| options/nixos/services.canaille.settings.CANAILLE_LDAP.BIND_PW | The LDAP bind password
|
| options/nixos/services.matrix-tuwunel.settings.global.port | The port(s) tuwunel will be running on
|
| options/nixos/services.nezha-agent.settings.temperature | Enable temperature monitoring.
|
| options/nixos/services.nezha-agent.settings.disable_nat | Disable NAT penetration.
|
| options/nixos/services.your_spotify.settings.PORT | The port of the api server
|
| options/nixos/services.froide-govplan.settings.ALLOWED_HOSTS | A list of valid fully-qualified domain names (FQDNs) and/or IP
addresses that can be used to reach the Froide-Govplan service.
|
| options/nixos/services.opengfw.settings.workers.tcpTimeout | How long a connection is considered dead when no data is being transferred
|
| options/nixos/services.nextcloud.settings.log_type | Logging backend to use.
systemd automatically adds the php-systemd extensions to services.nextcloud.phpExtraExtensions
|
| options/nixos/services.mbpfan.settings.general.high_temp | If temperature is above this, fan speed will gradually increase.
|
| options/nixos/services.livekit.ingress.settings.redis.address | Address or hostname and port for redis connection
|
| options/nixos/services.watchdogd.settings.filenr.warning | The high watermark level
|
| options/nixos/services.sslh.settings.protocols | List of protocols sslh will probe for and redirect
|
| options/nixos/services.ferretdb.settings.FERRETDB_HANDLER | Backend handler
|
| options/nixos/services.sourcehut.settings."meta.sr.ht".webhooks | The Redis connection used for the webhooks worker.
|
| options/nixos/services.sourcehut.settings."todo.sr.ht".webhooks | The Redis connection used for the webhooks worker.
|
| options/nixos/services.sourcehut.settings."lists.sr.ht".oauth-client-id | lists.sr.ht's OAuth client id for meta.sr.ht.
|
| options/nixos/services.sourcehut.settings."pages.sr.ht".oauth-client-id | pages.sr.ht's OAuth client id for meta.sr.ht.
|
| options/nixos/services.sourcehut.settings."paste.sr.ht".oauth-client-id | paste.sr.ht's OAuth client id for meta.sr.ht.
|
| options/nixos/services.bookstack.settings.DB_PASSWORD_FILE | The file containing your mysql/mariadb database password.
|
| options/nixos/services.libeufin.bank.settings.libeufin-bank.PORT | The port on which libeufin-bank should listen.
|
| options/nixos/services.rosenpass.settings.peers.*.endpoint | Endpoint of the remote Rosenpass peer.
|
| options/nixos/services.pgbouncer.settings.databases | Detailed information about PostgreSQL database definitions:
https://www.pgbouncer.org/config.html#section-databases
|
| options/nixos/services.snapserver.settings.http.enabled | Whether to enable the HTTP JSON-RPC.
|
| options/nixos/services.szurubooru.server.settings.smtp.user | User to connect to the SMTP server.
|
| options/nixos/services.suricata.settings.outputs.*.<name>.enabled | Whether to enable .
|
| options/nixos/services.sabnzbd.settings.misc.email_full | Whether to send alerts for full disks
|
| options/nixos/services.pretalx.settings.database.backend | Database backend to use
|
| options/nixos/services.openssh.settings.KexAlgorithms | Allowed key exchange algorithms
Uses the lower bound recommended in both
https://stribika.github.io/2015/01/04/secure-secure-shell.html
and
https://infosec.mozilla.org/guidelines/openssh#modern-openssh-67
|
| options/nixos/security.pam.u2f.settings.authfile | By default pam-u2f module reads the keys from
$XDG_CONFIG_HOME/Yubico/u2f_keys (or
$HOME/.config/Yubico/u2f_keys if XDG variable is
not set)
|
| options/nixos/services.inadyn.settings.provider.<name>.hostname | Hostname alias(es).
|
| options/nixos/services.inadyn.settings.provider.<name>.username | Username for this DDNS provider.
|
| options/nixos/services.ferretdb.settings.FERRETDB_SQLITE_URL | SQLite URI (directory) for 'sqlite' handler
|
| options/nixos/services.lidarr.settings.log.analyticsEnabled | Send Anonymous Usage Data
|
| options/nixos/services.radarr.settings.log.analyticsEnabled | Send Anonymous Usage Data
|
| options/nixos/services.sonarr.settings.log.analyticsEnabled | Send Anonymous Usage Data
|
| options/nixos/services.suricata.settings.unix-command.enabled | Enable unix-command socket.
|
| options/home-manager/wayland.windowManager.wayfire.settings.core.plugins | Load the specified plugins
|
| options/nixos/services.privoxy.settings.filterfile | List of paths to Privoxy filter files
|
| options/nixos/services.grafana.settings.database.host | Only applicable to MySQL or Postgres
|
| options/nixos/services.sourcehut.settings.mail.smtp-password | Outgoing SMTP password.
|
| options/nixos/services.tor.settings.ReachableAddresses | See torrc manual.
|
| options/nixos/services.reposilite.settings.debugEnabled | Whether to enable debug mode.
|
| options/home-manager/services.podman.settings.registries.search | List of repositories to search.
|
| options/nixos/services.blackfire-agent.settings.server-token | Sets the server token used to authenticate with Blackfire
You can find your personal server-token at https://blackfire.io/my/settings/credentials
|
| options/nixos/services.logrotate.settings.<name>.priority | Order of this logrotate block in relation to the others
|
| options/nixos/services.grafana.settings.server.cert_file | Path to the certificate file (if protocol is set to https or h2).
|
| options/nixos/services.mchprs.settings.max_players | Maximum number of simultaneous players
|
| options/home-manager/services.listenbrainz-mpd.settings | Configuration for listenbrainz-mpd written to
$XDG_CONFIG_HOME/listenbrainz-mpd/config.toml.
|
| options/nixos/services.watchdogd.settings.filenr.logmark | Whether to log current stats every poll interval.
|
| options/home-manager/services.kanshi.settings.*.output.criteria | The criteria can either be an output name, an output description or "*"
|
| options/nixos/services.canaille.settings.CANAILLE.SMTP | SMTP configuration
|
| options/nixos/services.lldap.settings.ldap_user_pass | Password for default admin password
|
| options/nixos/services.pretalx.settings.filesystem.logs | Path to the log directory, that pretalx logs message to.
|
| options/nixos/services.veilid.settings.logging.terminal.level | The minimum priority of terminal events to be logged.
|
| options/nixos/services.opensnitch.settings.Server.LogFile | File to write logs to (use /dev/stdout to write logs to standard
output).
|
| options/home-manager/accounts.email.accounts.<name>.himalaya.settings | Himalaya CLI configuration for this email account
|
| options/nixos/services.firezone.server.api.settings | Environment variables for this component of the Firezone server
|
| options/nixos/services.firezone.server.web.settings | Environment variables for this component of the Firezone server
|
| options/nixos/services.headscale.settings.oidc.pkce.method | PKCE method to use:
- plain: Use plain code verifier
- S256: Use SHA256 hashed code verifier (default, recommended)
|
| options/nixos/services.neard.settings.General.ConstantPoll | Enable constant polling
|
| options/nixos/services.filebrowser.settings.address | The address to listen on.
|
| options/nixos/services.healthchecks.settings.DB_NAME | Database name.
|
| options/nixos/services.waagent.settings.OS.RootDeviceScsiTimeout | Configures the SCSI timeout in seconds on the OS disk and data drives
|
| options/nixos/services.gitlab.pages.settings.artifacts-server | API URL to proxy artifact requests to.
|
| options/nixos/services.typesense.settings.server.api-address | Address to which Typesense API service binds.
|
| options/nixos/services.scrutiny.settings.web.influxdb.bucket | InfluxDB bucket in which to store data.
|
| options/home-manager/programs.obsidian.vaults.<name>.settings.extraFiles.<name>.text | Text of the file.
|
| options/home-manager/programs.obsidian.vaults.<name>.settings.hotkeys.<name>.*.key | The hotkey.
|
| options/nixos/services.frigate.settings.cameras.<name>.ffmpeg.inputs | List of inputs for this camera.
|
| options/nixos/services.firefly-iii-data-importer.settings | Options for firefly-iii data importer configuration
|
| options/nixos/services.snapserver.settings.tcp-control.port | Port to listen on for snapclient connections.
|
| options/nixos/services.spacecookie.settings.log.enable | Whether to enable logging for spacecookie.
|
| options/nixos/services.sourcehut.settings."pages.sr.ht".gemini-certs | An absolute file path (which should be outside the Nix-store)
to Gemini certificates.
|
| options/nixos/services.firefly-iii.settings.DB_CONNECTION | The type of database you wish to use
|
| options/nixos/services.waagent.settings.ResourceDisk.SwapSizeMB | Specifies the size of the swap file in MiB (1024×1024 bytes)
|
| options/nixos/services.etebase-server.settings.database.engine | The database engine to use.
|
| options/nixos/services.lemmy.settings.captcha.difficulty | The difficultly of the captcha to solve.
|
| options/nixos/services.grafana-image-renderer.settings.server.addr | Listen address of the service.
|
| options/nixos/services.pid-fan-controller.settings.heatSources | List of heat sources to be monitored.
|
| options/nixos/services.tor.settings.FetchHidServDescriptors | See torrc manual.
|
| options/nixos/services.tor.settings.ReachableORAddresses | See torrc manual.
|
| options/nixos/services.scrutiny.collector.settings.host.id | Host ID for identifying/labelling groups of disks
|
| options/nixos/services.openbao.settings.listener.<name>.address | The TCP address or UNIX socket path to listen on.
|
| options/nixos/services.transmission.settings.rpc-port | The RPC port to listen to.
|
| options/nixos/services.misskey.settings.meilisearch | Meilisearch connection options.
|
| options/nixos/services.umami.settings.DISABLE_TELEMETRY | Umami collects completely anonymous telemetry data in order help improve the application
|
| options/home-manager/services.syncthing.settings.folders.<name>.path | The path to the folder which should be shared
|
| options/home-manager/i18n.inputMethod.fcitx5.settings.addons.<name>.globalSection | global section of an INI file (attrs of INI atom (null, bool, int, float or string))
|
| options/nixos/services.grafana.settings.smtp.password | Password used for authentication
|
| options/nixos/services.scrutiny.settings.web.influxdb.scheme | URL scheme to use when connecting to InfluxDB.
|
| options/nixos/services.pinnwand.settings.paste_help | Raw HTML help text shown in the header area.
|
| options/nixos/services.sourcehut.settings."builds.sr.ht".api-origin | Origin URL for the API
|
| options/nixos/services.hedgedoc.settings.allowGravatar | Whether to enable Libravatar as
profile picture source on your instance
|
| options/nixos/services.lldap.settings.ldap_user_dn | Admin username
|
| options/nixos/services.lldap.settings.database_url | Database URL.
|
| options/nixos/services.stash.settings.plugins_path | Path to scrapers
|
| options/nixos/services.sftpgo.settings.webdavd.bindings.*.port | The port for serving WebDAV requests
|
| options/nixos/services.angrr.settings.profile-policies.<name>.enable | Whether to enable this angrr policy.
|
| options/nixos/services.maubot.settings.server.public_url | Public base URL where the server is visible.
|
| options/nixos/services.matrix-synapse.settings.listeners.*.type | The type of the listener, usually http.
|