Listen port

Whether to open the port in the firewall.

Whether to enable HTTPS and reject plain HTTP connections

Whether to enable the HTTP/2 protocol

Upstream outproxy bind port.

TCP port opened for ServerQuery connections using the HTTP protocol.

Whether to enable the HTTP/2 protocol

SMTP bind interface and port.

Whether to enable the HTTP/2 protocol

Collectors to disable from the list of collectors that are enabled by default.

Collectors to enable

List of forwarded ports from host to container

File containing the credentials to access the repository, in the format of an EnvironmentFile as described by systemd.exec(5)

Port where hatsu should listen for incoming requests.

Whether to open the IPP port in the firewall

Port to run Navidrome on.

Specify which port to listen to.

Whether to open the TCP port in the firewall

Whether to open the firewall for the specified port.

The port on which PostgreSQL listens.

Zeronet fileserver port.

Path to the file with your personal ecoflow app login email password

File mapping user names to pre-shared keys (passwords).

Whether to enable the prometheus modemmanager exporter.

Path to the service's environment file

Optional timeout for the script in seconds.

Specify a filter for iptables to use when services.prometheus.exporters.imap-mailstat.openFirewall is true

UDP port for eD2k traffic (searches, source exchange) and all Kad network communication

Open a port in the firewall for the Overseerr web interface.

URLs for storage server including port

Configuration for the rclone remote being used for backup

Whether to enable collectd binary protocol receiver.

Path under which to expose metrics.

Specify rules for nftables to add to the input chain when services.prometheus.exporters.buildkite-agent.openFirewall is true.

Whether to enable opening TCP ports 80 and 443, and UDP port 51820 in the firewall for the Pangolin service(s).

Specify rules for nftables to add to the input chain when services.prometheus.exporters.storagebox.openFirewall is true.

Specify rules for nftables to add to the input chain when services.prometheus.exporters.scaphandre.openFirewall is true.

Collect PVE resources info

Hostname under which the target device is reachable.

List of Unifi controllers to poll

Username to authenticate with the target device.

Enable support for fetching web pages using WebDriver and Chromium

Specify a filter for iptables to use when services.prometheus.exporters.nextcloud.openFirewall is true

Specify a filter for iptables to use when services.prometheus.exporters.borgmatic.openFirewall is true

Specify a filter for iptables to use when services.prometheus.exporters.surfboard.openFirewall is true

Specify a filter for iptables to use when services.prometheus.exporters.wireguard.openFirewall is true

Specify a filter for iptables to use when services.prometheus.exporters.rasdaemon.openFirewall is true

Specify a filter for iptables to use when services.prometheus.exporters.smokeping.openFirewall is true

Specify a filter for iptables to use when services.prometheus.exporters.tailscale.openFirewall is true

Specify a filter for iptables to use when services.prometheus.exporters.pgbouncer.openFirewall is true

By default, all allowed IPs and subnets are comma-separated in the allowed_ips field

The port on which to listen for IMAP connections.

The port on which to listen for SMTP connections.

The port your database is listening at.

Default port blendfarm server listens on.

The external location that the node should listen on

Port the OnlyOffice example server should listen on.

The HTTP port n8n runs on.

Whether to automatically open the specified TCP port in the firewall.

This primary server will notify all given secondary servers about zone changes

Whether to automatically open the specified port in the firewall

IP/Port of the Tor SOCKS server for torsocks-faster wrapper suitable for HTTP

URL of the Unifi controller.

Specify a filter for iptables to use when services.prometheus.exporters.junos-czerwonk.openFirewall is true

Type of this transport

Extra commandline options to pass to the modemmanager exporter.

Address to listen on.

Specify the mailexporter configuration file to use.

Specifies the interface(s) passed to the wg show dump parameter

Path to UNIX domain socket to listen on

Whether to enable opening the firewall port 53317 for receiving files.

Address and port to listen on

Opens the port used by the firewall.

Whether to enable HTTPS and reject plain HTTP connections

Exporter configuration as nix attribute set

Username for authentication against JFrog Artifactory API.

Host for the api or remote transport

Opnsense IP address of the opnsense appliance

Scrapping interval in seconds

Unifi service user name.

Path to the socket for local or remote transports

Access token for authentication against JFrog Artifactory API

Opens up the main STUN port and the TURN allocation range.

Whether to open the firewall for the specified port.

Whether to enable Whether add CAP_NET_BIND_SERVICE to the tunnel service, this should be enabled if you want to bind port < 1024.

Specify local port forwardings

Whether to enable emitting errors to prometheus.

Snmp exporter configuration as nix attribute set

An attrset of metrics scraping jobs to run.

If set, does not limit target to localhost, 127.0.0.1, [::1], or UNIX sockets

If empty string mailaddress value is used

File must contain one line, example: R3300000,R3400000,NC430000,...

Path to host the API on and forward to the daemon's api port

The port that Meilisearch will listen on.

The address (including host and port) under which we can access the Ollama backend server. !Note that if the the UI service is running under a domain "https://ui.example.org", the Ollama backend service must allow "CORS" requests from this domain, e.g. by adding "services.ollama.environment

External port advertised to clients

Server address and port to connect to.