Absolute path to the password store

Whether to enable Password store.

The pass package to use

The pass environment variables dictionary

Where to store below's data

Path to the Nix store when looking for kernels at boot

The store directory where the Guix service will serve to/from

The directory where to store the uploaded images

Whether to enable the Thanos store node giving access to blocks in a bucket provider.

Object store configuration

Path to the certificate store on disk

Store paths to copy into the initrd as well.

Path to files that contain addresses of store API servers

Path to YAML file that contains object store configuration

Defines the mount options used on a bind mount for the /nix/store

Number of threads used for pushing store paths

The maximum samples allowed for a single Series request

If set to true, Nix automatically detects files in the store that have identical contents, and replaces them with hard links to a single copy

Data directory relative to /var/lib in which to cache remote blocks.

Whether to enable to cleanup Nix store when the Home Manager expire service runs

Log filtering level

Log format to use.

Path to the Xen Store Daemon

Maximum number of concurrent Series calls

If set, NixOS will enforce the immutability of the Nix store by making /nix/store a read-only bind mount

Specify the attribute name of the store partition.

End of time range limit to serve

Start of time range limit to serve

If set to true, Nix automatically detects files in the store that have identical contents, and replaces them with hard links to a single copy

Whether to enable Cachix Watch Store: https://docs.cachix.org.

Store paths to copy into the shutdown ramfs as well.

Maximum size of concurrently allocatable bytes for chunks

Timeout before an unhealthy store is cleaned from the store UI page

If a Store doesn't send any data in this specified duration then a Store will be ignored and partial data will be returned if it's enabled. 0 disables timeout

TLS Key for the gRPC server, leave blank to disable TLS

Maximum size of items held in the index cache

TLS Certificate for gRPC server, leave blank to disable TLS

Listen host:port for HTTP endpoints

Arguments to the thanos store command

Tracing configuration

An attribute set describing an HTTP to GCS proxy that allows us to use GCS bucket via HTTP protocol.

Whether to enable serving the Nix store as a remote store via SSH.

Listen ip:port address for gRPC endpoints (StoreAPI)

The prefix to use for store paths

Directory roots of your password-stores.

Don't send the password immediately after login, but store for PAM session.

Cachix host to connect to

Optional file containing a self-managed signing key to sign uploaded store paths.

The store paths to include in the partition.

TLS CA to verify clients against

Interval between DNS resolutions

Path to YAML file that contains tracing configuration

Repeat interval for syncing the blocks between local and remote view

Refresh interval to re-read file SD files

Whether to enable proxy for this bucket

Whether to enable nix-store-veritysetup.

Path of the symlink.

Path of the source file.

Options given to nix-collect-garbage when the service runs.

Cachix binary cache name

Whether to enable copying of this file and symlinking it.

The address of the proxy.

Name of Google storage bucket

Path to the Xen Store log file.

Logging level for the Xen Store.

The OCaml-based Xen Store Daemon configuration

The cachix package to use.

Enable verbose output

Path to the Xen Store Daemon PID file.

Your password, used for SASL authentication

Path to the Xen Store access log file.

Path of the symlink.

Directory to store Mu's database.

Object store configuration

Path of the source file.

Required file that needs to contain the cachix auth token.

Number of goroutines to use when syncing blocks from object storage

Whether to enable copying of this file and symlinking it.

Whether to strip /nix/store/ from the store paths

Pleroma public configuration

WARNING: This option will expose store your config unencrypted world-readable in the nix store

Whether to enable writing to the Nix store as a remote store via SSH

Alternatively to providing your SASL authentication password directly in plaintext, you can specify a command to be run to fetch the password at runtime

Object store configuration

Object store configuration

Object store configuration

The directory used to store all data for kasmweb.

The path to the nixpkgs sources used to build the system

Password to use

The path to the nixpkgs sources used to build the system

Size limit for transactions.

Password for database (STORED PLAIN TEXT, WORLD-READABLE IN NIX STORE)

Path limit for the quota system.

This option defines the default shell assigned to user accounts

Features to enable via dlopen ELF notes

Specify the attribute name of the store's dm-verity hash partition.

Build and use a disk image for the Nix store, instead of accessing the host's one through 9p

Maximum number of watches by the Xenstore Watchdog.

Storages are used to actually store your files

Whether to enable the quota system.

Whether to enable transaction merge support.

Priority of dlopen ELF notes to include. "required" is minimal, "recommended" includes "required", and "suggested" includes "recommended"

Whether to enable the node permission system.

Path to YAML file that contains object store configuration

Entity limit for transactions.

This option lists the machines to be used if distributed builds are enabled (see nix.distributedBuilds)

This option lists the machines to be used if distributed builds are enabled (see nix.distributedBuilds)

This option lists the machines to be used if distributed builds are enabled (see nix.distributedBuilds)

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

A declarative alternative to Nix channels

Object store configuration

Password for admin account

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Maximum number of outstanding watch events per watch.

Directory to store keychains and configuration.

Password for this DDNS provider

Maximum number of requests per transaction.

Features to enable via dlopen ELF notes

The compression level for ZSTD compression (between 0 and 16)

Directory to store configuration and metadata.

Perodic scanning for all the rings as a safenet for lazy clients

Specifies the clear text password for the account

Applications to install from Mac App Store using mas

Whether to activate the filed base backend.

File containing the password to use for basic http authentication

Path to YAML file that contains object store configuration

Path to YAML file that contains object store configuration

Path to YAML file that contains object store configuration

Priority of dlopen ELF notes to include. "required" is minimal, "recommended" includes "required", and "suggested" includes "recommended"

Cache directory to be used by oh-my-zsh

The filesystem directory to store your table store within.

The filesystem directory to store blocks for the block store.

Whether to enable rofi integration with password-store.

Your yandex.com password

Packages that are added as dependencies of the home's build, usually for the purpose of validating some part of the configuration

Password for this DDNS provider

A list of public keys to be imported into GnuPG

The path to the file used for signing derivation data

Maximum number of transactions.

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Whether to enable the watch permission system

Whether to enable periodic garbage collection for user profile and nix store with nh clean user.

Maximum outstanding requests, i.e. in-flight requests / domain.

Basic Auth protection for a vhost

A list of paths to NNCP configuration files that should not be in the Nix store

Allow the installation and updating of apps from the Nextcloud appstore

Path to the file containing your secret pleroma configuration.

DO NOT POINT THIS OPTION TO THE NIX STORE, the store being world-readable, it'll compromise all your secrets.

Basic Auth protection for a vhost

File containing the password of the SMTP server for GitLab

List of Chromium extensions to install

Basic Auth protection for a vhost

Limits applied to domains whose writes cause other domains' transaction commits to fail

This specifies the vector database provider you want to use to store and query embeddings.

If enabled, the Nix store in the VM is made writable by layering an overlay filesystem on top of the host's Nix store

Basic Auth protection for a vhost

Location of a file containing the SMTP password

The directory where to store the uploaded images & database.

Append an additional file's contents to /etc/iscsid.conf

Password used to connect to registry. (Will be visible in nix store)

Store tmux socket under /run, which is more secure than /tmp, but as a downside it doesn't survive user logout.

Path to YAML file that contains object store configuration

Packages that are added as dependencies of the system's build, usually for the purpose of validating some part of the configuration

Store tmux socket under /run, which is more secure than /tmp, but as a downside it doesn't survive user logout.

Where to store below's logs

A file containing the password to access the GNS3 Server.

Access Control Lists: see https://www.dokuwiki.org/acl Mutually exclusive with services.dokuwiki.aclFile Set this to a value other than null to take precedence over aclFile option

Limits applied to domains whose writes cause other domains' transaction commits to fail

Append an additional file's contents to /etc/iscsid.conf

Basic Auth protection for a vhost

Other endpoint's CA private key

Whether to enable Homebrew to automatically use the Brewfile that this module generates in the Nix store, when you manually invoke brew bundle

Attrset that is converted and passed as config file

Basic Auth protection for a vhost

The directory in which to store BOINC's configuration and data files.

List of chromium extensions to install

The password corresponding to database.user

Path to a script that streams the desired image on standard output

The directory where to store the database

The filesystem directory to store your protected store in.

Archive format used to store the dump file.

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Java KeyStore file containing the certificates.

Basic Auth protection for a vhost

Path to root certificate store.

Password for SMTP email account

SSL key file path

Directory to store MCHPRS database and other state/data files.

NNCP configuration, see http://www.nncpgo.org/Configuration.html

Path to intermediate certificate store.

Directory to store data for the server.

The password of the user used by netbird to connect to the coturn server

The path to a file containing the secret_key_base secret

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Path to an environment file loaded for the tsidp service

File containing the password for the given username

Settings serialized into user-data/conf.yml before build

File containing the Redis password

Path in which to store user data

If set to true, you may manage your keyring as a user using the gpg command

A file including Invidious settings

A path to a file containing the admin user's password

If the conflict.rateLimitIsAggregate option is true, then after each tick one point of conflict-credit is given to just one domain: the one at the front of the queue

The directory where Pocket ID will store its data, such as the database when using SQLite.

Whether generation of Diffie-Hellman parameters should be stateful or not

A list of paths whose closure should be made available to the VM

The local directory for storing configuration and cached store paths

The password to store inside the credentials file.

Settings serialized into config.yml before build

Directory used to store Graylog server state.

Password to send to proxy

The k3s token to use when connecting to a server.

WARNING: This option will expose your token unencrypted in the world-readable nix store

This option can be used to store the username / password credentials with the "auth-user-pass" authentication method

The password used to authenticate the XMPP component to your XMPP server

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

The directory the bot should store various bits of information in.

The directory used to store all data for changedetection-io.

The rke2 token to use when connecting to a server.

WARNING: This option will expose your token unencrypted in the world-readable nix store

Basic Auth protection for a vhost

How long to store RPC logs for in the database

Environment variables which are loaded from the contents of the specified file paths

Path to configuration file

Basic Auth protection for a vhost

Generate your init file from your list of plugins and custom commands

Password for the postgresql connection

Archive format used to store the dump file.

Where to store LFS files.

Password used for authentication

Specifies the directory where Memos will store its data.

The hostname of the cache server. This is used to generate the private key used for signing store paths (.narinfo)

The state directory where Guix service will store its data such as its user-specific profiles, cache, and state files.

Basic Auth protection for a vhost

This option contains the store path that typically represents a NixOS system

Basic Auth protection for a vhost

Basic Auth protection for a vhost

The path to a file containing the secret_key_base secret

The maximum size of the store

Certificate specs as described by: https://github.com/cloudflare/certmgr#certificate-specs These will be added to the Nix store, so they will be world readable.

Whether to use binary caches for downloading store paths

Path to an environment file to be loaded

File containing the Discourse database user password

Whether to enable building images with a dm-verity protected nix store.

Basic Auth protection for a vhost

RPC password for JSON-RPC connections

allow Artalk store the settings to config file persistently

Default user to store mail for virtual users.

Basic Auth protection for a vhost

Directory to store downloaded files.

Store mails on disk or in memory.

Database to store feeds

Basic Auth protection for a vhost

A file containing the password of the SMTP server account

Nix store name for the git configuration text file, when generating the configuration text from nix options.

The path to the data directory in which Pingvin Share will store its data.

Specify an alternative directory to store all the per-user configuration files.

A directory where vdirsyncer will store some additional data for the next sync

Base64 private key generated by wg genkey

Password for local Mattermost database user

Automatically run the nix store optimiser at a specific time.

Automatically run the nix store optimiser at a specific time.

Directory to store the Etebase server data.

The path to the public key file for the host

Whether to enable Homebrew to generate lockfiles when you manually invoke brew bundle [install]

Named accounts and their respective configurations

Directory to store the Froide-Govplan server data.

Default group to store mail for virtual users.

Directory to store the Paperless data.

Path where to store data files.

Whether to enable substitute server for your Guix store directory.

Specifies the (clear text) password for the user

When set, enables the feature of serving . on top of /nix/store/-

A path to directory writable by logstash that it uses to store data

The directory to store all user data, such as flow and credential files and all library data

Where to store LFS files.

The Sonarr home directory used to store all data

Alloy configuration file/directory path

Configuration file to use for ofborg

Whether to enable VictoriaMetrics's vlagent.

vlagent is a tiny agent which helps you collect logs from various sources and store them in VictoriaLogs .

RPC password for the bitcoin endpoint

Store messages in an archive and allow users to access it

The extension's ID from the Chrome Web Store url or the unpacked crx.

A run-time path to the nutUser password file, which should be provisioned outside of Nix store.

The database user's password (not applicable for sqlite3)

MQTT password

Path to file containing a secret for session store.

Basic Auth protection for a vhost

Directory to store the Paperless documents.

Environment variables from this file will be interpolated into the final config file using envsubst with this syntax: $ENVIRONMENT or ${VARIABLE}

File that contains the cadvisor storage driver password.

storageDriverPasswordFile takes precedence over storageDriverPassword

Warning: when storageDriverPassword is non-empty this defaults to a file in the world-readable Nix store that contains the value of storageDriverPassword

Path to the services config file

The max length of each history item the atuin server should store.

The path to the public key file for the host

Text to display when users join

A list of files containing additional configuration to be included using the include directive

The k3s token agents can use to connect to the server

Store images in clipboard history.

Environment variables from this file will be interpolated into the final config file using envsubst with this syntax: $ENVIRONMENT or ${VARIABLE}

Whether to enable the Thanos ruler service which evaluates Prometheus rules against given Query nodes, exposing Store API and storing old blocks in bucket.

Whether to enable the Thanos query node exposing PromQL enabled Query API with data retrieved from multiple store nodes.

Path to SQLite database file to store stats

Password for the user

The prosody home directory used to store all data

Specifies the (clear text) password for the user

Defines how Athens behaves when a module@version is not found in storage

Whether to run a correctness check for the configuration file

Longview API key

Path to the service's config file

Mutual TLS - client key to call remote instance requiring client certs

Path to SQLite database file to store room states

File containing environment variables to substitute when copying the configuration out of Nix store to the services.mautrix-discord.dataDir

Private key for OCSP responder certificate

Store data using one-way hash functions (SHA1)

The local directory for storing configuration and cached store paths

The cron spec for cleaning the store to keep it under config.ncps.cache.maxSize

The rke2 token agents can use to connect to the server

Controls where to store journal data

Path where to store data files.

Path to an environment file loaded for the rmfakecloud service

Directory to store log files in.

Directory where to store cache files (if cache.type = "file").

Password for primary user

A secret file to be sourced for the .env settings

Directory to store the bridge's configuration and database files

Basic Auth protection for a vhost

Base64 private key generated by wg genkey

Location for any persistent data Traefik creates, such as the ACME certificate store.

The path to the SSH private key with which to authenticate on the build machine

The path to the SSH private key with which to authenticate on the build machine

The path to the SSH private key with which to authenticate on the build machine

User accounts for GRUB

Slurm expects config files for plugins in the same path as slurm.conf

Absolute path for where the LibreChat server will use as its data directory to store logs, user uploads, and generated images.

Whether to enable the Thanos compactor which continuously compacts blocks in an object store bucket.

Service to use to store sms data.

Connection to a redis server

Alias of virtualisation.docker.daemon.settings.live-restore.

The path to the data directory in which Szurubooru will store its data.

Database to store feeds

The access key for the S3 bucket.

Directory to store TS3 database and other state/data files.

Options for the 'restore' command

A path to the password file for your bot

Location where Task Warrior will store its data

Salt to allow room operator passwords generated by this server instance to still work when the server is restarted

Configuration written to $XDG_CONFIG_HOME/keepassxc/keepassxc.ini

Use SSL for objectstore access.

Required for some non-Amazon implementations.

Where BitTorrent Sync will store it's database files (containing things like username info and licenses)

If set, Nix will perform builds in a sandboxed environment that it will set up automatically for each build

Path to keystore (combined PEM with cert/key, or PKCS12 keystore)

The contents of the snmpd.conf

Whether to store offline passwords when the server is down.

Directory to store downloads.

Password for InfluxDB login

The gitolite home directory used to store all repositories

Metadata file for root certificate presence

Whether to enable wipe the builder's filesystem on every restart

Configuration written to $HOME/.aws/credentials

Path to a JSON file containing settings that will be merged with the settings option

API key to authenticate with a local crowdsec API

Directory to store Minecraft database and other state/data files.

Location where to store the ShellHub Agent private key.

Attribute set of arbitrary config options

Configuration options for cross-seed

Attribute set of arbitrary config options

Attribute set of arbitrary config options

Directory used to store media files

Path within the configuration store where Patroni will keep information about the cluster.

Basic Auth protection for a vhost

Whether to run a correctness check for the configuration file

The name of the S3 bucket.

HCL configuration to insert in the storageBackend section

Sets the admin api key for typesense

A list of paths to extra steps files

Configuration of XtreemFS DIR service

Configuration of XtreemFS OSD service

Configuration of XtreemFS MRC service

Extra configuration files

Required for some non-Amazon implementations.

Host and port of the bosun server that will store the collected data.

The number of shares required to store a file.

Path to config file to parse and append to settings

Regular configuration options as described in rclone's documentation https://rclone.org/docs/

File containing environment variables to substitute when copying the configuration out of Nix store to the services.mautrix-meta.dataDir

Configuration options for the Stalwart server

Maximum size in Megabytes of cache used to store compile environments of compile clients.

This can be used to pass secrets to the systemd service without adding them to the nix store.

The number of distinct storage nodes required to store a file.

URI to use for the main PostgreSQL database

File used to store the Buildbot Worker password

Path to the data dir fedimintd will use to store its data

Base64 preshared key generated by wg genpsk

Path to store SSH host & client keys.

Database name to store sms data

Path of a file with extra environment variables to be loaded from disk

Attribute set of arbitrary config options

Path to the service's environment file

The full path to a file that contains the access secret.

Custom agent skills for opencode

A state directory used by NetBird client to store config.json, state.json & resolv.conf.

A state directory used by NetBird client to store config.json, state.json & resolv.conf.

Determines where on the local filesystem a data node should store its blocks.

Specifies the password hash for the account, generated with grub-mkpasswd-pbkdf2

The resulting path of the generated Diffie-Hellman parameters file for other services to reference

Directory below /var/lib to store Prometheus metrics data

Images for builds.sr.ht

Whether to enable nix-darwin to manage installing/updating/upgrading Homebrew taps, formulae, casks, Mac App Store apps, Visual Studio Code extensions, Go packages, and Cargo crates using Homebrew Bundle

Environment variables from this file will be interpolated into the final config file using envsubst with this syntax: $ENVIRONMENT or ${VARIABLE}

A list of public keys of upstream caches in the format host[-[0-9]*]:public-key

Where to store the backups

Config files to merge into the settings defined in services.olivetin.settings

If set, this file system will be mounted in the initial ramdisk

Configuration options for the Stalwart email server

Specify the directory to store database and album art cache.

Required for some non-Amazon implementations.

Default location for kubernetes secrets

A file containing the firezone relay token

Required for some non-Amazon S3 implementations

Location of the Django secret key

The password corresponding to mysqlUser

Propagate mailbox deletions to the given mail store.

Attribute set of arbitrary config options

Attribute set of arbitrary config options

The USBGuard daemon modifies some attributes of controller devices like the default authorization state of new child device instances

List of store paths to make accessible.

Path to the baseq3 files (pak*.pk3)

Directory to store state

Directory to store downloads.

Whether to enable S3 object storage as primary storage

Whether to enable caching of AppArmor policies in /var/cache/apparmor/

Automatically create missing mailboxes within the given mail store.

The path of the Searx server settings.yml file

Roles that are allowed to access the JMX (e.g. nodetool) BEWARE: The passwords will be stored world readable in the nix store

URI to use for the main PostgreSQL database

Directory containing torrent files, or if you're using a torrent client integration and injection - your torrent client's .torrent file store/cache.

Specifies the initial password for the admin, i.e. the password assigned if the user does not already exist

The directory which will be used to store the message journal

Store paths specified in the storePaths option that should not be copied.

The hash of the downloaded driver file

The TLS certificate private key, as a base64-encoded string

The TLS certificate, as a base64-encoded string

Override default chart values via Nix expressions

A set of named specialized configurations

Whether the service is chrooted to have only access to the services.postfix.queueDir and the closure of store paths specified by the program option.

Path to store homebridge user files (needs to be writeable).

Path where to store the data files of the hidden service

Base64 preshared key generated by wg genpsk

Run a regular auto-update of all apps installed from the Nextcloud app store.

If provided this is the full path to a file that contains the key to enable [server-side encryption with customer-provided keys][1] (SSE-C)

A list of public keys of upstream caches in the format host[-[0-9]*]:public-key

The path Draupnir will store its state/data in.

The name of the database to use

Whether to enable the Thanos downsampler which continuously downsamples blocks in an object store bucket.

Directory below /var/lib/ to store journalbeat's own logs and other data

The artalk configuration

Override default chart values via Nix expressions

If the master is password protected (using the requirePass configuration) it is possible to tell the slave to authenticate before starting the replication synchronization process, otherwise the master will refuse the slave request. (STORED PLAIN TEXT, WORLD-READABLE IN NIX STORE)

A file containing the secret used to encrypt variables in the DB

A file containing the secret used to encrypt session keys

The token from your Buildkite "Agents" page

The token from your Buildkite "Agents" page

Environment variables which are read by healthchecks (local)_settings.py

A list of paths to extra settings files

Permanently remove messages marked for deletion from the given mail store.

Configuration settings for the generated config file

The path of Apache's document root directory

The path of Apache's document root directory

Tracing configuration

A file containing the firezone gateway token

User token in Jenkins used to reload config

server secret for safe session cookies, must be set

Environment variables which are read by healthchecks (local)_settings.py

Whether to copy the necessary boot files into /boot, so /nix/store is not needed by the boot loader.

A file containing the secret used to encrypt secrets for OTP tokens

Allow dockerd to be restarted without affecting running container

Passkeys required to access the periphery API

directory to store info about uploads

Configures logging

Tracing configuration

Path to the service's config file

Environment file to be passed to the systemd service

Whether to use top-level directories as LOCALSTATEDIR instead of the store path ones

The file to store the PID in.

Folder to store Silverbullet's space/workspace

Where to store runtime data (save files, persistent items, etc)

File to load as environment file

File containing the initial password of the root account if this is a new install

File containing the GitLab database user password

The path of Apache's document root directory

The linyaps-web-store-installer package to use.

Erlang cookie is a string of arbitrary length which must be the same for several nodes to be allowed to communicate

Environment variables from this file will be interpolated into the final config file using envsubst with this syntax: $ENVIRONMENT or ${VARIABLE}

File to load as environment file

Local store extra configuration.

List of directories to store localized files in.

InfluxDB organisation under which to store data.

path to a file containing e.g.: DBPASSWORD=supersecret

stored outside the nix store, read by systemd as EnvironmentFile.

The name of the database to store data in.

Where the XBOOTLDR partition is mounted

The directory in which Garage will store the data blocks of objects

Initial password file for the pgAdmin account

The username to store inside the credentials file.

The server will put an account.sqlite file in this directory, which will contain the (hashed) server password, a list of all the budget files the server knows about, and the active session token (along with anything else the server may want to store in the future).

Extra config files to include

Configuration needed to connect to one or more clouds

Directory below /var/lib to store VictoriaLogs data

The file to store 'new' (i.e. available) versions in

Whether the service is chrooted to have only access to the services.postfix.queueDir and the closure of store paths specified by the program option.

The file to store 'old' (i.e. installed) version information in

Environment file to be passed to the systemd service

Environment file to be passed to the systemd service

Directory in which to store data

A file containing the secret used to encrypt variables in the DB

Whether to generate the password files at build time and store them directly in the system closure, without requiring any services at boot time

Remote store extra configuration.

Path to a TOML file to be merged with the settings

Path to CA bundle file (PEM/X509)

Directory to store state

The path of Apache's document root directory

Environment file to be passed to the systemd service

Path to a file containing extra ntfy environment variables in the systemd EnvironmentFile format

The id of the bootloader to store in efi nvram

OpenSSH private key

A run-time path to the key file, which is supposed to be provisioned outside of Nix store.

OpenSSH private key

A run-time path to the key file, which is supposed to be provisioned outside of Nix store.

Mount the host Nix store as a 9p mount.

Path to keystore (combined PEM with cert/key, or PKCS12 keystore)

Tracing configuration

Tracing configuration

Tracing configuration

Path to a file containing the admin password for kanidm

Files to load environment variables from in addition to services.chhoto-url.settings

Directory to store export.

A file that contains the server secret for safe session cookies, must be set.

secretKeyFile takes precedence over secretKey

The path of Apache's document root directory

Path to store the gem files and the sqlite database

Whether to leave interfaces configured on dhcpcd daemon shutdown

Files to load environment variables from (in addition to services.zipline.settings)

File to load as environment file

Environment variables for configuring the beszel-agent service

A file containing a secure random string

The directory used to store all data for healthchecks.

This can be used to pass secrets to the systemd service without adding them to the nix store

InfluxDB bucket in which to store data.

A file containing the salt for active record encryption in the DB

Environment file to be passed to the systemd service

An absolute file path (which should be outside the Nix-store) to Gemini certificates.

Each item in this array specifies an option in the [WireGuardPeer] section of the unit

Whether to pin nixpkgs in the system-wide flake registry (/etc/nix/registry.json) to the store path of the sources of nixpkgs used to build the NixOS system

File to load as the environment file

If set, Nix will perform builds in a sandboxed environment that it will set up automatically for each build

Default admin password

Extra configuration files to include in the swanctl configuration

Directory used to store media files

A file containing the firezone client token

Attribute set containing paths to files to add to the environment of linkwarden

Path to the environment file sourced on startup

JSON file containing secret keys

List of paths to files containing environment variables for Sharkey to use at runtime

Specifies the MAC addresses to deny if macAcl is set to "deny" or "radius"

Path to store session recordings.

Whether to pin nixpkgs in the system-wide flake registry (/etc/nix/registry.json) to the store path of the sources of nixpkgs used to build the nix-darwin system

WARNING: THIS IS INSECURE, as your password will end up in /nix/store, thus publicly readable

Run nft check on the ruleset to spot syntax errors during build

Path to a configuration file to be merged with the settings

resources.ini contents

Each attribute in this set specifies an option in the [WireGuard] section of the unit

Additional Munin plugins to activate

If set, all the required runtime store paths for this service are bind-mounted into a tmpfs-based chroot(2).

Specify SSH host keys to import into the initrd

A file containing the Discourse API key used to add posts and messages from mail

Configuration options for wpa_supplicant.conf

Store blobs at this location, set to null to use e.g

Whether to enable Simple Ollama web UI service; an easy to use web frontend for a Ollama backend service

Environment file as defined in systemd.exec(5)

Whether to enable Homebrew to upgrade outdated formulae and Mac App Store apps during nix-darwin system activation

An absolute file path (which should be outside the Nix-store) to a secret key to encrypt internal messages with

Directory where uploaded images and attachments are stored.

Specifies the MAC addresses to allow if macAcl is set to "allow" or "radius"

The directory where pantalaimon should store its state such as the database file.

Path to a file containing the idm admin password for kanidm

Configuration options corresponding to parameters set in conf/keycloak.conf

The network's pre-shared key in plaintext defaulting to being a network without any authentication.

This option can be used to store some or all of the options given to the commandline client

The path to the public key file for the host

Locations where the historical will store its data.

Additional environment file as defined in systemd.exec(5)

An absolute file path (which should be outside the Nix-store) to the secret key of the S3-compatible object storage service.

Info storages are used to store information about file uploads

A list of blacklisted CA certificate names that won't be imported from the Mozilla Trust Store into /etc/ssl/certs/ca-certificates.crt

A list of blacklisted CA certificate names that won't be imported from the Mozilla Trust Store into /etc/ssl/certs/ca-certificates.crt

32-byte key used to encrypt variables in the database

The maximum in-memory storage capacity available to store temporary data for SQL queries

Path to a JSON file containing secrets for effects

Path to a JSON file containing secrets for effects

Tracing configuration

File to load as environment file

Proxy to use to connect to the wstunnel server (USER:PASS@HOST:PORT).

Path to YAML rules configuration

Additional Munin plugins to autoconfigure, using munin-node-configure --suggest

The path of Apache's document root directory

The path of Apache's document root directory

Whether to exclude Home Manager generated symbolic links from the backups

Additional policy settings merged into the policy file

Files to load environment variables from in addition to services.glitchtip.settings

Environment file as defined in systemd.exec(5)

It is recommended you keep your secrets separate from the configuration

Cadvisor storage driver password

Specify the local database filename to store persistent data

Extra config options

the path to store the segments

Where to store blobs

Path to the private key file on the host system

Enable automatic adjustment (step / 5) to what source of data should be used in store gateways if no max_source_resolution param is specified.

This file can be used to store some or all of the options given to the commandline client

An environment file as defined in systemd.exec(5)

24-byte used to encrypt variables in the database

Additional policy settings merged into the policy file

Path to a JSON file containing binary cache secret keys

Path to a JSON file containing binary cache secret keys

Filesystem location where Nexus should store the bank public keys.

Type of 9p cache to use when mounting host nix store. "none" provides no caching. "loose" enables Linux's local VFS cache. "fscache" uses Linux's fscache subsystem

File containing environment variables to substitute in the configuration before starting Traccar

Configuration files to load besides the immutable one defined by the NixOS module

Directory below /var/lib to store VictoriaTraces data

Use this option to configure advanced authentication methods like EAP

The path of Apache's document root directory

API Token to set for the admin user

File containing environment variables to be passed to the mautrix-signal service

A file containing the secret used to encrypt some rails data in the DB

Configuration of XtreemFS DIR replication plugin

Configuration of XtreemFS MRC replication plugin

Use a tmpfs for the writable store instead of writing to the VM's own filesystem.

Plaintext password used to unlock the Java KeyStore set in services.reposilite.settings.keyPath

Path to YAML dashboard configuration

POSIX Extended Regular Expressions that match store paths that should not appear in the system closure, with the exception of system.extraDependencies, which is not checked.

A list of remote servers to which to send each message

Tracing configuration

Environment file as defined in systemd.exec(5)

The path of Apache's document root directory

Appservice registration file

An absolute file path (which should be outside the Nix-store) to an OpenPGP private key

The password for this entry

The configuration file for OpenVPN.

Secrets like SECRET_KEY_BASE and BASIC_AUTH_PASSWORD should be passed to the service without adding them to the world-readable Nix store

The cache directory in which to store mail files while they are being downloaded

Directory below /var/lib to store metrics

Store blobs at this location, set to null to use e.g

Directory below /var/lib to store runtime data

The ASF home directory used to store all data

An absolute file path (which should be outside the Nix-store) to a secret key for Stripe

Configuration for the rclone remote being used for backup

name of the qdrant collection used to store documents.

Path to YAML mute timings configuration

Path to the file containing the password for the intermediate certificate private key.

The basic secret to use for this service

An absolute file path (which should be outside the Nix-store) to a key used for encrypting session cookies

Path to a file containing extra paperless config options in the systemd EnvironmentFile format

Filesystem location where Nexus should store the subscriber private keys.

Path to YAML notification policies configuration

Path to YAML datasource configuration

Location of the cluster-join-token.key file

Location of the cluster-join-token.key file

File containing environment variables to be passed to the mautrix-whatsapp service

Whether to include the full closure of the systemd unit file into the chroot, instead of just the dependencies for the executables.

Directory below /var/lib to store VictoriaMetrics metrics data

File consisting of lines of the form varname=value to define variables for the wireless configuration

Either the raw pre-shared key in hexadecimal format or the name of the secret (as defined inside networking.wireless.secretsFile and prefixed with ext:) containing the network pre-shared key.

Configure the type of alert (and other) logging you would like

The directory where pantalaimon should store its state such as the database file.

Path to YAML contact points configuration

Path to the private key corresponding to the server certificate

API key to talk to the Immich server

Path to YAML templates configuration

The keyfile which associates this machine with your tarsnap account

Set a specific keyfile for this archive

A list of capabilities to disable (for example, DHTV to say you cannot store DHT information).

Environment file as defined in systemd.exec(5)

Path of a file with extra environment variables to be loaded from disk

Extra configuration to append to the default ~/.gitolite.rc

Environment file to be passed to the systemd service

Environment file to be passed to the systemd service

An absolute file path (which should be outside the Nix-store) to a base64-encoded Ed25519 key for signing webhook payloads

Path to a file containing extra LubeLogger config options in the systemd EnvironmentFile format

A path to a SSL secret key file in PEM format

Environment file as defined in systemd.exec(5)

Configures the rate limiting burst limit (number of messages per interval) that is applied to all messages generated on the system

Environment file as defined in systemd.exec(5)

Multiple GitHub Runners

Path to a JSON file to be merged with the settings

The environment hook will run before all other commands, and can be used to set up secrets, data, etc

Secret key used for signing

Use services.mattermost.environmentFile to configure the database instead of writing the database URI to the Nix store

Password to connect to deluge server

The token from your Buildkite "Agents" page

Environment file as defined in systemd.exec(5)

Watchers to be included with the service alongside with their configuration

Path to CA bundle file (PEM/X509)

Environment file (see systemd.exec(5) "EnvironmentFile=" section for the syntax) which sets config options for mattermost (see the Mattermost documentation)

Additional packages or strings with context to add to the closure of the chroot

Text content of the credential

File to load as environment file

Fluent Bit configuration

The credentials to access the web interface, in case authentication is enabled, in the format username:hash

The passphrase the backups are encrypted with

Config files to merge into the settings defined in services.prometheus.alertmanager-ntfy.settings

If set, this file system will be mounted in the initial ramdisk

File to load as environment file

Whether to enable Validate configuration file.

The directory to store the database files in

Use these credentials to authenticate during the HTTP upgrade request (Basic authorization type, USER:[PASS]).

Additional environment file or files as defined in systemd.exec(5)

Environment file as defined in systemd.exec(5)

Configuration for the rclone remote being used for backup

A file containing the secret used to encrypt some rails data in a deterministic way in the DB

Create the objectstore bucket if it does not exist.

Store historical flow data in clickhouse

A unique identifier for this authentication token

Additional environment variables to provide to authelia

Seconds to store cached auth entries for.

EnvironmentFile as defined in systemd.exec(5)

Connection string for accessing pgBouncer

Environment file as defined in systemd.exec(5)

List of volumes to attach to this container

Amazon CloudWatch Agent configuration file

Amazon CloudWatch Agent common configuration

Sets the password for WPA-PSK

Environment file as defined in systemd.exec(5)

Absolute path to a file with environment variables used for gitlab-runner registration with runner registration tokens

Datasource specific secure configuration

Absolute path to a file containing environment variables used for gitlab-runner registrations with runner authentication tokens

Sets allowed passwords for WPA3-SAE

If we can't use system-provided secure storage, should we proceed anyway?

Sets the password for WPA-PSK that will be converted to the pre-shared key

Specifies the initial password for the user, i.e. the password assigned if the user does not already exist

Sets the password for WPA3-SAE

Specifies the initial password for the user, i.e. the password assigned if the user does not already exist

.hg/store size (in MB) past which the nightly job generates clone bundles.

Should we bypass any attempt to use system-provided secure storage?

nix substituter to fetch debuginfo from