| options/nixos/services.nextcloud.config.adminpassFile | The full path to a file that contains the admin's password
|
| options/nixos/services.prometheus.exporters.sql.configFile | Path to configuration file.
|
| options/nixos/services.slskd.environmentFile | Path to the environment file sourced on startup
|
| options/nixos/services.zfs.autoReplication.identityFilePath | Path to SSH key used to login to host.
|
| options/darwin/launchd.user.agents.<name>.serviceConfig.Sockets.<name>.SockPathName | This optional key implies SockFamily is set to "Unix"
|
| options/nixos/services.gancio.nginx.sslTrustedCertificate | Path to root SSL certificate for stapling and client certificates.
|
| options/nixos/services.fluidd.nginx.sslTrustedCertificate | Path to root SSL certificate for stapling and client certificates.
|
| options/nixos/services.akkoma.nginx.sslTrustedCertificate | Path to root SSL certificate for stapling and client certificates.
|
| options/nixos/services.anuko-time-tracker.nginx.sslCertificateKey | Path to server SSL certificate key.
|
| options/nixos/services.firezone.headless-client.tokenFile | A file containing the firezone client token
|
| options/nixos/services.nginx.virtualHosts.<name>.sslCertificateKey | Path to server SSL certificate key.
|
| options/nixos/services.openvscode-server.extensionsDir | Set the root path for extensions.
|
| options/nixos/services.monero.environmentFile | Path to an EnvironmentFile for the monero service as defined in systemd.exec(5)
|
| options/nixos/services.monica.nginx.sslTrustedCertificate | Path to root SSL certificate for stapling and client certificates.
|
| options/nixos/services.matomo.nginx.sslTrustedCertificate | Path to root SSL certificate for stapling and client certificates.
|
| options/home-manager/launchd.agents.<name>.config.QueueDirectories | Much like the WatchPaths option, this key will watch the paths for modifications
|
| options/nixos/services.wstunnel.clients.<name>.upgradePathPrefix | Use a specific HTTP path prefix that will show up in the upgrade
request to the wstunnel server
|
| options/nixos/services.keepalived.enableScriptSecurity | Don't run scripts configured to be run as root if any part of the path is writable by a non-root user.
|
| options/nixos/services.audiobookshelf.dataDir | Path to Audiobookshelf config and metadata inside of /var/lib.
|
| options/nixos/services.biboumi.credentialsFile | Path to a configuration file to be merged with the settings
|
| options/nixos/services.matrix-continuwuity.admin.enable | Add conduwuit command to PATH for administration
|
| options/nixos/services.prometheus.exporters.json.configFile | Path to configuration file.
|
| options/nixos/services.prometheus.exporters.ipmi.configFile | Path to configuration file.
|
| options/home-manager/programs.bash.enableCompletion | Whether to enable Bash completion for all interactive Bash shells
|
| options/nixos/services.xserver.xkb.extraLayouts.<name>.keycodesFile | The path to the xkb keycodes file
|
| options/nixos/services.pipewire.wireplumber.extraScripts | Additional scripts for WirePlumber to be used by configuration files
|
| options/nixos/services.fcgiwrap.instances.<name>.socket.address | Socket address
|
| options/nixos/services.cyrus-imap.imapdSettings.lmtpsocket | Unix socket that lmtpd listens on, used by deliver(8)
|
| options/nixos/services.homebridge.environmentFile | Path to an environment-file which may contain secrets.
|
| options/nixos/services.bookstack.nginx.sslCertificateKey | Path to server SSL certificate key.
|
| options/nixos/services.dawarich.secretKeyBaseFile | Path to file containing the secret key base
|
| options/nixos/services.limesurvey.httpd.virtualHost.sslServerChain | Path to server SSL chain file.
|
| options/nixos/services.thanos.downsample.tracing.config-file | Path to YAML file that contains tracing configuration
|
| options/home-manager/wayland.windowManager.hyprland.enable | Whether to enable configuration for Hyprland, a tiling Wayland
compositor that doesn't sacrifice on its looks.
This module configures Hyprland and adds it to your user's PATH,
but does not make certain system-level changes
|
| options/nixos/services.zeronsd.servedNetworks.<name>.settings.token | Path to a file containing the API Token for ZeroTier Central.
|
| options/darwin/nixpkgs.flake.setFlakeRegistry | Whether to pin nixpkgs in the system-wide flake registry (/etc/nix/registry.json) to the
store path of the sources of nixpkgs used to build the nix-darwin system
|
| options/nixos/services.matrix-synapse.settings.tls_certificate_path | PEM encoded X509 certificate for TLS
|
| options/nixos/services.grafana.settings.users.home_page | Path to a custom home page
|
| options/nixos/services.calibre-web.options.enableBookConversion | Configure path to the Calibre's ebook-convert in the DB.
|
| options/nixos/services.apache-kafka.configFiles.serverProperties | Kafka server.properties configuration file path
|
| options/nixos/services.bacula-sd.tls.certificate | The full path to the PEM encoded TLS certificate
|
| options/nixos/services.grafana.settings.database.host | Only applicable to MySQL or Postgres
|
| options/nixos/services.gitea-actions-runner.instances.<name>.tokenFile | Path to an environment file, containing the TOKEN environment
variable, that holds a token to register at the configured
Gitea/Forgejo instance.
|
| options/nixos/services.bacula-fd.tls.certificate | The full path to the PEM encoded TLS certificate
|
| options/nixos/services.thanos.compact.objstore.config | Object store configuration
|
| options/nixos/services.umurmur.settings.certificate | Path to your SSL certificate
|
| options/nixos/services.movim.h2o.tls.identity.*.certificate-file | Path to certificate file
|
| options/nixos/services.snapserver.settings.http.doc_root | Path to serve from the HTTP servers root.
|
| options/nixos/services.prometheus.exporters.bird.birdSocket | Path to BIRD2 (or BIRD1 v4) socket.
|
| options/nixos/services.plausible.database.postgres.socket | Path to the UNIX domain-socket to communicate with postgres.
|
| options/nixos/services.thanos.sidecar.objstore.config | Object store configuration
|
| options/nixos/services.lighthouse.beacon.execution.jwtPath | Path for the jwt secret required to connect to the execution layer.
|
| options/nixos/services.umurmur.settings.private_key | Path to your SSL key
|
| options/nixos/services.munin-node.extraPlugins | Additional Munin plugins to activate
|
| options/nixos/services.thanos.receive.objstore.config | Object store configuration
|
| options/nixos/services.jirafeau.nginxConfig.sslCertificate | Path to server SSL certificate.
|
| options/darwin/networking.wg-quick.interfaces.<name>.privateKeyFile | Path to file containing this interface's private key.
|
| options/nixos/security.agnos.settings.accounts.*.certificates.*.key_output_file | Output path for the certificate private key
|
| options/nixos/services.sourcehut.settings."sr.ht".network-key | An absolute file path (which should be outside the Nix-store)
to a secret key to encrypt internal messages with
|
| options/nixos/services.bacula-dir.tls.certificate | The full path to the PEM encoded TLS certificate
|
| options/nixos/services.desktopManager.pantheon.sessionPath | Additional list of packages to be added to the session search path
|
| options/nixos/services.librespeed.frontend.servers.*.dlURL | URL path to download test on this server
|
| options/nixos/services.klipper.firmwares.<name>.klipperFlashPackage | Path to the built klipper-flash package.
|
| options/nixos/services.librespeed.frontend.servers.*.ulURL | URL path to upload test on this server
|
| options/nixos/services.pretalx.settings.filesystem.static | Path to the directory that contains static files.
|
| options/nixos/services.opensnitch.settings.Ebpf.ModulesPath | Configure eBPF modules path
|
| options/nixos/services.xserver.xkb.extraLayouts.<name>.geometryFile | The path to the xkb geometry file
|
| options/nixos/services.discourse.mail.incoming.apiKeyFile | A file containing the Discourse API key used to add
posts and messages from mail
|
| options/nixos/services.discourse.database.passwordFile | File containing the Discourse database user password
|
| options/nixos/services.sourcehut.settings."lists.sr.ht::worker".sock | Path for the lmtp daemon's unix socket
|
| options/nixos/services.anuko-time-tracker.settings.email.smtpPasswordFile | Path to file containing the MTA authentication password.
|
| options/nixos/hardware.graphics.extraPackages32 | Additional packages to add to 32-bit graphics driver lookup path on 64-bit systems
|
| options/nixos/services.filebrowser.settings.database | The path to FileBrowser's Bolt database.
|
| options/nixos/services.blendfarm.basicSecurityPasswordFile | Path to the password file the client needs to connect to the server
|
| options/nixos/services.rustus.info_storage | Info storages are used to store information about file uploads
|
| options/nixos/services.rkvm.client.settings.certificate | TLS ceritficate path.
This should be generated with rkvm-certificate-gen.
|
| options/nixos/services.sabnzbd.settings.misc.https_cert | Path to the TLS certificate for the web UI
|
| options/nixos/services.limesurvey.encryptionKeyFile | 32-byte key used to encrypt variables in the database
|
| options/nixos/services.suwayomi-server.settings.server.localSourcePath | Path to the local source folder.
|
| options/nixos/services.openssh.knownHosts.<name>.publicKeyFile | The path to the public key file for the host
|
| options/nixos/services.nextcloud.notify_push.socketPath | Socket path to use for notify_push
|
| options/nixos/services.rkvm.server.settings.certificate | TLS certificate path.
This should be generated with rkvm-certificate-gen.
|
| options/nixos/services.unpoller.unifi.controllers.*.pass | Path of a file containing the password for the unifi service user
|
| options/nixos/services.kanidm.provision.idmAdminPasswordFile | Path to a file containing the idm admin password for kanidm
|
| options/nixos/services.zabbixWeb.nginx.virtualHost.sslCertificate | Path to server SSL certificate.
|
| options/nixos/services.librespeed.frontend.servers.*.getIpURL | URL path to IP lookup on this server
|
| options/nixos/services.onlyoffice.postgresPasswordFile | Path to a file that contains the password OnlyOffice should use to connect to Postgresql
|
| options/nixos/services.mosquitto.listeners.*.authPlugins.*.plugin | Plugin path to load, should be a .so file.
|
| options/nixos/services.pocket-id.environmentFile | Path to an environment file to be loaded
|
| options/nixos/services.pangolin.environmentFile | Path to a file containing sensitive environment variables for Pangolin
|
| options/nixos/services.prometheus.exporters.pve.server.keyFile | Path to a SSL private key file for the server
|
| options/home-manager/programs.obsidian.defaultSettings.extraFiles.<name>.source | Path of the source file or directory.
|
| options/nixos/services.jirafeau.nginxConfig.sslCertificateKey | Path to server SSL certificate key.
|
| options/nixos/services.prometheus.scrapeConfigs.*.serverset_sd_configs.*.paths | Paths can point to a single service, or the root of a tree of services.
|
| options/nixos/services.sourcehut.settings.objects.s3-secret-key | An absolute file path (which should be outside the Nix-store)
to the secret key of the S3-compatible object storage service.
|
| options/nixos/security.acme.defaults.environmentFile | Path to an EnvironmentFile for the cert's service containing any required and
optional environment variables for your selected dnsProvider
|
| options/nixos/services.h2o.hosts.<name>.tls.identity.*.certificate-file | Path to certificate file
|
| options/nixos/programs.gnupg.agent.pinentryPackage | Which pinentry package to use
|
| options/nixos/services.authelia.instances.<name>.secrets.jwtSecretFile | Path to your JWT secret used during identity verificaton.
|
| options/nixos/services.nextcloud.notify_push.dbpassFile | The full path to a file that contains the database password.
|