| options/nixos/services.komodo-periphery.passkeys | Passkeys required to access the periphery API
|
| options/nixos/services.rustus.info_storage.dir | directory to store info about uploads
|
| options/nixos/services.nginx.logError | Configures logging
|
| options/nixos/services.thanos.query.tracing.config | Tracing configuration
|
| options/nixos/services.prometheus.exporters.idrac.configurationPath | Path to the service's config file
|
| options/nixos/services.open-webui.environmentFile | Environment file to be passed to the systemd service
|
| options/nixos/programs.singularity.enableExternalLocalStateDir | Whether to use top-level directories as LOCALSTATEDIR
instead of the store path ones
|
| options/nixos/services.matrix-synapse.settings.pid_file | The file to store the PID in.
|
| options/nixos/services.silverbullet.spaceDir | Folder to store Silverbullet's space/workspace
|
| options/nixos/services.crossfire-server.stateDir | Where to store runtime data (save files, persistent items, etc)
|
| options/nixos/services.gatus.environmentFile | File to load as environment file
|
| options/nixos/services.gitlab.initialRootPasswordFile | File containing the initial password of the root account if
this is a new install
|
| options/nixos/services.gitlab.databasePasswordFile | File containing the GitLab database user password
|
| options/nixos/services.httpd.virtualHosts.<name>.documentRoot | The path of Apache's document root directory
|
| options/nixos/services.linyaps.webStoreInstallerPackage | The linyaps-web-store-installer package to use.
|
| options/nixos/services.rabbitmq.unsafeCookie | Erlang cookie is a string of arbitrary length which must
be the same for several nodes to be allowed to communicate
|
| options/nixos/services.keepalived.secretFile | Environment variables from this file will be interpolated into the
final config file using envsubst with this syntax: $ENVIRONMENT
or ${VARIABLE}
|
| options/nixos/services.bcg.environmentFiles | File to load as environment file
|
| options/home-manager/accounts.email.accounts.<name>.mbsync.extraConfig.local | Local store extra configuration.
|
| options/nixos/services.hadoop.yarn.nodemanager.localDir | List of directories to store localized files in.
|
| options/nixos/services.scrutiny.settings.web.influxdb.org | InfluxDB organisation under which to store data.
|
| options/nixos/services.prefect.databasePasswordFile | path to a file containing e.g.:
DBPASSWORD=supersecret
stored outside the nix store, read by systemd as EnvironmentFile.
|
| options/nixos/services.writefreely.database.name | The name of the database to store data in.
|
| options/nixos/boot.loader.systemd-boot.xbootldrMountPoint | Where the XBOOTLDR partition is mounted
|
| options/nixos/services.garage.settings.data_dir | The directory in which Garage will store the data blocks of objects
|
| options/nixos/services.pgadmin.initialPasswordFile | Initial password file for the pgAdmin account
|
| options/nixos/services.openvpn.servers.<name>.authUserPass.username | The username to store inside the credentials file.
|
| options/nixos/services.actual.settings.serverFiles | The server will put an account.sqlite file in this directory, which will contain the (hashed) server password, a list of all the budget files the server knows about, and the active session token (along with anything else the server may want to store in the future).
|
| options/nixos/services.matrix-synapse.extraConfigFiles | Extra config files to include
|
| options/home-manager/programs.openstackclient.clouds | Configuration needed to connect to one or more clouds
|
| options/nixos/services.victorialogs.stateDir | Directory below /var/lib to store VictoriaLogs data
|
| options/home-manager/programs.nvchecker.settings.__config__.newver | The file to store 'new' (i.e. available) versions in
|
| options/nixos/services.postfix.settings.master.<name>.chroot | Whether the service is chrooted to have only access to the
services.postfix.queueDir and the closure of
store paths specified by the program option.
|
| options/home-manager/programs.nvchecker.settings.__config__.oldver | The file to store 'old' (i.e. installed) version information in
|
| options/nixos/services.litellm.environmentFile | Environment file to be passed to the systemd service
|
| options/nixos/services.orthanc.environmentFile | Environment file to be passed to the systemd service
|
| options/nixos/services.taskchampion-sync-server.dataDir | Directory in which to store data
|
| options/nixos/services.gitlab.secrets.secretFile | A file containing the secret used to encrypt variables in
the DB
|
| options/nixos/services.userborn.static | Whether to generate the password files at build time and store them directly
in the system closure, without requiring any services at boot time
|
| options/home-manager/accounts.email.accounts.<name>.mbsync.extraConfig.remote | Remote store extra configuration.
|
| options/nixos/services.rathole.credentialsFile | Path to a TOML file to be merged with the settings
|
| options/nixos/services.ghostunnel.servers.<name>.cacert | Path to CA bundle file (PEM/X509)
|
| options/nixos/services.bluesky-pds.settings.PDS_DATA_DIRECTORY | Directory to store state
|
| options/nixos/services.zabbixWeb.httpd.virtualHost.documentRoot | The path of Apache's document root directory
|
| options/nixos/services.beszel.hub.environmentFile | Environment file to be passed to the systemd service
|
| options/nixos/services.ntfy-sh.environmentFile | Path to a file containing extra ntfy environment variables in the systemd EnvironmentFile
format
|
| options/nixos/boot.loader.grub.mirroredBoots.*.efiBootloaderId | The id of the bootloader to store in efi nvram
|
| options/nixos/services.buildkite-agents.<name>.privateSshKeyPath | OpenSSH private key
A run-time path to the key file, which is supposed to be provisioned
outside of Nix store.
|
| options/darwin/services.buildkite-agents.<name>.privateSshKeyPath | OpenSSH private key
A run-time path to the key file, which is supposed to be provisioned
outside of Nix store.
|
| options/nixos/virtualisation.mountHostNixStore | Mount the host Nix store as a 9p mount.
|
| options/nixos/<imports = [ pkgs.ghostunnel.services.default ]>.ghostunnel.keystore | Path to keystore (combined PEM with cert/key, or PKCS12 keystore)
|
| options/nixos/services.thanos.compact.tracing.config | Tracing configuration
|
| options/nixos/services.thanos.sidecar.tracing.config | Tracing configuration
|
| options/nixos/services.thanos.receive.tracing.config | Tracing configuration
|
| options/nixos/services.kanidm.provision.adminPasswordFile | Path to a file containing the admin password for kanidm
|
| options/nixos/services.chhoto-url.environmentFiles | Files to load environment variables from in addition to services.chhoto-url.settings
|
| options/nixos/services.paperless.exporter.directory | Directory to store export.
|
| options/nixos/services.bepasty.servers.<name>.secretKeyFile | A file that contains the server secret for safe session cookies, must be set.
secretKeyFile takes precedence over secretKey
|
| options/nixos/services.drupal.sites.<name>.virtualHost.documentRoot | The path of Apache's document root directory
|
| options/nixos/services.gemstash.settings.base_path | Path to store the gem files and the sqlite database
|
| options/nixos/networking.dhcpcd.persistent | Whether to leave interfaces configured on dhcpcd daemon
shutdown
|
| options/nixos/services.zipline.environmentFiles | Files to load environment variables from (in addition to services.zipline.settings)
|
| options/darwin/services.telegraf.environmentFiles | File to load as environment file
|
| options/nixos/services.beszel.agent.environment | Environment variables for configuring the beszel-agent service
|
| options/nixos/services.umami.settings.APP_SECRET_FILE | A file containing a secure random string
|
| options/nixos/services.healthchecks.dataDir | The directory used to store all data for healthchecks.
If left as the default value this directory will automatically be created before
the healthchecks server starts, otherwise you are responsible for ensuring the
directory exists with appropriate ownership and permissions.
|
| options/nixos/services.dendrite.loadCredential | This can be used to pass secrets to the systemd service without adding them to
the nix store
|
| options/nixos/services.scrutiny.settings.web.influxdb.bucket | InfluxDB bucket in which to store data.
|
| options/nixos/services.gitlab.secrets.activeRecordSaltFile | A file containing the salt for active record encryption in the DB
|
| options/nixos/services.docling-serve.environmentFile | Environment file to be passed to the systemd service
|
| options/nixos/services.sourcehut.settings."pages.sr.ht".gemini-certs | An absolute file path (which should be outside the Nix-store)
to Gemini certificates.
|
| options/nixos/systemd.network.netdevs.<name>.wireguardPeers | Each item in this array specifies an option in the
[WireGuardPeer] section of the unit
|
| options/nixos/nixpkgs.flake.setFlakeRegistry | Whether to pin nixpkgs in the system-wide flake registry (/etc/nix/registry.json) to the
store path of the sources of nixpkgs used to build the NixOS system
|
| options/nixos/services.trilium-server.environmentFile | File to load as the environment file
|
| options/nixos/nix.settings.sandbox | If set, Nix will perform builds in a sandboxed environment that it
will set up automatically for each build
|
| options/nixos/services.grafana.settings.security.admin_password | Default admin password
|
| options/nixos/services.strongswan-swanctl.includes | Extra configuration files to include in the swanctl configuration
|
| options/nixos/services.linkwarden.storageLocation | Directory used to store media files
|
| options/nixos/services.firezone.headless-client.tokenFile | A file containing the firezone client token
|
| options/nixos/services.linkwarden.secretFiles | Attribute set containing paths to files to add to the environment of linkwarden
|
| options/nixos/services.slskd.environmentFile | Path to the environment file sourced on startup
|
| options/nixos/services.zwave-js.secretsConfigFile | JSON file containing secret keys
|
| options/nixos/services.sharkey.environmentFiles | List of paths to files containing environment variables for Sharkey to use at runtime
|
| options/nixos/services.hostapd.radios.<name>.networks.<name>.macDeny | Specifies the MAC addresses to deny if macAcl is set to "deny" or "radius"
|
| options/nixos/services.warpgate.settings.recordings.path | Path to store session recordings.
|
| options/darwin/nixpkgs.flake.setFlakeRegistry | Whether to pin nixpkgs in the system-wide flake registry (/etc/nix/registry.json) to the
store path of the sources of nixpkgs used to build the nix-darwin system
|
| options/nixos/services.matterbridge.configFile | WARNING: THIS IS INSECURE, as your password will end up in
/nix/store, thus publicly readable
|
| options/nixos/networking.nftables.checkRuleset | Run nft check on the ruleset to spot syntax errors during build
|
| options/nixos/services.biboumi.credentialsFile | Path to a configuration file to be merged with the settings
|
| options/nixos/services.icingaweb2.resources | resources.ini contents
|
| options/nixos/systemd.network.netdevs.<name>.wireguardConfig | Each attribute in this set specifies an option in the
[WireGuard] section of the unit
|
| options/nixos/services.munin-node.extraPlugins | Additional Munin plugins to activate
|
| options/nixos/systemd.services.<name>.confinement.enable | If set, all the required runtime store paths for this service are
bind-mounted into a tmpfs-based
chroot(2).
|
| options/nixos/boot.initrd.network.ssh.hostKeys | Specify SSH host keys to import into the initrd
|
| options/nixos/services.discourse.mail.incoming.apiKeyFile | A file containing the Discourse API key used to add
posts and messages from mail
|
| options/nixos/networking.supplicant.<name>.extraConf | Configuration options for wpa_supplicant.conf
|
| options/nixos/services.pds.settings.PDS_BLOBSTORE_DISK_LOCATION | Store blobs at this location, set to null to use e.g
|
| options/nixos/services.nextjs-ollama-llm-ui.enable | Whether to enable Simple Ollama web UI service; an easy to use web frontend for a Ollama backend service
|
| options/nixos/services.sssd.environmentFile | Environment file as defined in systemd.exec(5)
|
| options/darwin/homebrew.onActivation.upgrade | Whether to enable Homebrew to upgrade outdated formulae and Mac App Store apps during
nix-darwin system activation
|