| options/home-manager/programs.firefox.profiles.<name>.extensions.settings.<name>.permissions | Allowed permissions for this extension
|
| options/nixos/services.parsedmarc.settings.general.save_aggregate | Save aggregate report data to Elasticsearch and/or Splunk.
|
| options/nixos/services.grafana.settings.users.auto_assign_org | Set to true to automatically add new users to the main organization (id 1)
|
| options/nixos/services.swapspace.settings.cache_elasticity | Percentage of cache space considered to be "free"
|
| options/nixos/services.nvme-rs.settings.thresholds.error_threshold | Error count warning threshold
|
| options/nixos/services.grafana.provision.alerting.contactPoints.settings.deleteContactPoints | List of receivers that should be deleted.
|
| options/nixos/services.system76-scheduler.settings.processScheduler.refreshInterval | Process list poll interval, in seconds
|
| options/nixos/services.warpgate.settings.http.sni_certificates.*.key | Path to private key.
|
| options/nixos/services.matrix-synapse.settings.listeners.*.bind_addresses | IP addresses to bind the listener to.
|
| options/nixos/services.discourse.siteSettings | Discourse site settings
|
| options/nixos/services.grafana.provision.alerting.templates.settings.templates.*.name | Name of the template, must be unique
|
| options/nixos/services.grafana.settings.security.admin_password | Default admin password
|
| options/nixos/services.grafana.settings.users.default_language | This setting configures the default UI language, which must be a supported IETF language tag, such as en-US.
|
| options/nixos/services.veilid.settings.core.network.routing_table.bootstrap | Host name of existing well-known Veilid bootstrap servers for the network to connect to.
|
| options/nixos/services.firezone.server.settingsSecret.LIVE_VIEW_SIGNING_SALT | A file containing a unique base64 encoded secret for the
LIVE_VIEW_SIGNING_SALT
|
| options/home-manager/accounts.email.accounts.<name>.lieer.settings.local_trash_tag | Local tag to which the remote Gmail 'TRASH' label is translated.
|
| options/nixos/services.grafana.settings.users.viewers_can_edit | Viewers can access and use Explore and perform temporary edits on panels in dashboards they have access to
|
| options/nixos/services.parsedmarc.settings.elasticsearch.password | The password to use when connecting to Elasticsearch,
if required
|
| options/nixos/services.parsedmarc.settings.elasticsearch.cert_path | The path to a TLS certificate bundle used to verify
the server's certificate.
|
| options/nixos/services.btrbk.instances.<name>.settings.stream_compress | Compress the btrfs send stream before transferring it from/to remote locations using a
compression command.
|
| options/nixos/services.grafana.settings.database.isolation_level | Only the MySQL driver supports isolation levels in Grafana
|
| options/nixos/services.system76-scheduler.settings.processScheduler.pipewireBoost.enable | Boost Pipewire client priorities.
|
| options/nixos/services.postgresql.settings.log_line_prefix | A printf-style string that is output at the beginning of each log line
|
| options/nixos/services.firezone.server.settingsSecret.COOKIE_SIGNING_SALT | A file containing a unique base64 encoded secret for the
COOKIE_SIGNING_SALT
|
| options/nixos/services.easytier.instances.<name>.settings.network_secret | EasyTier network credential used for verification and
encryption
|
| options/nixos/services.matrix-appservice-irc.settings.ircService.passwordEncryptionKeyPath | Location of the key with which IRC passwords are encrypted
for storage
|
| options/nixos/services.ergochat.configFile | Path to configuration file
|
| options/nixos/services.radicale.config | Radicale configuration, this will set the service
configuration file
|
| options/nixos/services.kea.ctrl-agent.configFile | Kea Control Agent configuration as a path, see https://kea.readthedocs.io/en/kea-3.0.2/arm/agent.html
|
| options/nixos/services.healthchecks.settings.REGISTRATION_OPEN | A boolean that controls whether site visitors can create new accounts
|
| options/nixos/services.kerberos_server.settings.realms.<name>.acl.*.principal | Which principal the rule applies to
|
| options/nixos/services.veilid.settings.core.protected_store.directory | The filesystem directory to store your protected store in.
|
| options/nixos/services.grafana.provision.datasources.settings.datasources | List of datasources to insert/update.
|
| options/nixos/services.hickory-dns.settings.listen_addrs_ipv4 | List of ipv4 addresses on which to listen for DNS queries.
|
| options/nixos/programs.openvpn3.netcfg.settings.systemd_resolved | Whether to use systemd-resolved integration
|
| options/nixos/services.hickory-dns.settings.listen_addrs_ipv6 | List of ipv6 addresses on which to listen for DNS queries.
|
| options/nixos/services.headscale.settings.derp.update_frequency | Frequency to update DERP maps.
|
| options/nixos/services.grafana.provision.alerting.contactPoints.settings.deleteContactPoints.*.uid | Unique identifier for the receiver
|
| options/home-manager/services.xsettingsd.package | The xsettingsd package to use.
|
| options/nixos/services.tor.relay.onionServices.<name>.settings.HiddenServiceNumIntroductionPoints | See torrc manual.
|
| options/nixos/services.grafana.provision.dashboards.settings.providers.*.options.path | Path grafana will watch for dashboards
|
| options/nixos/services.snapserver.settings.stream.bind_to_address | Address to listen on for snapclient connections.
|
| options/nixos/services.grafana.provision.alerting.contactPoints.settings.deleteContactPoints.*.orgId | Organization ID, default = 1.
|
| options/nixos/services.grafana.provision.alerting.templates.settings.deleteTemplates | List of alert rule UIDs that should be deleted.
|
| options/nixos/services.grafana.provision.datasources.settings.datasources.*.url | Url of the datasource.
|
| options/nixos/services.kerberos_server.settings.realms.<name>.acl.*.access | The changes the principal is allowed to make.
The "all" permission does not imply the "get-keys" permission
|
| options/nixos/services.nextcloud.settings.mail_smtptimeout | This depends on mail_smtpmode
|
| options/nixos/virtualisation.xen.store.settings.conflict.maxHistorySeconds | Limits applied to domains whose writes cause other domains' transaction
commits to fail
|
| options/nixos/services.openssh.settings.KbdInteractiveAuthentication | Specifies whether keyboard-interactive authentication is allowed.
|
| options/home-manager/programs.cudatext.hotkeys | Hotkeys for Cudatext
|
| options/nixos/services.headscale.settings.database.postgres.password_file | A file containing the password corresponding to
database.user.
|
| options/nixos/services.grafana.provision.datasources.settings.datasources.*.name | Name of the datasource
|
| options/nixos/services.grafana.provision.datasources.settings.datasources.*.type | Datasource type
|
| options/nixos/services.maubot.settings.plugin_databases.postgres | The connection URL for plugin database
|
| options/nixos/services.matrix-tuwunel.settings.global.allow_federation | Whether this server federates with other servers.
|
| options/nixos/services.matrix-conduit.settings.global.allow_federation | Whether this server federates with other servers.
|
| options/nixos/services.grafana.provision.alerting.templates.settings.deleteTemplates.*.orgId | Organization ID, default = 1.
|
| options/nixos/services.biboumi.settings.realname_from_jid | Whether the realname and username of each biboumi
user will be extracted from their JID
|
| options/nixos/services.system76-scheduler.settings.cfsProfiles.responsive.bandwidth-size | sched_cfs_bandwidth_slice_us.
|
| options/nixos/services.headscale.settings.noise.private_key_path | Path to noise private key file, generated automatically if it does not exist.
|
| options/nixos/services.maubot.settings.plugin_directories | Plugin directory paths
|
| options/nixos/services.hickory-dns.configFile | Path to an existing toml file to configure hickory-dns with
|
| options/nixos/security.auditd.settings.admin_space_left | This is a numeric value in mebibytes (MiB) that tells the audit daemon when to perform a configurable action because the system is running
low on disk space
|
| options/nixos/services.grafana.provision.alerting.templates.settings.deleteTemplates.*.name | Name of the template, must be unique
|
| options/nixos/services.filesender.settings.log_facilities | Defines where FileSender logging is sent
|
| options/nixos/services.nextcloud-spreed-signaling.settings.backend.backendtype | Type of backend configuration
|
| options/nixos/services.system76-scheduler.settings.processScheduler.pipewireBoost.profile.nice | Niceness.
|
| options/nixos/services.grafana.settings.database.client_cert_path | The path to the client cert
|
| options/home-manager/programs.librewolf.profiles.<name>.extensions.settings.<name>.permissions | Allowed permissions for this extension
|
| options/nixos/services.snapserver.settings.tcp-control.bind_to_address | Address to listen on for snapclient connections.
|
| options/nixos/services.grafana.settings.security.disable_gravatar | Set to true to disable the use of Gravatar for user profile images.
|
| options/nixos/services.matrix-tuwunel.settings.global.max_request_size | Max request size in bytes
|
| options/nixos/services.matrix-conduit.settings.global.max_request_size | Max request size in bytes
|
| options/nixos/programs.openvpn3.log-service.settings.log_dbus_details | Add D-Bus details in log file/syslog
|
| options/nixos/services.matrix-tuwunel.settings.global.trusted_servers | Servers listed here will be used to gather public keys of other servers
(notary trusted key servers)
|
| options/nixos/services.system76-scheduler.settings.cfsProfiles.default.wakeup-granularity | sched_wakeup_granularity_ns.
|
| options/nixos/services.system76-scheduler.settings.processScheduler.pipewireBoost.profile.prio | CPU scheduler priority.
|
| options/nixos/services.tlsrpt.reportd.settings.organization_name | Name of the organization sending out the reports.
|
| options/nixos/services.omnom.settings.smtp.connection_timeout | Connection timeout duration in seconds.
|
| options/nixos/services.grafana.settings.security.allow_embedding | When false, the HTTP header X-Frame-Options: deny will be set in Grafana HTTP responses
which will instruct browsers to not allow rendering Grafana in a <frame>, <iframe>, <embed> or <object>
|
| options/nixos/services.grafana.provision.datasources.settings.datasources.*.jsonData | Extra data for datasource plugins.
|
| options/nixos/services.grafana.provision.datasources.settings.datasources.*.uid | Custom UID which can be used to reference this datasource in other parts of the configuration, if not specified will be generated automatically.
|
| options/nixos/services.nipap.settings.auth.auth_cache_timeout | Seconds to store cached auth entries for.
|
| options/nixos/services.system76-scheduler.settings.processScheduler.pipewireBoost.profile.ioPrio | IO scheduler priority.
|
| options/nixos/services.swapspace.settings.buffer_elasticity | Percentage of buffer space considered to be "free"
|
| options/nixos/services.nvme-rs.settings.email.smtp_password_file | File containing SMTP password
|
| options/nixos/services.sftpgo.settings.httpd.bindings.*.enable_web_admin | Enable the built-in web admin for this interface binding.
|
| options/nixos/services.matrix-conduit.settings.global.database_backend | The database backend for the service
|
| options/nixos/services.omnom.settings.smtp.tls_allow_insecure | Whether to enable Whether to allow insecure TLS..
|
| options/nixos/services.grafana.provision.datasources.settings.deleteDatasources | List of datasources that should be deleted from the database.
|
| options/nixos/services.matrix-conduit.settings.global.allow_encryption | Whether new encrypted rooms can be created
|
| options/nixos/services.matrix-tuwunel.settings.global.allow_encryption | Whether new encrypted rooms can be created
|
| options/nixos/services.searx.limiterSettings | Limiter settings for SearXNG.
|
| options/nixos/services.livekit.ingress.settings.rtc_config.port_range_end | End of UDP port range for WebRTC
|
| options/nixos/services.nezha-agent.settings.disable_send_query | Disable sending TCP/ICMP/HTTP requests.
|
| options/nixos/services.system76-scheduler.settings.processScheduler.pipewireBoost.profile.class | CPU scheduler class.
|
| options/nixos/services.grafana.settings.database.server_cert_name | The common name field of the certificate used by the mysql or postgres server
|
| options/nixos/services.mpd.settings.playlist_directory | The directory where MPD stores playlists
|
| options/nixos/services.system76-scheduler.settings.processScheduler.pipewireBoost.profile.ioClass | IO scheduler class.
|
| options/nixos/services.grafana.provision.alerting.templates.settings.templates.*.template | Alerting with a custom text template
|