| options/nixos/services.zabbixWeb.httpd.virtualHost.onlySSL | Whether to enable HTTPS and reject plain HTTP connections
|
| options/nixos/services.zabbixWeb.nginx.virtualHost.onlySSL | Whether to enable HTTPS and reject plain HTTP connections
|
| options/home-manager/programs.ssh.matchBlocks.<name>.localForwards.*.host | Host port binding options
|
| options/home-manager/programs.ssh.matchBlocks.<name>.localForwards.*.bind | Local port binding options
|
| options/nixos/services.prometheus.exporters.chrony.disabledCollectors | Collectors to disable which are enabled by default
|
| options/nixos/services.pixiecore.openFirewall | Open ports (67, 69, 4011 UDP and 'port', 'statusPort' TCP) in the firewall for Pixiecore.
|
| options/nixos/services.prometheus.exporters.artifactory.artiPassword | Password for authentication against JFrog Artifactory API
|
| options/nixos/services.grafana_reporter.grafana.protocol | Grafana protocol.
|
| options/nixos/services.prometheus.exporters.imap-mailstat.accounts.<name>.starttls | set to true for using STARTTLS to start a TLS connection
|
| options/nixos/services.acme-dns.settings.general.listen | IP+port combination to bind and serve the DNS server on.
|
| options/nixos/services.fedimintd.<name>.nginx.path_ui | Path to host the built-in UI on and forward to the daemon's api port
|
| options/nixos/services.suwayomi-server.openFirewall | Whether to open the firewall for the port in services.suwayomi-server.settings.server.port.
|
| options/nixos/services.netbird.server.signal.metricsPort | Internal port of the metrics server.
|
| options/nixos/services.prometheus.exporters.buildkite-agent.firewallFilter | Specify a filter for iptables to use when
services.prometheus.exporters.buildkite-agent.openFirewall
is true
|
| options/nixos/services.prometheus.exporters.scaphandre.firewallFilter | Specify a filter for iptables to use when
services.prometheus.exporters.scaphandre.openFirewall
is true
|
| options/nixos/services.prometheus.exporters.storagebox.firewallFilter | Specify a filter for iptables to use when
services.prometheus.exporters.storagebox.openFirewall
is true
|
| options/nixos/services.prometheus.exporters.artifactory.firewallRules | Specify rules for nftables to add to the input chain
when services.prometheus.exporters.artifactory.openFirewall is true.
|
| options/nixos/services.prometheus.exporters.snmp.configurationPath | Path to a snmp exporter configuration file
|
| options/nixos/services.tlsrpt.reportd.settings.sendmail_script | Path to a sendmail-compatible executable for delivery reports.
|
| options/nixos/<imports = [ pkgs.ghostunnel.services.default ]>.ghostunnel.keystore | Path to keystore (combined PEM with cert/key, or PKCS12 keystore)
|
| options/nixos/services.prometheus.exporters.opnsense.opnsenseServerProtocol | Opnsense metrics scraper protocol to use
|
| options/nixos/services.prometheus.exporters.unpoller.controllers.*.pass | Path of a file containing the password for the unifi service user
|
| options/nixos/services.icecream.daemon.openFirewall | Whether to automatically open receive port in the firewall.
|
| options/nixos/services.gitlab.registry.externalPort | External port used to access registry from the internet
|
| options/nixos/services.drupal.sites.<name>.virtualHost.onlySSL | Whether to enable HTTPS and reject plain HTTP connections
|
| options/nixos/services.mailpit.instances.<name>.listen | HTTP bind interface and port for UI.
|
| options/nixos/services.xinetd.services.*.unlisted | Whether this server is listed in
/etc/services
|
| options/nixos/services.zoneminder.openFirewall | Open the firewall port(s).
|
| options/nixos/services.jellyfin.openFirewall | Open the default ports in the firewall for the media server
|
| options/nixos/services.prometheus.exporters.wireguard.latestHandshakeDelay | Adds the wireguard_latest_handshake_delay_seconds metric that automatically calculates the seconds passed since the last handshake.
|
| options/nixos/services.prometheus.exporters.unbound.unbound.certificate | Path to the Unbound control socket certificate
|
| options/nixos/services.prometheus.exporters.idrac.configuration | Configuration for iDRAC exporter, as a nix attribute set
|
| options/nixos/services.prometheus.exporters.junos-czerwonk.environmentFile | File containing env-vars to be substituted into the exporter's config.
|
| options/nixos/services.prometheus.exporters.unpoller.controllers.*.sites | List of site names for which statistics should be exported
|
| options/nixos/services.prometheus.exporters.modemmanager.listenAddress | Address to listen on.
|
| options/nixos/services.prometheus.exporters.wireguard.wireguardConfig | Path to the Wireguard Config to
add the peer's name to the stats of a peer
|
| options/nixos/nix.firewall.allowPrivateNetworks | Whether to allow traffic to local networks
|
| options/nixos/services.forgejo.settings.server.HTTP_PORT | Listen port
|
| options/nixos/services.fedimintd.<name>.ui.openFirewall | Opens TCP port in firewall for built-in UI
|
| options/nixos/services.linkwarden.openFirewall | Whether to open the Linkwarden port in the firewall
|
| options/home-manager/programs.ssh.matchBlocks.<name>.remoteForwards | Specify remote port forwardings
|
| options/nixos/services.prometheus.exporters.fritz.settings.devices.*.host_info | Enable extended host info for this device. Warning: This will heavily increase scrape time.
|
| options/nixos/services.prometheus.exporters.tailscale.environmentFile | Environment file containg at least the TAILSCALE_TAILNET,
TAILSCALE_OAUTH_CLIENT_ID, and TAILSCALE_OAUTH_CLIENT_SECRET
environment variables.
|
| options/nixos/<imports = [ pkgs.ghostunnel.services.default ]>.ghostunnel.extraArguments | Extra arguments to pass to ghostunnel server
|
| options/nixos/services.icingaweb2.modules.monitoring.mutableTransports | Make commandtransports.ini of the monitoring module mutable (e.g. via the web interface).
|
| options/nixos/services.prometheus.exporters.rasdaemon.enabledCollectors | List of error types to collect from the event database.
|
| packages/nixpkgs/dsda-doom | Advanced Doom source port with a focus on speedrunning, successor of PrBoom+ |
| packages/nixpkgs/ttylog | Simple serial port logger |
| options/nixos/services.prometheus.exporters.dnssec.configuration | dnssec exporter configuration as nix attribute set
|
| options/nixos/services.eris-server.listenCoap | Server CoAP listen address
|
| options/nixos/services.jellyseerr.openFirewall | Open port in the firewall for the Jellyseerr web interface.
|
| options/nixos/services.homepage-dashboard.listenPort | Port for Homepage to bind to.
|
| options/nixos/services.taskserver.openFirewall | Whether to open the firewall for the specified Taskserver port.
|
| options/nixos/services.szurubooru.openFirewall | Whether to open the firewall for the port in services.szurubooru.server.port.
|
| options/nixos/services.wgautomesh.openFirewall | Automatically open gossip port in firewall (recommended).
|
| options/home-manager/programs.ssh.matchBlocks.<name>.remoteForwards.*.host | Host port binding options
|
| options/home-manager/programs.ssh.matchBlocks.<name>.remoteForwards.*.bind | Local port binding options
|
| options/nixos/services.prometheus.exporters.mqtt.zigbee2MqttAvailability | Whether to enable Normalize sensor name for device availability metric added by Zigbee2MQTT..
|
| options/nixos/services.prometheus.exporters.collectd.collectdBinary.listenAddress | Address to listen on for binary network packets.
|
| options/nixos/services.prometheus.exporters.modemmanager.refreshRate | How frequently ModemManager will refresh the extended signal quality
information for each modem
|
| options/nixos/services.prometheus.exporters.nginxlog.settings.namespaces | Namespaces to collect the metrics for
|
| options/nixos/services.dolibarr.nginx.http2 | Whether to enable the HTTP/2 protocol
|
| options/nixos/services.fediwall.nginx.http2 | Whether to enable the HTTP/2 protocol
|
| options/nixos/services.agorakit.nginx.http2 | Whether to enable the HTTP/2 protocol
|
| options/nixos/services.klipper.firmwares.<name>.serial | Path to serial port this printer is connected to
|
| options/nixos/services.kanboard.nginx.http2 | Whether to enable the HTTP/2 protocol
|
| options/nixos/services.librenms.nginx.http2 | Whether to enable the HTTP/2 protocol
|
| options/nixos/services.anuko-time-tracker.settings.email.smtpPort | MTA port.
|
| options/nixos/services.pgpkeyserver-lite.hkpPort | Which port the sks-keyserver is listening on.
|
| options/nixos/services.livekit.ingress.openFirewall.rtmp | Open RTMP port in the firewall.
|
| options/nixos/services.pixelfed.nginx.http2 | Whether to enable the HTTP/2 protocol
|
| options/nixos/services.livekit.ingress.openFirewall.whip | Open WHIP port in the firewall.
|
| options/nixos/services.mainsail.nginx.http2 | Whether to enable the HTTP/2 protocol
|
| options/nixos/containers.<name>.forwardPorts.*.protocol | The protocol specifier for port forwarding between host and container
|
| options/darwin/services.dnsmasq.servers | List of upstream DNS servers to forward queries to
|
| options/nixos/services.prometheus.exporters.dovecot.socketPath | Path under which the stats socket is placed
|
| options/nixos/services.prometheus.exporters.pve.collectors.replication | Collect PVE replication info
|
| options/nixos/services.prometheus.exporters.collectd.collectdBinary.securityLevel | Minimum required security level for accepted packets.
|
| options/nixos/services.SystemdJournal2Gelf.graylogServer | Host and port of your graylog2 input
|
| options/nixos/services.nextcloud.config.dbhost | Database host (+port) or socket path
|
| options/nixos/services.teamspeak3.fileTransferPort | TCP port opened for file transfers.
|
| options/nixos/services.livekit.settings.redis.address | Host and port used to connect to a redis instance.
|
| options/nixos/services.ntopng.enable | Enable ntopng, a high-speed web-based traffic analysis and flow
collection tool
|
| options/nixos/services.prometheus.exporters.artifactory.firewallFilter | Specify a filter for iptables to use when
services.prometheus.exporters.artifactory.openFirewall
is true
|
| packages/nixpkgs/dhewm3 | Doom 3 port to SDL |
| packages/nixpkgs/naabu | Fast SYN/CONNECT port scanner |
| options/nixos/services.prometheus.exporters.modemmanager.firewallRules | Specify rules for nftables to add to the input chain
when services.prometheus.exporters.modemmanager.openFirewall is true.
|
| options/nixos/programs.kdeconnect.enable | Whether to enable kdeconnect
|
| options/nixos/services.blockbook-frontend.<name>.public | Public http server binding [address]:port.
|
| options/nixos/services.transmission.openRPCPort | Whether to enable opening of the RPC port in the firewall.
|
| options/nixos/services.reposilite.openFirewall | Whether to open the firewall ports for Reposilite
|
| options/nixos/services.icingaweb2.modules.monitoring.transports.<name>.password | Password for the api transport
|
| options/nixos/services.prometheus.exporters.mail.configuration.servers.*.to | Content of 'To' Header for probing mails.
|
| options/nixos/boot.initrd.luks.mitigateDMAAttacks | Unless enabled, encryption keys can be easily recovered by an attacker with physical
access to any machine with PCMCIA, ExpressCard, ThunderBolt or FireWire port
|
| options/nixos/services.gotosocial.openFirewall | Open the configured port in the firewall
|
| options/nixos/services.radicle.httpd.nginx.http2 | Whether to enable the HTTP/2 protocol
|
| options/nixos/services.silverbullet.listenPort | Port to listen on.
|
| options/nixos/services.pulseaudio.tcp.openFirewall | Whether to enable Open firewall for the specified port.
|
| options/home-manager/programs.ssh.matchBlocks.<name>.dynamicForwards | Specify dynamic port forwardings
|
| options/nixos/services.icingaweb2.modules.monitoring.transports.<name>.username | Username for the api or remote transport
|