Host to bind OctoPrint to.

User name under which the flow exporter shall be run.

Whether to buffer requests against fastcgi requests

Generates the tuwunel.toml configuration file

Whether to share selected, anonymous telemetry with n8n

Whether to perform certificate verification for https.

Name of the nginx or caddy virtualhost to use and setup

Address to listen on.

Clients' authorizations for a v3 onion service, as a list of files containing each one private key, in the format:

descriptor:x25519:<base32-private-key>

See torrc manual.

Address to listen on.

Path to your SSL CA certificate.

Use Unix socket

The jdk package to use

Whether to enable sysprof profiling daemon.

Web interface address.

Whether to enable Tuliprox IPTV playlist processor & proxy.

List of arguments appended to ./tp-auto-kbbl --device [device] [arguments]

Specify a configuration file that Mimir should use.

TLS CA Certificates to use to verify gRPC servers

Path to server SSL certificate key.

A Setup Key file path used for automated login of the machine.

The hostname or IP address for Send to bind to.

Whether to enable automatic postfix integration.

Maximum number of concurrent clients allowed.

LDAP host to connect against.

Whether to enable telegraf server.

User account under which OpenTSDB runs.

Key file for client cert authentication to the server.

IP address that Metabase should listen on.

Renovate's global configuration

Seed settings for users and groups

This option provides a simple way to serve static directories.

The port address of the smtp server.

Group under which the mikrotik exporter shall be run.

Alias directory for requests.

Verbose logs.

Whether to create the mount points in the exports file at startup time.

Additional configuration for the PipeWire client library, used by most applications

Specify a filter for iptables to use when services.prometheus.exporters.exportarr-prowlarr.openFirewall is true

User name under which the mailman3 exporter shall be run.

Allow users to set vCards

Enable MP4 video playback.

These configuration lines will be appended to the generated lighttpd config file

Extra commandline options to pass to the chrony exporter.

Database options.

Path to the file that contains the server salt

Specify a filter for iptables to use when services.prometheus.exporters.libvirt.openFirewall is true

Additional configuration for the WirePlumber daemon when run in single-instance mode (the default in nixpkgs and currently the only supported way to run WirePlumber configured via extraConfig)

Path to the service's config file

Specify a filter for iptables to use when services.prometheus.exporters.domain.openFirewall is true

These lines go to the end of the vhost verbatim.

Path to custom HTML templates.

Whether to enable udisks2, a DBus service that allows applications to query and manipulate storage devices.

Data directory relative to /var/lib in which to cache blocks and process downsamplings.

Open port in firewall for incoming connections.

output directory; ${HOME} will be expanded to the user's home directory, ${USER} will be expanded to the user name.

Optional Authorization header configuration.

Declarative location config

Specify rules for nftables to add to the input chain when services.prometheus.exporters.knot.openFirewall is true.

Required password to join server, if specified.

The ga package to use.

The password corresponding to mysqlUser

When set, enables the feature of serving . on top of /nix/store/-

Whether to enable Self-hosted AI coding assistant using large language models.

Path to a file containing the secret key of the local Rosenpass peer

Extra configuration for Neo4j Community server

Automatically login user on remote or other kind of externally supplied authentication, otherwise redirect to login form as normal

Force certificate authentication for server-to-server connections? This provides ideal security, but requires servers you communicate with to support encryption AND present valid, trusted certificates

The RPC port to listen to.

When enabled, instructs udisks2 to mount removable drives under /media/ directory, instead of the default, ACL-controlled /run/media/$USER/

Specify rules for nftables to add to the input chain when services.prometheus.exporters.nginx.openFirewall is true.

Specify a filter for iptables to use when services.prometheus.exporters.postfix.openFirewall is true

Create an individual listening socket

Upload speed limit. 0 is unlimited (default).

Automatically restart master service on config change

The mbpfan package to use.

Port on which the API endpoint will listen.

The address to listen on.

Group account where Apache NiFi runs.

Add settings here to override NixOS module generated settings

Name of the model to download and use for speech synthesis

Which port the LiteLLM server listens to.

Max request size in bytes

HTTP port to bind on.

The mosquitto package to use.

Enables settings required for Tailscale's routing features like subnet routers and exit nodes

Whether to enable seatd.

MQTT topic used for Zwavejs2Mqtt messages.

Key used for encryption of passwords for password-protected feeds in the database

Environment variables for the stirling-pdf app

Whether to enable recyclarr service.

Path to server SSL certificate key.

The quantity of filter workers to run.

Configure whether HTTP requests follow HTTP 3xx redirects

Create and use a local Meilisearch instance

Alert admins of registrations

Script to run before taking snapshot.

The nipap-www package to use.

Threshold configuration for NVMe monitoring

Path to traefik's dynamic configuration to use. (Using that option has precedence over dynamicConfigOptions)