| options/nixos/systemd.enableStrictShellChecks | Whether to run shellcheck on the generated scripts for systemd
units
|
| options/nixos/services.discourse.siteSettings | Discourse site settings
|
| options/nixos/networking.interfaces.<name>.tempAddress | When IPv6 is enabled with SLAAC, this option controls the use of
temporary address (aka privacy extensions) on this
interface
|
| options/nixos/services.prometheus.pushgateway.web.telemetry-path | Path under which to expose metrics.
null will default to /metrics.
|
| options/home-manager/accounts.email.accounts.<name>.notmuch.neomutt.virtualMailboxes.*.type | Reads all matching messages or whole-threads
|
| options/nixos/services.xserver.windowManager.herbstluftwm.configFile | Path to the herbstluftwm configuration file
|
| options/nixos/services.grafana.provision.alerting.rules.settings.deleteRules.*.orgId | Organization ID, default = 1
|
| options/nixos/services.prometheus.exporters.chrony.chronyServerAddress | ChronyServerAddress of the chrony server side command port. (Not enabled by default.)
Defaults to the local unix socket.
|
| options/nixos/services.logind.settings.Login.KillUserProcesses | Specifies whether the processes of a user should be killed
when the user logs out
|
| options/darwin/launchd.daemons.<name>.serviceConfig.KeepAlive | This optional key is used to control whether your job is to be kept continuously running or to let
demand and conditions control the invocation
|
| options/darwin/system.defaults.dock.persistent-others.*.folder.arrangement | Sort order for files in folder when clicked.
|
| options/nixos/services.heisenbridge.registrationUrl | The URL where the application service is listening for HS requests, from the Matrix HS perspective.#
The default value assumes the bridge runs on the same host as the home server, in the same network.
|
| options/nixos/services.openssh.settings.AuthorizedPrincipalsFile | Specifies a file that lists principal names that are accepted for certificate authentication
|
| options/nixos/services.xserver.desktopManager.runXdgAutostartIfNone | Whether to run XDG autostart files for sessions without a desktop manager
(with only a window manager), these sessions usually don't handle XDG
autostart files by default
|
| options/darwin/launchd.user.agents.<name>.serviceConfig.KeepAlive | This optional key is used to control whether your job is to be kept continuously running or to let
demand and conditions control the invocation
|
| options/nixos/networking.wireless.networks.<name>.priority | By default, all networks will get same priority group (0)
|
| options/nixos/services.prometheus.exporters.frr.enabledCollectors | Collectors to enable
|
| options/home-manager/accounts.calendar.accounts.<name>.thunderbird.profiles | List of Thunderbird profiles for which this account should be
enabled
|
| options/home-manager/programs.khal.locale.unicode_symbols | By default khal uses some Unicode symbols (as in "non-ASCII") as
indicators for things like repeating events
|
| options/nixos/services.xserver.displayManager.lightdm.greeters.gtk.clock-format | Clock format string (as expected by strftime, e.g. "%H:%M")
to use with the lightdm gtk greeter panel
|
| options/darwin/system.defaults.universalaccess.reduceMotion | Disable animation when switching screens or opening apps
|
| options/nixos/environment.enlightenment.excludePackages | Which packages Enlightenment should exclude from the default environment
|
| options/nixos/systemd.services.<name>.confinement.packages | Additional packages or strings with context to add to the closure of
the chroot
|
| options/nixos/services.yggdrasil.settings | Configuration for yggdrasil, as a structured Nix attribute set
|
| options/darwin/system.defaults.NSGlobalDomain.NSDisableAutomaticTermination | Whether to disable the automatic termination of inactive apps.
|
| options/darwin/services.prometheus.exporters.node.enabledCollectors | Collectors to enable in addition to the ones that are enabled by default.
|
| options/nixos/services.akkoma.config.":joken".":default_signer" | JWT signing secret
|
| options/nixos/services.prometheus.exporters.node.enabledCollectors | Collectors to enable
|
| options/nixos/services.prometheus.exporters.frr.disabledCollectors | Collectors to disable which are enabled by default.
|
| options/darwin/homebrew.brews.*.restart_service | Whether to run brew services restart for the formula and register it to
launch at login (or boot)
|
| options/nixos/services.prometheus.exporters.opnsense.enabledExporter | Collectors to enable or disable
|
| options/home-manager/targets.darwin.defaults."com.googlecode.iterm2".AlternateMouseScroll | Whether to enable arrow keys when scrolling in alternate screen mode.
|
| options/nixos/virtualisation.docker.rootless.setSocketVariable | Point DOCKER_HOST to rootless Docker instance for
normal users by default.
|
| options/nixos/boot.loader.systemd-boot.sortKey | The sort key used for the NixOS bootloader entries
|
| options/nixos/hardware.amdgpu.overdrive.ppfeaturemask | Sets the amdgpu.ppfeaturemask kernel option
|
| options/nixos/services.umurmur.settings.default_channel | The channel in which users will appear in when connecting.
|
| options/nixos/services.prometheus.exporters.node.disabledCollectors | Collectors to disable which are enabled by default.
|
| options/nixos/services.nullmailer.config.defaultdomain | The content of this attribute is appended to any host name that
does not contain a period (except localhost), including defaulthost
and idhost
|
| options/nixos/services.prometheus.exporters.nginxlog.settings.consul | Consul integration options
|
| options/nixos/services.maubot.settings.crypto_database | Separate database URL for the crypto database
|
| options/nixos/services.grafana-image-renderer.settings.rendering.mode | Rendering mode of grafana-image-renderer:
default: Creates on browser-instance
per rendering request.
reusable: One browser instance
will be started and reused for each rendering request.
clustered: allows to precisely
configure how many browser-instances are supposed to be used
|
| options/nixos/services.jellyfin.forceEncodingConfig | Whether to overwrite Jellyfin's encoding.xml configuration file on each service start
|
| options/nixos/documentation.man.mandoc.settings.manpath | Override the default search path for man(1),
apropos(1), and makewhatis(8)
|
| options/nixos/services.displayManager.dms-greeter.compositor.customConfig | Custom compositor configuration to use for the greeter session
|
| options/nixos/services.multipath.devices.*.getuid_callout | (Superseded by uid_attribute) The default program and args to callout
to obtain a unique path identifier
|
| options/nixos/services.nghttpx.backends.*.params.redirect-if-not-tls | If true, a backend match requires the frontend connection be
TLS encrypted
|
| options/nixos/services.prometheus.exporters.chrony.enabledCollectors | Collectors to enable
|
| options/home-manager/accounts.contact.accounts.<name>.khard.addressbooks | If provided, each item on this list will generate an
entry on khard configuration file as a separate addressbook
(vdir)
|
| options/darwin/services.prometheus.exporters.node.disabledCollectors | Collectors to disable from the list of collectors that are enabled by default.
|
| packages/nixpkgs/mpv-shim-default-shaders | Preconfigured set of MPV shaders and configurations for MPV Shim media clients |
| options/nixos/services.tuned.settings.default_instance_priority | Default instance (unit) priority.
|
| options/nixos/documentation.man.mandoc.settings.output.man | A template for linked manuals (usually via the Xr macro) in HTML
output
|
| options/nixos/services.headscale.settings.prefixes.allocation | Strategy used for allocation of IPs to nodes, available options:
- sequential (default): assigns the next free IP from the previous given IP.
- random: assigns the next free IP from a pseudo-random IP generator (crypto/rand).
|
| options/nixos/documentation.man.mandoc.settings.output.includes | A string of relative path used as a template for the output path of
linked header files (usually via the In macro) in HTML output
|
| options/nixos/services.unpoller.unifi.defaults.save_anomalies | Collect and save data from UniFi anomalies to influxdb and Loki.
|
| options/darwin/system.defaults.NSGlobalDomain."com.apple.trackpad.trackpadCornerClickBehavior" | Configures the trackpad corner click behavior
|
| options/nixos/services.prometheus.exporters.opnsense.disabledExporter | Collectors to enable or disable
|
| options/nixos/services.mpd.settings.music_directory | The directory or URI where MPD reads music from
|
| options/nixos/services.epgstation.usePreconfiguredStreaming | Use preconfigured default streaming options
|
| options/nixos/services.fail2ban.bantime-increment.overalljails | "bantime.overalljails" (if true) specifies the search of IP in the database will be executed
cross over all jails, if false (default), only current jail of the ban IP will be searched.
|
| options/nixos/virtualisation.useDefaultFilesystems | If enabled, the boot disk of the virtual machine will be
formatted and mounted with the default filesystems for
testing
|
| options/nixos/services.firezone.server.smtp.configureManually | Outbound email configuration is mandatory for Firezone and supports
many different delivery adapters
|
| options/nixos/services.gitea.settings.service.DISABLE_REGISTRATION | By default any user can create an account on this gitea instance
|
| options/nixos/services.prometheus.exporters.ecoflow.exporterType | The type of exporter you'd like to use
|
| options/home-manager/services.activitywatch.watchers.<name>.executable | The name of the executable of the watcher
|
| options/nixos/services.suricata.settings.exception-policy | Define a common behavior for all exception policies
|
| options/nixos/services.paperless.openMPThreadingWorkaround | Whether to enable a workaround for document classifier timeouts
|
| options/nixos/services.pgbouncer.settings.pgbouncer.pool_mode | Specifies when a server connection can be reused by other clients.
session
Server is released back to pool after client disconnects
|
| options/home-manager/programs.zsh.prezto.syntaxHighlighting.highlighters | Set syntax highlighters
|
| options/nixos/services.matrix-synapse.workers | Options for configuring workers
|
| options/nixos/services.grafana.provision.alerting.muteTimings.settings.deleteMuteTimes.*.orgId | Organization ID, default = 1.
|
| options/nixos/services.prometheus.exporters.wireguard.interfaces | Specifies the interface(s) passed to the wg show dump parameter
|
| options/nixos/services.anubis.instances.<name>.settings.METRICS_BIND | The address Anubis' metrics server listens to
|
| options/nixos/services.prometheus.exporters.wireguard.singleSubnetPerField | By default, all allowed IPs and subnets are comma-separated in the
allowed_ips field
|
| options/home-manager/programs.thunderbird.profiles.<name>.accountsOrder | Custom ordering of accounts and local folders in
Thunderbird's folder pane
|
| options/nixos/networking.firewall.connectionTrackingModules | List of connection-tracking helpers that are auto-loaded
|
| options/nixos/services.strongswan-swanctl.swanctl.connections.<name>.dscp | Differentiated Services Field Codepoint to set on outgoing IKE packets for
this connection
|
| options/nixos/services.prometheus.alertmanagerGotify.gotifyEndpoint.tls | If your gotify endpoint uses https, leave this option set to default
|
| options/nixos/services.strongswan-swanctl.swanctl.connections.<name>.pools | List of named IP pools to allocate virtual IP addresses
and other configuration attributes from
|
| options/nixos/systemd.services.<name>.confinement.mode | The value full-apivfs (the default) sets up
private /dev, /proc,
/sys, /tmp and /var/tmp file systems
in a separate user name space
|
| options/nixos/boot.loader.systemd-boot.windows.<name>.efiDeviceHandle | The device handle of the EFI System Partition (ESP) where the Windows bootloader is
located
|
| options/nixos/services.grafana.provision.alerting.policies.settings.resetPolicies | List of orgIds that should be reset to the default policy.
|
| options/nixos/services.prometheus.exporters.ecoflow.scrapingInterval | Scrapping interval in seconds
|
| options/nixos/services.prometheus.exporters.chrony.disabledCollectors | Collectors to disable which are enabled by default
|
| options/darwin/homebrew.enable | Whether to enable nix-darwin to manage installing/updating/upgrading Homebrew taps, formulae,
casks, Mac App Store apps, Visual Studio Code extensions, Go packages, and Cargo
crates using Homebrew Bundle
|
| options/nixos/documentation.man.mandoc.settings.output.paper | This option is for generating PostScript and PDF output
|
| options/nixos/services.prometheus.scrapeConfigs.*.scrape_timeout | Per-target timeout when scraping this job
|
| options/home-manager/launchd.agents.<name>.config.Disabled | This optional key is used as a hint to launchctl(1) that it should not submit this job to launchd when
loading a job or jobs
|
| options/nixos/services.postgresql.ensureUsers.*.ensureClauses.createdb | Grants the user, created by the ensureUser attr, createdb permissions
|
| options/nixos/services.strongswan-swanctl.swanctl.authorities.<name>.crl_uris | List of CRL distribution points (ldap, http, or file URI)
|
| options/nixos/services.litestream.environmentFile | Environment file as defined in systemd.exec(5)
|
| options/nixos/services.strongswan-swanctl.swanctl.pools.<name>.split_exclude | Address or CIDR subnets
StrongSwan default: []
|
| options/nixos/services.strongswan-swanctl.swanctl.pools.<name>.split_include | Address or CIDR subnets
StrongSwan default: []
|
| options/nixos/services.strongswan-swanctl.swanctl.connections.<name>.vips | List of virtual IPs to request in IKEv2 configuration payloads or IKEv1
Mode Config
|
| options/darwin/homebrew.caskArgs.internet_plugindir | Target location for Internet Plugins
|
| options/darwin/system.defaults.SoftwareUpdate.AutomaticallyInstallMacOSUpdates | Automatically install Mac OS software updates
|
| options/nixos/services.strongswan-swanctl.swanctl.connections.<name>.children.<name>.local_ts | List of local traffic selectors to include in CHILD_SA
|
| options/nixos/security.virtualisation.flushL1DataCache | Whether the hypervisor should flush the L1 data cache before
entering guests
|
| options/nixos/services.strongswan-swanctl.swanctl.authorities.<name>.ocsp_uris | List of OCSP URIs
|
| options/home-manager/accounts.contact.accounts.<name>.vdirsyncer.conflictResolution | What to do in case of a conflict between the storages
|