| options/nixos/services.technitium-dns-server.openFirewall | Whether to open ports in the firewall
|
| options/nixos/services.neo4j.https.advertisedAddress | Neo4j advertised address for HTTPS traffic
|
| options/nixos/services.pihole-ftl.lists.*.url | URL of the domain list
|
| options/nixos/services.prometheus.scrapeConfigs.*.uyuni_sd_configs.*.password | Credentials are used to authenticate the requests to Uyuni API.
|
| options/nixos/services.prometheus.scrapeConfigs.*.docker_sd_configs.*.oauth2.endpoint_params | Optional parameters to append to the token URL.
|
| options/nixos/services.mediawiki.poolConfig | Options for the MediaWiki PHP pool
|
| options/nixos/services.openafsServer.cellName | Cell name, this server will serve.
|
| options/nixos/services.snipe-it.database.name | Database name.
|
| options/nixos/services.rstudio-server.rserverExtraConfig | Extra contents for rserver.conf.
|
| options/nixos/services.reposilite.settings.hostname | The hostname to bind to
|
| options/nixos/services.snipe-it.nginx.sslCertificate | Path to server SSL certificate.
|
| options/nixos/services.prometheus.exporters.bitcoin.extraFlags | Extra commandline options to pass to the bitcoin exporter.
|
| options/nixos/services.tor.relay.onionServices.<name>.settings.HiddenServiceDirGroupReadable | See torrc manual.
|
| options/nixos/services.prometheus.exporters.json.group | Group under which the json exporter shall be run.
|
| options/nixos/services.tailscale.interfaceName | The interface name for tunnel traffic
|
| options/nixos/services.printing.cups-pdf.instances.<name>.confFileText | This will contain the contents of cups-pdf.conf for this instance, derived from settings
|
| options/nixos/services.strongswan-swanctl.swanctl.connections.<name>.ppk_required | Whether a Postquantum Preshared Key (PPK) is required for this connection
|
| options/nixos/services.prometheus.exporters.varnish.healthPath | Path under which to expose healthcheck
|
| options/nixos/services.nsd.remoteControl.serverCertFile | Path to the server self signed certificate, which is used by the server
but and by nsd-control
|
| options/nixos/services.tayga.ipv4.pool.prefixLength | Subnet mask of the interface, specified as the number of
bits in the prefix ("24").
|
| options/nixos/services.oncall.settings.db.conn.require_auth | Whether authentication is required to access the web app.
|
| options/nixos/services.rustus.storage.s3_url | S3 url.
|
| options/nixos/services.postgrey.whitelistRecipients | Recipient address whitelist files (see postgrey(8))
|
| options/nixos/services.mediawiki.httpd.virtualHost.logFormat | Log format for Apache's log files
|
| options/nixos/services.node-red.configFile | Path to the JavaScript configuration file
|
| options/nixos/services.prometheus.exporters.junos-czerwonk.configurationFile | Specify the JunOS exporter configuration file to use.
|
| options/nixos/services.prometheus.exporters.mail.configuration.servers.*.passphrase | Password to use for SMTP authentication.
|
| options/nixos/services.moodle.virtualHost.acmeRoot | Directory for the acme challenge which is PUBLIC, don't put certs or keys in here
|
| options/nixos/services.limesurvey.database.user | Database user.
|
| options/nixos/services.nagios.virtualHost.documentRoot | The path of Apache's document root directory
|
| options/nixos/services.thanos.sidecar.grpc-server-tls-key | TLS Key for the gRPC server, leave blank to disable TLS
|
| options/nixos/services.snipe-it.nginx.redirectCode | HTTP status used by globalRedirect and forceSSL
|
| options/nixos/services.prometheus.exporters.idrac.firewallFilter | Specify a filter for iptables to use when
services.prometheus.exporters.idrac.openFirewall
is true
|
| options/nixos/services.nebula.networks.<name>.tun.device | Name of the tun device
|
| options/nixos/services.taskserver.organisations.<name>.groups | A list of group names that belong to the organization.
|
| options/nixos/services.pdfding.user | User account under which PdfDing runs
|
| options/nixos/services.pretix.settings.pretix.instance_name | The name of this installation.
|
| options/nixos/services.redis.servers.<name>.enable | Whether to enable Redis server.
|
| options/nixos/services.openssh.sftpFlags | Commandline flags to add to sftp-server.
|
| options/nixos/services.prometheus.exporters.knot.port | Port to listen on.
|
| options/nixos/services.nylon.<name>.allowedIPRanges | Allowed client IP ranges are evaluated first, defaults to ARIN IPv4 private ranges:
[ "192.168.0.0/16" "127.0.0.0/8" "172.16.0.0/12" "10.0.0.0/8" ]
|
| options/nixos/services.tinc.networks.<name>.hostSettings | The name of the host in the network as well as the configuration for that host
|
| options/nixos/services.loki.enable | Whether to enable Grafana Loki.
|
| options/nixos/services.thanos.store.index-cache-size | Maximum size of items held in the index cache
|
| options/nixos/services.mailman.settings | Settings for mailman.cfg
|
| options/nixos/services.movim.nginx.locations.<name>.basicAuth | Basic Auth protection for a vhost
|
| options/nixos/services.parsedmarc.settings | Configuration parameters to set in
parsedmarc.ini
|
| options/nixos/services.printing.browsed.enable | Whether to enable the CUPS Remote Printer Discovery (browsed) daemon.
|
| options/nixos/services.pgbackrest.commands.verify | Options for the 'verify' command
|
| options/nixos/services.prometheus.exporters.opnsense.apiSecretFile | File containing the api secret.
|
| options/nixos/services.murmur.textMsgLength | Max length of text messages
|
| options/nixos/services.movim.h2o.tls.identity.*.certificate-file | Path to certificate file
|
| options/nixos/services.smokeping.user | User that runs smokeping and (optionally) thttpd
|
| options/nixos/services.oxidized.dataDir | State directory for the oxidized service.
|
| options/nixos/services.taskserver.group | Group for Taskserver.
|
| options/nixos/services.orthanc.settings | Configuration written to a json file that is read by orthanc
|
| options/nixos/services.prometheus.exporters.dnsmasq.enable | Whether to enable the prometheus dnsmasq exporter.
|
| options/nixos/services.limesurvey.nginx.virtualHost.forceSSL | Whether to add a separate nginx server block that redirects (defaults
to 301, configurable with redirectCode) all plain HTTP traffic to
HTTPS
|
| options/nixos/services.rstudio-server.package | The rstudio-server package to use.
|
| options/nixos/services.sympa.mainDomain | Main domain to be used in sympa.conf
|
| options/nixos/services.soju.configFile | Path to config file
|
| options/nixos/services.parsedmarc.provision.elasticsearch | Whether to set up and use a local instance of Elasticsearch.
|
| options/nixos/services.prometheus.exporters.smokeping.enable | Whether to enable the prometheus smokeping exporter.
|
| options/nixos/services.syncthing.relay.statusPort | Port to listen on for serving the relay status API
|
| options/nixos/services.mympd.openFirewall | Open ports needed for the functionality of the program.
|
| options/nixos/services.mongodb.enable | Whether to enable the MongoDB server.
|
| options/nixos/services.teamspeak3.querySshPort | TCP port opened for ServerQuery connections using the SSH protocol.
|
| options/nixos/services.openarena.openPorts | Whether to open firewall ports for OpenArena
|
| options/nixos/services.pantheon.contractor.enable | Whether to enable contractor, a desktop-wide extension service used by Pantheon.
|
| options/nixos/services.prometheus.exporters.domain.listenAddress | Address to listen on.
|
| options/nixos/services.lighttpd.port | TCP port number for lighttpd to bind to.
|
| options/nixos/services.routinator.settings.rtr-listen | An array of string values each providing an address and port on which the RTR server should listen in TCP mode
|
| options/nixos/services.mealie.port | Port on which to serve the Mealie service.
|
| options/nixos/services.snipe-it.mail.passwordFile | A file containing the password corresponding to
mail.user.
|
| options/nixos/services.radicle.httpd.nginx.locations.<name>.priority | Order of this location block in relation to the others in the vhost
|
| options/nixos/services.prefect.databaseName | database name for postgres only
|
| options/nixos/services.nullmailer.config.sendtimeout | The time to wait for a remote module listed above to complete sending
a message before killing it and trying again, in seconds
|
| options/nixos/services.sysstat.collect-args | Arguments to pass sa1 when collecting statistics
|
| options/nixos/services.mailman.ldap.attrMap.firstName | LDAP-attribute that corresponds to the firstName-attribute in mailman.
|
| options/nixos/services.rabbitmq.configItems | Configuration options in RabbitMQ's new config file format,
which is a simple key-value format that can not express nested
data structures
|
| options/nixos/services.nagios.virtualHost.useACMEHost | A host of an existing Let's Encrypt certificate to use
|
| options/nixos/services.prometheus.exporters.mail.configuration.servers | List of servers that should be probed.
Note: if your mailserver has rspamd(8) configured,
it can happen that emails from this exporter are marked as spam
|
| options/nixos/services.mtr-exporter.jobs.*.flags | Additional flags to pass to MTR.
|
| options/nixos/services.prometheus.scrapeConfigs.*.linode_sd_configs.*.authorization.credentials | Sets the credentials
|
| options/nixos/services.syncplay.ready | Check readiness of users.
|
| options/nixos/services.tailscaleAuth.socketPath | Path of the socket listening to authorization requests.
|
| options/nixos/services.unbound.resolveLocalQueries | Whether unbound should resolve local queries (i.e. add 127.0.0.1 to
/etc/resolv.conf).
|
| options/nixos/services.matomo.nginx.extraConfig | These lines go to the end of the vhost verbatim.
|
| options/nixos/services.mautrix-meta.instances | Configuration of multiple mautrix-meta instances.
services.mautrix-meta.instances.facebook and services.mautrix-meta.instances.instagram
come preconfigured with network.mode, appservice.id, bot username, display name and avatar.
|
| options/nixos/services.thanos.receive.grpc-server-tls-client-ca | TLS CA to verify clients against
|
| options/nixos/services.matrix-alertmanager.homeserverUrl | URL of the Matrix homeserver to use.
|
| options/nixos/services.limesurvey.httpd.virtualHost.documentRoot | The path of Apache's document root directory
|
| options/nixos/services.prometheus.exporters.flow.user | User name under which the flow exporter shall be run.
|
| options/nixos/services.matrix-alertmanager.port | Port that matrix-alertmanager listens on.
|
| options/nixos/services.slskd.nginx.locations.<name>.tryFiles | Adds try_files directive.
|
| options/nixos/services.trilium-server.instanceName | Instance name used to distinguish between different instances
|
| options/nixos/services.tarsnap.archives.<name>.keyfile | Set a specific keyfile for this archive
|
| options/nixos/services.unclutter-xfixes.extraOptions | More arguments to pass to the unclutter-xfixes command.
|
| options/nixos/services.llama-swap.tls.keyFile | Path to the TLS private key file
|
| options/nixos/services.nagios.virtualHost.locations.<name>.index | Adds DirectoryIndex directive
|