| options/nixos/services.peering-manager.environmentFile | Environment file as defined in systemd.exec(5)
|
| options/nixos/services.prometheus.exporters.idrac.listenAddress | Address to listen on.
|
| options/nixos/services.opensmtpd.serverConfiguration | The contents of the smtpd.conf configuration file
|
| options/nixos/services.sabnzbd.settings.misc.email_server | SMTP server for email alerts (server:host)
|
| options/nixos/services.nitter.config.proxy | URL to a HTTP/HTTPS proxy.
|
| options/nixos/services.public-inbox.spamAssassinRules | SpamAssassin configuration specific to public-inbox.
|
| options/nixos/services.strongswan-swanctl.swanctl.connections.<name>.children.<name>.mark_out | Netfilter mark and mask for output traffic
|
| options/nixos/services.pdns-recursor.exportHosts | Whether to export names and IP addresses defined in /etc/hosts.
|
| options/nixos/services.limesurvey.httpd.virtualHost.locations.<name>.proxyPass | Sets up a simple reverse proxy as described by https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html#simple.
|
| options/nixos/services.prometheus.exporters.mailman3.port | Port to listen on.
|
| options/nixos/services.limesurvey.httpd.virtualHost.forceSSL | Whether to add a separate nginx server block that permanently redirects (301)
all plain HTTP traffic to HTTPS
|
| options/nixos/services.udev.enable | Whether to enable udev, a device manager for the Linux kernel.
|
| options/nixos/services.pleroma.user | User account under which pleroma runs.
|
| options/nixos/services.pgbackrest.commands.verify | Options for the 'verify' command
|
| options/nixos/services.pixelfed.dataDir | State directory of the pixelfed user which holds
the application's state and data.
|
| options/nixos/services.limesurvey.httpd.virtualHost.robotsEntries | Specification of pages to be ignored by web crawlers
|
| options/nixos/services.meshcentral.package | The meshcentral package to use.
|
| options/nixos/services.tor.enable | Whether to enable Tor daemon
|
| options/nixos/services.nzbget.package | The nzbget package to use.
|
| options/nixos/services.nagios.mainConfigFile | If non-null, overrides the main configuration file of Nagios.
|
| options/nixos/services.monero.exclusiveNodes | List of peer IP addresses to connect to only
|
| options/nixos/services.opensearch.extraCmdLineOptions | Extra command line options for the OpenSearch launcher.
|
| options/nixos/services.nginx.virtualHosts.<name>.acmeRoot | Directory for the ACME challenge, which is public
|
| options/nixos/services.nsd.bind8Stats | Whether to enable BIND8 like statistics.
|
| options/nixos/services.udp-over-tcp.udp2tcp.<name>.recvTimeout | An application timeout on receiving data from the TCP socket.
|
| options/nixos/services.syncthing.settings.folders.<name>.versioning | How to keep changed/deleted files with Syncthing
|
| options/nixos/services.tor.controlSocket.enable | Whether to enable control socket,
created in /run/tor/control.
|
| options/nixos/services.misskey.reverseProxy.webserver.nginx.locations.<name>.fastcgiParams | FastCGI parameters to override
|
| options/nixos/services.prometheus.scrapeConfigs.*.dockerswarm_sd_configs.*.basic_auth | Optional HTTP basic authentication information.
|
| options/nixos/services.prometheus.exporters.statsd.port | Port to listen on.
|
| options/nixos/services.opendkim.enable | Whether to enable OpenDKIM sender authentication system.
|
| options/nixos/services.prometheus.scrapeConfigs.*.dns_sd_configs | List of DNS service discovery configurations.
|
| options/nixos/services.syncthing.settings.folders.<name>.ignorePatterns | Syncthing can be configured to ignore certain files in a folder using ignore patterns
|
| options/nixos/services.pyload.group | Group under which pyLoad runs, and which owns the download directory.
|
| options/nixos/services.neard.settings.General.ConstantPoll | Enable constant polling
|
| options/nixos/services.tahoe.nodes.<name>.package | The tahoelafs package to use.
|
| options/nixos/services.prometheus.scrapeConfigs.*.serverset_sd_configs | List of Zookeeper Serverset service discovery configurations.
|
| options/nixos/services.tor.settings.ServerDNSSearchDomains | See torrc manual.
|
| options/nixos/services.prometheus.exporters.nut.nutServer | Hostname or address of the NUT server
|
| options/nixos/services.murmur.port | Ports to bind to (UDP and TCP).
|
| options/nixos/services.nginx.upstreams | Defines a group of servers to use as proxy target.
|
| options/nixos/services.mopidy.settings | The configuration that Mopidy should use
|
| options/nixos/services.ntopng.extraConfig | Configuration lines that will be appended to the generated ntopng
configuration file
|
| options/nixos/services.prometheus.exporters.mongodb.collector | Enabled collectors
|
| options/nixos/services.prometheus.exporters.ping.openFirewall | Open port in firewall for incoming connections.
|
| options/nixos/services.lk-jwt-service.livekitUrl | The public websocket URL for livekit
|
| options/nixos/services.soju.httpOrigins | List of allowed HTTP origins for WebSocket listeners
|
| options/nixos/services.parsedmarc.settings.smtp.user | The SMTP server username.
|
| options/nixos/services.prometheus.exporters.nginx.enable | Whether to enable the prometheus nginx exporter.
|
| options/nixos/services.litellm.openFirewall | Whether to open the firewall for LiteLLM
|
| options/nixos/services.public-inbox.settings.coderepo | code repositories
|
| options/nixos/services.prometheus.scrapeConfigs.*.marathon_sd_configs.*.auth_token | Optional authentication information for token-based authentication:
https://docs.mesosphere.com/1.11/security/ent/iam-api/#passing-an-authentication-token
It is mutually exclusive with auth_token_file and other authentication mechanisms.
|
| options/nixos/services.radicle.httpd.nginx.basicAuth | Basic Auth protection for a vhost
|
| options/nixos/services.redsocks.redsocks.*.password | Password to send to proxy
|
| options/nixos/services.tor.settings.TransProxyType | See torrc manual.
|
| options/nixos/services.opensmtpd.procPackages | Packages to search for filters, tables, queues, and schedulers
|
| options/nixos/services.pixelfed.nginx.sslCertificateKey | Path to server SSL certificate key.
|
| options/nixos/services.tandoor-recipes.enable | Enable Tandoor Recipes
|
| options/nixos/services.prometheus.exporters.modemmanager.enable | Whether to enable the prometheus modemmanager exporter.
|
| options/nixos/services.resilio.checkForUpdates | Determines whether to check for updates and alert the user
about them in the UI.
|
| options/nixos/services.spark.worker.extraEnvironment | Extra environment variables to pass to spark worker.
|
| options/nixos/services.pulseaudio.zeroconf.publish.enable | Whether to enable publishing the pulseaudio sink in the local network.
|
| options/nixos/services.prometheus.exporters.jitsi.openFirewall | Open port in firewall for incoming connections.
|
| options/nixos/services.postfix-tlspol.settings | The postfix-tlspol configuration file as a Nix attribute set
|
| options/nixos/services.matrix-tuwunel.settings.global.port | The port(s) tuwunel will be running on
|
| options/nixos/services.prometheus.scrapeConfigs.*.consul_sd_configs.*.tls_config | Configures the Consul request's TLS settings.
|
| options/nixos/services.pdfding.consume.enable | Bulk PDF import from consume directory
|
| options/nixos/services.rustdesk-server.signal.relayHosts | The relay server IP addresses or DNS names of the RustDesk relay.
|
| options/nixos/services.samba.settings.global."invalid users" | List of users who are denied to login via Samba.
|
| options/nixos/services.tor.settings.DormantTimeoutDisabledByIdleStreams | See torrc manual.
|
| options/nixos/services.mosquitto.listeners.*.omitPasswordAuth | Omits password checking, allowing anyone to log in with any user name unless
other mandatory authentication methods (eg TLS client certificates) are configured.
|
| options/nixos/services.limesurvey.nginx.virtualHost.useACMEHost | A host of an existing Let's Encrypt certificate to use
|
| options/nixos/services.prometheus.exporters.borgmatic.extraFlags | Extra commandline options to pass to the borgmatic exporter.
|
| options/nixos/services.mqtt2influxdb.points.*.fields.value | Value to be picked up
|
| options/nixos/services.prometheus.exporters.dmarc.debug | Whether to declare enable --debug.
|
| options/nixos/services.mediatomb.customCfg | Allow the service to create and use its own config file inside the dataDir as
configured by services.mediatomb.dataDir
|
| options/nixos/services.prometheus.package | The prometheus package to use.
|
| options/nixos/services.mediagoblin.settings.mediagoblin.plugins | Plugins to enable
|
| options/nixos/services.syncoid.service | Systemd configuration common to all syncoid services.
|
| options/nixos/services.strongswan-swanctl.swanctl.connections.<name>.children.<name>.set_mark_out | Netfilter mark applied to packets after the outbound IPsec SA processed
them
|
| options/nixos/services.networkd-dispatcher.rules.<name>.script | Shell commands executed on specified operational states.
|
| options/nixos/services.molly-brown.settings | molly-brown configuration
|
| options/nixos/services.prometheus.exporters.bitcoin.firewallRules | Specify rules for nftables to add to the input chain
when services.prometheus.exporters.bitcoin.openFirewall is true.
|
| options/nixos/services.slurm.enableSrunX11 | If enabled srun will accept the option "--x11" to allow for X11 forwarding
from within an interactive session or a batch job
|
| options/nixos/services.searx.settingsFile | The path of the Searx server settings.yml file
|
| options/nixos/services.snipe-it.nginx.basicAuth | Basic Auth protection for a vhost
|
| options/nixos/services.nginx.virtualHosts.<name>.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| options/nixos/services.rtorrent.configText | The content of rtorrent.rc
|
| options/nixos/services.mopidy.enable | Whether to enable Mopidy, a music player daemon.
|
| options/nixos/services.mainsail.nginx.locations.<name>.recommendedUwsgiSettings | Enable recommended uwsgi settings.
|
| options/nixos/services.szurubooru.server.package | The server package to use.
|
| options/nixos/services.syncoid.group | The group for the service.
|
| options/nixos/services.prometheus.remoteWrite.*.queue_config.max_backoff | Maximum retry delay.
|
| options/nixos/services.octoprint.openFirewall | Open ports in the firewall for OctoPrint.
|
| options/nixos/services.thermald.package | The thermald package to use.
|
| options/nixos/services.prometheus.exporters.keylight.listenAddress | Address to listen on.
|
| options/nixos/services.typesense.settings.server.api-address | Address to which Typesense API service binds.
|
| options/nixos/services.rspamd.workers.<name>.name | Name of the worker
|
| options/nixos/services.mympd.settings.http_port | The HTTP port where mympd's web interface will be available
|
| options/nixos/services.nginx.experimentalZstdSettings | Enable alpha quality zstd module with recommended settings
|