Opens up the main STUN port and the TURN allocation range.

Whether to enable emitting errors to prometheus.

Path to a keyfile used to unlock the backing encrypted device

Collectors to disable which are enabled by default.

Address to listen on.

Address to listen on.

Whether to automatically open the specified TCP port in the firewall.

Whether to automatically open the specified UDP port in the firewall.

Group under which the modemmanager exporter shall be run.

An attrset of metrics scraping jobs to run.

The xdg-desktop-portal-hyprland package to use.

Path to the file with your personal ecoflow app login email password

Whether to open a firewall port for the SSH listener.

Whether to use implicit TLS instead of STARTTLS (usually port 465)

File containing the credentials to access the repository, in the format of an EnvironmentFile as described by systemd.exec(5)

Collectors to disable from the list of collectors that are enabled by default.

Host and port of the bosun server that will store the collected data.

Generate device specific rules including the "via-port" attribute.

If true, a backend match requires the frontend connection be TLS encrypted

Specify a filter for iptables to use when services.prometheus.exporters.imap-mailstat.openFirewall is true

Collectors to enable

Whether to enable the HTTP/2 protocol

Whether to open the firewall for the port in services.pingvin-share.frontend.port.

List of upstream DNS servers to forward queries to

Specify rules for nftables to add to the input chain when services.prometheus.exporters.mailman3.openFirewall is true.

Remote UDP port

Channel to match.

Port number of the Taskserver.

The address (including host and port) under which we can access the Ollama backend server. !Note that if the the UI service is running under a domain "https://ui.example.org", the Ollama backend service must allow "CORS" requests from this domain, e.g. by adding "services.ollama.environment

File must contain one line, example: R3300000,R3400000,NC430000,...

Specify a filter for iptables to use when services.prometheus.exporters.rtl_433.openFirewall is true

By default, all allowed IPs and subnets are comma-separated in the allowed_ips field

Database host (+port) or socket path

Override default port used for service.

Listening address.

Specify a filter for iptables to use when services.prometheus.exporters.borgmatic.openFirewall is true

Specify a filter for iptables to use when services.prometheus.exporters.surfboard.openFirewall is true

Specify a filter for iptables to use when services.prometheus.exporters.wireguard.openFirewall is true

Specify a filter for iptables to use when services.prometheus.exporters.smokeping.openFirewall is true

Specify a filter for iptables to use when services.prometheus.exporters.pgbouncer.openFirewall is true

Specify a filter for iptables to use when services.prometheus.exporters.nextcloud.openFirewall is true

Specify a filter for iptables to use when services.prometheus.exporters.rasdaemon.openFirewall is true

Specify a filter for iptables to use when services.prometheus.exporters.tailscale.openFirewall is true

Whether to enable the prometheus modemmanager exporter.

Specify rules for nftables to add to the input chain when services.prometheus.exporters.buildkite-agent.openFirewall is true.

Specify a filter for iptables to use when services.prometheus.exporters.junos-czerwonk.openFirewall is true

Scrapping interval in seconds

Path to the Unbound control socket certificate

Specify rules for nftables to add to the input chain when services.prometheus.exporters.storagebox.openFirewall is true.

Specify rules for nftables to add to the input chain when services.prometheus.exporters.scaphandre.openFirewall is true.

Whether to automatically open receive port in the firewall.

External port used to access registry from the internet

Whether this server is listed in /etc/services

List of Unifi controllers to poll

Path under which to expose metrics.

Specifies the interface(s) passed to the wg show dump parameter

If set, does not limit target to localhost, 127.0.0.1, [::1], or UNIX sockets

URL of the Unifi controller.

Grafana address.

Extra commandline options to pass to the modemmanager exporter.

Whether to report errors.

Whether to enable HTTPS and reject plain HTTP connections

Exporter configuration as nix attribute set

Specify the mailexporter configuration file to use.

Access token for authentication against JFrog Artifactory API

Whether to enable opening TCP ports 80 and 443, and UDP port 51820 in the firewall for the Pangolin service(s).

Path to keystore (combined PEM with cert/key, or PKCS12 keystore)

Whether to enable open the external connect port.

SMTP bind interface and port.

Address to listen on for binary network packets.

Location to match.

cloudflared starts a proxy server to translate HTTP traffic into TCP when proxying, for example, SSH or RDP

Address to listen on.

Opnsense IP address of the opnsense appliance

Username for authentication against JFrog Artifactory API.

Whether to enable the HTTP/2 protocol

Command transports to define

Unifi service user name.

Specify a filter for iptables to use when services.prometheus.exporters.mailman3.openFirewall is true

Whether to open the port in the firewall.

Snmp exporter configuration as nix attribute set

Collectors to disable which are enabled by default

Minimum required security level for accepted packets.

Collect PVE replication info

Identifier of the UPS to monitor, in this form: <upsname>[@<hostname>[:<port>]] See upsmon.conf for details.

Whether to open the IPP port in the firewall

Whether to open the TCP port in the firewall

Whether to open the firewall for the specified port.

Specify a filter for iptables to use when services.prometheus.exporters.buildkite-agent.openFirewall is true

Password for authentication against JFrog Artifactory API

Specify a filter for iptables to use when services.prometheus.exporters.scaphandre.openFirewall is true

Specify a filter for iptables to use when services.prometheus.exporters.storagebox.openFirewall is true

If empty string mailaddress value is used

Whether to enable Whether add CAP_NET_BIND_SERVICE to the tunnel service, this should be enabled if you want to bind port < 1024.

Open a port in the firewall for the Overseerr web interface.

The port on which PostgreSQL listens.

Zeronet fileserver port.

Whether to enable grafana_reporter.

Whether to enable HTTPS and reject plain HTTP connections