| options/nixos/services.evremap.settings.remap.*.output | The key sequence that should be output when the input sequence is entered
|
| options/nixos/boot.initrd.luks.devices.<name>.yubikey.iterationStep | How much the iteration count for PBKDF2 is increased at each successful authentication.
|
| options/nixos/services.matrix-continuwuity.settings.global.trusted_servers | Servers listed here will be used to gather public keys of other servers
(notary trusted key servers)
|
| options/nixos/security.pam.rssh.settings.auth_key_file | Path to file with trusted public keys in OpenSSH's authorized_keys format
|
| options/nixos/services.strongswan-swanctl.swanctl.secrets.pkcs8 | Private key decryption passphrase for a key in the
pkcs8 folder.
|
| options/nixos/services.strongswan-swanctl.swanctl.secrets.ecdsa | Private key decryption passphrase for a key in the
ecdsa folder.
|
| options/nixos/services.rosenpass.settings.peers.*.peer | WireGuard public key corresponding to the remote Rosenpass peer.
|
| options/nixos/networking.wireguard.interfaces.<name>.peers.*.presharedKeyFile | File pointing to preshared key as generated by wg genpsk
|
| options/darwin/launchd.agents.<name>.serviceConfig.Sockets.<name>.SockProtocol | This optional key specifies the protocol to be passed to socket(2)
|
| options/nixos/services.druid.broker.config | (key=value) Configuration to be written to runtime.properties of the druid Druid Broker
https://druid.apache.org/docs/latest/configuration/index.html
|
| options/nixos/services.druid.router.config | (key=value) Configuration to be written to runtime.properties of the druid Druid Router
https://druid.apache.org/docs/latest/configuration/index.html
|
| options/nixos/services.cjdns.enable | Whether to enable the cjdns network encryption
and routing engine
|
| options/nixos/services.mpd.settings | Configuration for MPD
|
| options/nixos/services.misskey.reverseProxy.webserver.nginx.listen.*.extraParameters | Extra parameters of this listen directive.
|
| options/nixos/services.movim.h2o.tls.identity | Key / certificate pairs for the virtual host.
|
| options/nixos/services.btrbk.sshAccess.*.roles | What actions can be performed with this SSH key
|
| options/nixos/services.strongswan-swanctl.swanctl.connections.<name>.remote.<name>.auth | Authentication to expect from remote
|
| options/nixos/services.traccar.settings | config.xml configuration as a Nix attribute set
|
| options/nixos/services.discourse.mail.incoming.apiKeyFile | A file containing the Discourse API key used to add
posts and messages from mail
|
| options/nixos/services.matrix-synapse.settings.trusted_key_servers.*.server_name | Hostname of the trusted server.
|
| options/nixos/services.misskey.reverseProxy.webserver.nginx.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| options/nixos/programs.ssh.startAgent | Whether to start the OpenSSH agent when you log in
|
| options/nixos/services.misskey.database.createLocally | Create the PostgreSQL database locally
|
| options/nixos/services.strongswan-swanctl.swanctl.connections.<name>.children.<name>.esp_proposals | ESP proposals to offer for the CHILD_SA
|
| options/nixos/services.komodo-periphery.passkeys | Passkeys required to access the periphery API
|
| options/nixos/programs.tsmClient.servers | Server definitions ("stanzas")
for the client system-options file
|
| options/darwin/launchd.user.agents.<name>.serviceConfig.Sockets.<name>.SockProtocol | This optional key specifies the protocol to be passed to socket(2)
|
| options/darwin/system.defaults.NSGlobalDomain."com.apple.keyboard.fnState" | Use F1, F2, etc. keys as standard function keys.
|
| options/nixos/services.ncps.cache.secretKeyPath | The path to load the secretKey for signing narinfos
|
| options/nixos/services.kanata.keyboards.<name>.devices | Paths to keyboard devices
|
| options/nixos/services.matrix-synapse.settings.tls_private_key_path | PEM encoded private key for TLS
|
| options/nixos/services.keycloak.settings.hostname-backchannel-dynamic | Enables dynamic resolving of backchannel URLs,
including hostname, scheme, port and context path
|
| options/nixos/services.kanata.keyboards.<name>.extraDefCfg | Configuration of defcfg other than linux-dev (generated
from the devices option) and
linux-continue-if-no-devs-found (hardcoded to be yes)
|
| options/nixos/services.misskey.reverseProxy.webserver.nginx.locations.<name>.priority | Order of this location block in relation to the others in the vhost
|
| options/home-manager/launchd.agents.<name>.config.Debug | This optional key specifies that launchd should adjust its log mask temporarily to LOG_DEBUG while
dealing with this job.
|
| options/home-manager/programs.rclone.remotes.<name>.config | Regular configuration options as described in rclone's documentation
https://rclone.org/docs/
|
| options/nixos/programs.tsmClient.dsmSysText | This configuration key contains the effective text
of the client system-options file "dsm.sys"
|
| options/home-manager/services.hyprsunset.settings | Hyprsunset configuration written in Nix
|
| options/nixos/networking.wg-quick.interfaces.<name>.privateKey | Base64 private key generated by wg genkey
|
| options/darwin/launchd.daemons.<name>.serviceConfig.Sockets.<name>.SockProtocol | This optional key specifies the protocol to be passed to socket(2)
|
| options/nixos/services.outline.sslKeyFile | File path that contains the Base64-encoded private key for HTTPS
termination
|
| options/nixos/image.repart.partitions | Specify partitions as a set of the names of the partitions with their
configuration as the key.
|
| options/nixos/services.monica.appKeyFile | A file containing the Laravel APP_KEY - a 32 character long,
base64 encoded key used for encryption where needed
|
| options/nixos/services.logind.rebootKeyLongPress | Specifies what to do when the reboot key is long-pressed.
|
| options/home-manager/launchd.agents.<name>.config.RunAtLoad | This optional key is used to control whether your job is launched once at the time the job is loaded
|
| options/nixos/services.dsnet.settings | The settings to use for dsnet
|
| options/nixos/services.tinc.networks.<name>.hostSettings.<name>.rsaPublicKey | Legacy RSA public key of the host in PEM format, including start and
end markers
|
| options/nixos/boot.initrd.luks.devices.<name>.gpgCard.publicKey | Path to the Public Key.
|
| options/nixos/services.nextcloud-spreed-signaling.settings.sessions.hashkeyFile | The path to the file containing the value for sessions.hashkey
|
| options/nixos/services.nsd.zones.<name>.requestXFR | Format: [AXFR|UDP] <ip-address> <key-name | NOKEY>
|
| options/home-manager/wayland.windowManager.sway.config.up | Home row direction key for moving up.
|
| options/nixos/services.misskey.reverseProxy.webserver.nginx.sslTrustedCertificate | Path to root SSL certificate for stapling and client certificates.
|
| options/nixos/services.kmonad.keyboards.<name>.defcfg.enable | Whether to enable automatic generation of the defcfg block
|
| options/nixos/services.strongswan-swanctl.swanctl.secrets.private | Private key decryption passphrase for a key in the
private folder.
|
| options/nixos/services.xserver.xkb.extraLayouts.<name>.typesFile | The path to the xkb types file
|
| options/nixos/services.filebeat.settings | Configuration for filebeat
|
| options/nixos/services.harmonia.signKeyPath | DEPRECATED: Use services.harmonia.signKeyPaths instead
|
| options/home-manager/services.podman.images.<name>.certDir | Path of certificates (*.{crt,cert,key}) used to connect to registry.
|
| options/nixos/services.misskey.reverseProxy.webserver.nginx.locations.<name>.fastcgiParams | FastCGI parameters to override
|
| options/nixos/services.mastodon.vapidPublicKeyFile | Path to file containing the public key used for Web Push
Voluntary Application Server Identification
|
| options/nixos/services.keycloak.sslCertificate | The path to a PEM formatted certificate to use for TLS/SSL
connections.
|
| options/nixos/services.nsd.dnssecInterval | How often to check whether dnssec key rollover is required
|
| options/nixos/services.molly-brown.certPath | Path to TLS certificate
|
| options/darwin/services.spacebar.config | Key/Value pairs to pass to spacebar's 'config' domain, via the configuration file.
|
| options/home-manager/programs.nnn.plugins.mappings | Key mappings to the plugins.
|
| options/nixos/services.lasuite-docs.settings.DJANGO_SECRET_KEY_FILE | The path to the file containing Django's secret key
|
| options/nixos/services.lasuite-meet.settings.DJANGO_SECRET_KEY_FILE | The path to the file containing Django's secret key
|
| options/nixos/services.dendrite.tlsCert | The path to the TLS certificate.
nix-shell -p dendrite --command "generate-keys --tls-cert server.crt --tls-key server.key"
|
| options/nixos/users.allowNoPasswordLogin | Disable checking that at least the root user or a user in the wheel group can log in using
a password or an SSH key
|
| options/nixos/services.h2o.hosts.<name>.tls.identity | Key / certificate pairs for the virtual host.
|
| options/nixos/services.nsd.zones.<name>.dnssecPolicy.zsk | Key policy for zone signing keys
|
| options/nixos/services.gitea.captcha.secretFile | Path to a file containing the CAPTCHA secret key.
|
| options/nixos/services.openssh.hostKeys | NixOS can automatically generate SSH host keys
|
| options/nixos/services.snapserver.streams.<name>.query | Key-value pairs that convey additional parameters about a stream.
|
| options/nixos/services.dovecot2.sslServerKey | Path to the server's private key.
|
| options/home-manager/services.grobi.rules | These are the rules grobi tries to match to the current
output configuration
|
| options/nixos/services.keycloak.database.createLocally | Whether a database should be automatically created on the
local host
|
| options/nixos/services.keycloak.database.username | Username to use when connecting to an external or manually
provisioned database; has no effect when a local database is
automatically provisioned
|
| options/nixos/services.iperf3.rsaPrivateKey | Path to the RSA private key (not password-protected) used to decrypt authentication credentials from the client.
|
| options/home-manager/wayland.windowManager.sway.config.down | Home row direction key for moving down.
|
| options/nixos/services.sshwifty.sharedKeyFile | Path to a file containing the shared key.
|
| options/nixos/services.kanata.keyboards.<name>.configFile | The config file
|
| options/nixos/services.dovecot2.enableDHE | Whether to enable ssl_dh and generation of primes for the key exchange.
|
| options/nixos/services.tor.relay.onionServices.<name>.authorizedClients | Authorized clients for a v3 onion service,
as a list of public key, in the format:
descriptor:x25519:<base32-public-key>
See torrc manual.
|
| options/home-manager/launchd.agents.<name>.config.WatchPaths | This optional key causes the job to be started if any one of the listed paths are modified.
|
| options/home-manager/programs.sftpman.mounts.<name>.sshKey | Path to the SSH key to use for authentication
|
| options/nixos/services.dragonflydb.keysOutputLimit | Maximum number of returned keys in keys command.
keys is a dangerous command
|
| options/home-manager/programs.obsidian.defaultSettings.hotkeys | Hotkeys to configure
|
| options/home-manager/programs.sftpman.defaultSshKey | Path to the SSH key to be used by default
|
| options/nixos/services.keycloak.database.passwordFile | The path to a file containing the database password
|
| options/home-manager/wayland.windowManager.sway.config.left | Home row direction key for moving left.
|
| options/nixos/services.gitea.minioSecretAccessKey | Path to a file containing the Minio secret access key.
|
| options/home-manager/services.gpg-agent.enableSshSupport | Whether to use the GnuPG key agent for SSH keys.
|
| options/home-manager/wayland.windowManager.hyprland.settings | Hyprland configuration written in Nix
|
| options/nixos/services.keycloak.initialAdminPassword | Initial password set for the temporary admin user
|
| options/nixos/services.athens.storage.gcp.jsonKey | Base64 encoded GCP service account key
|
| options/nixos/services.logind.suspendKeyLongPress | Specifies what to do when the suspend key is long-pressed.
|
| options/nixos/services.cfssl.mutualTlsClientKey | Mutual TLS - client key to call remote instance requiring client certs
|
| options/nixos/programs.yubikey-touch-detector.libnotify | If set to true, yubikey-touch-detctor will send notifications using libnotify
|
| options/home-manager/launchd.agents.<name>.config.StartOnMount | This optional key causes the job to be started every time a filesystem is mounted.
|