| options/nixos/services.pgpkeyserver-lite.package | The pgpkeyserver-lite package to use.
|
| options/nixos/services.mastodon.configureNginx | Configure nginx as a reverse proxy for mastodon
|
| options/nixos/services.grafana.settings.server.domain | The public facing domain name used to access grafana from a browser
|
| options/nixos/services.dovecot2.sslServerCert | Path to the server's public key.
|
| options/nixos/services.firewalld.settings.RFC3964_IPv4 | Whether to filter IPv6 traffic with 6to4 destination addresses that correspond to IPv4 addresses that should not be routed over the public internet.
|
| options/nixos/services.mycelium.peers | List of peers to connect to, in the formats:
quic://[2001:0db8::1]:9651
quic://192.0.2.1:9651
tcp://[2001:0db8::1]:9651
tcp://192.0.2.1:9651
If addHostedPublicNodes is set to true, the hosted public nodes will also be added.
|
| options/nixos/security.acme.certs.<name>.keyType | Key type to use for private keys
|
| options/nixos/services.part-db.enableNginx | Whether to enable nginx or not
|
| options/home-manager/programs.obsidian.defaultSettings.hotkeys | Hotkeys to configure
|
| options/nixos/services.fedimintd.<name>.p2p.url | Public address for p2p connections from peers (if TCP is used)
|
| options/nixos/services.kanidm.unix.sshIntegration | Whether to enable Kanidm SSH keys login.
|
| options/nixos/services.pgpkeyserver-lite.hkpAddress | Which IP address the sks-keyserver is listening on.
|
| options/home-manager/programs.obsidian.defaultSettings.hotkeys.<name>.*.key | The hotkey.
|
| options/nixos/services.keycloak.settings.hostname | The hostname part of the public URL used as base for
all frontend requests
|
| options/nixos/services.vault.extraSettingsPaths | Configuration files to load besides the immutable one defined by the NixOS module
|
| options/nixos/programs.ssh.startAgent | Whether to start the OpenSSH agent when you log in
|
| options/home-manager/programs.password-store.settings | The pass environment variables dictionary
|
| options/nixos/services.lk-jwt-service.livekitUrl | The public websocket URL for livekit
|
| options/home-manager/services.xcape.mapExpression | The value has the grammar Key[|OtherKey]
|
| options/nixos/services.broadcast-box.settings | Attribute set of environment variables.
https://github.com/Glimesh/broadcast-box#environment-variables
The status API exposes stream keys so DISABLE_STATUS is enabled
by default.
|
| options/nixos/programs.ssh.knownHostsFiles | Files containing SSH host keys to set as global known hosts.
/etc/ssh/ssh_known_hosts (which is
generated by programs.ssh.knownHosts) is
always included.
|
| options/nixos/services.wastebin.settings.RUST_LOG | Influences logging
|
| options/nixos/services.pgpkeyserver-lite.hostname | Which hostname to set the vHost to that is proxying to sks.
|
| options/nixos/services.fedimintd.<name>.api.url | Public URL of the API address of the reverse proxy/tls terminator
|
| options/nixos/services.opendkim.keyPath | The path that opendkim should put its generated private keys into
|
| options/nixos/services.homer.settings | Settings serialized into config.yml before build
|
| options/nixos/services.harmonia.signKeyPaths | Paths to the signing keys to use for signing the cache
|
| options/nixos/services.dendrite.tlsKey | The path to the TLS key.
nix-shell -p dendrite --command "generate-keys --tls-cert server.crt --tls-key server.key"
|
| options/nixos/services.wgautomesh.settings.peers.*.pubkey | Wireguard public key of this peer.
|
| options/nixos/hardware.tuxedo-drivers.settings.fn-lock | Enables or disables the laptop keyboard's Function (Fn) lock at boot
|
| options/nixos/services.ncps.cache.lock.redisKeyPrefix | Prefix for all Redis lock keys (only used when Redis is
configured).
|
| options/nixos/services.postgrest.settings.server-host | Where to bind the PostgREST web server.
The admin server will also bind here, but potentially exposes sensitive information
|
| options/nixos/services.matrix-synapse.settings.turn_uris | The public URIs of the TURN server to give to clients
|
| options/nixos/programs.ssh.pubkeyAcceptedKeyTypes | Specifies the key lib.types that will be used for public key authentication.
|
| options/nixos/services.knot.keyFiles | A list of files containing additional configuration
to be included using the include directive
|
| options/nixos/services.chhoto-url.settings.public_mode_expiry_delay | The maximum expiry delay in seconds to force in public mode.
|
| options/nixos/services.murmur.registerName | Public server registration name, and also the name of the
Root channel
|
| options/nixos/security.pam.sshAgentAuth.enable | Whether to enable authenticating using a signature performed by the ssh-agent
|
| options/nixos/services.molly-brown.certPath | Path to TLS certificate
|
| options/nixos/services.tahoe.nodes.<name>.sftpd.hostPublicKeyFile | Path to the SSH host public key.
|
| options/nixos/services.peertube.listenWeb | The public-facing port that PeerTube will be accessible at (likely 80 or 443 if running behind a reverse proxy)
|
| options/nixos/services.dendrite.tlsCert | The path to the TLS certificate.
nix-shell -p dendrite --command "generate-keys --tls-cert server.crt --tls-key server.key"
|
| options/nixos/services.nsd.zones.<name>.dnssecPolicy.zsk | Key policy for zone signing keys
|
| options/nixos/services.nsd.zones.<name>.dnssecPolicy.ksk | Key policy for key signing keys
|
| options/nixos/services.openssh.hostKeys | NixOS can automatically generate SSH host keys
|
| options/nixos/programs.seahorse.enable | Whether to enable Seahorse, a GNOME application for managing encryption keys and passwords in the GNOME Keyring.
|
| options/nixos/services.fedimintd.<name>.nginx.fqdn | Public domain of the API address of the reverse proxy/tls terminator.
|
| options/home-manager/vdirsyncer.metadata | Metadata keys that should be synchronized when vdirsyncer
metasync is executed.
|
| options/nixos/services.writefreely.host | The public host name to serve.
|
| options/nixos/services.ghostunnel.servers.<name>.keystore | Path to keystore (combined PEM with cert/key, or PKCS12 keystore)
|
| options/nixos/security.acme.defaults.keyType | Key type to use for private keys
|
| options/nixos/services.plausible.server.baseUrl | Public URL where plausible is available
|
| options/home-manager/services.gpg-agent.enableSshSupport | Whether to use the GnuPG key agent for SSH keys.
|
| options/nixos/services.matrix-synapse.settings.trusted_key_servers | The trusted servers to download signing keys from.
|
| options/nixos/services.factorio.username | Your factorio.com login credentials
|
| options/nixos/services.factorio.password | Your factorio.com login credentials
|
| options/home-manager/accounts.email.accounts.<name>.gpg.key | The key to use as listed in gpg --list-keys.
|
| options/nixos/security.agnos.generateKeys.keySize | Key size in bits to use when generating new keys.
|
| options/nixos/services.filebeat.settings | Configuration for filebeat
|
| options/nixos/services.omnom.settings.activitypub.pubkey | ActivityPub public key
|
| options/nixos/services.evdevremapkeys.enable | Whether to enable evdevremapkeys, a daemon to remap events on linux input devices.
|
| options/nixos/boot.initrd.network.ssh.ignoreEmptyHostKeys | Allow leaving config.boot.initrd.network.ssh.hostKeys empty,
to deploy ssh host keys out of band.
|
| options/nixos/services.jitsi-videobridge.nat.harvesterAddresses | Addresses of public STUN services to use to automatically find
the public and local addresses of this Jitsi-Videobridge instance
without the need for manual configuration
|
| options/nixos/services.prosody.muc.*.roomDefaultPublic | If set, the MUC rooms will be public by default.
|
| options/nixos/services.postsrsd.settings.secrets-file | Path to the file containing the secret keys.
Secrets are passed using LoadCredential= on the systemd unit,
so this options is read-only
|
| options/home-manager/services.gpg-agent.defaultCacheTtlSsh | Set the time a cache entry used for SSH keys is valid to the
given number of seconds.
|
| options/nixos/services.tarsnap.archives.<name>.keyfile | Set a specific keyfile for this archive
|
| options/home-manager/xsession.windowManager.bspwm.rules | Rule configuration
|
| options/nixos/services.fedimintd.<name>.api_ws.url | Public URL of the API address of the reverse proxy/tls terminator
|
| options/nixos/services.frp.instances.<name>.role | The frp consists of client and server
|
| options/nixos/services.gitDaemon.enable | Enable Git daemon, which allows public hosting of git repositories
without any access controls
|
| options/nixos/services.keyd.keyboards | Configuration for one or more device IDs
|
| options/nixos/security.pam.u2f.settings.authfile | By default pam-u2f module reads the keys from
$XDG_CONFIG_HOME/Yubico/u2f_keys (or
$HOME/.config/Yubico/u2f_keys if XDG variable is
not set)
|
| options/home-manager/programs.termite.modifyOtherKeys | Emit escape sequences for extra keys,
like the modifyOtherKeys resource for
xterm(1).
|
| options/home-manager/services.gpg-agent.maxCacheTtlSsh | Set the maximum time a cache entry used for SSH keys is valid to n
seconds
|
| options/nixos/services.keyd.keyboards.<name>.settings | Configuration, except ids section, that is written to /etc/keyd/.conf
|
| options/nixos/services.keycloak.settings | Configuration options corresponding to parameters set in
conf/keycloak.conf
|
| options/nixos/services.draupnir.settings.homeserverUrl | Base URL of the Matrix homeserver that provides the Client-Server API.
|
| options/nixos/services.kerberos_server.settings.realms.<name>.acl.*.access | The changes the principal is allowed to make.
The "all" permission does not imply the "get-keys" permission
|
| options/nixos/security.pam.services.<name>.p11Auth | If set, keys listed in
~/.ssh/authorized_keys and
~/.eid/authorized_certificates
can be used to log in with the associated PKCS#11 tokens.
|
| options/nixos/services.teeworlds.register | Whether the server registers as a public server in the global server list
|
| options/nixos/services.prosody.muc.*.roomDefaultPublicJids | If set, the MUC rooms will display the public JIDs by default.
|
| options/nixos/boot.loader.systemd-boot.edk2-uefi-shell.sortKey | systemd-boot orders the menu entries by their sort keys,
so if you want something to appear after all the NixOS entries,
it should start with o or onwards
|
| options/nixos/programs.ssh.knownHosts.<name>.certAuthority | This public key is an SSH certificate authority, rather than an
individual host's key.
|
| options/darwin/programs.ssh.knownHosts.<name>.certAuthority | This public key is an SSH certificate authority, rather than an
individual host's key.
|
| options/nixos/networking.nat.externalIP | The public IP address to which packets from the local
network are to be rewritten
|
| options/nixos/services.draupnir.settings.rawHomeserverUrl | Public base URL of the Matrix homeserver that provides the Client-Server API when using the Draupnir's
Report forwarding feature.
When using Pantalaimon, do not set this to the Pantalaimon URL!
|
| options/nixos/services.syncthing.configDir | The path where the settings and keys will exist.
|
| options/nixos/services.postsrsd.secretsFile | Secret keys used for signing and verification.
The secret will be generated, if it does not exist at the given path.
|
| options/nixos/services.suwayomi-server.settings.server.basicAuthEnabled | Whether to enable basic access authentication for Suwayomi-Server
|
| options/home-manager/programs.obsidian.defaultSettings.hotkeys.<name>.*.modifiers | The hotkey modifiers.
|
| options/nixos/services.netbird.server.dashboard.settings | An attribute set that will be used to substitute variables when building the dashboard
|
| options/nixos/networking.nat.externalIPv6 | The public IPv6 address to which packets from the local
network are to be rewritten
|
| options/nixos/services.livekit.keyFile | LiveKit key file holding one or multiple application secrets
|
| options/nixos/services.kubernetes.easyCerts | Automatically setup x509 certificates and keys for the entire cluster.
|
| options/nixos/programs.captive-browser.interface | your public network interface (wlp3s0, wlan0, eth0, ...)
|
| options/nixos/programs.rust-motd.order | The order of the sections in programs.rust-motd.settings
|
| options/nixos/services.searx.configureUwsgi | Whether to run searx in uWSGI as a "vassal", instead of using its
built-in HTTP server
|
| options/nixos/services.nsd.zones.<name>.dnssecPolicy.ksk.rollPeriod | How frequently to change keys
|
| options/nixos/services.nsd.zones.<name>.dnssecPolicy.zsk.rollPeriod | How frequently to change keys
|