| options/nixos/services.nextcloud.notify_push.dbhost | Database host (+port) or socket path
|
| options/nixos/services.nginx.sso.configuration | nginx-sso configuration
(documentation)
as a Nix attribute set
|
| options/nixos/services.prometheus.exporters.shelly.metrics-file | Path to the JSON file with the metric definitions
|
| options/nixos/virtualisation.bootPartition | The path (inside the VM) to the device containing the EFI System Partition (ESP)
|
| options/darwin/system.defaults.screencapture.location | The filesystem path to which screencaptures should be written.
|
| options/darwin/launchd.agents.<name>.serviceConfig.QueueDirectories | Much like the WatchPaths option, this key will watch the paths for modifications
|
| options/nixos/services.anuko-time-tracker.nginx.sslTrustedCertificate | Path to root SSL certificate for stapling and client certificates.
|
| options/nixos/services.fedimintd.<name>.nginx.config.sslCertificate | Path to server SSL certificate.
|
| options/nixos/services.prometheus.exporters.varnish.healthPath | Path under which to expose healthcheck
|
| options/nixos/services.nginx.virtualHosts.<name>.sslTrustedCertificate | Path to root SSL certificate for stapling and client certificates.
|
| options/nixos/services.rosenpass.settings.peers.*.public_key | Path to a file containing the public key of the remote Rosenpass peer.
|
| options/nixos/services.akkoma.config.":pleroma"."Pleroma.Upload".base_url | Base path which uploads will be stored at
|
| options/nixos/services.prometheus.exporters.nut.passwordPath | A run-time path to the nutUser password file, which should be
provisioned outside of Nix store.
|
| options/nixos/services.limesurvey.httpd.virtualHost.documentRoot | The path of Apache's document root directory
|
| options/nixos/services.prometheus.exporters.zfs.telemetryPath | Path under which to expose metrics.
|
| options/nixos/services.thanos.downsample.tracing.config | Tracing configuration
|
| options/nixos/nixpkgs.pkgs | If set, the pkgs argument to all NixOS modules is the value of
this option, extended with nixpkgs.overlays, if
that is also set
|
| options/nixos/services.neo4j.ssl.policies.<name>.baseDirectory | The mandatory base directory for cryptographic objects of this
policy
|
| options/nixos/services.dolibarr.h2o.tls.identity.*.certificate-file | Path to certificate file
|
| options/nixos/services.bookstack.nginx.sslTrustedCertificate | Path to root SSL certificate for stapling and client certificates.
|
| options/nixos/services.ocsinventory-agent.settings.local | If specified, the OCS Inventory Agent will run in offline mode
and the resulting inventory file will be stored in the specified path.
|
| options/home-manager/accounts.calendar.accounts.<name>.vdirsyncer.postHook | Command to call for each item creation and modification
|
| options/nixos/virtualisation.podman.networkSocket.tls.cert | Path to certificate describing the server.
|
| options/nixos/services.sourcehut.settings.mail.pgp-privkey | An absolute file path (which should be outside the Nix-store)
to an OpenPGP private key
|
| options/nixos/services.fedimintd.<name>.nginx.config.sslCertificateKey | Path to server SSL certificate key.
|
| options/nixos/boot.loader.generic-extlinux-compatible.populateCmd | Contains the builder command used to populate an image,
honoring all options except the -c <path-to-default-configuration>
argument
|
| options/nixos/services.prometheus.exporters.fastly.configFile | Path to a fastly-exporter configuration file
|
| options/nixos/services.prometheus.exporters.unbound.unbound.ca | Path to the Unbound server certificate authority
|
| options/nixos/services.prometheus.exporters.php-fpm.telemetryPath | Path under which to expose metrics.
|
| options/nixos/services.prometheus.exporters.ping.telemetryPath | Path under which to expose metrics.
|
| options/nixos/services.prometheus.exporters.blackbox.configFile | Path to configuration file.
|
| options/nixos/services.prometheus.exporters.mail.telemetryPath | Path under which to expose metrics.
|
| options/home-manager/programs.irssi.networks.<name>.server.ssl.certificateFile | Path to a file containing the certificate used for
client authentication to the server.
|
| options/nixos/services.writefreely.admin.initialPasswordFile | Path to a file containing the initial password for the admin user
|
| options/nixos/services.wstunnel.servers.<name>.settings.restrict-to | Restrictions on the connections that the server will accept
|
| options/nixos/services.sftpgo.settings.webdavd.bindings.*.address | Network listen address
|
| options/nixos/services.prometheus.exporters.unbound.unbound.key | Path to the Unbound control socket key.
|
| options/nixos/virtualisation.xen.store.settings.quota.maxPath | Path limit for the quota system.
|
| options/darwin/launchd.daemons.<name>.serviceConfig.QueueDirectories | Much like the WatchPaths option, this key will watch the paths for modifications
|
| options/nixos/services.sourcehut.settings."builds.sr.ht::worker".buildlogs | Path to write build logs.
|
| options/nixos/services.tailscale.useRoutingFeatures | Enables settings required for Tailscale's routing features like subnet routers and exit nodes
|
| options/nixos/services.paperless.environmentFile | Path to a file containing extra paperless config options in the systemd EnvironmentFile
format
|
| options/nixos/services.prometheus.exporters.varnish.varnishStatPath | Path to varnishstat.
|
| packages/nixpkgs/perl540Packages.PathDispatcher | Flexible and extensible dispatch |
| packages/nixpkgs/perl538Packages.PathDispatcher | Flexible and extensible dispatch |
| options/darwin/launchd.user.agents.<name>.serviceConfig.QueueDirectories | Much like the WatchPaths option, this key will watch the paths for modifications
|
| options/nixos/services.xserver.desktopManager.pantheon.sessionPath | Additional list of packages to be added to the session search path
|
| options/nixos/services.sourcehut.settings."meta.sr.ht::billing".stripe-secret-key | An absolute file path (which should be outside the Nix-store)
to a secret key for Stripe
|
| options/nixos/services.cadvisor.storageDriverPasswordFile | File that contains the cadvisor storage driver password.
storageDriverPasswordFile takes precedence over storageDriverPassword
Warning: when storageDriverPassword is non-empty this defaults to a file in the
world-readable Nix store that contains the value of storageDriverPassword
|
| options/nixos/services.cloudflared.tunnels.<name>.originRequest.caPool | Path to the certificate authority (CA) for the certificate of your origin
|
| options/nixos/services.prometheus.exporters.nginx.telemetryPath | Path under which to expose metrics.
|
| options/nixos/services.prometheus.exporters.unpoller.loki.pass | Path of a file containing the password for Loki
|
| options/nixos/services.nextcloud.config.objectstore.s3.secretFile | The full path to a file that contains the access secret.
|
| options/nixos/services.prometheus.exporters.nextcloud.url | URL to the Nextcloud serverinfo page
|
| options/nixos/services.matrix-synapse.settings.database.args.database | Name of the database when using the psycopg2 backend,
path to the database location when using sqlite3.
|
| options/nixos/services.xserver.desktopManager.cinnamon.sessionPath | Additional list of packages to be added to the session search path
|
| options/nixos/services.jirafeau.nginxConfig.sslTrustedCertificate | Path to root SSL certificate for stapling and client certificates.
|
| options/nixos/services.sourcehut.settings."sr.ht".service-key | An absolute file path (which should be outside the Nix-store)
to a key used for encrypting session cookies
|
| options/nixos/services.authelia.instances.<name>.secrets.sessionSecretFile | Path to your session secret
|
| options/nixos/security.pam.ussh.authorizedPrincipalsFile | Path to a list of principals; if the user presents a certificate with
one of these principals, then they will be authorized
|
| options/nixos/services.kanidm.provision.systems.oauth2.<name>.basicSecretFile | The basic secret to use for this service
|
| options/nixos/services.gotosocial.environmentFile | File path containing environment variables for configuring the GoToSocial service
in the format of an EnvironmentFile as described by systemd.exec(5)
|
| options/nixos/networking.firewall.checkReversePath | Performs a reverse path filter test on a packet
|
| options/nixos/services.bacula-sd.device.<name>.archiveDevice | The specified name-string gives the system file name of the storage
device managed by this storage daemon
|
| options/nixos/documentation.man.mandoc.settings.output.style | Path to the file used for an external style-sheet
|
| options/nixos/services.thanos.downsample.objstore.config | Object store configuration
|
| options/nixos/services.prometheus.exporters.postfix.logfilePath | Path where Postfix writes log entries
|
| options/nixos/services.zabbixWeb.nginx.virtualHost.sslTrustedCertificate | Path to root SSL certificate for stapling and client certificates.
|
| options/nixos/documentation.man.mandoc.manPath | Change the paths included in the MANPATH environment variable,
i. e. the directories where man(1)
looks for section-specific directories of man pages
|
| options/nixos/services.glance.environmentFile | Path to an environment file as defined in systemd.exec(5)
|
| options/nixos/services.foundationdb.tls.certificate | Path to the TLS certificate file
|
| options/nixos/services.nextcloud-spreed-signaling.settings.https.key | Path to the private key used for the HTTPS listener
|
| options/nixos/services.syncthing.settings.devices.<name>.autoAcceptFolders | Automatically create or share folders that this device advertises at the default path
|
| options/nixos/services.logrotate.checkConfig | Whether the config should be checked at build time
|
| options/nixos/services.prometheus.exporters.mysqld.configFile | Path to the services config file
|
| options/home-manager/services.syncthing.settings.devices.<name>.autoAcceptFolders | Automatically create or share folders that this device advertises at the default path
|
| options/nixos/services.etebase-server.settings.global.secret_file | The path to a file containing the secret
used as django's SECRET_KEY.
|
| options/nixos/services.prometheus.pushgateway.web.route-prefix | Prefix for the internal routes of web endpoints
|
| options/nixos/services.prometheus.exporters.mysqld.telemetryPath | Path under which to expose metrics.
|
| options/nixos/services.prometheus.exporters.mikrotik.configFile | Path to a mikrotik exporter configuration file
|
| options/home-manager/services.linux-wallpaperengine.assetsPath | Path to the assets directory.
|
| options/nixos/services.archisteamfarm.ipcPasswordFile | Path to a file containing the password
|
| options/nixos/services.consul-template.instances.<name>.settings.pid_file | Path to use for the pid file.
|
| options/nixos/services.crowdsec-firewall-bouncer.secrets.apiKeyPath | Path to the API key to authenticate with a local CrowdSec API
|
| options/nixos/services.opentelemetry-collector.configFile | Specify a path to a configuration file that Opentelemetry Collector should use.
|
| options/nixos/services.prometheus.exporters.borgmatic.configFile | The path to the borgmatic config file
|
| options/nixos/virtualisation.podman.networkSocket.tls.cacert | Path to CA certificate to use for client authentication.
|
| options/darwin/networking.wg-quick.interfaces.<name>.peers.*.presharedKeyFile | Optional, path to file containing the pre-shared key for this peer.
|
| options/nixos/services.homepage-dashboard.environmentFile | The path to an environment file that contains environment variables to pass
to the homepage-dashboard service, for the purpose of passing secrets to
the service
|
| options/nixos/services.bitwarden-directory-connector-cli.secrets.ldap | Path to file that contains LDAP password for user in {option}`ldap.username
|
| options/nixos/programs.singularity.enableExternalLocalStateDir | Whether to use top-level directories as LOCALSTATEDIR
instead of the store path ones
|
| options/nixos/services.prometheus.exporters.unbound.unbound.host | Path to the unbound control socket
|
| options/nixos/services.athens.downloadMode | Defines how Athens behaves when a module@version
is not found in storage
|
| options/nixos/security.pam.sshAgentAuth.authorizedKeysFiles | A list of paths to files in OpenSSH's authorized_keys format, containing
the keys that will be trusted by the pam_ssh_agent_auth module
|
| options/nixos/services.authelia.instances.<name>.secrets.oidcIssuerPrivateKeyFile | Path to your private key file used to encrypt OIDC JWTs.
|
| options/nixos/services.mosquitto.listeners.*.users.<name>.passwordFile | Specifies the path to a file containing the
clear text password for the MQTT user
|
| options/nixos/services.mautrix-meta.instances.<name>.registrationFile | Path to the yaml registration file of the appservice.
|
| options/nixos/services.pid-fan-controller.settings.fans.*.wildcardPath | Wildcard path of the hwmon pwm file
|
| options/nixos/services.limesurvey.nginx.virtualHost.sslCertificate | Path to server SSL certificate.
|
| options/nixos/services.warpgate.settings.postgres.certificate | Path to PostgreSQL listener certificate.
|