| options/nixos/services.hercules-ci-agent.settings.staticSecretsDirectory | This is the default directory to look for statically configured secrets like cluster-join-token.key
|
| options/darwin/services.hercules-ci-agent.settings.staticSecretsDirectory | This is the default directory to look for statically configured secrets like cluster-join-token.key
|
| options/home-manager/xsession.windowManager.herbstluftwm.settings | Herbstluftwm settings.
|
| options/nixos/services.grafana.provision.datasources.settings | Grafana datasource configuration in Nix
|
| options/nixos/services.matrix-synapse.settings.listeners.*.resources.*.names | List of resources to host on this listener.
|
| options/nixos/services.waagent.settings.Provisioning.Enable | Whether to enable provisioning functionality in the agent
|
| options/nixos/services.prometheus.exporters.lnd.lndHost | lnd instance gRPC address:port.
|
| options/darwin/services.aerospace.settings.on-window-detected.*."if".workspace | The workspace name to match (optional).
|
| options/nixos/services.veilid.settings.client_api.ipc_enabled | veilid-server will respond to Python and other JSON client requests.
|
| options/nixos/services.grafana.provision.alerting.rules.settings.groups.*.folder | Name of the folder the rule group will be stored in
|
| options/home-manager/programs.obsidian.vaults.<name>.settings.hotkeys | Hotkeys to configure.
|
| options/nixos/services.mpd.settings.bind_to_address | The address for the daemon to listen on
|
| options/nixos/services.mackerel-agent.settings.host_status.on_start | Host status after agent startup.
|
| options/nixos/services.grafana.provision.alerting.muteTimings.settings.muteTimes | List of mute time intervals to import or update.
|
| options/nixos/services.prometheus.exporters.script.settings | Free-form configuration for script_exporter, expressed as a Nix attrset and rendered to YAML.
Migration note:
The previous format using script = "sleep 5" is no longer supported
|
| options/nixos/services.taler.exchange.settings.exchangedb-postgres.CONFIG | Database connection URI.
|
| options/nixos/services.taler.merchant.settings.merchantdb-postgres.CONFIG | Database connection URI.
|
| options/nixos/services.grafana.settings.users.allow_sign_up | Set to false to prohibit users from being able to sign up / create user accounts
|
| options/nixos/services.pid-fan-controller.settings.heatSources.*.wildcardPath | Path of the heat source's hwmon temp_input file
|
| options/nixos/services.warpgate.settings.mysql.external_port | The MySQL listener is reachable via this port externally.
|
| options/nixos/services.nvme-rs.settings.thresholds.wear_warning | Wear warning threshold (%)
|
| options/nixos/services.crowdsec-firewall-bouncer.settings.api_key | API key to authenticate with a local crowdsec API
|
| options/home-manager/programs.obsidian.vaults.<name>.settings.extraFiles | Extra files to link to the vault directory.
|
| options/nixos/services.headscale.settings.tls_cert_path | Path to already created certificate.
|
| options/nixos/services.livekit.settings.rtc.port_range_end | End of UDP port range for WebRTC
|
| options/home-manager/programs.desktoppr.settings.picture | The path to the desktop picture/wallpaper to set
|
| options/nixos/services.jitsi-meet.videobridge.enable | Jitsi Videobridge instance and configure it to connect to Prosody
|
| options/nixos/services.nvme-rs.settings.thresholds.temp_warning | Temperature warning threshold (°C)
|
| options/nixos/services.suricata.settings.exception-policy | Define a common behavior for all exception policies
|
| options/nixos/services.grafana.provision.dashboards.settings.apiVersion | Config file version.
|
| options/nixos/services.tor.relay.onionServices.<name>.settings.HiddenServiceExportCircuitID | See torrc manual.
|
| options/nixos/services.grafana.provision.alerting.contactPoints.settings | Grafana contact points configuration in Nix
|
| options/nixos/services.headscale.settings.dns.extra_records | Extra DNS records to expose to clients.
|
| options/nixos/services.anubis.defaultOptions.settings.OG_PASSTHROUGH | Whether to enable Open Graph tag passthrough
|
| options/nixos/services.angrr.settings.temporary-root-policies.<name>.priority | Priority of this policy
|
| options/nixos/services.chhoto-url.settings.hash_algorithm | The hash algorithm to use for passwords and API keys
|
| options/nixos/services.listmonk.database.settings."privacy.exportable" | List of fields which can be exported through an automatic export request
|
| options/nixos/services.nextcloud.settings.mail_smtpport | This depends on mail_smtpmode
|
| options/nixos/services.dependency-track.settings."alpine.database.username" | Specifies the username to use when authenticating to the database.
|
| options/home-manager/programs.radicle.settings.publicExplorer | HTTPS URL pattern used to generate links to view content on Radicle via the browser.
|
| options/nixos/services.nextcloud-spreed-signaling.settings.https.listen | IP and port to listen on for HTTPS requests, in the format of ip:port
|
| options/nixos/services.lldap.settings.ldap_user_email | Admin email.
|
| options/nixos/services.tor.settings.AuthoritativeDirectory | See torrc manual.
|
| options/nixos/services.nextcloud.settings.mail_smtpname | This depends on mail_smtpauth
|
| options/nixos/services.your_spotify.enableLocalDB | Whether to enable a local mongodb instance.
|
| options/nixos/services.grafana.provision.alerting.templates.settings | Grafana templates configuration in Nix
|
| options/nixos/services.kanidm.serverSettings.domain | The domain that Kanidm manages
|
| options/nixos/services.dependency-track.settings."alpine.database.mode" | Defines the database mode of operation
|
| options/nixos/services.automysqlbackup.settings | automysqlbackup configuration
|
| options/nixos/services.libeufin.nexus.settings.libeufin-nexusdb-postgres.CONFIG | The database connection string for the libeufin-nexus database.
|
| options/nixos/services.prowlarr.settings.update.automatically | Automatically download and install updates.
|
| options/nixos/services.whisparr.settings.update.automatically | Automatically download and install updates.
|
| options/nixos/services.prometheus.alertmanager-ntfy.settings | Configuration of alertmanager-ntfy
|
| options/home-manager/programs.nvchecker.settings | Configuration written to
$HOME/Library/Application Support/nvchecker/nvchecker.toml (on Darwin) or
$XDG_CONFIG_HOME/nvchecker/nvchecker.toml (otherwise)
|
| options/nixos/services.hddfancontrol.settings.<drive-bay-name>.disks | Drive(s) to get temperature from
Can also use command substitution to automatically grab all matching drives; such as all scsi (sas) drives
|
| options/nixos/services.tor.relay.onionServices.<name>.settings.HiddenServiceAllowUnknownPorts | See torrc manual.
|
| options/nixos/services.nextcloud.settings.mail_smtpauth | This depends on mail_smtpmode
|
| options/nixos/services.warpgate.settings.sso_providers.*.label | SSO provider name displayed on login page.
|
| options/nixos/services.grafana.provision.datasources.settings.prune | When true, provisioned datasources from this file will be deleted
automatically when removed from
services.grafana.provision.datasources.settings.datasources.
|
| options/nixos/services.slskd.settings.retention.transfers.download.errored | Lifespan of errored download tasks.
|
| options/nixos/services.headscale.settings.oidc.allowed_users | Users allowed to authenticate even if not in allowedDomains.
|
| options/nixos/services.prometheus.exporters.fritz.settings.log_level | Log level to use for the exporter.
|
| options/nixos/services.opensearch.settings."plugins.security.disabled" | Whether to enable the security plugin,
plugins.security.ssl.transport.keystore_filepath or
plugins.security.ssl.transport.server.pemcert_filepath and
plugins.security.ssl.transport.client.pemcert_filepath
must be set for this plugin to be enabled.
|
| options/nixos/services.autosuspend.settings.suspend_cmd | The command to execute in case the host shall be suspended
|
| options/nixos/services.nextcloud-spreed-signaling.settings.backend.timeout | Timeout in seconds for requests to the backend
|
| options/nixos/services.lasuite-docs.collaborationServer.settings | Configuration options of collaboration server
|
| options/nixos/services.sourcehut.settings."lists.sr.ht::worker".reject-mimetypes | Comma-delimited list of Content-Types to reject
|
| options/nixos/services.tor.relay.onionServices.<name>.settings.HiddenServiceDirGroupReadable | See torrc manual.
|
| options/home-manager/wayland.windowManager.wayfire.settings.core.plugins | Load the specified plugins
|
| options/home-manager/programs.broot.settings.verbs | Define new verbs
|
| options/nixos/services.lldap.settings.jwt_secret_file | Path to a file containing the JWT secret.
|
| options/nixos/services.tuned.settings.update_interval | Update interval for dynamic tuning (in seconds).
|
| options/home-manager/wayland.windowManager.sway.config.bars.*.id | Specifies the bar ID for the configured bar instance
|
| options/nixos/services.prometheus.exporters.nginxlog.settings.consul | Consul integration options
|
| options/nixos/services.sabnzbd.settings.misc.bandwidth_perc | Percentage of bandwidth_max that sabnzbd is allowed to use.
0 means no limit.
|
| options/nixos/services.tor.settings.V3AuthoritativeDirectory | See torrc manual.
|
| options/nixos/services.sabnzbd.settings.ntfosd.ntfosd_enable | Whether to enable NotifyOSD alerts
|
| options/nixos/services.grafana.provision.alerting.muteTimings.settings.apiVersion | Config file version.
|
| options/home-manager/programs.firefox.profiles.<name>.settings | Attribute set of Firefox preferences
|
| options/nixos/services.quickwit.settings.listen_address | Listen address of Quickwit.
|
| options/nixos/services.autosuspend.settings.wakeup_cmd | The command to execute for scheduling a wake up of the system
|
| options/home-manager/wayland.windowManager.sway.swaynag.settings | Configuration written to
$XDG_CONFIG_HOME/swaynag/config
|
| options/nixos/security.pam.u2f.settings.interactive | Set to prompt a message and wait before testing the presence of a U2F device
|
| options/nixos/services.prometheus.alertmanager-ntfy.settings.http.addr | The address to listen on.
|
| options/nixos/services.ncdns.identity.hostname | The hostname of this ncdns instance, which defaults to the machine
hostname
|
| options/nixos/services.suricata.settings.dpdk.interfaces.*.interface | See upstream docs: docs/capture-hardware/dpdk and docs/configuration/suricata-yaml.html#data-plane-development-kit-dpdk.
|
| options/nixos/services.openssh.settings.AuthorizedPrincipalsFile | Specifies a file that lists principal names that are accepted for certificate authentication
|
| options/home-manager/wayland.windowManager.hyprland.settings | Hyprland configuration written in Nix
|
| options/nixos/services.slskd.settings.retention.transfers.upload.cancelled | Lifespan of cancelled upload tasks.
|
| options/nixos/services.slskd.settings.retention.transfers.upload.succeeded | Lifespan of succeeded upload tasks.
|
| options/nixos/services.headscale.settings.dns.extra_records.*.name | DNS record name.
|
| options/nixos/services.headscale.settings.dns.extra_records.*.type | DNS record type.
|
| options/nixos/services.nextcloud-spreed-signaling.settings.etcd.endpoints | List of static etcd endpoints to connect to.
|
| options/nixos/services.lasuite-docs.collaborationServer.settings.PORT | Port used by collaboration server to listen to
|
| options/home-manager/accounts.email.accounts.<name>.mujmap.settings.tags | Tag configuration
|
| options/nixos/services.headscale.settings.prefixes.allocation | Strategy used for allocation of IPs to nodes, available options:
- sequential (default): assigns the next free IP from the previous given IP.
- random: assigns the next free IP from a pseudo-random IP generator (crypto/rand).
|
| options/nixos/services.grafana.provision.alerting.muteTimings.settings.muteTimes.*.name | Name of the mute time interval, must be unique
|
| options/nixos/services.postfix-tlspol.settings.server.socket-permissions | Permissions to the UNIX socket, if configured.
Due to hardening on the systemd unit the socket can never be created world readable/writable.
|
| options/home-manager/i18n.inputMethod.fcitx5.settings.addons.<name>.sections | attribute set of section of an INI file (attrs of INI atom (null, bool, int, float or string))
|
| options/nixos/services.postfixadmin.extraConfig | Extra configuration for the postfixadmin instance, see postfixadmin's config.inc.php for available options.
|