| options/nixos/services.mackerel-agent.settings.diagnostic | Whether to enable collecting memory usage for the agent itself.
|
| options/nixos/services.szurubooru.server.settings.data_url | Full URL to the data endpoint.
|
| options/nixos/services.warpgate.settings.recordings.enable | Whether to enable session recording.
|
| options/nixos/services.canaille.settings.CANAILLE_OIDC.JWT.PRIVATE_KEY | JWT private key
|
| options/nixos/programs.openvpn3.netcfg.settings.systemd_resolved | Whether to use systemd-resolved integration
|
| options/nixos/services.tinc.networks.<name>.hostSettings.<name>.settings | Configuration for this host
|
| options/nixos/services.libeufin.nexus.settings.nexus-ebics.BANK_DIALECT | Name of the following combination: EBICS version and ISO20022
recommendations that Nexus would honor in the communication with the
bank
|
| options/nixos/programs.clash-verge.tunMode | Whether to enable Setcap for TUN Mode
|
| options/nixos/services.kanidm.unix.settings.hsm_pin_path | Path to a HSM pin.
|
| options/nixos/security.googleOsLogin.enable | Whether to enable Google OS Login
|
| options/nixos/services.omnom.settings.activitypub.privkey | ActivityPub private key
|
| options/nixos/services.suricata.settings.vars.address-groups.SMTP_SERVERS | SMTP_SERVERS variable.
|
| options/nixos/services.suricata.settings.vars.address-groups.HTTP_SERVERS | HTTP_SERVERS variable.
|
| options/nixos/services.filebrowser.settings.database | The path to FileBrowser's Bolt database.
|
| options/nixos/services.opensnitch.settings.ProcMonitorMethod | Which process monitoring method to use.
|
| options/nixos/services.healthchecks.settingsFile | Environment variables which are read by healthchecks (local)_settings.py
|
| options/nixos/services.anubis.defaultOptions.settings.SERVE_ROBOTS_TXT | Whether to serve a default robots.txt that denies access to common AI bots by name and all other
bots by wildcard.
|
| options/nixos/services.firezone.server.settingsSecret | This is a convenience option which allows you to set secret values for
environment variables by specifying a file which will contain the value
at runtime
|
| options/nixos/services.szurubooru.server.settings.show_sql | Whether to show SQL in server logs.
|
| options/nixos/services.tlsrpt.collectd.settings.socketname | Path at which the UNIX socket will be created.
|
| options/nixos/services.parsedmarc.settings.imap.password | The IMAP server password
|
| options/nixos/services.parsedmarc.settings.smtp.password | The SMTP server password
|
| options/nixos/services.printing.cups-pdf.instances.<name>.settings.Out | output directory;
${HOME} will be expanded to the user's home directory,
${USER} will be expanded to the user name.
|
| options/nixos/services.sourcehut.settings.mail.pgp-privkey | An absolute file path (which should be outside the Nix-store)
to an OpenPGP private key
|
| options/nixos/services.filesender.settings.site_url | Site URL
|
| options/nixos/services.easytier.instances.<name>.settings.ipv4 | IPv4 cidr address of this peer in the virtual network
|
| options/nixos/services.ocsinventory-agent.settings.ca | Path to CA certificates file in PEM format, for server
SSL certificate validation.
|
| options/nixos/services.postfix.settings.main.smtp_tls_CAfile | File containing CA certificates of root CAs trusted to sign either remote SMTP server certificates or intermediate CA certificates
|
| options/nixos/services.waagent.settings.ResourceDisk.FileSystem | The file system type for the resource disk
|
| options/nixos/services.saunafs.chunkserver.settings.DATA_PATH | Directory for chunck meta data
|
| options/nixos/services.dendrite.settings.sync_api.search.enabled | Whether to enable Dendrite's full-text search engine.
|
| options/nixos/services.maubot.settings.homeservers | Known homeservers
|
| options/nixos/services.evremap.settings.device_name | The name of the device that should be remapped
|
| options/nixos/services.privoxy.settings.actionsfile | List of paths to Privoxy action files
|
| options/nixos/services.anubis.defaultOptions.settings.BIND_NETWORK | The network family that Anubis should bind to
|
| options/nixos/services.reposilite.settings.ioThreadPool | The IO thread pool handles all tasks that may benefit from non-blocking IO. (min: 2)
Because most tasks are redirected to IO thread pool, it might be a good idea to keep it at least equal to web thread pool.
|
| options/nixos/services.syncthing.settings.folders.<name>.enable | Whether to share this folder
|
| options/home-manager/services.syncthing.settings.folders.<name>.enable | Whether to share this folder
|
| options/nixos/services.oncall.settings.db.conn.require_auth | Whether authentication is required to access the web app.
|
| options/nixos/services.suricata.settings.stats.decoder-events-prefix | Decoder event prefix in stats
|
| options/nixos/services.watchdogd.settings.meminfo.critical | The critical watermark level
|
| options/nixos/services.watchdogd.settings.loadavg.critical | The critical watermark level
|
| options/darwin/services.aerospace.settings.after-startup-command | Add commands that run after AeroSpace startup
|
| options/nixos/services.suricata.settings.af-packet.*.interface | af-packet capture interface, see upstream docs reagrding tuning.
|
| options/nixos/services.prometheus.exporters.ping.settings | Configuration for ping_exporter, see
https://github.com/czerwonk/ping_exporter
for supported values.
|
| options/nixos/services.waagent.settings.AutoUpdate.UpdateToLatestVersion | Whether or not to enable auto-update of the Extension Handler.
|
| options/nixos/services.hercules-ci-agent.settings.binaryCachesPath | Path to a JSON file containing binary cache secret keys
|
| options/darwin/services.hercules-ci-agent.settings.binaryCachesPath | Path to a JSON file containing binary cache secret keys
|
| options/nixos/services.firewalld.settings.CleanupModulesOnExit | Whether to unload all firewall-related kernel modules when firewalld stops.
|
| options/nixos/services.reposilite.settings.webThreadPool | Maximum amount of threads used by the core thread pool. (min: 5)
The web thread pool handles the first few steps of incoming HTTP connections, tasks are redirected as soon as possible to the IO thread pool.
|
| options/nixos/services.tor.settings.AuthDirHasIPv6Connectivity | See torrc manual.
|
| options/nixos/services.inadyn.settings.provider.<name>.password | Password for this DDNS provider
|
| options/home-manager/accounts.email.accounts.<name>.mujmap.settings.username | Username for basic HTTP authentication
|
| options/nixos/services.sourcehut.settings."builds.sr.ht".oauth-client-secret | builds.sr.ht's OAuth client secret for meta.sr.ht.
|
| options/nixos/services.moosefs.chunkserver.settings.DATA_PATH | Directory for lock files and other runtime data.
|
| options/nixos/services.snapserver.settings.tcp-control.enabled | Whether to enable the TCP JSON-RPC.
|
| options/nixos/virtualisation.podman.defaultNetwork.settings | Settings for podman's default network.
|
| options/darwin/services.aerospace.settings.on-window-detected.*."if".app-id | The application ID to match (optional).
|
| options/nixos/services.epgstation.settings.mirakurunPath | URL to connect to Mirakurun.
|
| options/nixos/services.opensearch.settings."discovery.type" | The type of discovery to use.
|
| options/nixos/services.gitlab.pages.settings.internal-gitlab-server | Internal GitLab server used for API requests, useful
if you want to send that traffic over an internal load
balancer
|
| options/nixos/services.authelia.instances.<name>.settings | Your Authelia config.yml as a Nix attribute set
|
| options/nixos/services.snapserver.settings.tcp-streaming.port | Port to listen on for snapclient connections.
|
| options/nixos/services.warpgate.settings.http.certificate | Path to HTTPS listener certificate.
|
| options/nixos/services.suricata.settings.logging.outputs.syslog.format | Logformat for logs send to syslog.
|
| options/nixos/services.suricata.settings.logging.outputs.syslog.enable | Whether to enable logging to syslog.
|
| options/nixos/services.immichframe.settings.Accounts | Accounts configuration, multiple are permitted
|
| options/nixos/services.mautrix-meta.instances.<name>.settings | config.yaml configuration as a Nix attribute set
|
| options/nixos/services.listmonk.database.settings.smtp.*.tls_type | Type of TLS authentication with the SMTP server
|
| options/nixos/services.wastebin.settings.WASTEBIN_HTTP_TIMEOUT | Maximum number of seconds a request can be processed until wastebin responds with 408
|
| options/nixos/services.taler.exchange.settings.exchange.CURRENCY | The currency which the exchange will operate with
|
| options/nixos/services.bitmagnet.settings.postgres.password | Password for database user
|
| options/nixos/services.wstunnel.servers.<name>.settings.restrict-to.*.host | The hostname.
|
| options/nixos/services.wstunnel.servers.<name>.settings.restrict-to.*.port | The port.
|
| options/nixos/services.suricata.settings.vars.address-groups.MODBUS_SERVER | MODBUS_SERVER variable.
|
| options/nixos/services.suricata.settings.vars.address-groups.MODBUS_CLIENT | MODBUS_CLIENT variable
|
| options/nixos/services.sourcehut.settings."pages.sr.ht".migrate-on-upgrade | Whether to enable automatic migrations on package upgrade.
|
| options/nixos/services.sourcehut.settings."lists.sr.ht".migrate-on-upgrade | Whether to enable automatic migrations on package upgrade.
|
| options/nixos/services.sourcehut.settings."paste.sr.ht".migrate-on-upgrade | Whether to enable automatic migrations on package upgrade.
|
| options/nixos/services.sourcehut.settings."git.sr.ht::api".internal-ipnet | Set of IP subnets which are permitted to utilize internal API
authentication
|
| options/nixos/services.garage.settings.metadata_dir | The metadata directory, put this on a fast disk (e.g
|
| options/nixos/services.journald.upload.settings.Upload.ServerKeyFile | SSL key in PEM format
|
| options/nixos/services.homebridge.settings.platforms.*.name | Name of the platform
|
| options/nixos/services.glitchtip.settings.GLITCHTIP_DOMAIN | The URL under which GlitchTip is externally reachable.
|
| options/nixos/services.tor.settings.PublishHidServDescriptors | See torrc manual.
|
| options/nixos/services.opensearch.settings."transport.port" | The port to listen on for transport traffic.
|
| options/nixos/services.tor.settings.MaxAdvertisedBandwidth | See torrc manual.
|
| options/nixos/services.ocsinventory-agent.settings.debug | Whether to enable debug mode.
|
| options/nixos/services.libinput.touchpad.accelStepScroll | Sets the step between the points of the scroll acceleration function
|
| options/nixos/services.opengfw.settings.workers.tcpMaxBufferedPagesTotal | TCP max total buffered pages.
|
| options/nixos/services.quickwit.settings.rest.listen_port | The port to listen on for HTTP REST traffic.
|
| options/nixos/services.slskd.settings.global.upload.speed_limit | Total upload speed limit.
|
| options/nixos/services.opensnitch.settings.Audit.AudispSocketPath | Configure audit socket path
|
| options/nixos/services.anubis.instances.<name>.settings.POLICY_FNAME | The policy file to use
|
| options/home-manager/accounts.email.accounts.<name>.mujmap.settings.tags.deleted | Tag for notmuch to use for messages stored in the mailbox labeled with the
Trash name attribute
|
| options/nixos/services.suricata.settings.dpdk.interfaces | See upstream docs: docs/capture-hardware/dpdk and docs/configuration/suricata-yaml.html#data-plane-development-kit-dpdk.
|
| options/nixos/services.hddfancontrol.settings | Parameter-sets for each instance of hddfancontrol.
|
| options/nixos/services.epgstation.settings.encodeProcessNum | The maximum number of processes that EPGStation would allow to run
at the same time for encoding or streaming videos.
|
| options/nixos/services.amule.settings.ExternalConnect.ECPassword | MD5 hash of the password, obtainaible with echo "<password>" | md5sum | cut -d ' ' -f 1
|
| options/nixos/services.mautrix-discord.settings.homeserver | fullDataDiration
|