16 colors palette used by the virtual consoles

Open the main window when opening Activity Monitor

Whether to propagate the legacy options under services.znc.confOptions.* to the znc config

Whether to enable the focus ring animation

Whether to enable the press-and-hold feature

Enable dragging windows to screen edges to tile them

Whether to enable four-finger spread gesture to show the Desktop

The theme package.

Change the icon in the dock when running.

• 0: Application Icon
• 2: Network Usage
• 3: Disk Activity
• 5: CPU Usage
• 6: CPU History Default is null.

Override the default port on which to listen for WS-RPC connections.

Override the default port on which to listen for RPC connections.

Filename to be used for the dump

Jibri configuration

Set the host address for this virtual host

Override the default TLS port for this virtual host.

The default encryption method to use for passwordCrypt = 1.

Disable default components, see the K3s documentation.

sched_latency_ns.

Freeform configuration via environment variables for Anubis

The host name or IP address on which to bind Airsonic

Whether to listen for and reject all HTTPS connections to this vhost

Whether to always show file extensions

Preemption mode.

sched_nr_latency.

Configure Subsonic to use this folder for playlists

Show indicator lights for open applications in the Dock

Whether to enable trackpad right click (two-finger tap/click)

Enable dragging windows to the menu bar to fill the screen

Configuration for the default logger

If the default user "gocd-agent" is configured then this is the primary group of that user.

Connect to testnet network instead of the default mainnet.

Whether to enable Tor daemon

The name of an existing user to use to run the service

The user to run Memos as.

Routing queue number

Configuration file to use for FRR

Disable default components, see the RKE2 documentation.

Target location for Applications

The openssh package to use

Customized glibcLocales package providing the LOCALE_ARCHIVE_* environment variable

Sets the maximum size of the index

Whether to enable kapacitor.defaultDatabase.

This is a modular service, which can be imported into a NixOS configuration using the system.services option.

Whether to listen for and reject all HTTPS connections to this vhost

Apple menu > System Preferences > Mission Control

Displays have separate Spaces (note a logout is required before this setting will take effect).

false = each physical display has a separate space (Mac default) true = one space spans across all physical displays

      Themes to install

Extra parameters of this listen directive.

Whether to show connected servers on desktop

LIRC default options described in man:lircd(8) (lirc_options.conf)

Override the default HTTP port for this virtual host.

Anubis policy configuration in Nix syntax

The set of packages that appear in /run/current-system/sw

Sets the window tabbing when opening a new document: 'manual', 'always', or 'fullscreen'

The set of packages that appear in /run/current-system/sw

Whether to disable force click

Sets the size of the finder sidebar icons: 1 (small), 2 (medium) or 3 (large)

Cache directory to be used by oh-my-zsh

The default port to listen on for HTTPS traffic

Skydns default domain if not specified by etcd config.

Set this option when you want to run the slurmctld daemon as something else than the default slurm user "slurm"

The IP webhook should serve hooks on

Whether to enable xdg-terminal-exec, the proposed Default Terminal Execution Specification.

Hostname to use for NetBIOS.

Default user name to use.

Whether to enable xdg-terminal-exec, the proposed Default Terminal Execution Specification.

The path that will be used for the FLAKE environment variable.

FLAKE is used by nh as the default flake for performing actions, like nh os switch.

Whether this interface should be configured with DHCP

Whether to enable three-finger drag

Sets the speed of the Mission Control animations

Configures the keyboard control behavior

The package wrapper function available for use as (config.lib.nixGL.wrap <package>)

Specifies port number on which the jenkins HTTP interface listens

User under which the coder service runs.

By default pam-ussh reads the trusted user CA keys from /etc/ssh/trusted_user_ca

Set the host address for this virtual host

Override the default TLS port for this virtual host.

User under which Node-RED runs

The group to run Memos as.

The name of an existing group to use to run the service

Contents of skhd's configuration file

Apple menu > System Preferences > Users and Groups > Login Options

Auto login the supplied user on boot

      Hotkeys to configure

The hotkey.

Text of the file.

Configuration for WiVRn

Whether to enable trackpad gestures (three- or four-finger vertical swipe) to show App Exposé

For normal click: 0 for light clicking, 1 for medium, 2 for firm

Whether to show external disks on desktop

Magnify icon on hover

The plugin.

The address (host[:port]) of the IRC server. senpai uses TLS connections by default unless you specify tls option to be false

      Extra files to link to the vault directory

The default priority for messages sent to gotify.

The path to use as JENKINS_HOME

If the default user "jenkins" is configured then this is the primary group of that user.

Name of existing phpfpm pool that is used to run web-application

If the default user "gocd-server" is configured then this is the primary group of that user.

The user to run code-server as

Whether to always upgrade casks listed in homebrew.casks regardless of whether it's unversioned or it updates itself

Whether to enable moving window by holding anywhere on it like on Linux

Whether to set the theme as active.

Whether to open the default ports in the firewall: TCP/UDP 22000 for transfers and UDP 21027 for discovery

Attribute set of default values for modem config files etc/config.*

Whether to enable quarantine for downloaded applications

Whether to show removable media (CDs, DVDs and iPods) on desktop

Set the spring loading delay for directories

Default orientation for the root container.

Whether to enable writing to the Nix store as a remote store via SSH

Default URL for FreshRSS.

User account under which Actual runs

Hostname or IP-address to listen to

Override the default HTTP port for this virtual host.

The network to connect to

Group under which the service should run

Enable logging, default is no logging.

Default user email to use.

sched_cfs_bandwidth_slice_us.

FastCGI parameters to override

FastCGI parameters to override

FastCGI parameters to override

The sort direction of the sort column (0 is decending)

Enable window margins when tiling windows

Whether to enable four-finger pinch gesture to show the Launchpad

The nixGL package set containing GPU library wrappers

Some NixOS packages provide debug symbols

Graphical session to pre-select in the session chooser (only effective for GDM, LightDM and SDDM)

Listening address.

FastCGI parameters to override

Options for PHP's php.ini file for nextcloud

Configures the trackpad tracking speed (0 to 3)

For force touch: 0 for light clicking, 1 for medium, 2 for firm

Whether to minimize windows into their application icon

Whether to show all file extensions in Finder

Show the AM/PM label

Core plugins to activate

Whether to listen for and reject all HTTPS connections to this vhost

Extra configuration options for Syncthing

0 to enable Silent Clicking, 1 to disable

Enable Stage Manager Stage Manager arranges your recent windows into a single strip for reduced clutter and quick access

Whether this is a default library

Name of the snippet.

Text of the file.

Overridable config file to use for named

User account under which Klipper runs

Default data folder for Kanboard.

Whether to enable the atftpd TFTP server

Override the configuration file used by Apache

Group under which the coder service runs.

Default data folder for FreshRSS.

The existing user the Quassel daemon should run as

Group under which Node-RED runs

User under which the service should run

Verbatim contents of squid.conf

Default data folder for MicroBin.

Whether rke2 should run as a server or agent

The Homebrew prefix directory, i.e., the value that brew --prefix returns

Target location for Fonts

(Extra) system-wide /**/bin paths for Apptainer/Singularity to find command-line utilities in.

"/run/wrappers/bin" is included by default to make utilities with SUID bit set available to Apptainer/Singularity

If true, the user is prompted for a password when the screen saver is unlocked or stopped

Whether to display the appswitcher on all displays or only the main one

Extra configuration options for Syncthing

The password to connect to the remote InfluxDB server

The username to connect to the remote InfluxDB server

FastCGI parameters to override

FastCGI parameters to override

Extra environment variables passed to CommaFeed, refer to https://github.com/Athou/commafeed/blob/master/commafeed-server/config.yml.example for supported values

FastCGI parameters to override

FastCGI parameters to override

FastCGI parameters to override

Whether to use inertia when scrolling

The group to run code-server under

User account under which caddy runs.

The font used for the virtual consoles

Accept the CA's terms of service

The state directory where Guix service will store its data such as its user-specific profiles, cache, and state files.

Force deCONZ to use a specific USB device (e.g. /dev/ttyACM0)

User account under which MySQL runs.

List of directories to scan

List of site names for which statistics should be exported

Path to directory of CRLs (Certificate Revocation Lists) in PEM format

Whether or not to switch to a workspace that has a window of the application open, that is switched to

Path of the source file or directory.

      CSS snippets to install

Show the full date

Filename to be used for the dump

Whether to enable i2c devices support

By default, H2O, without prejudice, will use as many TLS versions & cipher suites as it & the TLS library (OpenSSL) can support

Group account under which Actual runs

Whether to enable Ferm Firewall. Warning: Enabling this service WILL disable the existing NixOS firewall! Default firewall rules provided by packages are not considered at the moment.

Configuration of the IFM service

User account under which maddy runs.

Name of phpfpm pool that is used to run web-application

The user Quickwit runs as

Existing user that the CGI process will belong to. (Default almost surely will do.)

Override the configuration file used by MySQL

The user Temporal runs as

User to run Zeyple as.

By default data is only periodically persisted to disk, enable this option to use an append-only file for improved persistence.

Overrides for choosing what keyboard shortcut activates each answer button

Settings for mc/ini file

Whether to enable the plugin.

Path to target relative to the vault's directory.

Sets the maximum size of accepted JSON payloads

Key server from which to fetch and update keys

Whether to enable smooth scrolling

Whether this is a default profile

Defines how users authenticate themselves to the server

Defines how users authenticate themselves to the server

thefuck needs an alias to be configured

The work directory for CFSSL.

Group under which caddy runs.

Override the default port on which to listen for connections.

Daemon process priority for bee. 0 is the default Unix process priority, 19 is the lowest.

Enables udev rules for BladeRF devices

Default user to store mail for virtual users.

Group account under which Klipper runs

Path to default Klipper config.

Interface to use (IP or name) for inter-host communication

Threshold to start probabalistic backoff with ntcp sessions (default: use system limit).

The user for the service

Name of existing phpfpm pool that is used to run web-application

The directory where MPD stores its state, tag cache, playlists etc

If you hold a key longer than this timeout, xcape will not generate a key event

The policy file to use

Whether to enable the headless Transmission BitTorrent daemon

Error log level.

Apple menu > System Preferences > Users and Groups > Login Options

Allow users to login to the machine as guests using the Guest account

Additional policy settings merged into the policy file

Whether to show warnings when change the file extension of files

Whether to use Celsius or Fahrenheit

Define new verbs

Path of the source file.

Whether to enable the snippet.

Server HTTP listen address

Maximum number of open files (0 - use system default).

Name of the default cryptographic profile chosen from the profile_dir directory.

Client-side web application settings that override the defaults in config.js

Directory for storing Caddy access logs.

Configuration file, default is generated from config.service.umurmur.settings

Group account under which MySQL runs.

Optional configuration file to link to use instead of the default file (~/.mbsyncrc).

Configuration written to $XDG_CONFIG_HOME/tiny/config.yml

Kinds of items to show

"bantime.increment" allows to use database for searching of previously banned ip's to increase a default ban time using special formula, default it is banTime * 1, 2, 4, 8, 16, 32 ...

"bantime.factor" is a coefficient to calculate exponent growing of the formula or common multiplier, default value of factor is 1 and with default value of formula, the ban time grows by 1, 2, 4, 8, 16 ...

Apple menu > System Preferences > Users and Groups > Login Options

Hides the Sleep button on the login screen

The network family that Anubis should bind to

Change which processes to show.

• 100: All Processes
• 101: All Processes, Hierarchally
• 102: My Processes
• 103: System Processes
• 104: Other User Processes
• 105: Active Processes
• 106: Inactive Processes
• 107: Windowed Processes Default is 100.

Apple menu > System Preferences > Users and Groups > Login Options

Hides the Shut Down button on the login screen

This key lets one override the default throttling policy imposed on jobs by launchd

Temporary directory that Athens will use to fetch modules from VCS prior to persisting them to a storage backend

Whether to enable HTTPS in addition to plain HTTP

Whether to open the default ports in the firewall for the ALVR server.

The path to use as JENKINS_HOME

User account under which inadyn runs.

Whether to enable HTTPS in addition to plain HTTP

Hostname or address on which NFS requests will be accepted

User account under which Sonarr runs.";

Whether to enable HTTPS in addition to plain HTTP

Path to the snmpd.conf file

The group temporal runs as

The group quickwit runs as

Group account under which maddy runs.

Whether to enable the startup chime

The string that will be used for the NH_OS_FLAKE environment variable.

NH_OS_FLAKE is used by nh as the default flake for performing nh os actions, such as nh os switch

Specifies whether vdirsyncer should request vCards in version 4.0

The default signing key fingerprint

Number associated with an answer button

Whether to create symlinks to the system generations under /boot

Jump to the spot that's clicked on the scroll bar

Whenever to configure Bash as an interactive shell

Name of the php-fpm pool to use and setup

Address to bind to

Service port

Default group to store mail for virtual users.

List of IPs or networks to allow (default all allowed).

The data directory for MySQL.

Number of Neo4j worker threads, where the default of 0 indicates a worker count equal to the number of available processors.

Whether to enable HTTPS in addition to plain HTTP

Enable Munin Node agent

Overridable configuration file contents to use for ntopng

The group for the service

Group to use to run Zeyple.

Path to directory of X.509 certificates in PEM format for trusted parties

Whether to enable Homebrew to generate lockfiles when you manually invoke brew bundle [install]

FastCGI parameters to override

FastCGI parameters to override

FastCGI parameters to override

FastCGI parameters to override

FastCGI parameters to override

"bantime.formula" used by default to calculate next value of ban time, default value below, the same ban time growing will be reached by multipliers 1, 2, 4, 8, 16, 32 ...

Whether to listen for and reject all HTTPS connections to this vhost

FastCGI parameters to override

FastCGI parameters to override

Extra command-line arguments to pass to wl-clip-persist

Whether to include Anubis's default bot detection rules via the (data)/meta/default-config.yaml import

Whether to enable trackpad gestures (three- or four-finger vertical swipe) to show Mission Control

Whether to enable three-finger tap gesture: 0 to disable, 2 to trigger Look up & data detectors

Override the configuration file used by Caddy

Default options for yarn-site.xml

Require authentication of the STUN Binding request

Group running the ACME client.

A list of cryptographic kernel modules needed to decrypt the root device(s)

Default data folder for Anuko Time Tracker.

If the default slave agent user "jenkins" is configured then this is the primary group of that user.

Default environment variables available to the GameScope process, overridable at runtime.

Absolute path to programs.sqlite

Default options for hdfs-site.xml

Port to listen on (default: 443).

Use the given device as keyboard input event device instead of /dev/input/eventX default.

Enable client authentication

Override (NetBIOS) hostname to be used (default hostname).

Hop limit for multicast packets (default = 1).

The NATS data directory

Name of output to use, by default all outputs are used.

sched_wakeup_granularity_ns.

AdGuard Home configuration

Whether to use centimeters (metric) or inches (US, UK) as the measurement unit

Whether to enable smart zoom when double-tapping with two fingers

Plugin settings to include.

The path to a hardware watchdog device which will be managed by systemd

Default window size for this interface.

Set the host address for this virtual host

Override the default TLS port for this virtual host.

Group account under which inadyn runs.

Override the default database cache size in MiB.

Group account under which Sonarr runs.

Server configuration, see https://maddy.email for more information

Whether to enable opening the default ports in the firewall for Samba.

The backup service will be invoked automatically at the given date/time, which must be in the format described in systemd.time(5)

Upload speed limit. 0 is unlimited (default).

Whether to enable the default ports in the firewall for the WiVRn server.

Nix daemon process resource limits class

Value of the mpd_music_dir setting

YAML config that will override the default fusuma configuration.

Resulting defaults file.

Absolute path to programs.sqlite

The string that will be used for the NH_HOME_FLAKE environment variable.

NH_HOME_FLAKE is used by nh as the default flake for performing nh home actions, such as nh home switch

FastCGI parameters to override

Options defined here will override the defaults for xendomains

Apple menu > System Preferences > Control Center > AirDrop

Show a AirDrop control in menu bar

Settings to write to appearance.json

Apple menu > System Preferences > Control Center > Sound

Show a sound control in menu bar

FastCGI parameters to override

FastCGI parameters to override

A regex to filter output

Apple menu > System Preferences > Users and Groups > Login Options

Hides the Restart button on the login screen

Miriway's config

Whether extraEntries are included before the default option.

https_dns_proxy will by default use IPv6 and fail if it is not available

Default maximum packet size for this interface.

Whether to enable HTTPS in addition to plain HTTP

Whether to enable HTTPS in addition to plain HTTP

This option defines the maximum number of jobs that Nix will try to build in parallel

Multi-processing module to be used by Apache

Override the default port on which to listen for JSON-RPC connections.

Attrset of dconf profiles

Whether to enable HTTPS in addition to plain HTTP

Enable the HTTP connector for Neo4j

User under which Traefik runs.

The directory to store all user data, such as flow and credential files and all library data

The Sonarr home directory used to store all data

Database port

Whether to enable HTTPS in addition to plain HTTP

Whether to enable HTTPS in addition to plain HTTP

Web interface root public URL, including scheme and port (if non-default).

Enable the BOLT connector for Neo4j

This option defines the maximum number of jobs that Nix will try to build in parallel

Whether to enable Apple's built-in OpenSSH server

Default user name to use.

This optional key is used to control whether your job is launched once at the time the job is loaded

JSON config that will override the default Astroid configuration.

The width of a tab in spaces

List of integrations set are always set up, unless in recovery mode.

The plugin package.

FastCGI parameters to override

Sets the pointer acceleration profile to the given profile

Whether to display ASCII control characters using caret notation in standard text views

Disables the ability for a user to access the console by typing “>console” for a username at the login window

Set icon and widget style

To set to default mode, set this to null and you'll need to manually run defaults delete -g AppleIconAppearanceTheme

Enables swiping left or right with two fingers to navigate backward or forward

Allow Type-1 fonts

Default options for hbase-site.xml

Settings for files in maps/

Extra global default configuration for htop which is read on first startup only

Path to dtb directory that overlays and other processing will be applied to

Libraries that automatically become available to all programs

Override the default HTTP port for this virtual host.

The user tuwunel is run as

User account under which prosody runs.

Database user

Configuration used by the Conky daemon

Optional configuration file to use instead of the default file ($XDG_CONFIG_HOME/pimsync/pimsync.conf).

Disable drop shadow border around screencaptures

Text to be shown on the login window

Whether to run searx in uWSGI as a "vassal", instead of using its built-in HTTP server

The data directory for caddy.

The package that provides the default driver set.

Free form attribute set for aMule settings

The database's port

Whether to link the formula to the Homebrew prefix

Configuration written to $XDG_CONFIG_HOME/bottom/bottom.toml

Use this tool with the given xinput device

Creating multiple WLAN interfaces on top of one physical WLAN device (NIC)

The hotkey modifiers.

Target to which screencapture should save screenshot to

The command the user is allowed to run

Specifies location of CouchDB view index files

The directory where Galene stores its internal state

pay-respects needs an alias to be configured

Whether to enable Cinnamon default applications.

Whether to enable the fail2ban service

By default, file systems and swap areas are trimmed on-the-go by setting "discard"

Set of btrbk instances

The option to use this LUKS device with a GPG encrypted luks password by the GPG Smartcard

The memory limit (max Java heap size) in megabytes

Whether to enable Pantheon default applications.

The memory limit (max Java heap size) in megabytes

Enable the HTTPS connector for Neo4j

Configuration of the Mealie service

Run sanoid at this interval

The log level when logging to file

The default window geometry for new terminal windows.

Default user email to use.

The difficulty required for clients to solve the challenge

FastCGI parameters to override

Whether to enable four-finger horizontal swipe gesture: 0 to disable, 2 to swipe between full-screen applications

Apple menu > System Preferences > Control Center > Focus

Show a Focus control in menu bar

      Community plugins to install and activate

Whether to listen for and reject all HTTPS connections to this vhost

FastCGI parameters to override

This key lets one override the default throttling policy imposed on jobs by launchd

Show thumbnail after screencapture before writing to file

List of domains we agree to relay to

Sets the Debug-Level. 0 disables debugging, 1 enables pam_mount tracing, and 2 additionally enables tracing in mount.crypt

Whether to enable Neovim

This option specifies the no_proxy environment variable

Whether to enable the Interplanetary File System (WARNING: may cause severe network degradation)

The group tuwunel is run as

The group to run OpenCloud under

Enable verbose output, default is to not be verbose.

Auto-redirect to HTTPS in production

Set workgroup name (default WORKGROUP).

Group account under which prosody runs.

VirtualHost to serve gitweb on

STUN broker URL (default "stun:stun.stunprotocol.org:3478")

The group to run Syncthing under

The URI of the NixOS channel to use for automatic upgrades

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

Extra commands to run on the default confDir derivation.

Database port

The recommended idle time out (in seconds) to pass to the job

Set the default browser for opening links

Settings for mc/panels file

Settings for mc/mc.keymap file

Apple menu > System Preferences > Control Center > Display

Show a Screen Brightness control in menu bar

Include date and time in screenshot filenames

Enables swiping left or right with two fingers to navigate backward or forward

Minimum remaining validity before renewal in days.

Welcome line printed by agetty

Default options for mapred-site.xml

Name of the default administrator user

The prosody home directory used to store all data

Authentication endpoint

Overrides for the default mailman-web Django settings.

Port number to bind to

Open ports in the firewall for mpd

The directory where owncast stores its data files

The IP address on which Xandikos will listen

By default this service only changes the first packet sent, which is enough in most cases

Default kubernetes certificate authority

Contexts in which to display automatic information box

Set the maximum time a cache entry is valid to n seconds

Whether commits and tags should be signed by default.

The network family that the metrics server should bind to

If set, shows a contact email address when rendering error pages

The prefix that will be added to all metrics

Whether to enable Homebrew to auto-update itself and all formulae during nix-darwin system activation

Whether to enable secondary click: 0 to disable, 1 to set bottom-left corner, 2 to set bottom-right corner

Search engines that can be used via the address bar

Whether to enable four-finger pinch gesture (spread shows the Desktop, pinch shows the Launchpad): 0 to disable, 2 to enable

Apple menu > System Preferences > Users and Groups > Login Options

Disables the "Shutdown" option when users are logged in

Whether to enable trackpad secondary click

Whether to enable the plugin.

Path to certificate private key (PEM with private key)

Path to certificate (PEM with certificate chain)

Whether to enable three-finger horizontal swipe gesture: 0 to disable, 1 to swipe between pages, 2 to swipe between full-screen applications

Apple menu > System Preferences > Control Center > Now Playing

Show a Now Playing control in menu bar

Whether to enable two-finger swipe-from-right-edge gesture: 0 to disable, 3 to open Notification Center

Default language for FreshRSS.

Socket listen queue backlog size

Whether to power up the default Bluetooth controller on boot.

The default realm to be used for the users when no explicit origin/realm relationship was found in the database, or if the TURN server is not using any database (just the commands-line settings and the userdb file)

Whether to enable Sway, the i3-compatible tiling Wayland compositor

Level of Logging to use (debug, info, warn, error) (default "info").

The user to run OpenCloud as

Settings for MaryTTS

Whether to open the firewall for the default ports.

Whether to open the firewall for the default ports.

Default launcher to use.

The amount of time launchd waits before sending a SIGKILL signal

The default path to use for Home Manager

The string that will be used for the NH_DARWIN_FLAKE environment variable.

NH_DARWIN_FLAKE is used by nh as the default flake for performing nh darwin actions, such as nh darwin switch

Local UDP port for IKE communication

Sets the default UI theme. system matches the user's system theme.

This key lets one override the default throttling policy imposed on jobs by launchd

Click wallpaper to reveal desktop Clicking your wallpaper will move all windows out of the way to allow access to your desktop items and widgets

Path to file containing certificate authorities that should be used to validate the connection authenticity

Path to file containing certificate authorities that should be used to validate the connection authenticity

Default audio compression method.

Base directory for custom templates and other options

Which user or group the specified command is allowed to run as

User account under which dolibarr runs.

The name of the savegame that will be used by the server

Key type to use for private keys

Extra configuration options appended to the default asterisk.conf file.

On service or configuration errors that prevent Duo authentication, fail "safe" (allow access) or "secure" (deny access)

Host address the HTTP server listens on

Whether Galene should listen in http or in https

User account under which pixelfed runs.

Sets the bucket size for the map variables hash tables

The user to run Syncthing as

websocket relay URL (default "wss://snowflake.bamsoftware.com/")

Additional configuration lines added to the default section of xinetd's configuration.

PROTO can be 'HTTP' (the default) or 'PROXY'

Set macOS user defaults

Allow client if common name appears in the list.

Enable holding alt to tile windows

This key lets one override the default throttling policy imposed on jobs by launchd

Allow client if organizational unit name appears in the list.

If true, allow all clients, do not check client cert subject.

Apple menu > System Preferences > Users and Groups > Login Options

If set to true, the Power Off menu item will be disabled when the user is logged in

Remember the selection window of the last screencapture

Email address for account creation and correspondence from the CA

Configuration for one or more device IDs

The set of system-wide known SSH hosts

Whether to enable knot-resolver (version 5) domain name server

Commands to run after new certificates go live

Define the client configurations

Location for any persistent data Traefik creates, such as the ACME certificate store.

The user OpenSearch runs as

The restriction flags to be set on source

Overridable config file contents to use for lighttpd

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

The set of system-wide known SSH hosts

Default launcher to use.

Configuration written to CODEX_HOME/config.toml (0.2.0+) or ~/.codex/config.yaml (<0.2.0)

Sets the pointer acceleration profile to the given profile

Allow client if DNS subject alternative name appears in the list.

Address to forward connections to (can be HOST:PORT or unix:PATH).

Address and port to listen on (can be HOST:PORT, unix:PATH).

Allow client if URI subject alternative name appears in the list.

Whether to enable lightdm-mini-greeter as the lightdm greeter

Whether to enable lightdm-tiny-greeter as the lightdm greeter

Specify the port (a positive integer) on which the Director daemon will listen for Bacula Console connections

Run a gitea dump at this interval

Specifies the default port over which Cassandra will be available for JMX connections

Path the service has access to

The options to use for this LUKS device in YubiKey-PBA

Attribute set of paths whose content is copied to the skins subdirectory of the MediaWiki installation in addition to the default skins.

Base url for images generated in the cgi

The timer configuration for performing the update

Whether to add the activation script to the system profile

Settings written as JSON to ~/.config/vicinae/settings.json

FastCGI parameters to override

Default configuration for the loggers used by matrix-synapse and its workers

Package to use for ghostunnel

This option determines which Docker storage driver to use

Apple menu > System Preferences > Users and Groups > Login Options

Disables the “Restart” option when users are logged in

The default action to execute.

Group for hg.sr.ht

Group account under which dolibarr runs.

Which package to copy default rules,types,cgroups from.

Whether to allow editing the kernel command-line before boot

The certificate profile to choose if the CA offers multiple profiles.

Whether to let openssh print the result when entering a new ssh-session

Will be inserted in the Default section of the config file.

DEPRECATED, use driverOptions

Extra configuration for collectd

The fully qualified domain name (FQDN) of this host

URL to the Origin

By default, nginx will look up both IPv4 and IPv6 addresses while resolving

Token redemption endpoint

Group account under which pixelfed runs.

Tell nylon which interface to use as an uplink, default is "enp3s0f0".

Broker URL (default "https://snowflake-broker.torproject.net/")

Lines to append to default multipath.conf

Lines to append to default iscsid.conf

Download speed limit. 0 is unlimited (default).

By default, nginx will look up both IPv4 and IPv6 addresses while resolving

By default, nginx caches answers using the TTL value of a response

Time of day to run logcheck

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

The salt used for serialization

The fully qualified domain name (FQDN) of this host

Set the maximum time a cache entry used for SSH keys is valid to n seconds

Number of CPUs to allocate to the machine

Swap size in MB for the machine

Whether to enable Open Graph tag passthrough

Attribute set of NetBird client daemons, by default each one will:

1. be manageable using dedicated tooling:

• netbird-<name> script,
• NetBird - netbird-<name> graphical interface when appropriate (see ui.enable),

2. run as a netbird-<name>.service,
3. listen for incoming remote connections on the port 51820 (openFirewall by default),
4. manage the netbird-<name> wireguard interface,
5. use the /var/lib/netbird-/config.json configuration file,
6. override /var/lib/netbird-/config.json with values from /etc/netbird-/config.d/*.json,
7. (hardened) be locally manageable by netbird-<name> system group,

With following caveats:

• multiple daemons will interfere with each other's DNS resolution of netbird.cloud, but should remain fully operational otherwise

Whether to enable three-finger vertical swipe gesture (down for Mission Control, up for App Exposé): 0 to disable, 2 to enable

Apple menu > System Preferences > Control Center > Bluetooth

Show a bluetooth control in menu bar

Group for man.sr.ht

Group for git.sr.ht

Group for hub.sr.ht

Establish a default set of export options

Whether to enable HTTPS in addition to plain HTTP

Whether to enable HTTPS in addition to plain HTTP

Whether to enable HTTPS in addition to plain HTTP

The data directory for goeland where the database will reside if using the unseen filter

Override default port used for service.

Customize the default settings, refer to https://github.com/kanboard/kanboard/blob/main/config.default.php for details on supported values.

Additional global flags to pass to all lego commands.

This option, if set, adds a collection of default kernel modules to boot.initrd.availableKernelModules and boot.initrd.kernelModules.

Whether to enable opening the default ports in the firewall for Devpi Server.

Whether to enable HTTPS in addition to plain HTTP

User accounts for GRUB

Whether to open the firewall port (default 45876).

The context path, i.e., the last part of the Airsonic URL

Whether to enable HTTPS in addition to plain HTTP

Extra configuration options to append or override

The context path, i.e., the last part of the Subsonic URL

The group OpenSearch runs as

The list of hostnames and/or IP addresses from which the Mailman Web UI will accept requests

Whether to enable HTTPS in addition to plain HTTP

Whether to enable HTTPS in addition to plain HTTP

The default evaluation interval to use

The prefix for MAC addresses to use, without the trailing ':'

Specifies whether userlistFile is a list of user names to allow or deny access

Launcher command, if not set, dmenu will be used by default.

Reload buffers when an external modification is detected

Name of auth backend to use by default.

Path to CA bundle file (PEM/X509)

Apple menu > System Preferences > Users and Groups > Login Options

Displays login window as a name and password field instead of a list of users

The ASCII and UTF-8 output width, default is 78

Defines one or more team names that auto-provisioned OIDC users shall be added to

Settings to include in the plugin's data.json.

Additional flags to pass to lego run.

Specifies the bind address on which the jenkins HTTP interface listens

The server's configuration file

SCSI link power management policy

If enabled (the default), Nix will only download binaries from binary caches if they are cryptographically signed with any of the keys listed in nix.settings.trusted-public-keys

This file contains the full URI that can be used to access this instance of CouchDB

The gitolite home directory used to store all repositories

A list of names of users (separated by whitespace) that are allowed to connect to the Nix daemon

• never - Do not allocate huge memory pages

Default Alerta authentication token

Open the default ports in the firewall for the server.

HTTPS listening address

Sets the maximum size of the types hash tables (types_hash_max_size)

Primary group under which Traefik runs

Relay pools to join

A list of names of users (separated by whitespace) that are allowed to connect to the Nix daemon

Whether to enable wipe the builder's filesystem on every restart

If enabled (the default), Nix will only download binaries from binary caches if they are cryptographically signed with any of the keys listed in nix.settings.trusted-public-keys

Target location for Services

The port on which the IMAP server listens

The systemd target that will automatically start the graphical Wayland services

Default arguments to swaylock

This optional key specifies the group to run the job as

Whether or not to enable the default configuration.

The port on which the SMTP server listens

Whether to show the menubar by default

Whether to enable NotifyOSD alerts

IMAP4 patterns for which mailboxes on the remote mail server to sync

Default for new events or if khal does not understand the timezone in an ical file

Whether to enable inline predictive text

Name for where mail coming from the remote (far) mail server will end up locally

Whether to animate opening and closing of windows and popovers

Group for todo.sr.ht

Group for meta.sr.ht

The ucarp package to use

Directory used to store media files

Configuration for Nix, see https://nixos.org/manual/nix/stable/command-ref/conf-file.html or nix.conf(5) for available options

Forcibly import the ZFS root pool(s) during early boot

Whether to enable HTTPS in addition to plain HTTP

The game type to use on the server

Allow the specified IPs to act as a proxy

Whether to enable HTTPS in addition to plain HTTP

Database connection scheme

Additional settings (see mjolnir default config for available settings)

If true, favors higher default fan speeds.

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

Enable highlight hover effect for the grid view of a stack in the Dock.

Automatically activate infat on startup

Configuration written to $XDG_CONFIG_HOME/MangoHud/MangoHud.conf

Bootable image to use for the machine

Net masks for trusted - allowed to relay mail to third parties - hosts

Name of existing PHP-FPM pool that is used to run Icingaweb2

Run bitbox-bridge.service only when hardware wallet is plugged, also registers the systemd device unit

Whether to enable debug logging for this certificate.

Extra command line options for the JVM running AirSonic

User account under which headscale runs.

Configuration to write to /etc/gitconfig

Whether to enable the default ports in the firewall for the WiVRn server.

Whether to enable opening the default ports in the firewall for Scrutiny.

Default directory to add folders in the web UI.

Whether to enable HTTPS in addition to plain HTTP

Searx settings

Content of the Stubby configuration file

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

Specifies the policy to use for reconnecting to an unavailable LDAP server

This optional key specifies whether the job participates in advanced communication with launchd

By default sidebar shows the full path of the mailbox, but with this enabled only the relative name is shown.

Disk size in GB for the machine

Enable xwayland, which is needed for the default configuration of sway.

0 to disable four finger vertical swipe gestures, 2 to enable (down for Mission Control, up for App Exposé)

Additional arguments passed to each module in addition to ones like lib, config, and pkgs, modulesPath

This option defines the first version of NixOS you have installed on this particular machine, and is used to maintain compatibility with application data (e.g. databases) created on older NixOS versions

Additional arguments passed to each module in addition to ones like lib, config, and pkgs, modulesPath

Additional arguments passed to each module in addition to ones like lib, config, and pkgs, modulesPath

Kernel package where device tree include directory is from

Specifies location of CouchDB database files (*.couch named)

If enabled, a Fontconfig configuration file will be built pointing to a set of default fonts

Default origin of alert

This tells the dispatcher how the plugin wants to be run

By default data is only periodically persisted to disk, enable this option to use an append-only file for improved persistence.

Override the configuration file used by logrotate

Neo4j SSL policy for HTTPS traffic

Systems with a recently generated hardware-configuration.nix may instead specify only nixpkgs.buildPlatform, or fall back to removing the nixpkgs.hostPlatform line from the generated config

Define a lower and upper time value (in HH:MM format) which constitute a time window during which reboots are allowed after an upgrade

If the file source is a directory, then this option determines whether the directory should be recursively linked to the target location

Time to schedule IKE reauthentication

FastCGI parameters to override

Networking-related command-line options that should be passed to qemu

Group for paste.sr.ht

Group for lists.sr.ht

Group for pages.sr.ht

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

The port the server should listen on

Whether to enable HTTPS in addition to plain HTTP

Specifies the bind address on which the irker daemon listens

Port of the database to connect to.

Whether to enable HTTPS in addition to plain HTTP

By default pam-u2f module sets the application ID to pam://$HOSTNAME

Group under which headscale runs.

Complete netdata config directory except netdata.conf

If set, the MUC rooms will be public by default.

User account under which this instance of redis-server runs.

Update the locate database at this interval

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

Whether to enable HTTPS in addition to plain HTTP

Sets the number of worker threads to use

Specifies the platform on which NixOS should be built

This optional key is used to control whether your job is launched once at the time the job is loaded

The port the server should listen on

Add terms to the matplotlibrc file to control the default matplotlib behavior.

mpv configuration options to use for jellyfin-mpv-shim

This optional key specifies whether initgroups(3) should be called before running the job

Grants the user created inherit permissions

Free-form settings written to Draupnir's configuration file

List of public keys used to sign binary caches

Additional flags to pass to lego renew.

AWS default role

Whether to enable knot-resolver (version 6) domain name server

The number of instances to start

Email address to which to send feed items

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

Sets the bucket size for the server names hash tables

Configuration options for the Stalwart server

List of public keys used to sign binary caches

Memory in MB to allocate to the machine

This key was used in Mac OS X 10.4 to control whether a job was kept alive or not

Signature verification policy file

List of module names to load

If the file source is a directory, then this option determines whether the directory should be recursively linked to the target location

The width of an indentation in spaces

Number of backups to keep

Number of blank characters at the left margin for normal text, default of 5 for mdoc(7) and 7 for man(7)

Set the size of cursor. 1 for normal, 4 for maximum

Netfilter mark and mask for input traffic

Set the resolver to use for performing recursive DNS queries

Whether to set NIX_PATH to include nixpkgs=flake:nixpkgs such that <nixpkgs> lookups receive the version of nixpkgs that the system was built with, in concert with nixpkgs.flake.setFlakeRegistry

By default pam-u2f module does not inform user that he needs to use the u2f device, it just waits without a prompt

Turns on the OCSP Must-Staple TLS extension

Whether to enable hardware accelerated graphics drivers

The network to connect to

Whether to enable HTTPS in addition to plain HTTP

The directory where Duplicati stores its data files.

Run a Forgejo dump at this interval

DEPRECATED, use driverOptions

Number of daemons to serve user requests

Instance ID for when running multiple processes (default null).

Tell nylon which interface to listen for client requests on, default is "lo".

The database's port

By default, nixos will check that programs

Which X11 packages to exclude from the default environment

A list of permissible login shells for user accounts

Whether this is a default profile.

Whether to enable automatic spelling correction

Number of backups to keep

If set, does not limit target to localhost, 127.0.0.1, [::1], or UNIX sockets

Whether to enable smart dash substitution

Name of standard way of trusted network specification to use, leave blank if you specify it explicitly or if you want to use default (localhost-only).

ACME Directory Resource URI

Interface and port to listen on to solve HTTP challenges in the form [INTERFACE]:PORT

Enable ReGreet, a clean and customizable greeter for greetd

The order of the sections in programs.rust-motd.settings

URL of the Unifi controller.

Whether to enable Shorewall IPv4 Firewall.

Group account under which this instance of redis-server runs.

Whether to enable thinkfan, a fan control program.

Let prometheus select which controller to poll when scraping

If set to false, this unit will be a symlink to /dev/null

List of forwarded ports from host to container

If set to false, this unit will be a symlink to /dev/null

If set to false, this unit will be a symlink to /dev/null

Working directory, available as $GITHUB_WORKSPACE during workflow runs and used as a default for repository checkouts

By default, nix-darwin will check that programs

Specifies the platform on which nix-darwin should be built

Every once in a while, a new nix-darwin release may change configuration defaults in a way incompatible with stateful data

Default arguments to waylogout

Apple menu > System Preferences > Control Center > Battery

Show a battery percentage in menu bar

Whether to enable smart quote substitution

Group for builds.sr.ht

If enabled, systemd will always respawn dnsmasq even if shut down manually

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

Output plugin. @www@ is substituted for default mjpg-streamer www directory

The main.cf configuration file as key value set

Whether to enable the cups-pdf virtual pdf printer backend

Default location for the Mattermost control socket used by mmctl.

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

Path to sendmail program

The IPv4 address assigned to the interface in the container

The recommended idle time out (in seconds) to pass to the job

Whether to require casks to have a checksum

Whether to set NIX_PATH to include nixpkgs=flake:nixpkgs such that <nixpkgs> lookups receive the version of nixpkgs that the system was built with, in concert with nixpkgs.flake.setFlakeRegistry

Content added to msmtp config

If the file source is a directory, then this option determines whether the directory should be recursively linked to the target location

When set to true, it will create an alias for kubectl pointing to kubecolor, thus making kubecolor the default kubectl client.

If the file source is a directory, then this option determines whether the directory should be recursively linked to the target location

XSuspender defaults.

Absolute path to the password store

The font name, null to use system default.

Set the working directory prompt display length

Path to keystore (combined PEM with cert/key, or PKCS12 keystore)

Extra arguments to pass to ghostunnel server

Follow the keyboard focus while zoomed in

Use scroll gesture with the Ctrl (^) modifier key to zoom

Default sample format.

Default number of snapshots to keep for VMs that don't specify a keep value.

Default port blendfarm server listens on.

These lines go to httpd.conf verbatim

These lines go to httpd.conf verbatim

The IPv6 address assigned to the interface in the container

Contents of sketchybar's configuration file

Whether to disable linking of helper executables

This optional key is used to control whether your job is launched once at the time the job is loaded

The DHCP client identifier to use when requesting an IP address from a DHCP server

The pyenv root directory (PYENV_ROOT).

Specifies one or more files to use for the user host key database, separated by whitespace

The systemd target that will automatically start ashell

Set the priority of the system call filter setting

Configuration options for the Stalwart email server

Default ppp settings for wvdial.

Open firewall ports for cluster communication by default

Clear all default commands

If set, the MUC rooms will display the public JIDs by default.

Command-line flags passed to the update daemon

Access token validation endpoint

The default XMPP server domain

Whether the server registers as a public server in the global server list

The user to run openvscode-server as

Extra labels in addition to the default (unless disabled through the noDefaultLabels option)

The timer configuration for rebooting after an update

Enable CIS Hardening for RKE2

Unifi service user name.

Default location for kubernetes secrets

Whether to enable HTTPS in addition to plain HTTP

The amount of time launchd waits before sending a SIGKILL signal

This optional key is used to control whether your job is launched once at the time the job is loaded

Extra labels in addition to the default (unless disabled through the noDefaultLabels option)

Target location for Preference Panes

Target location for QuickLook Plugins

Sign messages by default.

A list of tags that will be excluded from search results by default

Command to use to start the window manager

Modes in which to display possible completions

Whether to enable smart period substitution

FastCGI parameters to override

The path to the nixpkgs sources used to build the system

Specifies location of HBase database files

How long certs generated by Stargazer should live for

Default working directory for server (server-working-dir in rserver.conf).

Restrict the allowed ciphers of this policy to those defined here

Default loglevel to use for documentserver and converter

Whenever smartd should monitor all devices connected to the machine at the time it's being started (the default)

Name of the runner group to add this runner to (defaults to the default runner group)

Whether to append a minimal default PATH environment variable to the service, containing common system utilities.

Persistent applications, spacers, files, and folders in the dock.

Hide items in Stage Manager.

Name of the runner group to add this runner to (defaults to the default runner group)

Whether this is a default profile.

Optional configuration file to link to use instead of the default file ($XDG_CONFIG_HOME/vdirsyncer/config).

List of site names for which statistics should be exported

Whether to enable pay-respects' LLM integration

Listen on a UNIX socket at the specified path

Specifies what to do when the laptop lid is closed and the system is on external power

Default minimum difference between two consecutive block's timestamps in seconds.

The directory or NFS/SMB network share where MPD reads music from

Contents of the runtime configuration file, apcupsd.conf

If set to true, Nix automatically detects files in the store that have identical contents, and replaces them with hard links to a single copy

DNS Challenge provider

Where the webroot of the HTTP vhost is located. .well-known/acme-challenge/ directory will be created below the webroot if it doesn't exist. http://example.org/.well-known/acme-challenge/ must also be available (notice unencrypted HTTP).

These lines go to httpd.conf verbatim

The port of the database Invidious should use

The number of allowed simultaneous connections to the daemon, default 10.

Nextcloud's data storage path

Default room language.

The data directory for PostgreSQL

Whether to enable HTTPS in addition to plain HTTP

Whether to enable HTTPS in addition to plain HTTP

Newline separated list of names to be allowed/denied if userlistEnable is true

If enabled, virtual users will use the same privileges as local users

The path to the nixpkgs sources used to build the system

The data directory for PostgreSQL

An application to be added to the dock.

Whether to clear default keybinds.

Whether to enable source the primary account by default.

If the file source is a directory, then this option determines whether the directory should be recursively linked to the target location

Default terminal to run.

A list of host names and/or IP numbers used for accessing the host's ssh service

Protocol number of the encapsulated packets

Client-side web-app interface settings that override the defaults in interface_config.js

Whether to add Wireshark to the global environment and create a 'wireshark' group

Systemd calendar expression when to check for renewal

Whether to enable udev rules added by input-remapper to handle hotplugged devices

The systemd target that will automatically start the dsearch service

Whether to clear the configuration of the interfaces that were set up in the initrd right before stage 2 takes over

The group to run openvscode-server under

Default settings for lists (list-defaults.yml)

Default lifetime of a session (e.g. login) cookie

If set to false, this unit will be a symlink to /dev/null

By default, nixos will check that programs

The set of system-wide known SSH hosts

The recommended idle time out (in seconds) to pass to the job

This key specifies that the job should be spawned into a new security audit session rather than the default session for the context is belongs to

A proposal is a set of algorithms

Grants the user, created by the ensureUser attr, login permissions

If the default of yes is used, Mode Config works in pull mode, where the initiator actively requests a virtual IP

An absolute path to an executable to be run for each process killed

MTU size for packets leaving the interface

Whether to enable HTTPS in addition to plain HTTP

Network name for the icecream scheduler

Enables support for IEEE 802.11n (WiFi 4, HT)

What networks are allowed to use us as a resolver

Enables a click method

Files to load suricata-update managed rules, relative to 'default-rule-path'.

Run syncoid at this interval

Declarative configuration of firewall rules

Whether to enable Shorewall IPv6 Firewall.

If set, the MUC rooms will only be accessible to the members by default.

A file to be added to the dock.

The recommended idle time out (in seconds) to pass to the job

Default terminal to run.

Show the path bar at the bottom of a Finder window

Modifier key that is used for all default keybindings.

This optional key tells launchctl what type of socket to create

Whether all rooms will be persistent by default: the value of the “persistent” option in the global configuration of each user will be “true”, but the value of each individual room will still default to false

Defines whatever to use an empty string as a default salt

The directory where config.txt and serversettings.json is saved

Open the default ports in the firewall for the media server

Attribute set of environment variables.

https://github.com/Glimesh/broadcast-box#environment-variables

By default we create the sabnzbd configuration read-only, which keeps the nixos configuration as the single source of truth

Neo4j SSL policy for BOLT traffic

The secret used to create cookies

Override default chart values via Nix expressions

Enable bash completion for all interactive bash shells

The amount of time launchd waits before sending a SIGKILL signal

When to show the scrollbars

Nushell settings

Whether to enable Vulkan in nixGL wrappers

When enabled, a private key that is used during authentication will be added to ssh-agent if it is running (with confirmation enabled if set to 'confirm')

Timezone to set in the machine

Volumes to mount in the machine, specified as source:target pairs

The terminal colors, null to use system default.

mpv input bindings to use for jellyfin-mpv-shim

This setting configures the default UI language, which must be a supported IETF language tag, such as en-US.

IKE major version to use for connection.

• 1 uses IKEv1 aka ISAKMP,
• 2 uses IKEv2.
• A connection using the default of 0 accepts both IKEv1 and IKEv2 as responder, and initiates the connection actively with IKEv2

Whether to enable automatic capitalization

Server CoAP listen address

The list of systemd services to call systemctl try-reload-or-restart on.

Whether to enable Howdy and its PAM module for face recognition

The string that will be used for the NH_FLAKE environment variable.

NH_FLAKE is used by nh as the default flake for performing actions, such as nh os switch

Limit how many jobs can be handled concurrently by this service. 0 (default) simply means don't limit.

Chromium default homepage

Whether to run searx in uWSGI as a "vassal", instead of using its built-in HTTP server

If true, a system-wide PipeWire service and socket is enabled allowing all users in the "pipewire" group to use it simultaneously

Whether to enable the Wacom touchscreen/digitizer/tablet

Override default chart values via Nix expressions

The amount of time launchd waits before sending a SIGKILL signal

This optional key specifies the group to run the job as

Persistent files, and folders in the dock.

Limit how many jobs can be handled concurrently by this service. 0 (default) simply means don't limit.

Log level of the ProtonMail Bridge service

Name of the XDG Desktop Entry for your browser

The default bar mode when 'bar.mode' == 'hide'.

Modifier key that is used for all default keybindings.

Sets the size of the dock.

Username used in the machine image

Either a single calendar (calendar which is the default) or a directory with multiple calendars (discover).

Hide the Dock automatically

Default audio compression method.

Set SCT Error Recovery Control timeout in deciseconds for use in RAID configurations

This defines the system default encryption algorithm for encrypting passwords.

Path to serial port this printer is connected to

How often clamdscan is invoked

Location of the dir with main.css CSS file

The environment file to use when starting Memos.

Log level of the Proton Mail Bridge service

This option defines (see systemd.time for format) when the databases should be dumped

Database host address

Whether to append a minimal default PATH environment variable to the service, containing common system utilities.

Attribute set of lines for the global faxq config file etc/config

Upscale the default X cursor to be more visible on high-density displays

The refresh frequency

The GNOME keyring components to start

Either one of the default provided theme as string, or a path to a theme configuration file.

A program name specifying a Postfix service/daemon process

Which LXQt packages to exclude from the default environment

Whether to enable WireGuard.

Which MATE packages to exclude from the default environment

Which packages XFCE should exclude from the default environment

Specifies which users are considered “administrators”, for those actions that require the user to authenticate as an administrator (i.e. have an auth_admin value)

The driver hostapd will use. nl80211 is used with all Linux mac80211 drivers. none is used if building a standalone RADIUS server that does not control any wireless/wired driver

Whether to enable man-db as the default man page viewer.

Videobridge configuration

The server address is of the form: [hostname][:port]

Path to a file that contains the secret to sign web requests using JSON Web Tokens

If set to false, this unit will be a symlink to /dev/null

ZoneMinder can generate quite a lot of data, so in case you don't want to use the default /var/lib/zoneminder, you can override the path here.

The server address is of the form: [hostname][:port]

This optional key specifies whether the job participates in advanced communication with launchd

The default bar mode when 'bar.mode' == 'hide'.

Whether to run the machine in rootful mode

The boot entry builder script should be called with exactly one of the following arguments in order to specify its verbosity:

• quiet supresses all messages.

• default adds a simple "Installing Xen Project Hypervisor boot entries...done." message to the script.

• info is the same as default, but it also prints a diff with information on which generations were altered.

  • This option adds two extra dependencies to the script: diffutils and bat.

• debug prints information messages for every single step of the script

Directory for storing certificates to be used by Neo4j for TLS connections

Full (!) list of domains we deliver locally

The amount of time which can elapse after a reboot has been triggered before a watchdog hardware device will automatically reboot the system

Shell code that will be run after all other hooks

Nix daemon process I/O scheduling class

List of binary cache URLs used to obtain pre-built binaries of Nix packages

Configuration for Collabora Online WebSocket Daemon, see https://sdk.collaboraonline.com/docs/installation/Configuration.html, or https://github.com/CollaboraOnline/online/blob/master/coolwsd.xml.in for the default configuration.

The UDP port to open in the firewall

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

Configure the governor used to regulate the frequency of the available CPUs

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

By default pam-u2f module sets the origin to pam://$HOSTNAME

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

Whether to enable nginx virtual host that will serve the javascript application and act as a proxy for the XMPP server

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

Whether to add a separate nginx server block that permanently redirects (301) all plain HTTP traffic to HTTPS

The host name or IP address on which to bind Subsonic

Configuration for Nomad

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

[LEVEL LOW HIGH]

LEVEL is the fan level to use: it can be an integer (0-7 with thinkpad_acpi), "level auto" (to keep the default firmware behavior), "level full-speed" or "level disengaged" (to run the fan as fast as possible)

Do minification on public static files which reduces the size of assets — saving data for the server & users as well as offering a performance improvement

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS

Path of a file containing the password for the unifi service user

The group to run Silverbullet under

Whether to add a separate nginx server block that permanently redirects (301) all plain HTTP traffic to HTTPS

List of binary cache URLs used to obtain pre-built binaries of Nix packages

A printf-style string that is output at the beginning of each log line

This will configure the default keybindings for text fields in macOS applications

Whether to generate the manual page index caches using mandb(8)

The EFI boot entry builder script should be called with exactly one of the following arguments in order to specify its verbosity:

• quiet supresses all messages.

• default adds a simple "Installing Xen Project Hypervisor boot entries...done." message to the script.

• info is the same as default, but it also prints a diff with information on which generations were altered.

  • This option adds two extra dependencies to the script: diffutils and bat.

• debug prints information messages for every single step of the script

A set describing default parameters for babeld interfaces

Ensures the named printer is the default CUPS printer / printer queue.

The machine which hosts your database

IP Addresses to bind to

The path to the pommed.conf file

Path to an INI format configuration file to provide Buffyboard

When the skipback bit is set, backup cursor movement during releases from drags will be suppressed

If specified only the list of VMs will be snapshotted else all existing one

The initial schema of the database; if null (the default), an empty database is created.

The meilisearch package to use

Number of history message sent to participants by default.

Allows you to assign a custom name to the tracker script different from the default script.js.

Disables adding the default labels

These lines go to httpd.conf verbatim

Attribute set of lines for the global hfaxd config file etc/hfaxd.conf

This optional key specifies whether initgroups(3) should be called before running the job

Disables adding the default labels

Whether to enable grouping of windows by application in Mission Control.

The path to the Nix state directory