| options/nixos/services.open-web-calendar.settings.ALLOWED_HOSTS | The hosts that the Open Web Calendar permits
|
| options/nixos/services.minidlna.settings.wide_links | Set this to yes to allow symlinks that point outside user-defined media_dir.
|
| options/nixos/services.logrotate.settings.<name>.priority | Order of this logrotate block in relation to the others
|
| options/nixos/services.healthchecks.settings.DEBUG | Enable debug mode.
|
| options/nixos/services.geoipupdate.settings.AccountID | Your MaxMind account ID.
|
| options/nixos/services.lldap.settings.ldap_base_dn | Base DN for LDAP.
|
| options/nixos/services.buffyboard.settings.theme.default | Selects the default theme on boot
|
| options/nixos/services.grafana.settings.users.login_hint | Text used as placeholder text on login page for login/username input.
|
| options/nixos/services.frigate.settings.cameras.<name>.ffmpeg.inputs.*.path | Stream URL
|
| options/nixos/services.botamusique.settings.bot.comment | Comment displayed for the bot.
|
| options/nixos/services.public-inbox.settings.publicinbox | public inboxes
|
| options/nixos/services.biboumi.settings.identd_port | The TCP port on which to listen for identd queries.
|
| options/nixos/services.opensnitch.settings.Ebpf.ModulesPath | Configure eBPF modules path
|
| options/home-manager/services.listenbrainz-mpd.settings | Configuration for listenbrainz-mpd written to
$XDG_CONFIG_HOME/listenbrainz-mpd/config.toml.
|
| options/nixos/services.cryptpad.settings.blockDailyCheck | Disable telemetry
|
| options/nixos/services.snapserver.settings.http.doc_root | Path to serve from the HTTP servers root.
|
| options/nixos/services.sourcehut.settings."lists.sr.ht".posting-domain | Posting domain.
|
| options/nixos/services.libeufin.nexus.settings.nexus-ebics.CURRENCY | Name of the fiat currency.
|
| options/nixos/services.reposilite.settings.hostname | The hostname to bind to
|
| options/nixos/services.suricata.settings.logging.outputs.file.level | Loglevel for logs written to the logfile.
|
| options/nixos/services.pid-fan-controller.settings.interval | Interval between controller cycles in milliseconds.
|
| options/nixos/services.tuned.settings.profile_dirs | Directories to search for profiles, separated by , or ;.
|
| options/nixos/services.tor.settings.ControlSocketsGroupWritable | See torrc manual.
|
| options/nixos/services.headscale.settings.prefixes.v4 | Each prefix consists of either an IPv4 or IPv6 address,
and the associated prefix length, delimited by a slash
|
| options/nixos/services.headscale.settings.prefixes.v6 | Each prefix consists of either an IPv4 or IPv6 address,
and the associated prefix length, delimited by a slash
|
| options/nixos/services.firezone.server.domain.settings | Environment variables for this component of the Firezone server
|
| options/nixos/services.suricata.settings.unix-command.filename | Filename for unix-command socket.
|
| options/nixos/services.misskey.settings.meilisearch.ssl | Whether to connect via SSL.
|
| options/nixos/services.lldap.settings.ldap_user_pass | Password for default admin password
|
| options/nixos/services.peering-manager.settings.ALLOWED_HOSTS | A list of valid fully-qualified domain names (FQDNs) and/or IP
addresses that can be used to reach the peering manager service.
|
| options/nixos/services.sourcehut.settings."git.sr.ht".post-update-script | A post-update script which is installed in every git repo
|
| options/nixos/services.sabnzbd.settings.servers.<name>.required | In case of connection failures, wait for the
server to come back online instead of skipping
it.
|
| options/nixos/services.sabnzbd.settings.servers.<name>.priority | Priority of this servers
|
| options/nixos/services.zeronsd.servedNetworks.<name>.settings.token | Path to a file containing the API Token for ZeroTier Central.
|
| options/nixos/services.rkvm.client.settings.certificate | TLS ceritficate path.
This should be generated with rkvm-certificate-gen.
|
| options/nixos/services.rkvm.server.settings.certificate | TLS certificate path.
This should be generated with rkvm-certificate-gen.
|
| options/home-manager/programs.lazygit.settings | Configuration written to
$XDG_CONFIG_HOME/lazygit/config.yml
on Linux or on Darwin if xdg.enable is set, otherwise
~/Library/Application Support/lazygit/config.yml
|
| options/nixos/systemd.tmpfiles.settings | Declare systemd-tmpfiles rules to create, delete, and clean up volatile
and temporary files and directories
|
| options/nixos/services.crowdsec-firewall-bouncer.settings.mode | Firewall mode to use.
|
| options/nixos/services.acme-dns.settings.database.connection | Database connection string.
|
| options/nixos/services.anubis.instances.<name>.settings.TARGET | The reverse proxy target that Anubis is protecting
|
| options/nixos/services.suricata.settings.unix-command | Unix command socket that can be used to pass commands to Suricata
|
| options/nixos/services.archisteamfarm.bots.<name>.settings | Additional settings that are documented here.
|
| options/nixos/services.headscale.settings.database.type | Database engine to use
|
| options/nixos/services.sourcehut.settings."lists.sr.ht::worker".sock-group | The lmtp daemon will make the unix socket group-read/write
for users in this group.
|
| options/nixos/services.easytier.instances.<name>.settings.dhcp | Automatically determine the IPv4 address of this peer based on
existing peers on network.
|
| options/nixos/services.sourcehut.settings."meta.sr.ht".welcome-emails | Whether to enable sending stock sourcehut welcome emails after signup.
|
| options/nixos/services.sourcehut.settings."todo.sr.ht".oauth-client-secret | todo.sr.ht's OAuth client secret for meta.sr.ht.
|
| options/nixos/services.authelia.instances.<name>.settings.log.level | Level of verbosity for logs.
|
| options/nixos/services.pretalx.settings.filesystem.static | Path to the directory that contains static files.
|
| options/nixos/services.parsedmarc.settings.mailbox.delete | Delete messages after processing them, instead of archiving them.
|
| options/nixos/services.sourcehut.settings."git.sr.ht".outgoing-domain | Outgoing domain.
|
| options/nixos/services.sourcehut.settings."todo.sr.ht::mail".posting-domain | Posting domain.
|
| options/nixos/services.misskey.settings.meilisearch.host | The Meilisearch host.
|
| options/nixos/services.misskey.settings.meilisearch.port | The Meilisearch port.
|
| options/nixos/services.matrix-tuwunel.settings.global.address | Addresses (IPv4 or IPv6) to listen on for connections by the reverse proxy/tls terminator
|
| options/nixos/services.sourcehut.settings.objects.s3-secret-key | An absolute file path (which should be outside the Nix-store)
to the secret key of the S3-compatible object storage service.
|
| options/nixos/services.reposilite.settings.keyPath | Path to the .jsk KeyStore or paths to the PKCS#8 certificate and private key, separated by a space (see example)
|
| options/nixos/services.sabnzbd.settings.servers.<name>.optional | In case of connection failures, temporarily
disable this server. (See sabnzbd's documentation
for usage guides).
|
| options/nixos/services.routinator.settings.refresh | An integer value specifying the number of seconds Routinator should wait between consecutive validation runs in server mode
|
| options/nixos/services.angrr.settings.temporary-root-policies | Policies for temporary GC roots(e.g. result and direnv).
|
| options/nixos/services.wstunnel.clients.<name>.settings.http-headers | Custom headers to send in the upgrade request
|
| options/nixos/services.tor.settings.DataDirectoryGroupReadable | See torrc manual.
|
| options/nixos/services.tor.settings.HiddenServiceNonAnonymousMode | See torrc manual.
|
| options/nixos/services.tor.settings.ConstrainedSockets | See torrc manual.
|
| options/nixos/services.slskd.settings.retention.files.complete | Lifespan of completely downloaded files in minutes.
|
| options/nixos/services.veilid.settings.logging.terminal.enabled | Events of type 'terminal' will be logged.
|
| options/nixos/services.grafana-image-renderer.settings.browser.path | Path to the executable of the chromium to use.
|
| options/nixos/services.suricata.settings.vars.address-groups.DNP3_SERVER | DNP3_SERVER variable.
|
| options/nixos/services.suricata.settings.vars.address-groups.DNP3_CLIENT | DNP3_CLIENT variable.
|
| options/nixos/services.bonsaid.settings.*.event_name | Name of the event which should trigger this transition when received by bonsaid
|
| options/nixos/services.reposilite.settings.database | Database connection string
|
| options/nixos/services.hercules-ci-agent.settings.secretsJsonPath | Path to a JSON file containing secrets for effects
|
| options/darwin/services.hercules-ci-agent.settings.secretsJsonPath | Path to a JSON file containing secrets for effects
|
| options/nixos/services.maubot.settings.homeservers.<name>.url | Client-server API URL
|
| options/nixos/services.headscale.settings.oidc.pkce.enabled | Enable or disable PKCE (Proof Key for Code Exchange) support
|
| options/nixos/services.ocsinventory-agent.settings.tag | Tag for the generated inventory.
|
| options/nixos/services.anuko-time-tracker.settings.email.smtpPasswordFile | Path to file containing the MTA authentication password.
|
| options/nixos/services.omnom.settings.activitypub.pubkey | ActivityPub public key
|
| options/nixos/services.headscale.settings.database.sqlite.path | Path to the sqlite3 database file.
|
| options/nixos/services.radicle.ci.broker.settings.triggers.*.adapter | Adapter name.
|
| options/nixos/services.radicle.ci.broker.settings.triggers.*.filters | Trigger filter.
|
| options/nixos/services.misskey.settings.meilisearch.apiKey | The Meilisearch API key.
|
| options/home-manager/programs.hyprlock.settings | Hyprlock configuration written in Nix
|
| options/home-manager/programs.opencode.settings | Configuration written to $XDG_CONFIG_HOME/opencode/opencode.json
|
| options/home-manager/programs.aerospace.settings | AeroSpace configuration, see
https://nikitabobko.github.io/AeroSpace/guide#configuring-aerospace
for supported values.
|
| options/nixos/services.libeufin.nexus.settings.nexus-ebics.PARTNER_ID | Partner ID of the EBICS subscriber
|
| options/nixos/services.vmalert.instances.<name>.settings.rule | Path to the files with alerting and/or recording rules.
|
| options/nixos/services.matrix-synapse.settings.listeners.*.tls | Whether to enable TLS on the listener socket.
This option will be ignored for UNIX domain sockets.
|
| options/nixos/services.radicle.ci.broker.settings.report_dir | Directory where HTML and JSON report pages are written.
|
| options/nixos/services.pds.settings.PDS_BLOBSTORE_DISK_LOCATION | Store blobs at this location, set to null to use e.g
|
| options/nixos/services.saunafs.chunkserver.settings | Contents of chunkserver config file (see sfschunkserver.cfg(5)).
|
| options/nixos/services.umurmur.settings.certificate | Path to your SSL certificate
|
| options/nixos/services.umurmur.settings.private_key | Path to your SSL key
|
| options/nixos/services.homebridge.settings.platforms | Homebridge Platforms
|
| options/nixos/services.hickory-dns.settings.listen_port | Port to listen on (applies to all listen addresses).
|
| options/nixos/services.transmission.settings.peer-port | The peer port to listen for incoming connections.
|
| options/darwin/services.aerospace.settings.on-window-detected.*."if" | Conditions for detecting a window.
|
| options/nixos/services.grafana.settings.server.root_url | This is the full URL used to access Grafana from a web browser
|
| options/nixos/services.grafana-image-renderer.settings.service.port | The TCP port to use for the rendering server.
|