| options/nixos/services.maddy.tls.certificates.*.certPath | Path to the certificate used for TLS.
|
| options/nixos/services.prometheus.scrapeConfigs.*.kubernetes_sd_configs.*.namespaces.names | Namespace name.
|
| options/nixos/services.strongswan-swanctl.swanctl.connections.<name>.rekey_time | IKE rekeying refreshes key material using a Diffie-Hellman exchange, but
does not re-check associated credentials
|
| options/nixos/services.murmur.registerHostname | DNS hostname where your server can be reached
|
| options/nixos/services.nominatim.ui.config | Nominatim UI configuration placed to theme/config.theme.js file
|
| options/nixos/services.slskd.settings.directories.incomplete | Directory where incomplete downloading files are stored.
|
| options/nixos/services.prometheus.remoteRead.*.name | Name of the remote read config, which if specified must be unique among remote read configs
|
| options/nixos/services.radicle.httpd.nginx.forceSSL | Whether to add a separate nginx server block that redirects (defaults
to 301, configurable with redirectCode) all plain HTTP traffic to
HTTPS
|
| options/nixos/services.openbao.settings | Settings of OpenBao
|
| options/nixos/services.monica.nginx.listen.*.addr | Listen address.
|
| options/nixos/services.limesurvey.httpd.virtualHost.listen.*.port | Port to listen on
|
| options/nixos/services.postfix.settings.master.<name>.chroot | Whether the service is chrooted to have only access to the
services.postfix.queueDir and the closure of
store paths specified by the program option.
|
| options/nixos/services.slskd.nginx | This option customizes the nginx virtual host set up for slskd.
|
| options/nixos/services.tor.settings.VirtualAddrNetworkIPv4 | See torrc manual.
|
| options/nixos/services.thanos.sidecar.tracing.config-file | Path to YAML file that contains tracing configuration
|
| options/nixos/services.prometheus.scrapeConfigs.*.marathon_sd_configs.*.oauth2.scopes | Scopes for the token request.
|
| options/nixos/services.maddy.openFirewall | Open the configured incoming and outgoing mail server ports.
|
| options/nixos/services.smokeping.extraConfig | Any additional customization not already included.
|
| options/nixos/services.monica.database.port | Database host port.
|
| options/nixos/services.molly-brown.port | TCP port for molly-brown to bind to.
|
| options/nixos/services.mainsail.nginx.locations.<name>.return | Adds a return directive, for e.g. redirections.
|
| options/nixos/services.prometheus.exporters.blackbox.enableConfigCheck | Whether to run a correctness check for the configuration file
|
| options/nixos/services.pretalx.group | Group under which pretalx should run.
|
| options/nixos/services.prometheus.exporters.ecoflow.debug | Enable debug log messages
|
| options/nixos/services.prometheus.exporters.json.group | Group under which the json exporter shall be run.
|
| options/nixos/services.prometheus.exporters.chrony.openFirewall | Open port in firewall for incoming connections.
|
| options/nixos/services.scion.scion-ip-gateway.enable | Whether to enable the scion-ip-gateway service.
|
| options/nixos/services.thanos.compact.log.format | Log format to use.
|
| options/nixos/services.prometheus.exporters.buildkite-agent.interval | How often to update metrics.
|
| options/nixos/services.shairport-sync.openFirewall | Whether to automatically open ports in the firewall.
|
| options/nixos/services.redis.servers.<name>.slaveOf.port | port of the Redis master
|
| options/nixos/services.prometheus.remoteRead.*.tls_config | Configures the remote read request's TLS settings.
|
| options/nixos/services.prometheus.exporters.dmarc.extraFlags | Extra commandline options to pass to the dmarc exporter.
|
| options/nixos/services.sabnzbd.settings.servers.<name>.displayname | Human-friendly description of the server
|
| options/nixos/services.pyload.group | Group under which pyLoad runs, and which owns the download directory.
|
| options/nixos/services.prometheus.exporters.process.settings.process_names | All settings expressed as an Nix attrset
|
| options/nixos/services.strongswan-swanctl.swanctl.connections.<name>.children.<name>.mark_out | Netfilter mark and mask for output traffic
|
| options/nixos/services.prometheus.exporters.sql.configuration.jobs.<name>.queries.<name>.help | A human-readable description of this metric.
|
| options/nixos/services.minio.browser | Enable or disable access to web UI.
|
| options/nixos/services.mainsail.nginx.http3 | Whether to enable the HTTP/3 protocol
|
| options/nixos/services.opencloud.user | The user to run OpenCloud as
|
| options/nixos/services.strongswan-swanctl.swanctl.connections.<name>.proposals | A proposal is a set of algorithms
|
| options/nixos/services.peering-manager.enableScheduledTasks | Set up scheduled tasks
|
| options/nixos/services.maddy.package | The maddy package to use.
|
| options/nixos/services.logcheck.extraRulesDirs | Directories with extra rules.
|
| options/nixos/services.nextcloud.enable | Whether to enable nextcloud.
|
| options/nixos/services.pretix.settings.mail.from | E-Mail address used in the FROM header of outgoing mails.
|
| options/nixos/services.snapraid.extraConfig | Extra config options for SnapRAID.
|
| options/nixos/services.soju.package | The soju package to use.
|
| options/nixos/services.prometheus.scrapeConfigs.*.digitalocean_sd_configs.*.oauth2.endpoint_params | Optional parameters to append to the token URL.
|
| options/nixos/services.salt.master.enable | Whether to enable Salt configuration management system master service.
|
| options/nixos/services.prometheus.scrapeConfigs.*.scaleway_sd_configs.*.refresh_interval | Refresh interval to re-read the managed targets list
|
| options/nixos/services.outline.oidcAuthentication.clientId | Authentication client identifier.
|
| options/nixos/services.mediatomb.enable | Whether to enable the Gerbera/Mediatomb DLNA server.
|
| options/nixos/services.nexus.home | Home directory of the Nexus3 instance.
|
| options/nixos/services.opensearch.settings."network.host" | Which port this service should listen on.
|
| options/nixos/services.syncplay.permanentRoomsFile | File with list of rooms that will be listed even if the room is empty,
newline delimited
|
| options/nixos/services.strongswan-swanctl.swanctl.connections.<name>.local | Section for a local authentication round
|
| options/nixos/services.prometheus.exporters.buildkite-agent.firewallFilter | Specify a filter for iptables to use when
services.prometheus.exporters.buildkite-agent.openFirewall
is true
|
| options/nixos/services.prometheus.exporters.pve.extraFlags | Extra commandline options to pass to the pve exporter.
|
| options/nixos/services.memos.enable | Whether to enable Memos note-taking.
|
| options/nixos/services.rosenpass.enable | Whether to enable Rosenpass.
|
| options/nixos/services.scanservjs.settings | Config to set in config.local.js's afterConfig.
|
| options/nixos/services.orangefs.client.fileSystems.*.options | Mount options
|
| options/nixos/services.mackerel-agent.autoRetirement | Whether to enable retiring the host upon OS shutdown
.
|
| options/nixos/services.sabnzbd.group | Group to run the service as
|
| options/nixos/services.snapraid.enable | Whether to enable SnapRAID.
|
| options/nixos/services.rustdesk-server.package | The rustdesk-server package to use.
|
| options/nixos/services.renovate.settings | Renovate's global configuration
|
| options/nixos/services.ntp.extraConfig | Additional text appended to ntp.conf.
|
| options/nixos/services.pgadmin.port | Port for pgadmin4 to run on
|
| options/nixos/services.mullvad-vpn.enableEarlyBootBlocking | This option activates an additional oneshot systemd service to ensure that the mullvad daemon
will start and block traffic before any network configuration will be applied
|
| options/nixos/services.nntp-proxy.upstreamPort | Upstream server port
|
| options/nixos/services.spiped.config.<name>.disableKeepalives | Disable transport layer keep-alives.
|
| options/nixos/services.tsidp.package | The tsidp package to use.
|
| options/nixos/services.public-inbox.imap.key | Path to TLS key to use for connections to public-inbox-imapd(1).
|
| options/nixos/services.openssh.settings.AcceptEnv | Specifies what environment variables sent by the client will be copied into the session's
environment
|
| options/nixos/services.maubot.pythonPackages | List of additional Python packages to make available for maubot.
|
| options/nixos/services.netbox.extraConfig | Additional lines of configuration appended to the configuration.py
|
| options/nixos/services.tarsnap.archives.<name>.excludes | Exclude files and directories matching these patterns.
|
| options/nixos/services.prometheus.scrapeConfigs.*.nerve_sd_configs.*.paths | Paths can point to a single service, or the root of a tree of services.
|
| options/nixos/services.prometheus.exporters.deluge.delugeHost | Hostname where deluge server is running.
|
| options/nixos/services.roundcube.database.passwordFile | Password file for the postgresql connection
|
| options/nixos/services.nixseparatedebuginfod2.substituters | nix substituter to fetch debuginfo from
|
| options/nixos/services.prometheus.exporters.idrac.port | Port to listen on.
|
| options/nixos/services.matrix-appservice-discord.package | The matrix-appservice-discord package to use.
|
| options/nixos/services.ombi.openFirewall | Open ports in the firewall for the Ombi web interface.
|
| options/nixos/services.tsidp.settings.debugAllRequests | For development
|
| options/nixos/services.nextcloud.caching.apcu | Whether to load the APCu module into PHP.
|
| options/nixos/services.nextcloud.notify_push.dbpassFile | The full path to a file that contains the database password.
|
| options/nixos/services.matrix-continuwuity.settings.global.port | The port(s) continuwuity will be running on
|
| options/nixos/services.prometheus.scrapeConfigs.*.hetzner_sd_configs.*.basic_auth.password_file | HTTP password file
|
| options/nixos/services.prosody.httpFileShare.http_external_url | External URL in case Prosody sits behind a reverse proxy.
|
| options/nixos/services.searx.settingsFile | The path of the Searx server settings.yml file
|
| options/nixos/services.synergy.client.serverAddress | The server address is of the form: [hostname][:port]
|
| options/nixos/services.prometheus.remoteWrite.*.url | ServerName extension to indicate the name of the server.
http://tools.ietf.org/html/rfc4366#section-3.1
|
| options/nixos/services.sabnzbd.settings.servers.<name>.ssl_verify | Level of TLS verification
|
| options/nixos/services.system76-scheduler.settings.processScheduler.pipewireBoost.profile.matchers | Process matchers.
|
| options/nixos/services.nexus.user | User which runs Nexus3.
|
| options/nixos/services.mpd.startWhenNeeded | If set, mpd is socket-activated; that
is, instead of having it permanently running as a daemon,
systemd will start it on the first incoming connection.
|