| options/home-manager/services.podman.machines.<name>.diskSize | Disk size in GB for the machine
|
| options/home-manager/programs.neomutt.sidebar.shortPath | By default sidebar shows the full path of the mailbox, but
with this enabled only the relative name is shown.
|
| options/nixos/systemd.user.timers.<name>.enable | If set to false, this unit will be a symlink to
/dev/null
|
| options/nixos/systemd.user.slices.<name>.enable | If set to false, this unit will be a symlink to
/dev/null
|
| options/nixos/users.ldap.bind.policy | Specifies the policy to use for reconnecting to an unavailable
LDAP server
|
| options/darwin/system.defaults.trackpad.TrackpadFourFingerVertSwipeGesture | 0 to disable four finger vertical swipe gestures, 2 to enable (down for Mission Control, up for App Exposé)
|
| options/nixos/_module.args | Additional arguments passed to each module in addition to ones
like lib, config,
and pkgs, modulesPath
|
| options/home-manager/_module.args | Additional arguments passed to each module in addition to ones
like lib, config,
and pkgs, modulesPath
|
| options/nixos/system.stateVersion | This option defines the first version of NixOS you have installed on this particular machine,
and is used to maintain compatibility with application data (e.g. databases) created on older NixOS versions
|
| options/darwin/_module.args | Additional arguments passed to each module in addition to ones
like lib, config,
and pkgs, modulesPath
|
| options/nixos/services.kapacitor.alerta.origin | Default origin of alert
|
| options/nixos/fonts.fontconfig.enable | If enabled, a Fontconfig configuration file will be built
pointing to a set of default fonts
|
| options/nixos/hardware.deviceTree.kernelPackage | Kernel package where device tree include directory is from
|
| options/nixos/security.auditd.plugins.<name>.type | This tells the dispatcher how the plugin wants to be run
|
| options/nixos/services.couchdb.databaseDir | Specifies location of CouchDB database files (*.couch named)
|
| options/nixos/services.neo4j.https.sslPolicy | Neo4j SSL policy for HTTPS traffic
|
| options/nixos/services.redis.servers.<name>.appendOnly | By default data is only periodically persisted to disk, enable this option to use an append-only file for improved persistence.
|
| options/nixos/services.logrotate.configFile | Override the configuration file used by logrotate
|
| options/home-manager/home.file.<name>.recursive | If the file source is a directory, then this option
determines whether the directory should be recursively
linked to the target location
|
| options/nixos/nixpkgs.crossSystem | Systems with a recently generated hardware-configuration.nix
may instead specify only nixpkgs.buildPlatform,
or fall back to removing the nixpkgs.hostPlatform line from the generated config
|
| options/nixos/system.autoUpgrade.rebootWindow | Define a lower and upper time value (in HH:MM format) which
constitute a time window during which reboots are allowed after an upgrade
|
| options/nixos/services.strongswan-swanctl.swanctl.connections.<name>.reauth_time | Time to schedule IKE reauthentication
|
| options/nixos/services.limesurvey.nginx.virtualHost.locations.<name>.fastcgiParams | FastCGI parameters to override
|
| options/nixos/virtualisation.qemu.networkingOptions | Networking-related command-line options that should be passed to qemu
|
| options/nixos/services.sourcehut.paste.group | Group for paste.sr.ht
|
| options/nixos/services.sourcehut.lists.group | Group for lists.sr.ht
|
| options/nixos/services.sourcehut.pages.group | Group for pages.sr.ht
|
| options/nixos/services.httpd.virtualHosts.<name>.addSSL | Whether to enable HTTPS in addition to plain HTTP
|
| options/nixos/services.headscale.group | Group under which headscale runs.
If left as the default value this group will automatically be created
on system activation, otherwise you are responsible for
ensuring the user exists before the headscale service starts.
|
| options/nixos/security.pam.u2f.settings.appid | By default pam-u2f module sets the application
ID to pam://$HOSTNAME
|
| options/nixos/services.davis.nginx.forceSSL | Whether to add a separate nginx server block that redirects (defaults
to 301, configurable with redirectCode) all plain HTTP traffic to
HTTPS
|
| options/nixos/services.anuko-time-tracker.nginx.addSSL | Whether to enable HTTPS in addition to plain HTTP
|
| options/nixos/services.keycloak.database.port | Port of the database to connect to.
|
| options/nixos/services.eternal-terminal.port | The port the server should listen on
|
| options/nixos/services.irkerd.listenAddress | Specifies the bind address on which the irker daemon listens
|
| options/nixos/services.redis.servers.<name>.user | User account under which this instance of redis-server runs.
If left as the default value this user will automatically be
created on system activation, otherwise you are responsible for
ensuring the user exists before the redis service starts.
|
| options/nixos/services.prosody.muc.*.roomDefaultPublic | If set, the MUC rooms will be public by default.
|
| options/nixos/services.locate.interval | Update the locate database at this interval
|
| options/nixos/services.slskd.nginx.forceSSL | Whether to add a separate nginx server block that redirects (defaults
to 301, configurable with redirectCode) all plain HTTP traffic to
HTTPS
|
| options/nixos/services.movim.nginx.forceSSL | Whether to add a separate nginx server block that redirects (defaults
to 301, configurable with redirectCode) all plain HTTP traffic to
HTTPS
|
| options/nixos/services.udp-over-tcp.tcp2udp.<name>.threads | Sets the number of worker threads to use
|
| options/nixos/services.netdata.configDir | Complete netdata config directory except netdata.conf
|
| options/nixos/services.nginx.virtualHosts.<name>.addSSL | Whether to enable HTTPS in addition to plain HTTP
|
| options/home-manager/programs.matplotlib.config | Add terms to the matplotlibrc file to
control the default matplotlib behavior.
|
| options/home-manager/services.jellyfin-mpv-shim.mpvConfig | mpv configuration options to use for jellyfin-mpv-shim
|
| options/home-manager/launchd.agents.<name>.config.InitGroups | This optional key specifies whether initgroups(3) should be called before running the job
|
| options/nixos/nixpkgs.buildPlatform | Specifies the platform on which NixOS should be built
|
| options/darwin/launchd.agents.<name>.serviceConfig.RunAtLoad | This optional key is used to control whether your job is launched once at the time the job is loaded
|
| options/darwin/services.eternal-terminal.port | The port the server should listen on
|
| options/nixos/services.postgresql.ensureUsers.*.ensureClauses.inherit | Grants the user created inherit permissions
|
| options/nixos/services.draupnir.settings | Free-form settings written to Draupnir's configuration file
|
| options/nixos/services.knot-resolver.enable | Whether to enable knot-resolver (version 6) domain name server
|
| options/nixos/services.hologram-server.awsDefaultRole | AWS default role
|
| options/nixos/nix.settings.trusted-public-keys | List of public keys used to sign binary caches
|
| options/nixos/services.kresd.instances | The number of instances to start
|
| options/nixos/security.acme.defaults.extraLegoRenewFlags | Additional flags to pass to lego renew.
|
| options/nixos/services.snipe-it.nginx.forceSSL | Whether to add a separate nginx server block that redirects (defaults
to 301, configurable with redirectCode) all plain HTTP traffic to
HTTPS
|
| options/nixos/services.stalwart.settings | Configuration options for the Stalwart server
|
| options/nixos/services.rss2email.feeds.<name>.to | Email address to which to send feed items
|
| options/nixos/services.nginx.serverNamesHashBucketSize | Sets the bucket size for the server names hash tables
|
| options/home-manager/services.podman.settings.policy | Signature verification policy file
|
| options/home-manager/launchd.agents.<name>.config.OnDemand | This key was used in Mac OS X 10.4 to control whether a job was kept alive or not
|
| options/home-manager/xdg.dataFile.<name>.recursive | If the file source is a directory, then this option
determines whether the directory should be recursively
linked to the target location
|
| options/home-manager/programs.powerline-go.modules | List of module names to load
|
| options/home-manager/services.podman.machines.<name>.memory | Memory in MB to allocate to the machine
|
| options/home-manager/programs.kakoune.config.indentWidth | The width of an indentation in spaces
|
| options/darwin/nix.settings.trusted-public-keys | List of public keys used to sign binary caches
|
| options/nixos/services.kanidm.serverSettings.online_backup.versions | Number of backups to keep
|
| options/nixos/documentation.man.mandoc.settings.output.indent | Number of blank characters at the left margin for normal text,
default of 5 for mdoc(7) and 7 for
man(7)
|
| options/darwin/system.defaults.universalaccess.mouseDriverCursorSize | Set the size of cursor. 1 for normal, 4 for maximum
|
| options/nixos/services.strongswan-swanctl.swanctl.connections.<name>.children.<name>.mark_in | Netfilter mark and mask for input traffic
|
| options/nixos/services.duplicati.dataDir | The directory where Duplicati stores its data files.
If left as the default value this directory will automatically be created
before the Duplicati server starts, otherwise you are responsible for ensuring
the directory exists with appropriate ownership and permissions.
|
| options/nixos/services.bookstack.nginx.addSSL | Whether to enable HTTPS in addition to plain HTTP
|
| options/nixos/services.forgejo.dump.interval | Run a Forgejo dump at this interval
|
| options/nixos/security.pam.u2f.settings.cue | By default pam-u2f module does not inform user
that he needs to use the u2f device, it just waits without a prompt
|
| options/nixos/hardware.graphics.enable | Whether to enable hardware accelerated graphics drivers
|
| options/nixos/nixpkgs.flake.setNixPath | Whether to set NIX_PATH to include nixpkgs=flake:nixpkgs such that <nixpkgs>
lookups receive the version of nixpkgs that the system was built with, in concert with
nixpkgs.flake.setFlakeRegistry
|
| options/nixos/security.acme.certs.<name>.dnsResolver | Set the resolver to use for performing recursive DNS queries
|
| options/nixos/networking.bonds.<name>.miimon | DEPRECATED, use driverOptions
|
| options/nixos/security.acme.defaults.ocspMustStaple | Turns on the OCSP Must-Staple TLS extension
|
| options/nixos/services.selfoss.database.port | The database's port
|
| options/nixos/services.trickster.instance-id | Instance ID for when running multiple processes (default null).
|
| options/nixos/services.nylon.<name>.acceptInterface | Tell nylon which interface to listen for client requests on, default is "lo".
|
| options/nixos/services.openafsClient.daemons | Number of daemons to serve user requests
|
| options/nixos/services.lighthouse.network | The network to connect to
|
| options/home-manager/programs.floorp.profiles.<name>.isDefault | Whether this is a default profile.
|
| options/nixos/services.xserver.excludePackages | Which X11 packages to exclude from the default environment
|
| options/nixos/users.users.<name>.ignoreShellProgramCheck | By default, nixos will check that programs
|
| options/darwin/environment.shells | A list of permissible login shells for user accounts
|
| options/darwin/system.defaults.NSGlobalDomain.NSAutomaticSpellingCorrectionEnabled | Whether to enable automatic spelling correction
|
| options/nixos/<imports = [ pkgs.ghostunnel.services.default ]>.ghostunnel.unsafeTarget | If set, does not limit target to localhost, 127.0.0.1, [::1], or UNIX sockets
|
| options/nixos/services.kanidm.server.settings.online_backup.versions | Number of backups to keep
|
| options/darwin/system.defaults.NSGlobalDomain.NSAutomaticDashSubstitutionEnabled | Whether to enable smart dash substitution
|
| options/nixos/services.postfix.networksStyle | Name of standard way of trusted network specification to use,
leave blank if you specify it explicitly or if you want to use
default (localhost-only).
|
| options/nixos/programs.rust-motd.order | The order of the sections in programs.rust-motd.settings
|
| options/nixos/security.acme.defaults.server | ACME Directory Resource URI
|
| options/nixos/programs.regreet.enable | Enable ReGreet, a clean and customizable greeter for greetd
|
| options/nixos/security.acme.defaults.listenHTTP | Interface and port to listen on to solve HTTP challenges
in the form [INTERFACE]:PORT
|
| options/nixos/services.redis.servers.<name>.group | Group account under which this instance of redis-server runs.
If left as the default value this group will automatically be
created on system activation, otherwise you are responsible for
ensuring the group exists before the redis service starts.
|
| options/nixos/services.thinkfan.enable | Whether to enable thinkfan, a fan control program.
This module targets IBM/Lenovo thinkpads by default, for
other hardware you will have configure it more carefully.
|