| options/nixos/services.pixelfed.user | User account under which pixelfed runs.
If left as the default value this user will automatically be created
on system activation, otherwise you are responsible for
ensuring the user exists before the pixelfed application starts.
|
| options/nixos/services.nextcloud.webfinger | Enable this option if you plan on using the webfinger plugin
|
| options/nixos/services.prometheus.exporters.smartctl.maxInterval | Interval that limits how often a disk can be queried.
|
| options/nixos/services.tahoe.nodes.<name>.sftpd.accounts.url | URL of the accounts server.
|
| options/nixos/services.openssh.openFirewall | Whether to automatically open the specified ports in the firewall.
|
| options/nixos/services.prometheus.exporters.klipper.enable | Whether to enable the prometheus klipper exporter.
|
| options/nixos/services.prometheus.exporters.ipmi.enable | Whether to enable the prometheus ipmi exporter.
|
| options/nixos/services.prosody.checkConfig | Check the configuration file with prosodyctl check config
|
| options/nixos/services.prosody.disco_items | List of discoverable items you want to advertise.
|
| options/nixos/services.minio.secretKey | Specify the Secret key of 8 to 40 characters in length that clients use to access the server
|
| options/nixos/services.mjpg-streamer.inputPlugin | Input plugin
|
| options/nixos/services.prometheus.scrapeConfigs.*.kubernetes_sd_configs.*.tls_config.server_name | ServerName extension to indicate the name of the server.
http://tools.ietf.org/html/rfc4366#section-3.1
|
| options/nixos/services.nsd.zones.<name>.dnssecPolicy.coverage | The length of time to ensure that keys will be correct; no action will be taken to create new keys to be activated after this time.
|
| options/nixos/services.openafsClient.inumcalc | Inode calculation method. compat is
computationally less expensive, but md5 greatly
reduces the likelihood of inode collisions in larger scenarios
involving multiple cells mounted into one AFS space.
|
| options/nixos/services.snipe-it.enable | Whether to enable snipe-it, a free open source IT asset/license management system.
|
| options/nixos/services.stargazer.certOrg | The name of the organization responsible for the X.509
certificate's /O name.
|
| options/nixos/services.strongswan-swanctl.swanctl.connections.<name>.remote.<name>.id | IKE identity to expect for authentication round
|
| options/nixos/services.syncthing.settings.options | The options element contains all other global configuration options
|
| options/nixos/services.prometheus.exporters.exportarr-prowlarr.openFirewall | Open port in firewall for incoming connections.
|
| options/nixos/services.rumno.extraArgs | Extra command-line arguments to pass to the rumno daemon.
|
| options/nixos/services.prometheus.exporters.chrony.openFirewall | Open port in firewall for incoming connections.
|
| options/nixos/services.pdfding.consume.schedule | The cron schedule for the consume task to trigger
|
| options/nixos/services.prometheus.exporters.chrony.firewallRules | Specify rules for nftables to add to the input chain
when services.prometheus.exporters.chrony.openFirewall is true.
|
| options/nixos/services.nginx.virtualHosts.<name>.extraConfig | These lines go to the end of the vhost verbatim.
|
| options/nixos/services.thanos.sidecar.grpc-server-tls-key | TLS Key for the gRPC server, leave blank to disable TLS
|
| options/nixos/services.pretalx.enable | Whether to enable pretalx.
|
| options/nixos/services.nginx.virtualHosts.<name>.reuseport | Create an individual listening socket
|
| options/nixos/services.postfix.extraAliases | Additional entries to put verbatim into aliases file, cf. man-page aliases(8).
|
| options/nixos/services.tigerbeetle.cacheGridSize | The grid cache size
|
| options/nixos/services.syncthing.settings.folders.<name>.label | The label of the folder.
|
| options/nixos/services.taler.merchant.debug | Whether to enable debug logging.
|
| options/nixos/services.netdata.enableAnalyticsReporting | Enable reporting of anonymous usage statistics to Netdata Inc. via either
Google Analytics (in versions prior to 1.29.4), or Netdata Inc.'s
self-hosted PostHog (in versions 1.29.4 and later)
|
| options/nixos/services.physlock.lockOn.hibernate | Whether to lock screen with physlock just before hibernate.
|
| options/nixos/services.opengfw.rules.*.log | Whether to enable logging for the rule.
|
| options/nixos/services.prometheus.scrapeConfigs.*.digitalocean_sd_configs.*.authorization.type | Sets the authentication type
|
| options/nixos/services.opensearch.user | The user OpenSearch runs as
|
| options/nixos/services.prometheus.exporters.json.openFirewall | Open port in firewall for incoming connections.
|
| options/nixos/services.prometheus.exporters.varnish.port | Port to listen on.
|
| options/nixos/services.unclutter.excluded | Names of windows where unclutter should not apply
|
| options/nixos/services.rsync.jobs.<name>.user | The name of an existing user account under which the rsync process should run.
|
| options/nixos/services.prometheus.exporters.systemd.user | User name under which the systemd exporter shall be run.
|
| options/nixos/services.readarr.settings.update.automatically | Automatically download and install updates.
|
| options/nixos/services.prometheus.scrapeConfigs.*.marathon_sd_configs.*.oauth2.token_url | The URL to fetch the token from.
|
| options/nixos/services.sogo.vhostName | Name of the nginx vhost
|
| options/nixos/services.prometheus.exporters.exportarr-radarr.user | User name under which the exportarr-radarr exporter shall be run.
|
| options/nixos/services.monero.rpc.port | Port the RPC server will bind to.
|
| options/nixos/services.strongswan-swanctl.swanctl.connections.<name>.local.<name>.aaa_id | Server side EAP-Identity to expect in the EAP method
|
| options/nixos/services.photoprism.databasePasswordFile | Database password file.
|
| options/nixos/services.misskey.settings.redisForTimelines.host | The Redis host.
|
| options/nixos/services.prometheus.exporters.chrony.port | Port to listen on.
|
| options/nixos/services.radicle.httpd.nginx.acmeRoot | Directory for the ACME challenge, which is public
|
| options/nixos/services.movim.h2o | With this option, you can customize an H2O virtual host which already
has sensible defaults for Movim
|
| options/nixos/services.syncthing.key | Path to the key.pem file, which will be copied into Syncthing's
configDir.
|
| options/nixos/services.sks.extraDbConfig | Set contents of the files "KDB/DB_CONFIG" and "PTree/DB_CONFIG" within
the ${dataDir} directory
|
| options/nixos/services.redis.servers.<name>.port | The TCP port to accept connections
|
| options/nixos/services.quake3-server.port | UDP Port the server should listen on.
|
| options/nixos/services.printing.cups-pdf.instances.<name>.installPrinter | Whether to enable a CUPS printer queue for this instance
|
| options/nixos/services.slskd.nginx.listen | Listen addresses and ports for this virtual host
|
| options/nixos/services.thanos.query-frontend.tracing.config-file | Path to YAML file that contains tracing configuration
|
| options/nixos/services.mastodon.database.host | Database host address or unix socket.
|
| options/nixos/services.ncps.netrcFile | The path to netrc file for upstream authentication
|
| options/nixos/services.prometheus.scrapeConfigs.*.gce_sd_configs | List of Google Compute Engine service discovery configurations
|
| options/nixos/services.nginx.tailscaleAuth.group | Alias of services.tailscaleAuth.group.
|
| options/nixos/services.pomerium.secretsFile | Path to file containing secrets for Pomerium, in systemd
EnvironmentFile format
|
| options/nixos/services.rimgo.package | The rimgo package to use.
|
| options/nixos/services.prometheus.exporters.dnssec.extraFlags | Extra commandline options when launching Prometheus.
|
| options/nixos/services.tlsrpt.reportd.settings.contact_info | Contact information embedded into the reports.
|
| options/nixos/services.movim.domain | Fully-qualified domain name (FQDN) for the Movim instance.
|
| options/nixos/services.spamassassin.enable | Whether to enable the SpamAssassin daemon.
|
| options/nixos/services.maddy.ensureCredentials | List of user accounts which get automatically created if they don't
exist yet
|
| options/nixos/services.nullidentdmod.enable | Whether to enable the nullidentdmod identd daemon.
|
| options/nixos/services.onlyoffice.securityNonceFile | File holding nginx configuration that sets the nonce used to create secret links
|
| options/nixos/services.thanos.query.store.sd-files | Path to files that contain addresses of store API servers
|
| options/nixos/services.tor.settings.MaxAdvertisedBandwidth | See torrc manual.
|
| options/nixos/services.postgresql.settings.port | The port on which PostgreSQL listens.
|
| options/nixos/services.snipe-it.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| options/nixos/services.mirakurun.channelSettings | Options which are added to channels.yml
|
| options/nixos/services.monica.mail.driver | Mail driver to use.
|
| options/nixos/services.thanos.query.http-address | Listen host:port for HTTP endpoints
|
| options/nixos/services.monero.extraConfig | Extra lines to be added verbatim to monerod configuration.
|
| options/nixos/services.rauc.dataDir | The state directory for RAUC.
|
| options/nixos/services.prometheus.exporters.dnssec.enable | Whether to enable the prometheus dnssec exporter.
|
| options/nixos/services.speedify.enable | This option enables Speedify daemon
|
| options/nixos/services.prometheus.scrapeConfigs.*.sample_limit | Per-scrape limit on number of scraped samples that will be accepted
|
| options/nixos/services.limesurvey.nginx.virtualHost.listen.*.extraParameters | Extra parameters of this listen directive.
|
| options/nixos/services.prometheus.exporters.sql.configuration.jobs.<name>.queries | SQL queries to run.
|
| options/nixos/services.prometheus.exporters.statsd.user | User name under which the statsd exporter shall be run.
|
| options/nixos/services.metabase.ssl.port | Listen port over SSL (https) for Metabase.
|
| options/nixos/services.ttyd.port | Port to listen on (use 0 for random port)
|
| options/nixos/services.multipath.defaults | This section defines default values for attributes which are used
whenever no values are given in the appropriate device or multipath
sections.
|
| options/nixos/services.navidrome.settings.EnableInsightsCollector | Enable anonymous usage data collection, see https://www.navidrome.org/docs/getting-started/insights/ for details.
|
| options/nixos/services.pleroma.configs | Pleroma public configuration
|
| options/nixos/services.postfix.settings.master.<name>.private | Whether the service's sockets and storage directory is restricted to
be only available via the mail system
|
| options/nixos/services.prometheus.exporters.smokeping.group | Group under which the smokeping exporter shall be run.
|
| options/nixos/services.nginx.config | Verbatim nginx.conf configuration
|
| options/nixos/services.prometheus.exporters.unpoller.log.debug | Whether to enable debug logging including line numbers, high resolution timestamps, per-device logs.
|
| options/nixos/services.slskd.settings.global.upload.slots | Limit of the number of concurrent upload slots.
|
| options/nixos/services.prometheus.scrapeConfigs.*.puppetdb_sd_configs.*.tls_config.key_file | Key file for client cert authentication to the server.
|
| options/nixos/services.prometheus.exporters.flow.asn | The ASN being monitored.
|
| options/nixos/services.prometheus.stateDir | Directory below /var/lib to store Prometheus metrics data
|