| options/nixos/services.tor.settings.DoSConnectionEnabled | See torrc manual.
|
| options/nixos/services.tor.settings.DormantCanceledByStartup | See torrc manual.
|
| options/nixos/services.tor.settings.ExtORPortCookieAuthFileGroupReadable | See torrc manual.
|
| options/nixos/programs.spacefm.settings | The system-wide spacefm configuration
|
| options/nixos/services.inadyn.settings.custom.<name>.password | Password for this DDNS provider
|
| options/nixos/services.hologram-server.enable | Whether to enable the Hologram server for AWS instance credentials
|
| options/nixos/services.opensnitch.settings.Server.LogFile | File to write logs to (use /dev/stdout to write logs to standard
output).
|
| options/nixos/services.sslh.settings.transparent | Whether the services behind sslh (Apache, sshd and so on) will see the
external IP and ports as if the external world connected directly to
them.
|
| options/nixos/services.grafana.settings.server.cert_file | Path to the certificate file (if protocol is set to https or h2).
|
| options/nixos/services.watchdogd.settings.filenr.logmark | Whether to log current stats every poll interval.
|
| options/nixos/services.lidarr.settings.log.analyticsEnabled | Send Anonymous Usage Data
|
| options/nixos/services.radarr.settings.log.analyticsEnabled | Send Anonymous Usage Data
|
| options/nixos/services.sonarr.settings.log.analyticsEnabled | Send Anonymous Usage Data
|
| options/nixos/services.suricata.settings.unix-command.enabled | Enable unix-command socket.
|
| options/nixos/services.waagent.settings.ResourceDisk.SwapSizeMB | Specifies the size of the swap file in MiB (1024×1024 bytes)
|
| options/nixos/services.evremap.settings.dual_role.*.input | The key that should be remapped
|
| options/nixos/services.netbird.tunnels.<name>.user.name | A system user name for this client instance.
|
| options/nixos/services.netbird.clients.<name>.user.name | A system user name for this client instance.
|
| options/nixos/services.anuko-time-tracker.settings.emailRequired | Defines whether an email is required for new registrations.
|
| options/nixos/services.matrix-synapse.settings.turn_uris | The public URIs of the TURN server to give to clients
|
| options/nixos/services.suricata.settings.vars.address-groups.HOME_NET | HOME_NET variable.
|
| options/nixos/services.pretalx.settings.filesystem.logs | Path to the log directory, that pretalx logs message to.
|
| options/home-manager/programs.rbw.settings.base_url | The base-url for a self-hosted bitwarden installation.
|
| options/nixos/services.sourcehut.settings.mail.smtp-password | Outgoing SMTP password.
|
| options/home-manager/services.podman.settings.registries.search | List of repositories to search.
|
| options/nixos/services.matrix-synapse.settings.database.args.user | Username to connect with psycopg2, set to null
when using sqlite3.
|
| options/nixos/services.postfix.settings.main.relayhost | List of hosts to use for relaying outbound mail.
Putting the hostname in angled brackets, e.g. [relay.example.com], turns off MX and SRV lookups for the hostname.
https://www.postfix.org/postconf.5.html#relayhost
|
| options/nixos/services.reposilite.settings.idleTimeout | Default idle timeout used by Jetty.
|
| options/nixos/services.wastebin.settings.WASTEBIN_MAX_BODY_SIZE | Number of bytes to accept for POST requests
|
| options/nixos/services.stash.settings.stash_boxes.*.name | The name of the Stash Box
|
| options/home-manager/xsession.windowManager.spectrwm.settings | Spectrwm settings.
|
| options/nixos/services.spacecookie.settings.root | The directory spacecookie should serve via gopher
|
| options/nixos/services.sourcehut.settings."pages.sr.ht".gemini-certs | An absolute file path (which should be outside the Nix-store)
to Gemini certificates.
|
| options/nixos/services.gitlab.pages.settings.artifacts-server | API URL to proxy artifact requests to.
|
| options/nixos/services.typesense.settings.server.api-address | Address to which Typesense API service binds.
|
| options/nixos/services.frigate.settings.cameras.<name>.ffmpeg.inputs | List of inputs for this camera.
|
| options/home-manager/services.kanshi.settings.*.output.criteria | The criteria can either be an output name, an output description or "*"
|
| options/nixos/services.wastebin.settings.WASTEBIN_BASE_URL | Base URL for the QR code display
|
| options/home-manager/programs.swaylock.settings | Default arguments to swaylock
|
| options/nixos/services.suricata.settings.af-xdp.*.interface | af-xdp capture interface, see upstream docs.
|
| options/nixos/services.sftpgo.settings.webdavd.bindings.*.port | The port for serving WebDAV requests
|
| options/nixos/services.pid-fan-controller.settings.fans.*.cutoff | Whether to stop the fan when minPwm is reached.
|
| options/nixos/services.lasuite-meet.settings.DJANGO_ALLOWED_HOSTS | Comma-separated list of hosts that are able to connect to the server
|
| options/nixos/services.lasuite-docs.settings.DJANGO_ALLOWED_HOSTS | Comma-separated list of hosts that are able to connect to the server
|
| options/nixos/services.tor.settings.DoSCircuitCreationEnabled | See torrc manual.
|
| options/nixos/services.rosenpass.settings.verbosity | Verbosity of output produced by the service.
|
| options/nixos/services.sourcehut.settings."builds.sr.ht".api-origin | Origin URL for the API
|
| options/nixos/services.mautrix-whatsapp.settings | config.yaml configuration as a Nix attribute set
|
| options/nixos/services.akkoma.installWrapper | Whether to install a wrapper around pleroma_ctl to simplify administration of the
Akkoma instance.
|
| options/nixos/xdg.terminal-exec.settings | Configuration options for the Default Terminal Execution Specification
|
| options/nixos/services.froide-govplan.settings.ALLOWED_HOSTS | A list of valid fully-qualified domain names (FQDNs) and/or IP
addresses that can be used to reach the Froide-Govplan service.
|
| options/nixos/services.nextcloud.settings.log_type | Logging backend to use.
systemd automatically adds the php-systemd extensions to services.nextcloud.phpExtraExtensions
|
| options/nixos/services.grafana.settings.server.cdn_url | Specify a full HTTP URL address to the root of your Grafana CDN assets
|
| options/nixos/services.snapserver.settings.tcp-control.port | Port to listen on for snapclient connections.
|
| options/nixos/services.spacecookie.settings.log.enable | Whether to enable logging for spacecookie.
|
| options/nixos/services.radicle.ci.adapters.native.instances.<name>.runtimePackages | Packages added to the adapter's PATH.
|
| options/nixos/services.openvpn.servers | Each attribute of this option defines a systemd service that
runs an OpenVPN instance
|
| options/nixos/services.suricata.settings.pcap.*.interface | pcap capture interface, see upstream docs.
|
| options/nixos/services.spacecookie.settings.log.hide-ips | If enabled, spacecookie will hide personal
information of users like IP addresses from
log output.
|
| options/nixos/services.opensnitch.settings.Firewall | Which firewall backend to use.
|
| options/nixos/services.openssh.startWhenNeeded | If set, sshd is socket-activated; that
is, instead of having it permanently running as a daemon,
systemd will start an instance for each incoming connection.
|
| options/nixos/services.spacecookie.settings.log.hide-time | If enabled, spacecookie will not print timestamps
at the beginning of every log line.
|
| options/nixos/services.etebase-server.settings.database.engine | The database engine to use.
|
| options/nixos/services.lemmy.settings.captcha.difficulty | The difficultly of the captcha to solve.
|
| options/nixos/services.grafana-image-renderer.settings.server.addr | Listen address of the service.
|
| options/home-manager/programs.floorp.profiles.<name>.extensions.settings.<name>.settings | Json formatted options for this extension.
|
| options/home-manager/programs.anime-downloader.settings | Configuration settings for anime-downloader
|
| options/nixos/services.scrutiny.collector.settings.log.level | Log level for Scrutiny collector.
|
| options/nixos/services.roundcube.extraConfig | Extra configuration for roundcube webmail instance
|
| options/nixos/services.grafana.settings.users.home_page | Path to a custom home page
|
| options/nixos/services.maubot.settings.server.public_url | Public base URL where the server is visible.
|
| options/nixos/services.suricata.settings.app-layer.error-policy | The error-policy setting applies to all app-layer parsers
|
| options/nixos/services.privoxy.settings.filterfile | List of paths to Privoxy filter files
|
| options/nixos/services.suricata.settings.logging.outputs.file.type | Type of logfile.
|
| options/nixos/services.syncplay.saltFile | Path to the file that contains the server salt
|
| options/nixos/services.openssh.settings.KexAlgorithms | Allowed key exchange algorithms
Uses the lower bound recommended in both
https://stribika.github.io/2015/01/04/secure-secure-shell.html
and
https://infosec.mozilla.org/guidelines/openssh#modern-openssh-67
|
| options/home-manager/programs.starship.settings | Configuration written to
$XDG_CONFIG_HOME/starship.toml
|
| options/home-manager/programs.topgrade.settings | Configuration written to
$XDG_CONFIG_HOME/topgrade.toml
|
| options/home-manager/programs.mangohud.settings | Configuration written to
$XDG_CONFIG_HOME/MangoHud/MangoHud.conf
|
| options/nixos/services.crowdsec.settings.simulation | Attributes inside the simulation.yaml file.
|
| options/nixos/services.chhoto-url.settings.public_mode | Whether to enable public mode.
|
| options/nixos/services.chhoto-url.settings.slug_length | The length of auto-generated slugs.
|
| options/nixos/services.pinnwand.settings.paste_size | Maximum size of a paste in bytes.
|
| options/home-manager/xdg.terminal-exec.settings | Configuration options for the Default Terminal Execution Specification
|
| options/nixos/services.headscale.settings.dns.magic_dns | Whether to use MagicDNS.
|
| options/nixos/services.blackfire-agent.settings.server-token | Sets the server token used to authenticate with Blackfire
You can find your personal server-token at https://blackfire.io/my/settings/credentials
|
| options/nixos/services.your_spotify.settings | Your Spotify Configuration
|
| options/nixos/nix.settings.trusted-public-keys | List of public keys used to sign binary caches
|
| options/darwin/nix.settings.trusted-public-keys | List of public keys used to sign binary caches
|
| options/nixos/services.bookstack.settings.DB_PASSWORD_FILE | The file containing your mysql/mariadb database password.
|
| options/nixos/services.rosenpass.settings.peers.*.endpoint | Endpoint of the remote Rosenpass peer.
|
| options/nixos/services.pgbouncer.settings.databases | Detailed information about PostgreSQL database definitions:
https://www.pgbouncer.org/config.html#section-databases
|
| options/nixos/services.suricata.settings.outputs.*.<name>.enabled | Whether to enable .
|
| options/nixos/services.nezha-agent.settings.temperature | Enable temperature monitoring.
|
| options/nixos/services.nezha-agent.settings.disable_nat | Disable NAT penetration.
|
| options/nixos/services.your_spotify.settings.PORT | The port of the api server
|
| options/nixos/services.sourcehut.settings."builds.sr.ht::worker".name | Listening address and listening port
of the build runner (with HTTP port if not 80).
|
| options/nixos/services.snapserver.settings.stream.source | One or multiple URIs to PCM input streams.
|
| options/nixos/services.writefreely.settings.server.port | The port WriteFreely should listen on.
|
| options/home-manager/services.activitywatch.watchers.<name>.settings | The settings for the individual watcher in TOML format
|