| options/nixos/services.prometheus.webConfigFile | Specifies which file should be used as web.config.file and be passed on startup
|
| options/nixos/services.openiscsi.extraConfigFile | Append an additional file's contents to /etc/iscsid.conf
|
| options/nixos/services.peering-manager.ldapConfigPath | Path to the Configuration-File for LDAP-Authentication, will be loaded as ldap_config.py
|
| options/nixos/services.oncall.secretFile | A YAML file containing secrets such as database or user passwords
|
| options/nixos/services.snipe-it.database.passwordFile | A file containing the password corresponding to
database.user.
|
| options/nixos/services.sshwifty.socks5PasswordFile | Path to a file containing the SOCKS5 password.
|
| options/nixos/users.extraUsers.<name>.description | A short description of the user account, typically the
user's full name
|
| options/nixos/services.weblate.djangoSecretKeyFile | Location of the Django secret key
|
| options/nixos/services.xserver.logFile | Controls the file Xorg logs to
|
| options/darwin/environment.launchAgents.<name>.source | Path of the source file.
|
| options/home-manager/xdg.mimeApps.associations.added | Defines additional associations of applications with
mimetypes, as if the .desktop file was listing this mimetype
in the first place.
|
| options/home-manager/xsession.windowManager.fluxbox.keys | Keyboard shortcuts configuration for Fluxbox, written to
~/.fluxbox/keys
|
| options/home-manager/programs.librewolf.profiles.<name>.bookmarks.force | Whether to force override existing custom bookmarks.
|
| options/home-manager/programs.gnome-terminal.profile.<name>.scrollbackLines | The number of scrollback lines to keep, null for infinite.
|
| options/nixos/services.borgmatic.settings.repositories | A required list of local or remote repositories with paths and
optional labels (which can be used with the --repository flag to
select a repository)
|
| options/nixos/services.kubernetes.proxy.kubeconfig.keyFile | Kubernetes proxy client key file used to connect to kube-apiserver.
|
| options/nixos/services.autorandr.profiles.<name>.hooks.predetect | Predetect hook executed before autorandr attempts to run xrandr.
|
| options/home-manager/programs.autorandr.profiles.<name>.hooks.predetect | Predetect hook executed before autorandr attempts to run xrandr.
|
| options/nixos/services.prometheus.scrapeConfigs.*.puppetdb_sd_configs.*.tls_config.ca_file | CA certificate to validate API server certificate with.
|
| options/nixos/services.prometheus.scrapeConfigs.*.scaleway_sd_configs.*.tls_config.ca_file | CA certificate to validate API server certificate with.
|
| options/nixos/services.prometheus.scrapeConfigs.*.marathon_sd_configs.*.tls_config.ca_file | CA certificate to validate API server certificate with.
|
| options/darwin/security.sandbox.profiles.<name>.allowLocalNetworking | Whether to allow localhost network access inside the sandbox.
|
| options/nixos/services.prosody.uploadHttp.uploadFileSizeLimit | Maximum file size, in bytes
|
| options/nixos/security.pam.services.<name>.setLoginUid | Set the login uid of the process
(/proc/self/loginuid) for auditing
purposes
|
| options/nixos/security.acme.defaults.webroot | Where the webroot of the HTTP vhost is located.
.well-known/acme-challenge/ directory
will be created below the webroot if it doesn't exist.
http://example.org/.well-known/acme-challenge/ must also
be available (notice unencrypted HTTP).
|
| options/nixos/services.agorakit.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| options/nixos/services.gns3-server.auth.passwordFile | A file containing the password to access the GNS3 Server.
This should be a string, not a nix path, since nix paths
are copied into the world-readable nix store.
|
| options/nixos/services.librenms.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| options/nixos/services.cross-seed.settings.dataDirs | Paths to be searched for matching data
|
| options/nixos/services.drupal.sites.<name>.database.socket | Path to the unix socket file to use for authentication.
|
| options/nixos/services.dolibarr.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| options/nixos/services.caddy.enableReload | Reload Caddy instead of restarting it when configuration file changes
|
| options/nixos/services.fediwall.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| options/nixos/services.jenkins.jobBuilder.accessTokenFile | File containing the API token for the accessUser
user.
|
| options/nixos/services.clickhouse.usersConfig | Your users.yaml as a Nix attribute set
|
| options/nixos/security.tpm2.fapi.ekCertLess | A switch to disable Endorsement Key (EK) certificate verification
|
| options/nixos/services.kanboard.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| options/nixos/services.quicktun.<name>.privateKeyFile | Path to file containing local secret key in binary or hexadecimal form.
Not needed when services.quicktun..protocol is set to raw.
|
| options/nixos/services.slurm.dbdserver.extraConfig | Extra configuration for slurmdbd.conf See also:
slurmdbd.conf(8).
|
| options/nixos/services.mainsail.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| options/nixos/services.openssh.settings.StrictModes | Whether sshd should check file modes and ownership of directories
|
| options/nixos/services.pulseaudio.extraClientConf | Extra configuration appended to pulse/client.conf file.
|
| options/nixos/services.pixelfed.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| options/nixos/services.lldap.environmentFile | Environment file as defined in systemd.exec(5) passed to the service.
|
| options/nixos/services.ncdns.dnssec.keys.zonePublic | Path to the file containing the ZSK public key
|
| options/nixos/services.microbin.passwordFile | Path to file containing environment variables
|
| options/nixos/services.nextcloud.datadir | Nextcloud's data storage path
|
| options/nixos/services.thinkfan.fans.*.query | The query string used to match one or more fans: can be
a fullpath to the temperature file (single fan) or a fullpath
to a driver directory (multiple fans).
When multiple fans match, the query can be restricted using the
name or indices options.
|
| options/nixos/services.quickwit.settings.version | Configuration file version.
|
| options/nixos/systemd.shutdownRamfs.contents.<name>.source | Path of the source file.
|
| options/nixos/users.ldap.daemon.rootpwmodpwFile | The path to a file containing the credentials with which to bind to
the LDAP server if the root user tries to change a user's password.
|
| options/nixos/services.yarr.environmentFile | Environment file for specifying additional settings such as secrets
|
| options/nixos/systemd.user.paths.<name>.reloadTriggers | An arbitrary list of items such as derivations
|
| options/darwin/system.activationScripts.<name>.enable | Whether this file should be generated
|
| options/home-manager/programs.i3status-rust.bars.<name>.settings | Any extra options to add to i3status-rust
config.
|
| options/home-manager/programs.kubeswitch.settings | Configuration written to
~/.kube/switch-config.yaml.
|
| options/home-manager/programs.git.includes.*.contentSuffix | Nix store name for the git configuration text file,
when generating the configuration text from nix options.
|
| options/nixos/services.prometheus.exporters.mikrotik.configFile | Path to a mikrotik exporter configuration file
|
| options/nixos/services.libinput.mouse.accelProfile | Sets the pointer acceleration profile to the given profile
|
| options/nixos/services.beesd.filesystems.<name>.spec | Description of how to identify the filesystem to be duplicated by this
instance of bees
|
| options/nixos/services.lldap.settings.ldap_user_pass_file | Path to a file containing the default admin password
|
| options/nixos/services.prometheus.scrapeConfigs.*.hetzner_sd_configs.*.authorization.credentials_file | Sets the credentials to the credentials read from the configured file
|
| options/home-manager/services.kanshi.settings.*.profile.outputs.*.transform | Sets the output transform.
|
| options/nixos/networking.wireless.extraConfig | Extra lines appended to the configuration file
|
| options/nixos/services.journald.gateway.trust | Specify the path to a file or AF_UNIX stream socket to read a CA
certificate from
|
| options/nixos/services.jitsi-meet.interfaceConfig | Client-side web-app interface settings that override the defaults in interface_config.js
|
| options/nixos/services.foundationdb.tls.key | Private key file for the certificate.
|
| options/nixos/services.apache-kafka.settings | Kafka broker configuration
server.properties
|
| options/nixos/services.photoprism.passwordFile | Admin password file.
|
| options/nixos/services.nsd.remoteControl.controlKeyFile | Path to the client private key, which is used by nsd-control
but not by the server
|
| options/nixos/services.tuned.settings.sections | attribute set of section of an INI file (attrs of INI atom (null, bool, int, float or string))
|
| options/nixos/services.r53-ddns.environmentFile | File containing the AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY
in the format of an EnvironmentFile as described by systemd.exec(5)
|
| options/nixos/services.matrix-hookshot.settings | config.yml configuration as a Nix attribute set
|
| options/nixos/services.redis.servers.<name>.requirePass | Password for database (STORED PLAIN TEXT, WORLD-READABLE IN NIX STORE)
|
| options/nixos/services.tinc.networks.<name>.extraConfig | Extra lines to add to the tinc service configuration file
|
| options/nixos/services.tuliprox.systemSettings | Main config file
Refer to the Tuliprox documentation for available attributes
|
| options/nixos/services.monado.forceDefaultRuntime | Whether to ensure that Monado is the active runtime set for the current
user
|
| options/nixos/services.k3s.environmentFile | File path containing environment variables for configuring the k3s service in the format of an EnvironmentFile
|
| options/nixos/services.webdav.settings | Attrset that is converted and passed as config file
|
| options/nixos/services.zammad.database.passwordFile | A file containing the password for services.zammad.database.user.
|
| options/nixos/services.windmill.database.urlPath | Path to the file containing the database url windmill should connect to
|
| options/home-manager/services.plan9port.plumber.enable | Whether to enable the Plan 9 file system for interprocess messaging.
|
| options/home-manager/programs.asciinema.settings | Declare-able configurations for asciinema written to
$XDG_CONFIG_HOME/asciinema/config.toml
|
| options/nixos/services.prometheus.scrapeConfigs.*.dockerswarm_sd_configs.*.basic_auth.password_file | HTTP password file
|
| options/nixos/services.kubernetes.proxy.kubeconfig.certFile | Kubernetes proxy client certificate file used to connect to kube-apiserver.
|
| options/home-manager/programs.librewolf.profiles.<name>.containers | Attribute set of container configurations
|
| options/nixos/services.matrix-synapse.workers.<name>.worker_log_config | The file for log configuration
|
| options/nixos/services.opentelemetry-collector.configFile | Specify a path to a configuration file that Opentelemetry Collector should use.
|
| options/home-manager/programs.thunderbird.profiles.<name>.search.order | The order the search engines are listed in
|
| options/nixos/services.nginx.sso.configuration | nginx-sso configuration
(documentation)
as a Nix attribute set
|
| options/nixos/services.prometheus.exporters.borgmatic.configFile | The path to the borgmatic config file
|
| options/home-manager/services.kanshi.settings.*.profile.outputs.*.adaptiveSync | Enables or disables adaptive synchronization
(aka
|
| options/home-manager/services.kanshi.settings.*.profile.outputs.*.position | <x>,<y>
Places the output at the specified position in the global coordinates
space.
|
| options/nixos/services.bookstack.mail.passwordFile | A file containing the password corresponding to
mail.user.
|
| options/nixos/services.guacamole-server.userMappingXml | Configuration file that correspond to user-mapping.xml.
|
| options/nixos/services.guacamole-client.userMappingXml | Configuration file that correspond to user-mapping.xml.
|
| options/nixos/services.cloudflare-dyndns.apiTokenFile | The path to a file containing the CloudFlare API token.
|
| options/nixos/services.cassandra.jmxRoles | Roles that are allowed to access the JMX (e.g. nodetool)
BEWARE: The passwords will be stored world readable in the nix store
|
| options/nixos/services.flexget.systemScheduler | When true, execute the runs via the flexget-runner.timer
|
| options/nixos/services.caddy.adapter | Name of the config adapter to use
|