HTTP XML API address of an Bind server.

HTTP status used by globalRedirect and forceSSL

An array of string values each providing an address and port on which the HTTP server should listen

YAML file to merge into the schleuder config at runtime

An optional list of tags used to filter nodes for a given service

Whether to enable the GNU Taler merchant.

Optional client secret

The user the nixops-dns daemon should run as

Start the service with the system

Basic Auth protection for a vhost

Additional configuration for MicroBin, see https://microbin.eu/docs/installation-and-configuration/configuration/ for supported values

Makes this vhost the default.

Whether to enable Manticoresearch.

Settings for mailman.cfg

User name under which the nginxlog exporter shall be run.

API URL to use when doing the server listing requests

Specify the mailexporter configuration file to use.

The SMTP server port.

User account under which Pinchflat runs.

Use HTTPS for generated links

The lk-jwt-service package to use.

See torrc manual.

Depending on the local firewall/NAT rules, you might need to force Miredo to use a fixed UDP port and or IPv4 address.

Replacement value against which a regex replace is performed if the regular expression matches

The 128-bit cluster ID used to create the replica data file (if needed)

Path to the private key used for the HTTPS listener

IP addresses of the other nodes.

Whether to enable bazaar integration..

The path to a file containing the API key

Configuration for Netatalk

Configuration of uhub

Directory for the ACME challenge, which is public

Resolves domains of uwsgi targets at runtime and not only at start, you have to set services.nginx.resolver, too.

Environment files that allow passing secret configuration values

Maximum size of items held in the index cache

Whether to operate in tun (IP) or tap (Ethernet) mode.

Extra flags to pass to tailscale set.

Open ports in the firewall for TorrentStream daemon.

Used to select a secure SMTP connection

The path to load the secretKey for signing narinfos

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

The port to listen on for HTTP traffic.

The domain under which the netbird server runs.

Backend to use: egl, glx, xrender or xr_glx_hybrid.

Listen on this port.

Sets the max_sectors_kb device parameter on all path devices and the multipath device to the specified value

Group under which the tailscale exporter shall be run.

Strip N bits from IPv4 addresses if lookupBySubnet is true

Path to the file containing rclone configuration

The softether package to use.

use TCP fast-open

Whether to enable Stargazer Gemini server.

InfluxDB bucket in which to store data.

Templates for datasets.

Whether to support proxying websocket connections with HTTP/1.1.

If set to priorities the multipath configurator will assign path weights as "path prio * rr_min_io".

Configure logs

Only log messages with the given severity or above.

Adds index directive.

Specify a filter for iptables to use when services.prometheus.exporters.ping.openFirewall is true

List of permissions that are granted with this password

This tells pgmanage whether or not to set the listening socket to local addresses only.

The IPv4 address to deploy the service to.

Replacement value against which a regex replace is performed if the regular expression matches

Additional configuration for the PipeWire server

Specify rules for nftables to add to the input chain when services.prometheus.exporters.redis.openFirewall is true.

Human-readable description of the provider of the relay (you).

Extra flags passed to odoo when run for the first time by autoInit

The Redis port.

A list of files containing the various secrets

The nextjs-ollama-llm-ui package to use.

Whether to enable the scion-control service.

TCP port used by the mastodon-web service.

Hostname:port combination for the Sphinx server.

External host name

The plugins to install

Path to a TOML file to be merged with the settings

A host of an existing Let's Encrypt certificate to use

User account under which Moonraker runs.

Interval to check the liveness of a peer actively using IKEv2 INFORMATIONAL exchanges or IKEv1 R_U_THERE messages

Name of the network interface managed by this client.

scion-daemon configuration

File containing environment variables to substitute when copying the configuration out of Nix store to the services.mautrix-meta.dataDir

Specify a list of additional command line flags.

See torrc manual.

A list of fans to pick in case multiple fans match the query.

Like services.smartd.defaults.monitored, but for the autodetected devices.

Listener config

SMTP authentication password used when sending outgoing mail.

HTTP password file

The technitium-dns-server package to use.

Whether to enable MeshCentral computer management server.

Configuration of multiple redis-server instances.

Whether to enable the NextDNS DNS/53 to DoH Proxy service.

Whether to open the firewall for the port in services.suwayomi-server.settings.server.port.

The llama-swap package to use.

Compression level to use for gzip, xz or zstd.

• For gzip: 1-9
• For xz: 0-9
• For zstd: 1-19

Action to perform based on regex matching

Colour temperature to use at night, between 1000 and 25000 K.

Enable SMTP class debugging. loglevel will likely need to be adjusted too. See docs.