Nix daemon process CPU scheduling policy

The logfile to use for the nix-daemon service

The TMPDIR to use for nix-daemon.

Whether the Nix daemon process should considered to be low priority when doing file system I/O.

Whether to enable NNCP TCP synronization daemon

Nix daemon process resource limits class

Extra command-line arguments to pass to daemon.

Nix daemon process I/O scheduling class

Whether to enable ClamAV clamd daemon.

Nix daemon process I/O scheduling priority

Verbosity of Atuin daemon logging.

Whether to make the nix-daemon service socket activated.

Whether to enable the use of a daemon for TuneD.

User to run the icecream daemon as

Whether to enable Atuin daemon.

Daemon process priority for bee. 0 is the default Unix process priority, 19 is the lowest.

Whether to enable the canto RSS daemon.

Whether to enable Icecream Daemon.

Prevent jobs from other nodes being scheduled on this daemon.

The level of niceness to use.

Whether to enable the scion-daemon service.

Whether to enable daemon for handling the deepin session settings.

The user to run Handheld Daemon with.

Whether to let the nslcd daemon (nss-pam-ldapd) handle the LDAP lookups for NSS and PAM

Extra configuration options that will be added verbatim at the end of the nslcd configuration file (nslcd.conf(5)).

Configurations for the fwupd daemon.

Network name to connect to

The log level that the system-wide pulseaudio daemon should use, if activated.

Hostname of the daemon in the icecream infrastructure

Whether to enable power-profiles-daemon, a DBus daemon that allows changing system behavior based upon user-selected power profiles.

Config of the pulse daemon

Additional command line parameters.

Whether to enable Handheld Daemon.

Whether to enable Handheld Daemon UI.

ClamAV configuration

List of enabled daemon modules

The icecream package to use.

The handheld-daemon package to use.

scion-daemon configuration

Maximum number of compile jobs started in parallel for this daemon

The handheld-daemon-ui package to use.

Maximum size in Megabytes of cache used to store compile environments of compile clients.

Whether to enable socket activation for nncp-daemon.

The power-profiles-daemon package to use.

Whether to enable GNOME Settings Daemon.

Whether to automatically open receive port in the firewall.

The crossmacro-daemon package to use.

Whether to automatically open the firewall for scheduler discovery.

Whether to enable Handheld Daemon TDP control plugin.

Explicit scheduler hostname, useful in firewalled environments

The distinguished name to use to bind to the LDAP server when the root user tries to modify a user's password.

Whether to enable the system76 power daemon

Whether to enable AccountsService, a DBus service for accessing the list of user accounts and information attached to those accounts.

The path to a file containing the credentials with which to bind to the LDAP server if the root user tries to change a user's password.

Defines the mount options used on a bind mount for the /nix/store

Whether to enable Nix

Configuration settings for clipcatd

Definition of launchd daemons

The contents of Fail2ban's main configuration file

Whether to enable the system76 firmware daemon

TCP sockets to bind to

Whether to enable Tor daemon

Options given to swww-daemon when the service is run

Daemon process priority for FAHClient. 0 is the default Unix process priority, 19 is the lowest.

The EFI system partition (ESP) path used if UDisks is not available or if this partition is not mounted at /boot/efi, /boot, or /efi

Configuration for docker daemon

The adjustor package to use.

Hooks that will be placed under /var/lib/libvirt/hooks/daemon.d/ and called for daemon start/shutdown/SIGHUP events

Whether to enable RAS logging daemon.

Whether to enable a user service for the Emacs daemon

A list of OSD daemons that should have a service created

A list of monitor daemons that should have a service created

Publish all directories that look like Git repositories (have the objects and refs subdirectories), even if they do not have the git-daemon-export-ok file

A list of metadata service daemons that should have a service created

A list of names for manager daemons that should have a service created

List of plugins to be disabled.

List of device GUIDs to be disabled.

Enables the daemon for lorri, a nix-shell replacement for project development

The user the nixops-dns daemon should run as

Configuration for a secure pipe daemon

Whether to load the acpi_call kernel module

Whether to enable firewalling for outgoing traffic of the nix daemon.

Whether to enable the BOINC distributed computing client

Configuration for docker daemon

This optional key specifies what nice(3) value should be applied to the daemon.

Whether to enable cron'ed NNCP TCP daemon caller

Whether to start OpenTabletDriver daemon as a systemd user service.

Whether to run the Avahi daemon, which allows Avahi clients to use Avahi's service discovery facilities and also allows the local machine to advertise its presence and services (through the mDNS responder implemented by avahi-daemon).

A list of rados gateway daemons that should have a service created

Whether to enable Amberol music player as a daemon

Whether to install a user service for the Emacs daemon

If the free space in the filesystem containing log_file drops below this value, the audit daemon takes the action specified by space_left_action

User under which the Kubo daemon runs

Whether or not to enable the headless Aria2 daemon service

Specifies on which port the xrdp daemon listens.

List of AutoSSH sessions to start as launchd daemon

User account under which both the update daemon and the web-application run.

User for the dspam daemon.

Movim daemon port.

Packages added to the service's PATH environment variable

The user the aMule daemon should run as

User the hound daemon should execute under.

Group under which the Kubo daemon runs

Enable the usbmuxd ("USB multiplexing daemon") service

Specifies on which ports the cntlm daemon listens.

Allow dockerd to be restarted without affecting running container

Shell commands executed as the service's main process.

Group for the dspam daemon.

Port for the mpdscribble daemon to search for a mpd daemon on.

Host for the mpdscribble daemon to search for a mpd daemon on.

Host for the mpdscribble daemon to search for a mpd daemon on.

Port for the mpdscribble daemon to search for a mpd daemon on.

Configure Kanidm unix daemon

Number of daemons to serve user requests

Whether to enable the Profile Sync daemon.

Whether to enable the khd hotkey daemon.

This optional key specifies whether the kernel should consider this daemon to be low priority when doing file system I/O.

Group the hound daemon should execute under.

Whether to enable the at daemon, a command scheduler.

Whether to enable MPD, the music player daemon.

Whether to enable the TLP power management daemon.

Whether to enable MPD, the music player daemon.

Whether to enable Profile-sync-daemon service.

Configure Kanidm unix daemon

Whether to enable Goss daemon.

Whether to enable ttyd daemon.

Whether to enable the ipfs daemon.

Whether to enable the Vixie cron daemon.

TCP port the daemon will listen on.

Whether to enable the skhd hotkey daemon.

Specifies the Name of the Storage daemon.

Command executed as the service's main process.

Whether to enable gpsd, a GPS service daemon.

Whether to enable BIRD Internet Routing Daemon.

Extra flags to pass to the Guix daemon service.

Whether to enable Guix build daemon service.

Whether to enable keyd, a key remapping daemon.

Whether to enable the System Security Services Daemon.

Whether to enable Multimedia Messaging Service Daemon.

Path to the Xen Store Daemon

User under which Git daemon would be running.

TLS Options for the File Daemon

TLS Options for the Storage Daemon

BIRD Internet Routing Daemon configuration file. http://bird.network.cz/

Whether to enable Ceph RadosGW daemon.

Whether to enable Ceph MGR daemon.

Whether to enable Ceph OSD daemon.

Whether to enable Ceph MON daemon.

Whether to enable Ceph MDS daemon.

Whether to enable the power-rofiles-daemon like DBus interface for TLP.

Whether to enable aMule daemon.

Whether to enable the ACPI daemon.

Whether to enable Vault daemon.

Whether to enable the Emacs Daemon.

Whether to enable the Emacs daemon.

Whether to enable the LIRC daemon, to receive and send infrared signals.

Whether to enable twmn, a tiling window manager notification daemon.

The subnets which this tinc daemon will serve

Limit access to the ckb daemon to a particular group.

The USBGuard daemon will load this as the policy rule set

Extra flags passed to the Kubo daemon

Whether to enable Dunst notification daemon.

Whether to enable the fcron daemon.

Whether to enable neard, an NFC daemon.

Whether to enable rqbit BitTorrent daemon.

Whether to enable lorri build daemon.

Whether to enable the dunst notification daemon.

The profile-sync-daemon package to use.

Specifies port number on which the Storage daemon listens for Director connections.

Whether to enable GPM, the General Purpose Mouse daemon, which enables mouse support in virtual consoles.

Whether to run the rspamd daemon in debug mode.

Whether to enable avizo, a simple notification daemon.

Whether to enable the grobi display setup daemon.

Whether to enable simple X hotkey daemon.

The user the yandex-disk daemon should run as.

Group under which Git daemon would be running.

Path to the RAS daemon machine check event database.

Extra command line arguments to be passed to the PCSC daemon.

Whether to enable the multiple spanning tree protocol daemon.

Whether to enable Link Layer Discovery Protocol Daemon.

Extra command-line arguments to pass to the rumno daemon.

This option enables iVPN daemon

Configuration to use for Name Service Cache Daemon

A list of names of users that have additional rights when connecting to the Nix daemon, such as the ability to specify additional binary caches, or to import unsigned NARs

A list of names of users that have additional rights when connecting to the Nix daemon, such as the ability to specify additional binary caches, or to import unsigned NARs

Set the nice level for the Freenet daemon

Command-line options for rtkit-daemon.

Path to the log file for Murmur daemon

Enables the consul daemon.

A list of names of users (separated by whitespace) that are allowed to connect to the Nix daemon

A list of names of users (separated by whitespace) that are allowed to connect to the Nix daemon

Whether to enable ebusd, a daemon for communication with eBUS heating systems.

Enable illum, a daemon for controlling screen brightness with brightness buttons.

Whether to enable the userspace daemon for Intel Precise Touch & Stylus.

Whether to enable pptpd, the Point-to-Point Tunneling Protocol daemon.

Set this option when you want to run the slurmctld daemon as something else than the default slurm user "slurm"

List of additional arguments to pass to the daemon.

Whether to run the postfix sender rewriting scheme daemon.

Whether to enable Easyeffects daemon

Options for the FRR ldpd daemon.

Options for the FRR pimd daemon.

Options for the FRR ripd daemon.

Options for the FRR bfdd daemon.

Options for the FRR pbrd daemon.

Options for the FRR bgpd daemon.

List of additional arguments to pass to the daemon.

List of additional arguments to pass to the daemon.

Whether to enable the a2boot daemon.

Whether to enable Deluge daemon.

Whether to enable the BRLTTY daemon.

Whether to enable docuum daemon.

Whether to enable the AppleTalk daemon.

Whether to enable ToDesk daemon.

Whether to enable the rsync daemon.

Whether to enable Zenoh daemon..

Whether to enable the Mopidy Daemon.

If the vicinae daemon should be started automatically

Whether to enable Samba's smbd daemon.

Whether to enable slurm REST daemon.

The TCP port on which the the daemon will listen.

Whether to enable Quorum blockchain daemon.

Whether to enable gammu-smsd daemon.

Whether to enable GoBGP Routing Daemon.

Whether to enable Monero node daemon.

Whether to enable Swaync notification daemon.

Whether to enable ulogd, a userspace logging daemon for netfilter/iptables related logging.

Whether to enable daemon that proxies NDP (Neighbor Discovery Protocol) messages between interfaces.

Whether to enable fnott, a lightweight Wayland notification daemon for wlroots-based compositors .

The amule-daemon package to use.

record events via sqlite3, required for ras-mc-ctl

php package to use for php fpm and update daemon.

Whether to enable the babeld network routing daemon.

Whether to enable irker, an IRC notification daemon.

Whether to enable colord, the color management daemon.

Whether to enable Mopidy, a music player daemon.

Whether to enable smartd daemon from smartmontools package.

Whether to enable the xinetd super-server daemon.

Whether to enable Mopidy music player daemon.

Whether to enable Bacula Storage Daemon.

Whether to enable the Bacula File Daemon.

Whether to enable the syslog-ng daemon.

Specifies on which ports the SSH daemon listens.

This setting is the TCP port that is desired for the daemon to get assigned to.

Whether to enable Deluge Web daemon.

List of additional arguments to pass to the daemon.

Additional memory module label descriptions to be placed in /etc/ras/dimm_labels.d/labels

User for the daemon.

User for the daemon

The rasdaemon package to use.

Options for the FRR zebra daemon.

Options for the FRR isisd daemon.

Options for the FRR nhrpd daemon.

Options for the FRR mgmtd daemon.

Options for the FRR ospfd daemon.

Options for the FRR pathd daemon.

Options for the FRR vrrpd daemon.

Options for the FRR pim6d daemon.

Whether to enable devmon, an automatic device mounting daemon.

Additional command line arguments to pass to the sftpgo daemon.

Whether to enable the Multipath TCP path management daemon.

Whether to enable Bacula Director Daemon.

TCP port to bind Erlang Port Mapper Daemon to.

The guix package to use

Whether to configure for the local MPD daemon

Whether to enable PCSC-Lite daemon, to access smart cards using SCard API (PC/SC).

Whether to enable greetd, a minimal and flexible login manager daemon.

Whether to enable xl2tpd, the Layer 2 Tunnelling Protocol Daemon.

Whether to enable kanshi, a Wayland daemon that automatically configures outputs.

Whether to enable socket activation for Erlang Port Mapper Daemon (epmd), which acts as a name server on all hosts involved in distributed Erlang computations.

This option defines Device resources in Bacula Storage Daemon.

Whether to enable error injection infrastructure.

rasdaemon configuration, currently only used for CE PFA for details, read rasdaemon.outPath/etc/sysconfig/rasdaemon's comments

Each attribute in this set specifies an option for a key in the plist. https://developer.apple.com/legacy/library/documentation/Darwin/Reference/ManPages/man5/launchd.plist.5.html

Whether to enable mbpfan, fan controller daemon for Apple Macs and MacBooks.

Whether to enable nohang, a daemon that keeps system responsiveness when Linux is out of memory.

Enable urxvtd, the urxvt terminal daemon

Enable htpdate daemon.

Whether to enable SCX service, a daemon to run schedulers from userspace.

Whether to enable sherlock as a daemon.

The existing user the Quassel daemon should run as

When invoked by root the mount.davfs daemon will run as this user

Whether to enable GNS3 Server daemon.

Whether to enable incusd, a daemon that manages containers and virtual machines

Whether to enable Pulseeffects daemon Note, it is necessary to add

programs.dconf.enable = true;

to your system configuration for the daemon to work correctly.

Whether to enable Freenet daemon.

Whether to enable FlexGet daemon.

Whether to enable Lokinet daemon.

Whether to enable OpenBao daemon.

Whether to enable osqueryd daemon.

Whether to enable Netdata daemon.

Whether to enable Netbird daemon.

Whether to enable Dropbox daemon.

Group for the daemon.

Group for the daemon

Whether to enable the rkvm server daemon (input transmitter).

Whether to enable the rkvm client daemon (input receiver).

Whether to enable Clipcat clipboard daemon.

Whether to enable sysprof profiling daemon.

Whether to enable Solanum IRC daemon.

The working directory of the Linux builder daemon process.

Multiaddr or array of multiaddrs describing the address to serve the local HTTP API on

Max open files for each OSD daemon.

Options for the FRR ospf6d daemon.

Options for the FRR ripngd daemon.

Options for the FRR eigrpd daemon.

Options for the FRR babeld daemon.

Options for the FRR sharpd daemon.

Whether to enable ncdns, a Go daemon to bridge Namecoin to DNS

Whether to enable ipp-usb, a daemon to turn an USB printer/scanner supporting IPP everywhere (aka AirPrint, WSD, AirScan) into a locally accessible network printer/scanner.

Whether to enable the Name Service Cache Daemon

Whether to enable https-dns-proxy daemon.

Whether to enable Ananicy, an auto nice daemon.

Whether to enable the Quassel IRC client daemon.

Whether to enable Riemann network monitoring daemon.

Whether to enable Volnoti volume HUD daemon.

Whether to run Synapse BitTorrent Daemon.

SCdaemon configuration options

Whether to enable slurm client daemon.

If Monitor is set to no, this director will have full access to this Storage daemon

If Monitor is set to no, this director will have full access to this Storage daemon

Whether to enable translation of power-profiles-daemon API calls to TuneD.

Whether to enable tcsd, a Trusted Computing management service that provides TCG Software Stack (TSS)

This required key uniquely identifies the job to launchd.

Whether to run the GNUnet daemon

Whether to enable the Siproxd SIP proxy/masquerading daemon.

Whether to enable CoreRAD IPv6 NDP RA daemon.

Whether to enable kthxbye alert acknowledgement management daemon.

Whether to enable speech-dispatcher speech synthesizer daemon.

Whether to enable Pizauth, a commandline OAuth2 authentication daemon .

This setting is the TCP port that is desired for the daemon to get assigned to.

Where to send logs

This option enables Mullvad VPN daemon.

Attrset of daemon configuration

Defines the tinc networks which will be started

Whether to enable Hard Drive Active Protection System Daemon, devices are detected and managed automatically by udev and systemd .

The maximum number of open files for this process

The maximum number of open files for this process

State directory of the daemon.

extra kernel modules to load

Solanum IRC daemon configuration file. check https://github.com/solanum-ircd/solanum/blob/main/doc/reference.conf for all options.

Enable Trezor bridge daemon, for use with Trezor hardware wallets.

Flags passed to slurmctld daemon, see slurmctld(8)

Extra options to be appended to the FRR bgpd daemon options.

Extra options to be appended to the FRR ripd daemon options.

Extra options to be appended to the FRR pimd daemon options.

Extra options to be appended to the FRR ldpd daemon options.

Extra options to be appended to the FRR bfdd daemon options.

Extra options to be appended to the FRR pbrd daemon options.

Extra configuration options to be passed to Git daemon.

Enable saned network daemon for remote connection to scanners.

saned would be run from scanner user; to allow access to hardware that doesn't have scanner group you should add needed groups to this user.

Whether to enable fprintd daemon and PAM module for fingerprint readers handling.

Enable Trezor bridge daemon, for use with Trezor hardware bitcoin wallets.

User for the daemon.

Whether to enable the incron daemon

This optional key specifies whether the kernel should consider this daemon to be low priority when doing file system I/O when the process is throttled with the Darwin-background classification.

Extra configuration for Bacula Director Daemon.

Enable the riemann-dash dashboard daemon.

Whether to enable auto-cpufreq daemon.

This optional key specifies that launchd should adjust its log mask temporarily to LOG_DEBUG while dealing with this job.

Whether to enable the OpenSSH secure shell daemon, which allows secure remote logins.

This optional key is used to control whether your job is launched once at the time the job is loaded

Whether to enable the RDNSS daemon (rdnssd), which configures DNS servers in /etc/resolv.conf from RDNSS advertisements sent by IPv6 routers.

Whether to use nsncd instead of nscd from glibc

This optional key is used to specify launch on demand sockets that can be used to let launchd know when to run the job

The port number the Quassel daemon will be listening to.

This optional key specifies the user to run the job as

If set, mpd is socket-activated; that is, instead of having it permanently running as a daemon, systemd will start it on the first incoming connection.

Charybdis IRC daemon user.

Whether to enable EasyTier daemon.

Whether to run the Postgrey daemon

Whether to enable Subsonic daemon.

Whether to enable USBGuard daemon.

Options for the FRR staticd daemon.

Options for the FRR fabricd daemon.

Specifies on which port the endlessh daemon listens for SSH connections

Settings for TuneD's power-profiles-daemon compatibility service.

Extra options to be appended to the FRR pathd daemon options.

Extra options to be appended to the FRR nhrpd daemon options.

Extra options to be appended to the FRR ospfd daemon options.

Extra options to be appended to the FRR zebra daemon options.

Extra options to be appended to the FRR mgmtd daemon options.

Extra options to be appended to the FRR isisd daemon options.

Extra options to be appended to the FRR vrrpd daemon options.

Extra options to be appended to the FRR pim6d daemon options.

Whether git-http-backend should only export repositories that contain a git-daemon-export-ok file

Whether to enable Ergo IRC daemon.

Whether to enable Twingate Client daemon.

Extra arguments passed to the Radicale daemon.

The presence of this key specifies that the daemon expects to be run as if it were launched from inetd.

Listen address of the Hound daemon.

Whether to enable the Linux Audit daemon.

Plugin to be used for process tracking on a job step basis

Listen address for Erlang distribution protocol and Port Mapper Daemon (epmd).

The recommended idle time out (in seconds) to pass to the job

Group for the daemon.

Whether to enable the SFTP subsystem in the SSH daemon

Normally, BitlBee gets a hostname using getsockname()

Whether to enable clipmenu, the clipboard management daemon.

Whether to enable hypridle, Hyprland's idle daemon.

Whether to enable printing support through the CUPS daemon.

Whether to enable spotifyd, a Spotify playing daemon.

Whether to enable thermald, the temperature management daemon.

Whether to enable ZnapZend ZFS backup daemon.

Whether to enable Hypridle, Hyprland's idle daemon.

Whether to enable clipmenu, the clipboard management daemon.

Whether to enable the LVM dmevent daemon.

Whether to enable Pinset orchestration for IPFS - requires ipfs daemon to be useful.

Specifies on which port the endlessh-go daemon listens for SSH connections

Whether to enable haveged entropy daemon, which refills /dev/random when low

If enabled, start the Resilio Sync daemon

Whether to enable the Interplanetary File System (WARNING: may cause severe network degradation)

Whether to enable the headless Transmission BitTorrent daemon

sniproxy.conf configuration excluding the daemon username and pid file.

Configuration used by the Conky daemon

Path to local domain socket which is used for communication with the daemon

Core configuration for power-profiles-daemon support.

The group of the running mount.davfs daemon

This optional key specifies what value should be passed to umask(2) before running the job

Charybdis IRC daemon group.

Structured server daemon configuration

Structured client daemon configuration

Whether to enable the Router Advertisement Daemon (radvd), which provides link-local advertisements of IPv6 router addresses and prefixes using the Neighbor Discovery Protocol (NDP)

This optional key causes the job to be started if any one of the listed paths are modified.

The amount of time launchd waits before sending a SIGKILL signal

Extra contents of the configuration file of the CUPS daemon (cupsd.conf).

Whether to enable the Systemd DNS resolver daemon (systemd-resolved).

Whether to enable Web Services Dynamic Discovery host daemon

This option defines Director resources in Bacula Storage Daemon.

This option defines director resources in Bacula File Daemon.

Whether to enable the spice guest webdav proxy daemon.

Port the cross-seed daemon listens on.

Whether to enable USBGuard dbus daemon.

The rbw package to use

This optional key causes the job to be started every time a filesystem is mounted.

Remap all the path requests as relative to the given path

Whether to enable Bitbox bridge daemon, for use with Bitbox hardware wallets..

State directory of the daemon.

Extra options to be appended to the FRR eigrpd daemon options.

Extra options to be appended to the FRR babeld daemon options.

Extra options to be appended to the FRR sharpd daemon options.

Extra options to be appended to the FRR ospf6d daemon options.

Extra options to be appended to the FRR ripngd daemon options.

Port to listen on.

Custom mainboard description, see ras-mc-ctl(8) for more details.

The port on which the SFTP server will listen

Whether to enable WINS NSS (Name Service Switch) plug-in

ZFS Event Daemon /etc/zfs/zed.d/zed.rc content

See zed(8) for details on ZED and the scripts in /etc/zfs/zed.d to find the possible variables

Options that will be passed to the axlisten daemon.

This option enables Speedify daemon

Log level used by the GlusterFS daemon

User name under which the rasdaemon exporter shall be run.

Whether to enable sslmate-agent, a daemon for managing SSL/TLS certificates on a server.

The fdlimit for the Kubo systemd unit or null to have the daemon attempt to manage it

Whether to enable Trusted Platform 2 userspace resource manager daemon .

This optional key specifies the group to run the job as

Open ports in the firewall for deluge web daemon

Whether to enable AX.25 axlisten daemon.

Specify the port (a positive integer) on which the Director daemon will listen for Bacula Console connections

Environment variables passed to the service's processes.

The maximum number of simultaneous processes for this user id

The maximum number of simultaneous processes for this user id

Whether to enable vicinae launcher daemon.

Whether to enable GlusterFS Daemon.

Whether to enable Netclient Daemon.

Whether to enable MiniUPnP daemon.

Whether to enable Tinyproxy daemon.

Group under which the rasdaemon exporter shall be run.

Start the daemon automatically using XDG autostart

Extra command-line options passed to the smartd daemon on startup.

(See man 8 smartd.)

Whether to enable Bitcoin daemon.

Whether to enable Charybdis IRC daemon.

Charybdis IRC daemon configuration file.

Whether to enable ShellHub Agent daemon.

Whether to enable the openiscsi iscsi daemon.

Whether to enable Tailscale client daemon.

Enables the systemd NTP client daemon.

Whether to enable Tailscale client daemon.

Whether to enable Batsignal Battery Daemon.

Number of resource records to be cached per interface

scion-ip-gateway daemon configuration

Whether to enable Spice guest vdagent daemon.

Configuration to use for Cyrus SASL authentication daemon.

Whether to enable USB Relay MQTT daemon.

Whether to enable Hyprpaper, Hyprland's wallpaper daemon.

This optional key specifies what nice(3) value should be applied to the daemon.

Whether to enable GeoClue 2 daemon, a DBus service that provides location information for accessing.

Whether to enable the slurm control daemon

Whether to enable the mDNS NSS (Name Service Switch) plug-in for IPv4

Extra options to be appended to the FRR staticd daemon options.

Extra options to be appended to the FRR fabricd daemon options.

This key was used in Mac OS X 10.4 to control whether a job was kept alive or not

This optional key specifies whether the job participates in advanced communication with launchd

Whether to enable the udiskie mount daemon

Whether to enable the prometheus rasdaemon exporter.

Enable MooseFS master daemon

Whether to enable saslauthd, the Cyrus SASL authentication daemon.

Whether to enable Librespot (Spotify Connect speaker daemon).

This optional key specifies whether initgroups(3) should be called before running the job

Whether to provide a slurm.conf file

Extra arguments to the ebus daemon

This configuration file only applies to the hosts listed with this key

Whether to enable the device mapper multipath (DM-MP) daemon.

Whether to enable OrangeFS client daemon.

Extra flags passed to the GlusterFS daemon

Whether to enable GNOME Disks daemon, a program designed to be a UDisks2 graphical front-end.

Extra contents of the configuration file of the CUPS daemon (cups-files.conf).

Extra commandline options to pass to the rasdaemon exporter.

This key maps to the first argument of execvp(3)

Whether to enable ncmpcpp - an ncurses Music Player Daemon (MPD) client.

Whether to open ports in the firewall needed for the daemon to function.

This optional key specifies whether the job can only be run once and only once

Enable the riemann-health daemon.

The full configuration of the Hound daemon

The address for the daemon to listen on

The address for the daemon to listen on

This configuration file only applies to hosts NOT listed with this key

Enable Saunafs master daemon

Ergo IRC daemon configuration file. https://raw.githubusercontent.com/ergochat/ergo/master/default.yaml

The contents of the configuration. file of the CUPS Browsed daemon (cups-browsed.conf)

Settings for LACT

Log level of the NetBird daemon.

Log level of the NetBird daemon.

This tells the USBGuard daemon which file to load as policy rule set

Whether to enable hostapd, a user space daemon for access point and authentication servers

This optional key specifies what file should be used for data being supplied to stdin when using stdio(3).

If set, sshd is socket-activated; that is, instead of having it permanently running as a daemon, systemd will start an instance for each incoming connection.

Enable the ExpressVPN daemon.

The USBGuard daemon modifies some attributes of controller devices like the default authorization state of new child device instances

Whether to enable Bolt, a userspace daemon to enable security levels for Thunderbolt 3 on GNU/Linux

Additional command line options to pass to the endlessh daemon.

This option enables docker, a daemon that manages linux containers

This optional key specifies what file should be used for data being sent to stdout when using stdio(3).

Working directory for the warp-svc daemon.

Whether to enable irqbalance daemon.

Whether to enable nullmailer daemon.

Whether to enable picosnitch daemon.

Whether to enable the playerctld daemon.

Whether to enable the wgautomesh daemon.

Whether to enable playerctld daemon.

Which package to use for the usbmuxd daemon.

Whether to enable GNOME Keyring daemon, a service designed to take care of the user's security credentials, such as user names and passwords .

Whether to enable the APC UPS daemon. apcupsd monitors your UPS and permits orderly shutdown of your computer in the event of a power failure

Whether to install and enable the atopgpud daemon to get information about NVIDIA gpus.

This optional key specifies that launchd should instruct the kernel to have the job wait for a debugger to attach before any code in the job is executed.

Whether to enable Prometheus monitoring daemon.

Whether to enable Mozilla VPN daemon.

This option enables lxd, a daemon that manages containers

Additional command line options to pass to the endlessh-go daemon.

A list of usernames that the daemon will accept IPC connections from.

Whether to enable TeamViewer daemon & system package.

Whether to enable the XenServer guest utilities daemon.

UEFI capsule configurations for the fwupd daemon.

HQplayer daemon configuration, written to /etc/hqplayer/hqplayerd.xml

Address to listen on.

This key specifies that the job should be spawned into a new security audit session rather than the default session for the context is belongs to

This optional key specifies the node to connect(2) or bind(2) to.

Specifies the bind address on which the irker daemon listens

Whether to enable Whether to enable the corefreq daemon and kernel module.

Open port in firewall for incoming connections.

Whether to run the infnoise driver as a daemon to refill /dev/random

This optional key is used to specify a directory to chroot(2) to before running the job.

Configure Kanidm clients, needed for the PAM daemon

Enable Git daemon, which allows public hosting of git repositories without any access controls

Enable the shairport-sync daemon

Whether to enable local discovery for the Kubo daemon

Whether to enable the CUPS Remote Printer Discovery (browsed) daemon.

This optional key tells launchctl what type of socket to create

Whether to enable the actkbd key mapping daemon

Extra configuration

This flag causes launchd to use the glob(3) mechanism to update the program arguments before invocation.

This optional key specifies what file should be used for data being sent to stderr when using stdio(3).

Additional arguments passed to the daemon.

Whether to enable the Tox DHT bootstrap daemon.

This configuration file only applies to sessions of the type specified

Whether to enable carbon cache, the graphite storage daemon.

Whether to enable lifecycled, a daemon for responding to AWS AutoScaling Lifecycle Hooks.

The maximum amount of cpu time (in seconds) to be used by each process.

The maximum amount of cpu time (in seconds) to be used by each process.

Configure Kanidm clients, needed for the PAM daemon

If set, CUPS is socket-activated; that is, instead of having it permanently running as a daemon, systemd will start it on the first incoming connection.

This optional key implies SockFamily is set to "Unix"

Whether to enable the Mopidy OSX Media Keys support daemon.

Specify rules for nftables to add to the input chain when services.prometheus.exporters.rasdaemon.openFirewall is true.

Interface address to bind the endlessh-go daemon to SSH connections.

A list of groupnames that the daemon will accept IPC connections from.

Command-line flags passed to the update daemon

The largest size (in bytes) core file that may be created.

The largest size (in bytes) core file that may be created.

This optional key specifies the mode of the socket

Whether to run the Teamspeak3 voice communication server daemon.

This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.

Enables GnuPG network certificate management daemon with socket-activation for every user session.

Whether to enable systembus-notify - system bus notification daemon.

Whether to enable Cloudflare Zero Trust client daemon.

Server port to listen for icecream daemon requests.

Resource limits to be imposed on the job

Resource limits to be imposed on the job

This option enables libvirtd, a daemon that manages virtual machines

The interface the BitlBee daemon will be listening to

Whether to generate SSH host keys

Usernames to be added to the "openrazer" group, so that they can start and interact with the OpenRazer userspace daemon.

The largest size (in bytes) file that may be created.

The largest size (in bytes) file that may be created.

Whether to enable OpenRazer drivers and userspace daemon .

This option enables docker in a rootless mode, a daemon that manages linux containers

This optional key can be used to request that the service be registered with the mDNSResponder(8)

Whether to enable the autosuspend daemon.

Whether to enable Meshtastic daemon.

Configuration of the Tinc daemon for this network

Whether to open the firewall for the ports in services.deluge.config.listen_ports

Options passed to the gdm daemon

Specify a filter for iptables to use when services.prometheus.exporters.rasdaemon.openFirewall is true

When a job dies, launchd kills any remaining processes with the same process group ID as the job

This optional key causes the job to be started every N seconds

The maximum size (in bytes) of the data segment for a process; this defines how far a program may extend its break with the sbrk(2) system call.

The maximum size (in bytes) of the data segment for a process; this defines how far a program may extend its break with the sbrk(2) system call.

Environment variables to set for the slurmrestd daemon, see slurmrestd(8).

List of reader name patterns for the PCSC daemon to ignore

Configuration for bootstrap daemon

Whether to enable cachefilesd network filesystems caching daemon.

Whether to enable rescrobbled, a MPRIS music scrobbler daemon.

This optional key is used to specify a directory to chdir(2) to before running the job.

This optional key specifies the service on the node to connect(2) or bind(2) to.

Name of a file containing the spiped key

This optional key specifies whether listen(2) or connect(2) should be called on the created file descriptor

Whether to enable the mDNS NSS (Name Service Switch) plug-in for IPv6

This option defines Autochanger resources in Bacula Storage Daemon.

This optional key is used to specify Mach services to be registered with the Mach bootstrap sub-system

This optional key specifies what nice(3) value should be applied to the daemon.

Start the service with the system

Start the service with the system

List of network interfaces that should be ignored by the avahi-daemon

Whether to enable Cloudflare Tunnel client daemon (formerly Argo Tunnel).

Whether to enable Pantalaimon, an E2EE aware proxy daemon for matrix clients.

Tor hidden sites do not have real IP addresses

The maximum size (in bytes) of the stack segment for a process; this defines how far a program's stack segment may be extended

The maximum size (in bytes) of the stack segment for a process; this defines how far a program's stack segment may be extended

This option specifies additional PATH that the emacs daemon would have

Log level for the mpdscribble daemon.

Log level for the mpdscribble daemon.

Specifies higher-level event types to be used as launch-on-demand event sources

Whether to enable Saunafs metalogger daemon.

A list of browsers to sync

This optional key specifies the protocol to be passed to socket(2)

Whether to enable GNOME Online Accounts daemon, a service that provides a single sign-on framework for the GNOME desktop.

List of network interfaces that should be used by the avahi-daemon

The maximum size (in bytes) which a process may lock into memory using the mlock(2) function.

The maximum size (in bytes) which a process may lock into memory using the mlock(2) function.

The interfaces the Quassel daemon will be listening to

Arguments to pass to the daemon

Whether to run the SpamAssassin daemon in debug mode

This optional key specifies what nice(3) value should be applied to the daemon.

This optional key is used to control whether your job is to be kept continuously running or to let demand and conditions control the invocation

List of error types to collect from the event database.

Specifies on which port the endlessh-go daemon listens for Prometheus queries.

A list of substitute servers' URLs for the Guix daemon to download substitutes from.

A program name specifying a Postfix service/daemon process

The number of allowed simultaneous connections to the daemon, default 10.

This key maps to the second argument of execvp(3)

With safeExit enabled, the daemon will ask the driver to disable the WDT before exiting

Whether to enable MooseFS metalogger daemon that maintains a backup copy of the master's metadata.

Whether to enable the SpamAssassin daemon.

Configuration for Collabora Online WebSocket Daemon, see https://sdk.collaboraonline.com/docs/installation/Configuration.html, or https://github.com/CollaboraOnline/online/blob/master/coolwsd.xml.in for the default configuration.

Enable the bumblebee daemon to manage Optimus hybrid video cards

Dynamic configuration files to write

Path of the Neo4j home directory

This optional key is a variant of SockPathName

Additional environment variables to be passed to the Go

Whether to enable the triggerhappy hotkey daemon.

The number of running kresd (Knot Resolver daemon) workers

A list of Cron jobs to be appended to the system-wide crontab

Whether to verify clients against a locally running tailscale daemon if they are allowed to connect to this node or not.

Passes --enable-gc flag to ipfs daemon.

Much like the WatchPaths option, this key will watch the paths for modifications

The specified name-string names the type of media supported by this device, for example, DLT7000

Options passed to the gdm daemon

This optional key specifies whether the kernel should consider this daemon to be low priority when doing file system I/O.

Whether to enable Saunafs chunkserver daemon.

Whether to bypass cgit and use git-http-backend for HTTP clones

Path of the data directory

Whether to enable the fastnetmon-advanced DDoS Protection daemon.

Additional environment variables to be passed to the gocd-server process

How to treat USB devices that are already connected after the daemon starts

File containing the password for the mpd daemon.

The directory where Transmission will create .config/transmission-daemon. as well as Downloads/ unless services.transmission.settings.download-dir is changed, and .incomplete/ unless services.transmission.settings.incomplete-dir is changed.

The lmtp daemon will make the unix socket group-read/write for users in this group.

This key lets one override the default throttling policy imposed on jobs by launchd

Whether to enable MooseFS chunkserver daemon that stores file data.

A program name specifying a Postfix service/daemon process

Whether to automatically open the daemon port in the firewall.

Whether to enable Pantheon parental controls daemon.

Whether the daemon needs to bind to ports below 1024 (e.g. for the ident service)

Whether to enable DeepCool Digital monitoring daemon.

Enable localtimed, a simple daemon for keeping the system timezone up-to-date based on the current location

Whether to enable hddfancontrol daemon.

Whether to enable TorrentStream daemon.

How to treat USB devices that are already connected when the daemon starts

Whether to enable the nullidentdmod identd daemon.

Binary passes the data exactly as the audit event dispatcher gets it from the audit daemon

Extra command line arguments to be passed to the deepcool-digital-linux daemon.

Path to directory of CRLs (Certificate Revocation Lists) in PEM format

This optional key describes, at a high level, the intended purpose of the job

Whether to enable dynamic Boost balances power between the CPU and the GPU for improved performance on supported laptops using the nvidia-powerd daemon

Additional environment variables to be passed to the jenkins process

The maximum size (in bytes) to which a process's resident set size may grow

The maximum size (in bytes) to which a process's resident set size may grow

Set the log level of the daemon.

This optional key is used to specify additional environment variables to be set before running the job.

The lmtp daemon will make the unix socket group-read/write for users in this group.

This optional key can be used to request that the datagram socket join a multicast group

The root directory for file URLs used with the Cypher LOAD CSV clause

This flag instructs launchd that the job promises to use vproc_transaction_begin(3) and vproc_transaction_end(3) to track outstanding transactions that need to be reconciled before the process can safely terminate

Path of the database plugin directory

Path to directory of X.509 certificates in PEM format for trusted parties

Extra command-line options passed to the daemon

This optional key is used as a hint to launchctl(1) that it should not submit this job to launchd when loading a job or jobs

Interface address to bind the endlessh-go daemon to answer Prometheus queries.

This optional key specifies whether the kernel should consider this daemon to be low priority when doing file system I/O.

This flag corresponds to the "wait" or "nowait" option of inetd

Settings whose options overwrite fields in .config/transmission-daemon/settings.json (each time the service starts)

Configuration for act_runner daemon

This optional key specifies whether the kernel should consider this daemon to be low priority when doing file system I/O.

The mandatory base directory for cryptographic objects of this policy

File containing the password for the mpd daemon

Open ports in the firewall for TorrentStream daemon.

This optional key causes the job to be started every calendar interval as specified

Whether to enable evdevremapkeys, a daemon to remap events on linux input devices.

Unix domain socket that the mail notification daemon listens on.

How to treat USB controller devices that are already connected when the daemon starts

This is a numeric value in mebibytes (MiB) that tells the audit daemon when to perform a configurable action because the system is running low on disk space

Whether to request X11 forwarding on outgoing connections by default

The version of nix that nixseparatedebuginfod should use as client for the nix daemon

The port where the daemon will listen to client connections for this homeserver

The specified name-string gives the system file name of the storage device managed by this storage daemon

Whether to leave interfaces configured on dhcpcd daemon shutdown

The address where the daemon will listen to client connections for this homeserver.

The implementation to use for the message bus defined by the D-Bus specification

Enable automatic-timezoned, simple daemon for keeping the system timezone up-to-date based on the current location

Interval in which the TuneD daemon is waken up and checks for events (in seconds).

Whether to use individual -restore calls to apply changes to the firewall

File path containing environment variables for configuring the GoToSocial service in the format of an EnvironmentFile as described by systemd.exec(5)

A list of files each containing one OpenSSH public key that should be added to the user's authorized keys

A list of files each containing one OpenSSH public key that should be added to the user's authorized keys

A list of verbatim OpenSSH public keys that should be added to the user's authorized keys

A list of verbatim OpenSSH public keys that should be added to the user's authorized keys

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Set the log level of the daemon.

Whether to enable Open vSwitch

The address for the daemon to listen on

A list of files each containing one OpenSSH public key that should be added to the user's authorized keys

The OCaml-based Xen Store Daemon configuration

Path to the Xen Store Daemon PID file.

The maximum number of open files for this process

The maximum number of open files for this process

A list of verbatim OpenSSH public keys that should be added to the user's authorized keys

The extra command-line options to pass to docker daemon.

Whether to enable the GlusterFS Events Daemon

This optional key specifies whether the kernel should consider this daemon to be low priority when doing file system I/O when the process is throttled with the Darwin-background classification.

The presence of this key specifies that the daemon expects to be run as if it were launched from inetd.

Extra packages to add to PATH for the docker daemon process.

The port where the daemon will listen to client connections for this homeserver

Absolute path to the certificate to load

The address where the daemon will listen to client connections for this homeserver.

Whether to apply security hardening measures to wpa_supplicant

The maximum number of open files for this process

The maximum number of open files for this process

The maximum number of open files for this process

The maximum number of open files for this process

This optional key is used to specify launch on demand sockets that can be used to let launchd know when to run the job

This optional key specifies whether the kernel should consider this daemon to be low priority when doing file system I/O when the process is throttled with the Darwin-background classification.

Additional configuration for the WirePlumber daemon when run in single-instance mode (the default in nixpkgs and currently the only supported way to run WirePlumber configured via extraConfig)

This optional key specifies whether the kernel should consider this daemon to be low priority when doing file system I/O when the process is throttled with the Darwin-background classification.

The presence of this key specifies that the daemon expects to be run as if it were launched from inetd.

The maximum number of simultaneous processes for this user id

The maximum number of simultaneous processes for this user id

The presence of this key specifies that the daemon expects to be run as if it were launched from inetd.

Extra packages to add to PATH for the docker daemon process.

Absolute path to the certificate to load

To enforce UDP encapsulation of ESP packets, the IKE daemon can fake the NAT detection payloads

Directory for storing certificates to be used by Neo4j for TLS connections

Absolute path to the certificate to load

This optional key is used to specify launch on demand sockets that can be used to let launchd know when to run the job

This optional key is used to specify launch on demand sockets that can be used to let launchd know when to run the job

Absolute path to the certificate to load

The maximum number of simultaneous processes for this user id

The maximum number of simultaneous processes for this user id

The maximum number of simultaneous processes for this user id

The maximum number of simultaneous processes for this user id

Send certificate payloads when using certificate authentication.

• With the default of ifasked the daemon sends certificate payloads only if certificate requests have been received.
• never disables sending of certificate payloads altogether,
• always causes certificate payloads to be sent unconditionally whenever certificate authentication is used

If not null, is used as the permissions set by system.activationScripts.transmission-daemon on the directories services.transmission.settings.download-dir, services.transmission.settings.incomplete-dir. and services.transmission.settings.watch-dir

Whether to install IPsec policies or not

Address of the Docker daemon.

XFRM interface ID set on outbound policies/SA

Use IKE fragmentation (proprietary IKEv1 extension or RFC 7383 IKEv2 fragmentation)

Address of the Docker daemon.

List of local traffic selectors to include in CHILD_SA

Public port number to try to redirect to this machine's Wireguard daemon using UPnP IGD.