| options/nixos/services.sourcehut.settings.mail.pgp-privkey | An absolute file path (which should be outside the Nix-store)
to an OpenPGP private key
|
| options/nixos/services.evremap.settings.device_name | The name of the device that should be remapped
|
| options/nixos/services.privoxy.settings.actionsfile | List of paths to Privoxy action files
|
| options/nixos/services.suricata.settings.vars.address-groups.DC_SERVERS | DC_SERVERS variable.
|
| options/nixos/services.ocsinventory-agent.settings.ca | Path to CA certificates file in PEM format, for server
SSL certificate validation.
|
| options/nixos/services.suwayomi-server.settings.server.downloadAsCbz | Download chapters as .cbz files.
|
| options/nixos/services.prowlarr.settings.log.analyticsEnabled | Send Anonymous Usage Data
|
| options/nixos/services.whisparr.settings.log.analyticsEnabled | Send Anonymous Usage Data
|
| options/nixos/services.filebrowser.settings.database | The path to FileBrowser's Bolt database.
|
| options/nixos/services.opensnitch.settings.ProcMonitorMethod | Which process monitoring method to use.
|
| options/nixos/security.loginDefs.settings.TTYPERM | The terminal permissions: the login tty will be owned by the TTYGROUP group,
and the permissions will be set to TTYPERM
|
| options/nixos/services.inadyn.settings.provider.<name>.password | Password for this DDNS provider
|
| options/home-manager/programs.spotify-player.settings | Configuration written to
$XDG_CONFIG_HOME/spotify-player/app.toml
|
| options/nixos/services.suricata.settings.af-packet.*.interface | af-packet capture interface, see upstream docs reagrding tuning.
|
| options/nixos/services.sourcehut.settings.objects.s3-upstream | Configure the S3-compatible object storage service.
|
| options/nixos/services.sourcehut.settings."meta.sr.ht".migrate-on-upgrade | Whether to enable automatic migrations on package upgrade.
|
| options/nixos/services.sourcehut.settings."todo.sr.ht".migrate-on-upgrade | Whether to enable automatic migrations on package upgrade.
|
| options/nixos/services.bitmagnet.settings.dht_server.port | DHT listen port
|
| options/nixos/services.botamusique.settings.bot.username | Name the bot should appear with.
|
| options/nixos/services.szurubooru.server.settings.data_dir | Path to the static files.
|
| options/nixos/services.tlsrpt.collectd.settings.socketmode | Permissions on the UNIX socket.
|
| options/home-manager/services.podman.settings.registries.insecure | List of insecure repositories.
|
| options/nixos/networking.ifstate.settings | Content of IfState's configuration file
|
| options/nixos/services.hddfancontrol.settings | Parameter-sets for each instance of hddfancontrol.
|
| options/nixos/services.postfix.settings.main.smtp_tls_CAfile | File containing CA certificates of root CAs trusted to sign either remote SMTP server certificates or intermediate CA certificates
|
| options/nixos/services.waagent.settings.ResourceDisk.FileSystem | The file system type for the resource disk
|
| options/nixos/security.loginDefs.settings.DEFAULT_HOME | Indicate if login is allowed if we can't cd to the home directory.
|
| options/home-manager/programs.keepassxc.settings | Configuration written to
$XDG_CONFIG_HOME/keepassxc/keepassxc.ini
|
| options/nixos/services.sourcehut.settings."builds.sr.ht::worker".timeout | Max build duration
|
| options/nixos/services.firewalld.settings.CleanupModulesOnExit | Whether to unload all firewall-related kernel modules when firewalld stops.
|
| options/darwin/services.aerospace.settings.after-startup-command | Add commands that run after AeroSpace startup
|
| options/home-manager/programs.pianobar.settings | Apply configurations for pianobar via key/value attributes
|
| options/nixos/services.radicle.ci.broker.settings.adapters.<name>.command | Adapter command to run.
|
| options/nixos/services.logrotate.settings.<name>.frequency | How often to rotate the logs
|
| options/nixos/services.suricata.settings.vars.address-groups.SQL_SERVERS | SQL_SERVERS variable.
|
| options/nixos/services.suricata.settings.vars.address-groups.AIM_SERVERS | AIM_SERVERS variable.
|
| options/nixos/services.suricata.settings.vars.address-groups.DNS_SERVERS | DNS_SERVERS variable.
|
| options/nixos/services.szurubooru.server.settings.data_url | Full URL to the data endpoint.
|
| options/nixos/services.warpgate.settings.recordings.enable | Whether to enable session recording.
|
| options/nixos/services.fastnetmon-advanced.traffic_db.settings | Additional settings for /etc/fastnetmon/traffic_db.conf
|
| options/darwin/services.aerospace.settings.on-window-detected.*."if".app-id | The application ID to match (optional).
|
| options/nixos/services.tor.settings.AuthDirHasIPv6Connectivity | See torrc manual.
|
| options/nixos/services.parsedmarc.settings.imap.password | The IMAP server password
|
| options/nixos/services.parsedmarc.settings.smtp.password | The SMTP server password
|
| options/nixos/services.printing.cups-pdf.instances.<name>.settings.Out | output directory;
${HOME} will be expanded to the user's home directory,
${USER} will be expanded to the user name.
|
| options/nixos/services.libeufin.nexus.settings.nexus-ebics.BANK_PUBLIC_KEYS_FILE | Filesystem location where Nexus should store the bank public keys.
|
| options/nixos/services.anubis.defaultOptions.settings.SERVE_ROBOTS_TXT | Whether to serve a default robots.txt that denies access to common AI bots by name and all other
bots by wildcard.
|
| options/home-manager/programs.niriswitcher.settings | niriswitcher configuration
|
| options/nixos/services.omnom.settings.activitypub.privkey | ActivityPub private key
|
| options/nixos/services.kanidm.unix.settings.hsm_pin_path | Path to a HSM pin.
|
| options/nixos/services.wastebin.settings.WASTEBIN_HTTP_TIMEOUT | Maximum number of seconds a request can be processed until wastebin responds with 408
|
| options/nixos/services.epgstation.settings.mirakurunPath | URL to connect to Mirakurun.
|
| options/nixos/services.opensearch.settings."discovery.type" | The type of discovery to use.
|
| options/nixos/services.immichframe.settings.Accounts | Accounts configuration, multiple are permitted
|
| options/nixos/services.anubis.defaultOptions.settings.BIND_NETWORK | The network family that Anubis should bind to
|
| options/nixos/services.canaille.settings.CANAILLE.SMTP.PASSWORD | SMTP Password
|
| options/nixos/services.anubis.instances.<name>.settings.POLICY_FNAME | The policy file to use
|
| options/nixos/services.tinyproxy.settings.Anonymous | If an Anonymous keyword is present, then anonymous proxying is enabled
|
| options/nixos/services.anubis.instances.<name>.settings.BIND | The address that Anubis listens to
|
| options/nixos/boot.initrd.systemd.settings.Manager | Options for the global systemd service manager used in initrd
|
| options/nixos/services.szurubooru.server.settings.show_sql | Whether to show SQL in server logs.
|
| options/nixos/services.tlsrpt.collectd.settings.socketname | Path at which the UNIX socket will be created.
|
| options/nixos/services.garage.settings.metadata_dir | The metadata directory, put this on a fast disk (e.g
|
| options/nixos/services.wstunnel.servers.<name>.settings.restrict-to.*.host | The hostname.
|
| options/nixos/services.wstunnel.servers.<name>.settings.restrict-to.*.port | The port.
|
| options/nixos/services.libeufin.nexus.settings.nexus-ebics.BANK_DIALECT | Name of the following combination: EBICS version and ISO20022
recommendations that Nexus would honor in the communication with the
bank
|
| options/nixos/services.suricata.settings.stats.decoder-events-prefix | Decoder event prefix in stats
|
| options/nixos/services.watchdogd.settings.meminfo.critical | The critical watermark level
|
| options/nixos/services.watchdogd.settings.loadavg.critical | The critical watermark level
|
| options/nixos/services.gitlab.pages.settings.internal-gitlab-server | Internal GitLab server used for API requests, useful
if you want to send that traffic over an internal load
balancer
|
| options/nixos/services.globalprotect.settings | GlobalProtect-openconnect configuration
|
| options/nixos/services.saunafs.chunkserver.settings.DATA_PATH | Directory for chunck meta data
|
| options/home-manager/programs.dircolors.settings | Options to add to .dir_colors file
|
| options/home-manager/programs.hyprpanel.settings | Configuration written to
$XDG_CONFIG_HOME/hyprpanel/config.json
|
| options/nixos/services.epgstation.settings.encodeProcessNum | The maximum number of processes that EPGStation would allow to run
at the same time for encoding or streaming videos.
|
| options/nixos/services.homebridge.settings.platforms.*.name | Name of the platform
|
| options/nixos/services.glitchtip.settings.GLITCHTIP_DOMAIN | The URL under which GlitchTip is externally reachable.
|
| options/nixos/services.tor.settings.PublishHidServDescriptors | See torrc manual.
|
| options/nixos/services.opensearch.settings."transport.port" | The port to listen on for transport traffic.
|
| options/nixos/services.tor.settings.MaxAdvertisedBandwidth | See torrc manual.
|
| options/nixos/services.ocsinventory-agent.settings.debug | Whether to enable debug mode.
|
| options/nixos/services.canaille.settings.CANAILLE_OIDC.JWT.PRIVATE_KEY | JWT private key
|
| options/nixos/services.draupnir.settings.homeserverUrl | Base URL of the Matrix homeserver that provides the Client-Server API.
|
| options/nixos/services.suricata.settings.outputs | Configure the type of alert (and other) logging you would like
|
| options/nixos/services.prometheus.exporters.ping.settings | Configuration for ping_exporter, see
https://github.com/czerwonk/ping_exporter
for supported values.
|
| options/nixos/services.waagent.settings.AutoUpdate.UpdateToLatestVersion | Whether or not to enable auto-update of the Extension Handler.
|
| options/nixos/services.mautrix-discord.settings.homeserver | fullDataDiration
|
| options/nixos/services.vault-agent.instances.<name>.settings.pid_file | Path to use for the pid file.
|
| options/nixos/security.pam.u2f.settings.origin | By default pam-u2f module sets the origin
to pam://$HOSTNAME
|
| options/nixos/services.ocsinventory-agent.settings | Configuration for /etc/ocsinventory-agent/ocsinventory-agent.cfg
|
| options/nixos/services.sourcehut.settings."builds.sr.ht".oauth-client-secret | builds.sr.ht's OAuth client secret for meta.sr.ht.
|
| options/nixos/services.moosefs.chunkserver.settings.DATA_PATH | Directory for lock files and other runtime data.
|
| options/nixos/services.snapserver.settings.tcp-control.enabled | Whether to enable the TCP JSON-RPC.
|
| options/nixos/services.swapspace.settings.freetarget | Percentage of free space swapspace should aim for when adding swapspace
|
| options/nixos/services.wgautomesh.settings.interface | Wireguard interface to manage (it is NOT created by wgautomesh, you
should use another NixOS option to create it such as
networking.wireguard.interfaces.wg0 = {...};).
|
| options/nixos/services.wgautomesh.settings.peers.*.endpoint | Bootstrap endpoint for connecting to this Wireguard peer if no
other address is known or none are working.
|
| options/nixos/services.sourcehut.settings."git.sr.ht::api".internal-ipnet | Set of IP subnets which are permitted to utilize internal API
authentication
|
| options/home-manager/programs.broot.settings.skin | Color configuration
|
| options/nixos/services.minidlna.settings.enable_tivo | Support for streaming .jpg and .mp3 files to a TiVo supporting HMO.
|
| options/nixos/services.matrix-appservice-irc.settings.database | Configuration for the database
|