Make use of the scdaemon tool

SCdaemon configuration options

Disable default components, see the K3s documentation.

Disable default components, see the RKE2 documentation.

Endpoints to disable (comma-separated list)

Completely disable the NVIDIA graphics card and use the integrated graphics processor instead.

Whether to disable SysRq when locked with physlock.

Whether to disable the influxdb output plugin.

List of hooks to disable when generating the CDI specification

Only run the server

Whether to disable the ability to download files for conversion from outside sources.

Whether to disable the prometheus output plugin.

Disable telemetry.

Disable checking battery temperature sensor

Disable update check

Disable file downloads from Code.

Disable input method while typing.

When tun is disabled, a lighthouse can be started without a local tun interface (and therefore without root).

Whether to disable caching queries.

Disable Workspace Trust feature.

Whether to disable the Taildrop feature for sending files between nodes.

Disable routes related to PDF engines.

For each user matching one of comma-separated glob patterns, disable TTY auditing

Disable input method while typing.

Whether to disable send and accept redirects for all network interfaces

Disable all routes allowing Chromium-based conversion.

Disable transport layer keep-alives.

Munin plugins to disable, even if munin-node-configure --suggest tries to enable them

Whether to disable Tailscaled from sending debug logging upstream.

Disable remote shell access through Periphery.

A list of capabilities to disable (for example, DHTV to say you cannot store DHT information).

Disable the coder/coder override in the Help: Getting Started page.

Disable confirmation prompt before killing a pane or window

Disable remote container shell access through Periphery.

See https://github.com/daeuniverse/dae/issues/43

Whether to enable or disable lingering for this user

Whether to disable the Web UI.

Disable target address re-resolution.

Disable Javascript execution.

Disable all routes allowing LibreOffice-based conversion.

Whether to enable or disable lingering for this user

HMAC url validation key (hexadecimal encoded)

Disable drop shadow border around screencaptures

If true, microsocks will not log any messages to stdout/stderr.

Disables downsampling

Disable the built-in HTTPS server

Built-in plugins to disable

Kubernetes admission control plugins to disable

Keyboard configuration

Disable running fsck on this filesystem.

Whether to enable the HTTP/2 protocol

Whether to enable the HTTP/2 protocol

Whether to enable the HTTP/2 protocol

Customized pkg.glibcLocales package

List of plugins to load automatically for all users

Whether to enable the HTTP/2 protocol

Disable NAT penetration.

Whether to enable the HTTP/2 protocol

Whether to enable the HTTP/2 protocol

Whether to enable the HTTP/2 protocol

Whether to enable the HTTP/2 protocol

Whether to enable the HTTP/2 protocol

Whether to mount a zram device on /tmp during boot.

Whether to mount a tmpfs on /tmp during boot.

Disable client authentication, no client certificate will be required.

Collectors to disable which are enabled by default

Disable TCP client listener

Disable TLS client listener

Disable UDP client listener

Disable editing pages

If set to false, the user account will not be created

Whether to prohibit creating an account in plausible's UI or allow on invite_only.

Disable DTLS client listener

Whether to enable the HTTP/2 protocol

Whether to enable the HTTP/2 protocol

Whether to enable the HTTP/2 protocol

Whether to enable the HTTP/2 protocol

Whether to enable the HTTP/2 protocol

Whether to enable the HTTP/2 protocol

Whether to enable the HTTP/2 protocol

Explicitly disables syncing of deposit logs from the execution node

Whether to enable the HTTP/2 protocol

Whether to enable the installation of this Helm chart

Whether to completly enable or disable the crash recovery feature.

Whether to enable the installation of this Helm chart

Whether to enable the HTTP/2 protocol

Whether to enable the HTTP/2 protocol

If set to true, disables single account mode

Whether to enable the HTTP/2 protocol

Use this option to customize an nginx virtual host

Disables push of anonymous usage metrics to NetBird.

Disable TCP relay endpoints

Disable UDP relay endpoints

List of rules that should be disabled.

Names of supported filesystem types, or an attribute set of file system types and their state

Whether to enable the HTTP/2 protocol

If set to false, the user account will not be created

Whether to enable the HTTP/2 protocol

The TTL for the cache

Disable client authentication, no client certificate will be required.

Enable or disable access to web UI.

Reduce storage requirements by enabling pruning (deleting) of old blocks

Collectors to disable which are enabled by default.

How long to store RPC logs for in the database

Collectors to disable which are enabled by default.

Whether to enable the HTTP/2 protocol

Names of supported filesystem types, or an attribute set of file system types and their state

The port that redis will listen on

The tty device on which syslogd will print important log messages

Whether rke2 should run as a server or agent

Disable various animations and transitions of the user interface.

Disables chunked transfer encoding

Collectors to disable from the list of collectors that are enabled by default.

Port to bind to for HTTP, set to 0 to disable HTTP.

Whether to enable use of GeoIP databases

Collectors to enable or disable

Whether to synchronise your machine's time using chrony

Whether to enable Ferm Firewall. Warning: Enabling this service WILL disable the existing NixOS firewall! Default firewall rules provided by packages are not considered at the moment.

Disable this backend

Whether to disable the frontend.

The port on which Airsonic will listen for incoming HTTP traffic

The port on which Subsonic will listen for incoming HTTP traffic

Disable telemetry

If enabled systemd-journald will turn on auditing on start-up

Shell commands executed after powertop is started

Disable adding the --upgrade parameter when channel is not set, such as when upgrading to the latest version of a flake honouring its lockfile.

A keysym or raw keycode that toggles the activation state of gromit-mpx

Names of backends which are enabled by default but should be disabled

Whether to enable the HTTP/2 protocol

Extra command-line arguments to pass to wl-clip-persist

Shell commands executed before the oh-my-zsh is loaded

Built-in TURN server listen address and port

Whether to enable the routing of application connections

Set the date on which the user's account will no longer be accessible

Auto-deploying manifests that are linked to /var/lib/rancher/k3s/server/manifests before k3s starts

Auto-deploying manifests that are linked to /var/lib/rancher/rke2/server/manifests before rke2 starts

Path to local domain socket which is used for communication with the daemon

Enable the shadow authentication suite, which provides critical programs such as su, login, passwd

Disable checking that at least the root user or a user in the wheel group can log in using a password or an SSH key

A keysym or raw keycode that causes gromit-mpx to undo the last stroke

Disables the exporter's function to delete probing mails.

Whether the config should be checked at build time

The port on which Subsonic will listen for incoming HTTPS traffic

Disable periodic database backups.

This enables VMware host virtualisation for running VMs.

add will additionally listen for TLS connections. only will disable TLS connections. force will redirect non-TLS traffic to the TLS connection.

TLS Key for the gRPC server, leave blank to disable TLS

Override feh's default mouse button mapping

Whether to skip validation of the server's certificate.

Whether to enable the HTTP/2 protocol

A list of files containing additional configuration to be included using the include directive

Host and port of the OpenTSDB database that stores bosun data

Disable the spot termination listener.

TLS Certificate for gRPC server, leave blank to disable TLS

Set the date on which the user's account will no longer be accessible

Names of the fallback cursor themes, in order of preference, to be used when no other icon source can be found

Disable locking when audio is playing.

Whether to skip validation of the server's certificate.

Set to true to disable the use of Gravatar for user profile images.

Number of resource records to be cached per interface

TLS Key for the gRPC server, leave blank to disable TLS

TLS Key for the gRPC server, leave blank to disable TLS

Whether to route http traffic on port 80

The Floorp package to use

Specify the how the terminal's cursor should behave

add will additionally listen for TLS connections. only will disable TLS connections. force will redirect non-TLS traffic to the TLS connection.

Set to false to disable automatic certificate generation

Disable sending TCP/ICMP/HTTP requests.

Whether to enable dhcpcd for device configuration

The port of the redis server Dawarich will connect to

TLS Certificate for gRPC server, leave blank to disable TLS

TLS Certificate for gRPC server, leave blank to disable TLS

Database specific connection string for example:

• MySQL/Percona/MariaDB: user:password@tcp(host:3306)/documize
• MySQLv8+: user:password@tcp(host:3306)/documize?allowNativePasswords=true
• PostgreSQL: host=localhost port=5432 dbname=documize user=admin password=secret sslmode=disable
• MSSQL: sqlserver://username:password@localhost:1433?database=Documize or sqlserver://sa@localhost/SQLExpress?database=Documize

Refresh the cookie after this duration; 0 to disable.

If true, validate nats config at build time

Disable all the social feature (Communities, Blog…) and keep only the chat ones

Time to wait for the network to come online, in seconds

Disable latest file updates and enable sideloading.

The Firefox package to use

Force enable or disable solicitation and receipt of IPv6 Router Advertisements

Enable or disable this network.

Automatically sync media every X minutes

Disable kernel module loading once the system is fully initialised

Forcibly import the ZFS root pool(s) during early boot

Location of SMTP email server

Whether to disable reverse DNS lookups, thus keeping IP address literals in the log.

TLS Key for the gRPC server, leave blank to disable TLS

TLS Key for the gRPC server, leave blank to disable TLS

Whether a failure during config validation at build time is fatal

Update the locate database at this interval

Disable or enable external pointing device.

Enable or disable TTY auditing for specified users

TLS Certificate for gRPC server, leave blank to disable TLS

TLS Certificate for gRPC server, leave blank to disable TLS

add will additionally listen for TLS connections. only will disable TLS connections. force will redirect non-TLS traffic to the TLS connection.

Level of detail in generated statistics. 0 enables full statistics, 3 shows only anonymous statistics

Enabled safe options

Disable client transparency support, which can be greatly detrimental to performance in some setups

Whether to disable the HTTP registration endpoint.

Whether to enable Shorewall IPv4 Firewall.

Enable or disable Systemd watchdog.

Selectively gzip output to improve wire performance

Whether to disable linking of helper executables

Interval (in seconds) at which a memory report is printed (set to 0 to disable).

Whether an nginx virtual host should be set up to serve Discourse

A switch to disable Endorsement Key (EK) certificate verification

Disable kernel messages on console while physlock is running.

The LibreWolf package to use

Disable external SSH feature.

Enable font antialiasing

Whether to enable the physlock screen locking mechanism

Local Redis instance name

Extra apps to install

Whether to enable Shorewall IPv6 Firewall.

This option controls whether to disable all gaps (outer and inner) on workspace with a single container.

Whether to add the boot.binfmt.emulatedSystems to nix.settings.extra-platforms

Whether to enable restricting user creation.

Enable SSH agent support in GnuPG agent

TLS Key for the gRPC server, leave blank to disable TLS

This option controls whether to disable all gaps (outer and inner) on workspace with a single container.

Set SCT Error Recovery Control timeout in deciseconds for use in RAID configurations

Time to wait for the network to come online, in seconds

Number of seconds to wait for the client to send a complete request

TLS Certificate for gRPC server, leave blank to disable TLS

Whether to enable One-shot service to disable dell bios fan control on startup.

Name of the wrapper that is installed into PATH

Whether to enable nginx virtual host that will serve the javascript application and act as a proxy for the XMPP server

Validate the syntax of collectd configuration file at build time

Override feh's default keybindings

Enable if you want to fetch all, even the read messages from the server

Directory where to load services from, such as tasks, templates and handlers (or null to disable service loading on startup)

Whether to enable pgvecto.rs in the database

Whether to enable the static source

Whether to disable the password for the anonymous FTP user.

For sqlite3 only

If set, use a NixOS-generated ACME certificate with the specified name

Whether to configure nginx as a reverse proxy for Invidious

Whether to download the IP info database before starting librespeed

Disable external SSH feature.

Enable or disable TLS

Enable if you want to delete read messages from the server

Whether to enable the security plugin, plugins.security.ssl.transport.keystore_filepath or plugins.security.ssl.transport.server.pemcert_filepath and plugins.security.ssl.transport.client.pemcert_filepath must be set for this plugin to be enabled.

Enables InfluxDB on the host system using the services.influxdb2 NixOS module with default options

Whether to setup firewall routing so that system http(s) traffic is forwarded via this service

Disable client transparency support, which can be greatly detrimental to performance in some setups

Set to YES if you want to disable the PORT security check that ensures that outgoing data connections can only connect to the client

With safeExit enabled, the daemon will ask the driver to disable the WDT before exiting

Sway package to use

Disable locking when a fullscreen application is in use.

Enable font hinting

By default, when SSH forwarding, enabling Duo Security will disable TCP forwarding

Enable billing Cron-Jobs on the local instance

This option controls whether to disable container borders on workspace with a single container.

If set to true, this option will disable automatic plugin loading and then tell strongSwan to enable the plugins specified in the enabledPlugins option.

Hot corner action for bottom right corner

Hot corner action for bottom left corner

Hot corner action for top right corner

Hot corner action for top left corner

This option controls whether to disable container borders on workspace with a single container.

Number of seconds to wait for the client to send a complete request and for stargazer to finish sending the response

Disable executing the command from dashboard.

Whether to disable force click

Set the interval how often full repairs are run, i.e. nodetool repair --full is executed

Whether to include the list of mime types bundled with lighttpd (upstream)

Whether to disable user registration to the server without the shared secret.

Number of seconds to wait between each NOOP sent to the sending server. 0 to disable

Disable all container caching.

Whether to request X11 forwarding on outgoing connections by default

Whether to disable Prosody features not needed by Jitsi Meet

Disable warning when the admin password is set declaratively with the ldap_user_pass_file setting but the force_ldap_user_pass_reset is set to false

Enable/disable the embedded DNS proxy server

Disable all container caching.

Disable the DHCP client for any interface whose name matches any of the shell glob patterns in this list

Replace YouTube links with links to this instance (blank to disable).

A list of Cron jobs to be appended to the system-wide crontab

The ollama package to use

IP detection provider for IPv4

IP detection provider for IPv6

Whether to base the config declared in services.dnscrypt-proxy.settings on the upstream example config (https://github.com/DNSCrypt/dnscrypt-proxy/blob/master/dnscrypt-proxy/example-dnscrypt-proxy.toml)

Disable this if you want to declare your dnscrypt config from scratch.

Whether to fall back to WPA2 authentication protocols if WPA3 failed

Umami collects completely anonymous telemetry data in order help improve the application

Enable or disable the use of a hardware mouse or other pointing device.

Whether to enable IPv6 Privacy Extensions for interfaces not configured explicitly in networking.interfaces._name_.tempAddress

Replace Reddit links with links to this instance (blank to disable).

Disable running fsck on this filesystem.

Whether to base the config declared in services.dnscrypt-proxy2.settings on the upstream example config (https://github.com/DNSCrypt/dnscrypt-proxy/blob/master/dnscrypt-proxy/example-dnscrypt-proxy.toml)

Disable this if you want to declare your dnscrypt config from scratch.

Configuration for ZNC, see https://wiki.znc.in/Configuration for details

0 to enable Silent Clicking, 1 to disable

List of keybindings to disable from default Spectrwm configuration.

When set to true Runner will disable the possibility of using the CI_DEBUG_TRACE feature.

Whether to disable analytics

In case of connection failures, temporarily disable this server. (See sabnzbd's documentation for usage guides).

Set to false to disable the tray icon and run as a CLI tool only.

When set to true Runner will disable the possibility of using the CI_DEBUG_TRACE feature.

Whether to disable quarantining of downloads

Allow the installation and updating of apps from the Nextcloud appstore

The cache allows tarsnap to identify previously stored data blocks, reducing archival time and bandwidth usage

Replace Twitter links with links to this instance (blank to disable).

disable access log for /health endpoint

For Postgres, use either disable, require or verify-full

Disable to prevent loading default key bindings.

Whether to enable and configure a local PostgreSQL server by creating a user and database for weblate

Automatic gain control in dbFS, with 31 being the loudest value

Whether to disable X11-related features.

Enable or disable basic telemetry

Enable or disable PKCE (Proof Key for Code Exchange) support

Whether to have the module create the appropriate firewall configuration based on the bouncer settings

Whether to enable three-finger tap gesture: 0 to disable, 2 to trigger Look up & data detectors

If enabled, sets the ATH_USER_REGD kernel config switch to true to disable the enforcement of EEPROM regulatory restrictions for ath drivers

A file containing the superuser password

The type of MCU to use

Disable the DHCP client for any interface whose name matches any of the shell glob patterns in this list

What interface to use for hardware acceleration.

• null: default behavior
  • if nixpkgs.config.rocmSupport is enabled, uses "rocm"
  • if nixpkgs.config.cudaSupport is enabled, uses "cuda"
  • otherwise defaults to false
• false: disable GPU, only use CPU
• "rocm": supported by most modern AMD GPUs
  • may require overriding gpu type with services.ollama.rocmOverrideGfx if rocm doesn't detect your AMD gpu
• "cuda": supported by most modern NVIDIA GPUs

Remove the XMPP registration flow and buttons from the interface

Create a checkpoint every checkpointBytes of uploaded data (optionally specified using an SI prefix).

1GB is the minimum value

Configure this LibreNMS instance as a distributed poller

Performs a reverse path filter test on a packet

Whether to enable configure the display manager to be able to use the outputs attached to the NVIDIA GPU

Whether the config should be checked at build time

Whether to enable the ImageMagick module for PHP

Sets the mouse tracking speed

Whether to enable four-finger horizontal swipe gesture: 0 to disable, 2 to swipe between full-screen applications

Enable Qt 5 integration (theming, etc)

IP and port to listen on for GRPC requests

Enables or disables horizontal scrolling

Enable or disable the use of the touchscreen.

Disable right and middle pointer device click in browser sessions while keeping scrolling wheels' functionality intact

What interface to use for hardware acceleration

Similar to networking.getaddrinfo.label, but this option defines entries for the precedence table instead

Whether to enable secondary click: 0 to disable, 1 to set bottom-left corner, 2 to set bottom-right corner

Whether to enable four-finger pinch gesture (spread shows the Desktop, pinch shows the Launchpad): 0 to disable, 2 to enable

Whether to enable three-finger horizontal swipe gesture: 0 to disable, 1 to swipe between pages, 2 to swipe between full-screen applications

Whether to enable two-finger swipe-from-right-edge gesture: 0 to disable, 3 to open Notification Center

If set to

• "true": all DNS lookups are DNSSEC-validated locally (excluding LLMNR and Multicast DNS)

A list of TURN servers to use

Enable periodic archive processing, which generates aggregated reports from the visits

If Notifications are enabled and an expiry date is set, warn 5 days before expiry

Set the interval how often incremental repairs are run, i.e. nodetool repair is executed

When IPv6 is enabled with SLAAC, this option controls the use of temporary address (aka privacy extensions) on this interface

Disable animation when switching screens or opening apps

Whether to enable three-finger vertical swipe gesture (down for Mission Control, up for App Exposé): 0 to disable, 2 to enable

Whether to disable the automatic termination of inactive apps.

Enables or disables horizontal scrolling

Perodic scanning for all the rings as a safenet for lazy clients

Collectors to enable or disable

Disable the “happy eyeballs” algorithm for IPv4/IPv6 fallback if your local network has misconfigured one of the protocols.

When set to true, disables the Background Plugin Installer, which runs before Grafana starts

0 to disable four finger vertical swipe gestures, 2 to enable (down for Mission Control, up for App Exposé)

Number of backups to keep

Setting this to true will enable the Press to Select functions like tapping the control stick to simulate a left click, and setting false will disable it.

Define a common behavior for all exception policies

Number of backups to keep

List of connection-tracking helpers that are auto-loaded

Noise suppression level with 4 being the maximum suppression, which may cause audio distortion

Disable creation of admin user on first start of Grafana.

Disable PKCE on this oauth2 resource server to work around insecure clients that may not support it

Enable distributed billing on this poller

Disallow ModemManager from interfering with serial connections that QGroundControl might use

Disable use of {file}`

Which mode to use for sending mail

If true, the adapter will be disabled by default

Embedded subtitles can be extracted from videos and delivered to clients in plain text, in order to help prevent video transcoding

If set to "yes" multipathd will disable queueing when the last path to a device has been deleted.

Specify the number of seconds the SCSI layer will wait after a problem has been detected on a FC remote port before failing I/O to devices on that remote port

Disable transparency in the menu bar and elsewhere

Environment variables to set for the service

Disable use of {file}`

Set to true to disable brute force login protection.

Disable email debug mode to start sending outgoing mails

Use IKE fragmentation (proprietary IKEv1 extension or RFC 7383 IKEv2 fragmentation)

Disable validation of the server certificate.

Selects the authentication mode for this AP.

• "none": Don't configure any authentication

Disable validation of the server certificate.

Disable validation of the server certificate.

Set to false to disable the X-Content-Type-Options response header

Disable validation of the server certificate.

Disable validation of the server certificate.

Disable validation of the server certificate.

Disable validation of the server certificate.

Disable validation of the server certificate.

Disable validation of the server certificate.

Disable validation of the server certificate.

Disable validation of the server certificate.

Disable validation of the server certificate.

Disable validation of the server certificate.

Disable validation of the server certificate.

Disable validation of the server certificate.

Disable validation of the server certificate.

Disable validation of the server certificate.

Disable validation of the server certificate.

Disable validation of the server certificate.

Disable validation of the server certificate.