| nixpkgs.flake.setFlakeRegistry | Whether to pin nixpkgs in the system-wide flake registry (/etc/nix/registry.json) to the
store path of the sources of nixpkgs used to build the nix-darwin system
|
| services.gitlab-runner.sessionServer | The session server allows the user to interact with jobs
that the Runner is responsible for
|
| system.defaults.trackpad.TrackpadFourFingerPinchGesture | Whether to enable four-finger pinch gesture (spread shows the Desktop, pinch shows the Launchpad): 0 to disable, 2 to enable
|
| launchd.user.agents.<name>.serviceConfig.OnDemand | This key was used in Mac OS X 10.4 to control whether a job was kept alive or not
|
| launchd.user.agents.<name>.serviceConfig.SoftResourceLimits.Data | The maximum size (in bytes) of the data segment for a process; this defines how far a program may
extend its break with the sbrk(2) system call.
|
| nix.linux-builder.package | This option specifies the Linux builder to use.
|
| nix.settings.extra-sandbox-paths | Directories from the host filesystem to be included
in the sandbox.
|
| services.gitlab-runner.prometheusListenAddress | Address (<host>:<port>) on which the Prometheus metrics HTTP server
should be listening.
|
| services.khd.package | This option specifies the khd package to use.
|
| services.yabai.package | The yabai package to use.
|
| system.defaults.universalaccess.reduceMotion | Disable animation when switching screens or opening apps
|
| launchd.agents.<name>.serviceConfig.SoftResourceLimits.NumberOfProcesses | The maximum number of simultaneous processes for this user id
|
| programs.fish.enable | Whether to configure fish as an interactive shell.
|
| services.autossh.sessions.*.name | Name of the local AutoSSH session
|
| system.primaryUser | The user used for options that previously applied to the user
running darwin-rebuild
|
| homebrew.caskArgs.language | Comma-separated list of language codes to prefer for cask installation
|
| environment.shellInit | Shell script code called during shell initialisation
|
| services.buildkite-agents.<name>.hooks.environment | The environment hook will run before all other commands, and can be used
to set up secrets, data, etc
|
| system.defaults.CustomSystemPreferences | Sets custom system preferences
|
| services.buildkite-agents.<name>.name | The name of the agent as seen in the buildkite dashboard.
|
| services.dnsmasq.port | This option specifies port on which DNSmasq will listen.
|
| system.defaults.NSGlobalDomain.NSTextShowsControlCharacters | Whether to display ASCII control characters using caret notation in standard text views
|
| system.nixpkgsRelease | The nixpkgs release (e.g. 24.11).
|
| launchd.daemons.<name>.serviceConfig.SoftResourceLimits.MemoryLock | The maximum size (in bytes) which a process may lock into memory using the mlock(2) function.
|
| launchd.agents.<name>.serviceConfig.HardResourceLimits.CPU | The maximum amount of cpu time (in seconds) to be used by each process.
|
| services.gitlab-runner.services.<name>.dockerPrivileged | Give extended privileges to container.
|
| programs.direnv.loadInNixShell | Whether to enable loading direnv in nix-shell nix shell or nix develop
.
|
| system.defaults.ActivityMonitor.ShowCategory | Change which processes to show.
- 100: All Processes
- 101: All Processes, Hierarchally
- 102: My Processes
- 103: System Processes
- 104: Other User Processes
- 105: Active Processes
- 106: Inactive Processes
- 107: Windowed Processes
Default is 100.
|
| system.defaults.LaunchServices.LSQuarantine | Whether to enable quarantine for downloaded applications
|
| services.aerospace.settings.accordion-padding | Padding between windows in an accordion container.
|
| services.hercules-ci-agent.settings.labels | A key-value map of user data
|
| services.redis.bind | The IP interface to bind to.
|
| system.checks.verifyBuildUsers | Whether to run the Nix build users validation checks.
|
| nix.linux-builder.mandatoryFeatures | A list of features mandatory for the Linux builder
|
| homebrew.brews.*.link | Whether to link the formula to the Homebrew prefix
|
| homebrew.global.autoUpdate | Whether to enable Homebrew to auto-update itself and all formulae when you manually invoke
commands like brew install, brew upgrade,
brew tap, and brew bundle [install]
|
| programs.vim.vimConfig | Extra vimrcConfig to use for vim_configurable.
|
| services.gitlab-runner.sessionServer.listenAddress | An internal URL to be used for the session server.
|
| system.defaults.NSGlobalDomain.AppleShowAllFiles | Whether to always show hidden files
|
| system.defaults.controlcenter.AirDrop | Apple menu > System Preferences > Control Center > AirDrop
Show a AirDrop control in menu bar
|
| services.chunkwm.enable | Whether to enable the chunkwm window manager.
|
| system.defaults.NSGlobalDomain.AppleWindowTabbingMode | Sets the window tabbing when opening a new document: 'manual', 'always', or 'fullscreen'
|
| nix.settings.cores | This option defines the maximum number of concurrent tasks during
one build
|
| programs.nix-index.enable | Whether to enable nix-index and its command-not-found helper.
|
| programs.tmux.enable | Whether to configure tmux.
|
| homebrew.casks.*.args | Arguments passed to brew install --cask when installing this cask
|
| services.mopidy.package | This option specifies the mopidy package to use.
|
| launchd.daemons.<name>.serviceConfig.HardResourceLimits | Resource limits to be imposed on the job
|
| system.defaults.trackpad.TrackpadFourFingerHorizSwipeGesture | Whether to enable four-finger horizontal swipe gesture: 0 to disable, 2 to swipe between full-screen applications
|
| services.postgresql.initdbArgs | Additional arguments passed to initdb during data dir
initialisation.
|
| _module.args | Additional arguments passed to each module in addition to ones
like lib, config,
and pkgs, modulesPath
|
| launchd.user.agents.<name>.serviceConfig | Each attribute in this set specifies an option for a key in the plist.
https://developer.apple.com/legacy/library/documentation/Darwin/Reference/ManPages/man5/launchd.plist.5.html
|
| launchd.user.agents.<name>.serviceConfig.Sockets.<name>.SockProtocol | This optional key specifies the protocol to be passed to socket(2)
|
| system.activationScripts.<name>.enable | Whether this file should be generated
|
| launchd.user.agents.<name>.serviceConfig.HardResourceLimits.CPU | The maximum amount of cpu time (in seconds) to be used by each process.
|
| programs.vim.enableSensible | Enable sensible configuration options for vim.
|
| services.github-runners.<name>.url | Repository to add the runner to
|
| system.defaults.NSGlobalDomain."com.apple.mouse.tapBehavior" | Configures the trackpad tap behavior
|
| environment.userLaunchAgents.<name>.enable | Whether this file should be generated
|
| environment.userLaunchAgents.<name>.source | Path of the source file.
|
| launchd.agents.<name>.serviceConfig.SoftResourceLimits.Stack | The maximum size (in bytes) of the stack segment for a process; this defines how far a program's
stack segment may be extended
|
| launchd.daemons.<name>.serviceConfig.ThrottleInterval | This key lets one override the default throttling policy imposed on jobs by launchd
|
| launchd.user.agents.<name>.serviceConfig.SoftResourceLimits.ResidentSetSize | The maximum size (in bytes) to which a process's resident set size may grow
|
| launchd.daemons.<name>.serviceConfig.HardResourceLimits.Core | The largest size (in bytes) core file that may be created.
|
| launchd.agents.<name>.serviceConfig.Disabled | This optional key is used as a hint to launchctl(1) that it should not submit this job to launchd when
loading a job or jobs
|
| programs.bash.completion.package | The bash-completion package to use.
|
| system.defaults.universalaccess.reduceTransparency | Disable transparency in the menu bar and elsewhere
|
| homebrew.caskArgs | Arguments passed to brew install --cask for all casks listed in
homebrew.casks.
|
| services.github-runners.<name>.tokenFile | The full path to a file which contains either
- a fine-grained personal access token (PAT),
- a classic PAT
- or a runner registration token
Changing this option or the tokenFile’s content triggers a new runner registration
|
| services.gitlab-runner.sessionServer.advertiseAddress | The URL that the Runner will expose to GitLab to be used
to access the session server
|
| launchd.user.agents.<name>.serviceConfig.EnableTransactions | This flag instructs launchd that the job promises to use vproc_transaction_begin(3) and
vproc_transaction_end(3) to track outstanding transactions that need to be reconciled before the
process can safely terminate
|
| system.defaults.trackpad.Dragging | Whether to enable tap to drag
|
| users.users | Configuration for users.
|
| launchd.user.agents.<name>.serviceConfig.InitGroups | This optional key specifies whether initgroups(3) should be called before running the job
|
| system.defaults.screensaver.askForPasswordDelay | The number of seconds to delay before the password will be required to unlock or stop the screen saver (the grace period).
|
| services.gitlab-runner.services.<name>.dockerImage | Docker image to be used.
|
| system.defaults.finder.QuitMenuItem | Whether to allow quitting of the Finder
|
| users.users.<name>.uid | The user's UID.
|
| system.defaults.NSGlobalDomain.NSStatusItemSpacing | Sets the spacing between status icons in the menu bar.
|
| services.eternal-terminal.verbosity | The verbosity level (0-9).
|
| services.hercules-ci-agent.logFile | Stdout and sterr of hercules-ci-agent process.
|
| networking.wg-quick.interfaces.<name>.listenPort | Port to listen on, randomly selected if not specified.
|
| nix.buildMachines.*.protocol | The protocol used for communicating with the build machine
|
| programs.ssh.knownHosts.<name>.hostNames | The set of system-wide known SSH hosts
|
| security.sandbox.profiles.<name>.readablePaths | List of paths that should be read-only inside the sandbox.
|
| services.buildkite-agents.<name>.tags | Tags for the agent.
|
| services.synergy.server.tls.enable | Whether to enable Whether TLS encryption should be used
|
| services.trezord.emulator.enable | Enable Trezor emulator support.
|
| launchd.agents.<name>.command | Command executed as the service's main process.
|
| system.defaults.trackpad.TrackpadPinch | Whether to enable two-finger pinch gesture for zooming in and out
|
| launchd.user.agents.<name>.serviceConfig.EnableGlobbing | This flag causes launchd to use the glob(3) mechanism to update the program arguments before invocation.
|
| services.gitlab-runner.services.<name>.preBuildScript | Runner-specific command script executed after code is pulled,
just before build executes.
|
| services.synergy.client.tls.enable | Whether to enable Whether TLS encryption should be used
|
| services.gitlab-runner.services.<name>.debugTraceDisabled | When set to true Runner will disable the possibility of
using the CI_DEBUG_TRACE feature.
|
| system.defaults.dock.expose-animation-duration | Sets the speed of the Mission Control animations
|
| system.defaults.universalaccess.mouseDriverCursorSize | Set the size of cursor. 1 for normal, 4 for maximum
|
| services.hercules-ci-agent.settings.binaryCachesPath | Path to a JSON file containing binary cache secret keys
|
| services.gitlab-runner.services.<name>.dockerVolumes | Bind-mount a volume and create it
if it doesn't exist prior to mounting.
|
| services.jankyborders.package | The jankyborders package to use.
|
| system.defaults.NSGlobalDomain.NSAutomaticDashSubstitutionEnabled | Whether to enable smart dash substitution
|
| launchd.daemons.<name>.serviceConfig.LowPriorityBackgroundIO | This optional key specifies whether the kernel should consider this daemon to be low priority when
doing file system I/O when the process is throttled with the Darwin-background classification.
|
| system.defaults.dock.largesize | Magnified icon size on hover
|
| programs.fish.interactiveShellInit | Shell script code called during interactive fish shell initialisation.
|
| services.autossh.sessions.*.monitoringPort | Port to be used by AutoSSH for peer monitoring
|
| launchd.user.agents.<name>.serviceConfig.StandardInPath | This optional key specifies what file should be used for data being supplied to stdin when using
stdio(3).
|
| services.lorri.enable | Whether to enable the lorri service.
|
| nix.settings.trusted-public-keys | List of public keys used to sign binary caches
|
| services.trezord.emulator.port | Listening port for the Trezor emulator.
|
| launchd.agents.<name>.serviceConfig.ExitTimeOut | The amount of time launchd waits before sending a SIGKILL signal
|
| services.gitlab-runner.services.<name>.registrationConfigFile | Absolute path to a file with environment variables
used for gitlab-runner registration
|
| system.defaults.spaces.spans-displays | Apple menu > System Preferences > Mission Control
Displays have separate Spaces (note a logout is required before
this setting will take effect).
false = each physical display has a separate space (Mac default)
true = one space spans across all physical displays
|
| environment.etc.<name>.text | Text of the file.
|
| system.defaults.NSGlobalDomain.NSAutomaticPeriodSubstitutionEnabled | Whether to enable smart period substitution
|
| nixpkgs.flake.source | The path to the nixpkgs sources used to build the system
|
| programs.gnupg.agent.enable | Enables GnuPG agent for every user session.
|
| system.tools.darwin-uninstaller.enable | Whether to enable darwin-uninstaller script.
|
| launchd.agents.<name>.serviceConfig.TimeOut | The recommended idle time out (in seconds) to pass to the job
|
| launchd.agents.<name>.environment | Environment variables passed to the service's processes.
|
| system.defaults.screensaver.askForPassword | If true, the user is prompted for a password when the screen saver is unlocked or stopped
|
| launchd.agents.<name>.serviceConfig | Each attribute in this set specifies an option for a key in the plist.
https://developer.apple.com/legacy/library/documentation/Darwin/Reference/ManPages/man5/launchd.plist.5.html
|
| nix.linux-builder.maxJobs | Instead of setting this directly, you should set
nix.linux-builder.config.virtualisation.cores to configure
the amount of cores the Linux builder should have
|
| programs.tmux.enableSensible | Enable sensible configuration options for tmux.
|
| system.defaults.menuExtraClock.Show24Hour | Show a 24-hour clock, instead of a 12-hour clock
|
| launchd.agents.<name>.serviceConfig.StartOnMount | This optional key causes the job to be started every time a filesystem is mounted.
|
| services.emacs.exec | Emacs command/binary to execute.
|
| launchd.daemons.<name>.serviceConfig.Umask | This optional key specifies what value should be passed to umask(2) before running the job
|
| nix.channel.enable | Whether the nix-channel command and state files are made available on the machine
|
| services.buildkite-agents.<name>.hooks.pre-command | The pre-command hook will run just before your build command runs
|
| launchd.agents.<name>.serviceConfig.LimitLoadFromHosts | This configuration file only applies to hosts NOT listed with this key
|
| services.hercules-ci-agent.settings.concurrentTasks | Number of tasks to perform simultaneously
|
| programs.bash.interactiveShellInit | Shell script code called during interactive bash shell initialisation.
|
| system.defaults.dock.showAppExposeGestureEnabled | Whether to enable trackpad gestures (three- or four-finger vertical swipe) to show App Exposé
|
| system.defaults.NSGlobalDomain."com.apple.trackpad.scaling" | Configures the trackpad tracking speed (0 to 3)
|
| launchd.daemons.<name>.serviceConfig.LimitLoadFromHosts | This configuration file only applies to hosts NOT listed with this key
|
| launchd.daemons.<name>.serviceConfig.TimeOut | The recommended idle time out (in seconds) to pass to the job
|
| homebrew.caskArgs.appdir | Target location for Applications
|
| programs.fish.shellAbbrs | Set of fish abbreviations.
|
| services.aerospace.settings.enable-normalization-opposite-orientation-for-nested-containers | Containers that nest into each other must have opposite orientations.
|
| homebrew.extraConfig | Extra lines to be added verbatim to the bottom of the generated Brewfile.
|
| services.jankyborders.whitelist | Once this list is populated, only applications listed here are considered for receiving a border
|
| launchd.user.agents.<name>.serviceConfig.SoftResourceLimits.NumberOfProcesses | The maximum number of simultaneous processes for this user id
|
| services.synergy.package | The package used for the synergy client and server.
|
| system.defaults.loginwindow.RestartDisabled | Apple menu > System Preferences > Users and Groups > Login Options
Hides the Restart button on the login screen
|
| environment.etc.<name>.enable | Whether this file should be generated
|
| services.hercules-ci-agent.settings.clusterJoinTokenPath | Location of the cluster-join-token.key file
|
| services.synergy.server.screenName | Use the given name instead of the hostname to identify
this screen in the configuration.
|
| homebrew.prefix | The Homebrew prefix directory, i.e., the value that brew --prefix returns
|
| programs.zsh.promptInit | Shell script code used to initialise the zsh prompt.
|
| system.defaults.NSGlobalDomain.AppleMeasurementUnits | Whether to use centimeters (metric) or inches (US, UK) as the measurement unit
|
| environment.systemPackages | The set of packages that appear in
/run/current-system/sw
|
| launchd.user.agents.<name>.serviceConfig.Program | This key maps to the first argument of execvp(3)
|
| system.defaults.finder.NewWindowTargetPath | Sets the URI to open when NewWindowTarget is "Other"
|
| system.defaults.NSGlobalDomain.AppleICUForce24HourTime | Whether to use 24-hour or 12-hour time
|
| system.defaults.dock.dashboard-in-overlay | Whether to hide Dashboard as a Space
|
| system.defaults.dock.persistent-apps | Persistent applications, spacers, files, and folders in the dock.
|
| system.defaults.dock.persistent-apps.*.file | A file to be added to the dock.
|
| power.sleep.display | Amount of idle time (in minutes) until displays sleep.
"never" disables display sleeping.
|
| programs.man.enable | Whether to enable manual pages and the man command
|
| system.defaults.dock.persistent-others.*.folder | A folder to be added to the dock.
|
| launchd.agents.<name>.serviceConfig.HardResourceLimits.Data | The maximum size (in bytes) of the data segment for a process; this defines how far a program may
extend its break with the sbrk(2) system call.
|
| system.keyboard.swapLeftCommandAndLeftAlt | Whether to swap the left Command key and left Alt key.
|
| system.defaults.finder._FXShowPosixPathInTitle | Whether to show the full POSIX filepath in the window title
|
| services.ofborg.package | This option specifies the ofborg package to use. eg.
(import <ofborg> {}).ofborg.rs
$ nix-channel --add https://github.com/NixOS/ofborg/archive/released.tar.gz ofborg
$ nix-channel --update
|
| programs.fish.vendor.functions.enable | Whether fish should autoload fish functions provided by other packages.
|
| system.defaults.universalaccess.closeViewZoomFollowsFocus | Follow the keyboard focus while zoomed in
|
| users.groups.<name>.description | The group's description.
|
| launchd.agents.<name>.serviceConfig.AbandonProcessGroup | When a job dies, launchd kills any remaining processes with the same process group ID as the job
|
| launchd.daemons.<name>.serviceConfig.SoftResourceLimits.NumberOfProcesses | The maximum number of simultaneous processes for this user id
|
| system.defaults.controlcenter.FocusModes | Apple menu > System Preferences > Control Center > Focus
Show a Focus control in menu bar
|
| services.github-runners.<name>.extraEnvironment | Extra environment variables to set for the runner, as an attrset.
|
| nix.settings.substituters | List of binary cache URLs used to obtain pre-built binaries
of Nix packages
|
| services.hercules-ci-agent.settings.workDirectory | The directory in which temporary subdirectories are created for task state
|
| launchd.user.agents.<name>.serviceConfig.TimeOut | The recommended idle time out (in seconds) to pass to the job
|
| launchd.user.agents.<name>.serviceConfig.ServiceIPC | This optional key specifies whether the job participates in advanced
communication with launchd
|
| networking.wg-quick.interfaces.<name>.postDown | List of commands to run after interface shutdown
|
| launchd.daemons.<name>.serviceConfig.SoftResourceLimits | Resource limits to be imposed on the job
|
| services.prometheus.exporters.node.enable | Whether to enable Prometheus Node exporter.
|
| services.gitlab-runner.gracefulTermination | Finish all remaining jobs before stopping
|
| services.aerospace.settings.on-window-detected.*."if".app-name-regex-substring | Regex substring to match the app name (optional).
|
| system.defaults.trackpad.ForceSuppressed | Whether to disable force click
|
| services.dnsmasq.enable | Whether to enable DNSmasq.
|
| programs.bash.completion.enable | Enable bash completion for all interactive bash shells
|
| services.gitlab-runner.services.<name>.buildsDir | Absolute path to a directory where builds will be stored
in context of selected executor (Locally, Docker, SSH).
|
| launchd.daemons.<name>.serviceConfig.OnDemand | This key was used in Mac OS X 10.4 to control whether a job was kept alive or not
|
| services.autossh.sessions.*.extraArguments | Arguments to be passed to AutoSSH and retransmitted to SSH
process
|
| services.offlineimap.path | List of derivations to put in Offlineimap's path.
|
| system.defaults.dock.persistent-apps.*.folder | A folder to be added to the dock.
|
| system.defaults.iCal.CalendarSidebarShown | Show calendar list
|
| environment.etc.<name>.source | Path of the source file.
|
| environment.loginShellInit | Shell script code called during login shell initialisation
|
| nix.buildMachines.*.systems | The system types the build machine can execute derivations on
|
| launchd.daemons.<name>.serviceConfig.StartInterval | This optional key causes the job to be started every N seconds
|
| homebrew.caskArgs.dictionarydir | Target location for Dictionaries
|
| programs.zsh.enableAutosuggestions | Enable zsh-autosuggestions.
|
| launchd.agents.<name>.serviceConfig.Sockets.<name>.SockType | This optional key tells launchctl what type of socket to create
|
| launchd.daemons.<name>.serviceConfig.InitGroups | This optional key specifies whether initgroups(3) should be called before running the job
|
| system.defaults.dock.wvous-br-corner | Hot corner action for bottom right corner
|
| environment.etc.<name>.target | Name of symlink
|
| homebrew.onActivation.autoUpdate | Whether to enable Homebrew to auto-update itself and all formulae during
nix-darwin system activation
|
| services.postgresql.settings | PostgreSQL configuration
|
| services.synapse-bt.port | The port on which Synapse BitTorrent listens.
|
| services.spotifyd.enable | Whether to enable the spotifyd service.
|
| services.chunkwm.plugins.dir | Chunkwm Plugins directory.
|
| system.defaults.WindowManager.HideDesktop | Hide items in Stage Manager.
|
| launchd.agents.<name>.serviceConfig.Label | This required key uniquely identifies the job to launchd.
|
| services.hercules-ci-agent.settings.baseDirectory | State directory (secrets, work directory, etc) for agent
|
| launchd.agents.<name>.serviceConfig.Sockets.<name>.SockPassive | This optional key specifies whether listen(2) or connect(2) should be called on the created file
descriptor
|
| environment.userLaunchAgents.<name>.target | Name of symlink
|
| launchd.daemons.<name>.serviceConfig.RootDirectory | This optional key is used to specify a directory to chroot(2) to before running the job.
|
| services.ipfs.enable | Whether to enable the ipfs daemon.
|
| launchd.daemons.<name>.serviceConfig.QueueDirectories | Much like the WatchPaths option, this key will watch the paths for modifications
|
| services.redis.dataDir | Data directory for the redis database.
|
| services.postgresql.port | The port on which PostgreSQL listens.
|
| environment.launchAgents.<name>.target | Name of symlink
|
| services.ipfs.ipfsPath | Set the IPFS_PATH environment variable.
|
| launchd.user.agents.<name>.serviceConfig.ProcessType | This optional key describes, at a high level, the intended purpose of the job
|
| services.yabai.enable | Whether to enable the yabai window manager.
|
| services.synergy.server.configFile | The Synergy server configuration file.
|
| system.defaults.ActivityMonitor.IconType | Change the icon in the dock when running.
- 0: Application Icon
- 2: Network Usage
- 3: Disk Activity
- 5: CPU Usage
- 6: CPU History
Default is null.
|
| nix.optimise.automatic | Automatically run the nix store optimiser at a specific time.
|
| networking.fqdnOrHostName | Either the fully qualified domain name (FQDN), or just the host name if
it does not exists
|
| programs.info.enable | Whether to enable info pages and the info command.
|
| system.defaults.hitoolbox.AppleFnUsageType | Chooses what happens when you press the Fn key on the keyboard
|
| system.activationScripts.<name>.source | Path of the source file.
|
| services.sketchybar.config | Contents of sketchybar's configuration file
|
| services.khd.enable | Whether to enable the khd hotkey daemon.
|
| system.defaults.dock.autohide-time-modifier | Sets the speed of the animation when hiding/showing the Dock
|
| services.aerospace.settings.on-focus-changed | Commands to run every time focused window or workspace changes.
|
| services.gitlab-runner.services.<name>.dockerAllowedServices | Whitelist allowed services.
|
| services.telegraf.configUrl | Url to fetch config from
|
| launchd.user.agents.<name>.serviceConfig.ExitTimeOut | The amount of time launchd waits before sending a SIGKILL signal
|
| system.defaults.finder.NewWindowTarget | Change the default folder shown in Finder windows. "Other" corresponds to the value of
NewWindowTargetPath
|
| system.defaults.dock.wvous-bl-corner | Hot corner action for bottom left corner
|
| services.lorri.logFile | The logfile to use for the lorri service
|
| services.gitlab-runner.configFile | Configuration file for gitlab-runner.
configFile takes precedence over services.
checkInterval and concurrent will be ignored too
|
| services.telegraf.extraConfig | Extra configuration options for telegraf
|
| launchd.agents.<name>.serviceConfig.SoftResourceLimits.NumberOfFiles | The maximum number of open files for this process
|
| launchd.user.agents.<name>.serviceConfig.SoftResourceLimits.Core | The largest size (in bytes) core file that may be created.
|
| launchd.user.agents.<name>.serviceConfig.Sockets | This optional key is used to specify launch on demand sockets that can be used to let launchd know when
to run the job
|
| programs.zsh.enableFzfCompletion | Enable fzf completion.
|
| system.defaults.trackpad.TrackpadCornerSecondaryClick | Whether to enable secondary click: 0 to disable, 1 to set bottom-left corner, 2 to set bottom-right corner
|
| system.defaults.menuExtraClock.FlashDateSeparators | When enabled, the clock indicator (which by default is the colon) will flash on and off each second
|
| launchd.user.agents.<name>.serviceConfig.StartOnMount | This optional key causes the job to be started every time a filesystem is mounted.
|
| launchd.agents.<name>.serviceConfig.Sockets.<name>.SockPathMode | This optional key specifies the mode of the socket
|
| launchd.daemons | Definition of launchd daemons
|
| system.defaults.universalaccess.closeViewScrollWheelToggle | Use scroll gesture with the Ctrl (^) modifier key to zoom
|
| system.defaults.NSGlobalDomain.NSUseAnimatedFocusRing | Whether to enable the focus ring animation
|
| launchd.user.agents.<name>.serviceConfig.StartCalendarInterval | This optional key causes the job to be started every calendar interval as specified
|
| system.configurationRevision | The Git revision of the top-level flake from which this configuration was built.
|
| launchd.daemons.<name>.serviceConfig.ProcessType | This optional key describes, at a high level, the intended purpose of the job
|
| launchd.user.agents.<name>.serviceConfig.Label | This required key uniquely identifies the job to launchd.
|
| launchd.user.agents.<name>.serviceConfig.WatchPaths | This optional key causes the job to be started if any one of the listed paths are modified.
|
| launchd.daemons.<name>.serviceConfig.MachServices | This optional key is used to specify Mach services to be registered with the Mach bootstrap sub-system
|
| homebrew.brews.*.postinstall | A shell command to run after the formula is installed or upgraded
|
| services.yabai.config | Key/Value pairs to pass to yabai's 'config' domain, via the configuration file.
|
| services.sketchybar.enable | Whether to enable sketchybar.
|
| environment.shellAliases | An attribute set that maps aliases (the top level attribute names in
this option) to command strings or directly to build outputs
|
| programs.vim.vimOptions.<name>.source | Path of the source file.
|
| services.spacebar.package | The spacebar package to use.
|
| security.pam.services.sudo_local.text | Contents of /etc/pam.d/sudo_local
|
| launchd.agents.<name>.serviceConfig.QueueDirectories | Much like the WatchPaths option, this key will watch the paths for modifications
|
| nix.daemonIOLowPriority | Whether the Nix daemon process should considered to be low priority when
doing file system I/O.
|
| networking.applicationFirewall.enable | Whether to enable application firewall.
|
| nix.registry | A system-wide flake registry.
|
| services.telegraf.environmentFiles | File to load as environment file
|
| system.defaults.ActivityMonitor.SortColumn | Which column to sort the main activity page (such as "CPUUsage")
|
| system.defaults.loginwindow.DisableConsoleAccess | Disables the ability for a user to access the console by typing “>console”
for a username at the login window
|
| system.defaults.loginwindow.SleepDisabled | Apple menu > System Preferences > Users and Groups > Login Options
Hides the Sleep button on the login screen
|
| system.defaults.dock.showhidden | Whether to make icons of hidden applications tranclucent
|
| launchd.daemons.<name>.serviceConfig.AbandonProcessGroup | When a job dies, launchd kills any remaining processes with the same process group ID as the job
|
| launchd.daemons.<name>.serviceConfig.HardResourceLimits.CPU | The maximum amount of cpu time (in seconds) to be used by each process.
|
| services.privoxy.listenAddress | The address and TCP port on which privoxy will listen.
|
| networking.knownNetworkServices | List of networkservices that should be configured
|
| system.defaults.NSGlobalDomain.NSScrollAnimationEnabled | Whether to enable smooth scrolling
|
| services.karabiner-elements.enable | Whether to enable Karabiner-Elements.
|
| nix.linux-builder.systems | This option specifies system types the build machine can execute derivations on
|
| services.github-runners.<name>.enable | Whether to enable GitHub Actions runner
|
| homebrew.caskArgs.internet_plugindir | Target location for Internet Plugins
|
| users.users.<name>.isHidden | Whether to make the user account hidden.
|
| homebrew.taps | List of Homebrew formula repositories to tap
|
| launchd.daemons.<name>.serviceConfig.StartCalendarInterval | This optional key causes the job to be started every calendar interval as specified
|
| launchd.user.agents.<name>.serviceConfig.HardResourceLimits.Core | The largest size (in bytes) core file that may be created.
|
| networking.wg-quick.interfaces.<name>.privateKeyFile | Path to file containing this interface's private key.
|
| launchd.agents.<name>.serviceConfig.HardResourceLimits.NumberOfFiles | The maximum number of open files for this process
|
| homebrew.casks.*.postinstall | A shell command to run after the cask is installed or upgraded
|
| programs.fish.vendor.config.enable | Whether fish should source configuration snippets provided by other packages.
|
| launchd.user.agents.<name>.serviceConfig.Sockets.<name>.SockPathMode | This optional key specifies the mode of the socket
|
| security.sudo.extraConfig | Extra configuration text appended to sudoers.
|
| services.gitlab-runner.services.<name>.registrationFlags | Extra command-line flags passed to
gitlab-runner register
|
| services.trezord.enable | Enable Trezor bridge daemon, for use with Trezor hardware wallets.
|
| system.defaults.".GlobalPreferences"."com.apple.mouse.scaling" | Sets the mouse tracking speed
|
| networking.wg-quick.interfaces.<name>.peers | List of peers associated with this interface.
|
| networking.wg-quick.interfaces.<name>.peers.*.presharedKeyFile | Optional, path to file containing the pre-shared key for this peer.
|
| system.defaults.dock.wvous-tr-corner | Hot corner action for top right corner
|
| services.openssh.extraConfig | Extra configuration text loaded in sshd_config
|
| documentation.enable | Whether to install documentation of packages from
environment.systemPackages into the generated system path
|
| system.defaults.dock.orientation | Position of the dock on screen
|
| system.defaults.WindowManager.EnableTilingOptionAccelerator | Enable holding alt to tile windows
|
| system.defaults.menuExtraClock.IsAnalog | Show an analog clock instead of a digital one
|
| homebrew.onActivation.extraFlags | Extra flags to pass to brew bundle [install] during nix-darwin
system activation.
|
| system.defaults.NSGlobalDomain._HIHideMenuBar | Whether to autohide the menu bar
|
| system.defaults.ActivityMonitor.SortDirection | The sort direction of the sort column (0 is decending)
|
| services.postgresql.ensureUsers | Ensures that the specified users exist and have at least the ensured permissions
|
| launchd.daemons.<name>.serviceConfig.Sockets.<name>.SockPathName | This optional key implies SockFamily is set to "Unix"
|
| programs.direnv.silent | Whether to enable the hiding of direnv logging
.
|
| nixpkgs.config | Global configuration for Nixpkgs
|
| launchd.user.agents.<name>.serviceConfig.UserName | This optional key specifies the user to run the job as
|
| services.hercules-ci-agent.enable | Enable to run Hercules CI Agent as a system service.
Hercules CI is a
continuous integation service that is centered around Nix
|
| nix.settings.allowed-users | A list of names of users (separated by whitespace) that are
allowed to connect to the Nix daemon
|
| services.khd.i3Keybindings | Whether to configure i3 style keybindings for kwm.
|
| system.defaults.finder._FXSortFoldersFirst | Keep folders on top when sorting by name
|
| services.synapse-bt.package | Synapse BitTorrent package to use.
|
| launchd.daemons.<name>.serviceConfig.EnvironmentVariables | This optional key is used to specify additional environment variables to be set before running the
job.
|
| nix.daemonProcessType | Nix daemon process resource limits class
|
| system.defaults.SoftwareUpdate.AutomaticallyInstallMacOSUpdates | Automatically install Mac OS software updates
|
| system.defaults.iCal."first day of week" | Set the day to start week on in the Calendar
|
| homebrew.brews | List of Homebrew formulae to install
|
| system.defaults.controlcenter.Display | Apple menu > System Preferences > Control Center > Display
Show a Screen Brightness control in menu bar
|
| homebrew.global | Options for configuring the behavior of Homebrew commands when you manually invoke them.
|
| nix.extraOptions | Additional text appended to nix.conf.
|
| system.defaults.finder._FXEnableColumnAutoSizing | Resize columns to fit filenames
|
| services.synergy.client.tls.cert | The TLS certificate to use for encryption.
|
| services.gitlab-runner.services.<name>.dockerAllowedImages | Whitelist allowed images.
|
| users.knownUsers | List of users owned and managed by nix-darwin
|
| system.defaults.NSGlobalDomain.ApplePressAndHoldEnabled | Whether to enable the press-and-hold feature
|
| security.sandbox.profiles.<name>.allowLocalNetworking | Whether to allow localhost network access inside the sandbox.
|
| services.gitlab-runner.services.<name>.protected | When set to true Runner will only run on pipelines
triggered on protected branches.
|
| networking.wg-quick.logDir | Directory to save wg-quick logs to.
|
| services.gitlab-runner.services.<name>.tagList | Tag list.
|
| users.users.<name>.openssh.authorizedKeys.keyFiles | A list of files each containing one OpenSSH public key that should be
added to the user's authorized keys
|
| launchd.daemons.<name>.serviceConfig.SoftResourceLimits.Core | The largest size (in bytes) core file that may be created.
|
| homebrew.taps.*.force_auto_update | Whether to auto-update the tap even if it is not hosted on GitHub
|
| programs.fish.useBabelfish | If enabled, the configured environment will be translated to native fish using babelfish
|
| launchd.user.agents.<name>.serviceConfig.LimitLoadToSessionType | This configuration file only applies to sessions of the type specified
|
| services.cachix-agent.credentialsFile | Required file that needs to contain:
export CACHIX_AGENT_TOKEN=...
|
| services.buildkite-agents.<name>.privateSshKeyPath | OpenSSH private key
A run-time path to the key file, which is supposed to be provisioned
outside of Nix store.
|
| nix.buildMachines.*.hostName | The hostname of the build machine.
|
| programs.tmux.iTerm2 | Cater to iTerm2 and its tmux integration, as appropriate.
|
| services.spacebar.config | Key/Value pairs to pass to spacebar's 'config' domain, via the configuration file.
|
| services.postgresql.initialScript | A file containing SQL statements to execute on first startup.
|
| security.sandbox.profiles.<name>.closure | List of store paths to make accessible.
|
| services.yabai.extraConfig | Extra arbitrary configuration to append to the configuration file
|
| services.dnsmasq.package | This option specifies the dnsmasq package to use.
|
| system.defaults.WindowManager.AutoHide | Auto hide stage strip showing recent apps
|
| system.defaults.trackpad.TrackpadThreeFingerHorizSwipeGesture | Whether to enable three-finger horizontal swipe gesture: 0 to disable, 1 to swipe between pages, 2 to swipe between full-screen applications
|
| services.synergy.client.screenName | Use the given name instead of the hostname to identify
ourselves to the server.
|
| users.users.<name>.packages | The set of packages that should be made availabe to the user
|
| nix.gc.automatic | Automatically run the garbage collector at a specific time.
|
| system.defaults.NSGlobalDomain.NSAutomaticCapitalizationEnabled | Whether to enable automatic capitalization
|
| programs.direnv.enableBashIntegration | Whether to enable Bash integration
.
|
| time.timeZone | The time zone used when displaying times and dates
|
| services.aerospace.settings.default-root-container-layout | Default layout for the root container.
|
| launchd.user.agents.<name>.serviceConfig.inetdCompatibility | The presence of this key specifies that the daemon expects to be run as if it were launched from inetd.
|
| nix.nrBuildUsers | Number of nixbld user accounts created to
perform secure concurrent builds
|
| services.aerospace.settings.on-window-detected.*."if" | Conditions for detecting a window.
|
| services.postgresql.checkConfig | Check the syntax of the configuration file at compile time
|
| nix.buildMachines.*.speedFactor | The relative speed of this builder
|
| launchd.daemons.<name>.serviceConfig.HardResourceLimits.FileSize | The largest size (in bytes) file that may be created.
|
| services.gitlab-runner.services.<name>.dockerDisableCache | Disable all container caching.
|
| services.postgresql.enableTCPIP | Whether PostgreSQL should listen on all network interfaces
|
| launchd.agents.<name>.serviceConfig.SoftResourceLimits.ResidentSetSize | The maximum size (in bytes) to which a process's resident set size may grow
|
| fonts.packages | List of fonts to install into /Library/Fonts/Nix Fonts.
|
| services.karabiner-elements.package | The karabiner-elements package to use.
|
| system.defaults.dock.persistent-apps.*.spacer.small | Whether the spacer is small.
|
| programs.vim.vimOptions.<name>.text | Text of the file.
|
| system.defaults.NSGlobalDomain.AppleFontSmoothing | Sets the level of font smoothing (sub-pixel font rendering).
|
| launchd.agents.<name>.serviceConfig.ThrottleInterval | This key lets one override the default throttling policy imposed on jobs by launchd
|
| services.synergy.client.serverAddress | The server address is of the form: [hostname][:port]
|
| system.defaults.dock.mineffect | Set the minimize/maximize window effect
|
| services.prometheus.exporters.node.disabledCollectors | Collectors to disable from the list of collectors that are enabled by default.
|
| nix.gc.interval | The calendar interval at which the garbage collector will run
|
| programs.direnv.direnvrcExtra | Extra lines to append to the sourced direnvrc
|
| nix.settings.auto-optimise-store | If set to true, Nix automatically detects files in the store that have
identical contents, and replaces them with hard links to a single copy
|
| launchd.agents.<name>.serviceConfig.inetdCompatibility.Wait | This flag corresponds to the "wait" or "nowait" option of inetd
|
| system.defaults.NSGlobalDomain.AppleScrollerPagingBehavior | Jump to the spot that's clicked on the scroll bar
|
| nix.checkConfig | If enabled (the default), checks for data type mismatches and that Nix
can parse the generated nix.conf.
|
| services.nix-daemon.tempDir | The TMPDIR to use for nix-daemon.
|
| homebrew.enableZshIntegration | Whether to enable Homebrew Zsh shell integration, which sets up Homebrew's environment
and shell completions
.
|
| launchd.daemons.<name>.serviceConfig.HardResourceLimits.NumberOfProcesses | The maximum number of simultaneous processes for this user id
|
| launchd.user.agents.<name>.serviceConfig.HardResourceLimits.MemoryLock | The maximum size (in bytes) which a process may lock into memory using the mlock(2) function.
|
| programs._1password-gui.package | The 1Password GUI package to use.
|
| services.spotifyd.settings | Configuration for spotifyd, see https://spotifyd.github.io/spotifyd/config/File.html
for supported values.
|
| launchd.daemons.<name>.serviceConfig.HardResourceLimits.NumberOfFiles | The maximum number of open files for this process
|
| security.pki.installCACerts | Whether to enable certificate management with nix-darwin.
|
| services.jankyborders.background_color | Sets the background fill color for all windows (only 0xAARRGGBB arguments supported).
|
| launchd.agents.<name>.serviceConfig.LaunchEvents | Specifies higher-level event types to be used as launch-on-demand event
sources
|
| programs.zsh.enableSyntaxHighlighting | Enable zsh-syntax-highlighting.
|
| launchd.user.agents | Definition of per-user launchd agents
|
| power.sleep.harddisk | Amount of idle time (in minutes) until hard disks sleep.
"never" disables hard disk sleeping.
|
| networking.wg-quick.interfaces.<name>.table | Controls the routing table to which routes are added
|
| system.darwinRelease | The nix-darwin release (e.g. 24.11).
|
| services.github-runners.<name>.workDir | Working directory, available as $GITHUB_WORKSPACE during workflow runs
and used as a default for repository checkouts
|
| system.tools.darwin-rebuild.enable | Whether to enable darwin-rebuild script.
|
| environment.launchAgents | Set of files that have to be linked in /Library/LaunchAgents.
|
| system.defaults.WindowManager.EnableTiledWindowMargins | Enable window margins when tiling windows
|
| programs._1password.package | The 1Password CLI package to use.
|
| services.emacs.package | This option specifies the emacs package to use.
|
| services.synergy.client.enable | Whether to enable the Synergy client (receive keyboard and mouse events from a Synergy server).
|
| launchd.user.agents.<name>.serviceConfig.inetdCompatibility.Wait | This flag corresponds to the "wait" or "nowait" option of inetd
|
| homebrew.onActivation.cleanup | This option manages what happens to packages installed by Homebrew that aren't present in
the Brewfile generated by this module, during nix-darwin system
activation
|
| services.privoxy.config | Config to use for privoxy
|
| nix.enable | Whether to enable Nix
|
| services.github-runners | Multiple GitHub Runners
|
| homebrew.masApps | Applications to install from Mac App Store using mas
|
| launchd.agents.<name>.serviceConfig.StandardOutPath | This optional key specifies what file should be used for data being sent to stdout when using stdio(3).
|
| launchd.user.agents.<name>.serviceConfig.SoftResourceLimits | Resource limits to be imposed on the job
|
| system.defaults.menuExtraClock.ShowSeconds | Show the clock with second precision, instead of minutes
|
| environment.launchDaemons | Set of files that have to be linked in /Library/LaunchDaemons.
|
| services.aerospace.settings.on-window-detected.*.run | Commands to execute when the conditions match (required).
|
| networking.wg-quick.interfaces.<name>.mtu | MTU to set for this interface, automatically set if not specified
|
| services.skhd.enable | Whether to enable the skhd hotkey daemon.
|
| launchd.agents.<name>.serviceConfig.MachServices | This optional key is used to specify Mach services to be registered with the Mach bootstrap sub-system
|
| launchd.user.agents.<name>.serviceConfig.RunAtLoad | This optional key is used to control whether your job is launched once at the time the job is loaded
|
| services.gitlab-runner.services.<name>.cloneUrl | Overwrite the URL for the GitLab instance
|
| services.buildkite-agents.<name>.preCommands | Extra commands to run before starting buildkite.
|
| services.dnscrypt-proxy.settings | Attrset that is converted and passed as TOML config file
|
| services.github-runners.<name>.serviceOverrides | Modify the service
|
| services.offlineimap.enable | Whether to enable Offlineimap, a software to dispose your mailbox(es) as a local Maildir(s).
|
| services.spacebar.extraConfig | Extra arbitrary configuration to append to the configuration file.
|
| homebrew.casks.*.name | The name of the cask to install.
|
| launchd.agents.<name>.serviceConfig.Sockets.<name>.SecureSocketWithKey | This optional key is a variant of SockPathName
|
| services.netbird.package | The package to use for netbird
|
| services.chunkwm.plugins.tiling.config | Optional tiling plugin configuration.
|
| system.defaults.NSGlobalDomain.AppleInterfaceStyle | Set to 'Dark' to enable dark mode
|
| networking.applicationFirewall.allowSigned | Whether to allow built-in software to receive incoming connections.
|
| system.defaults.loginwindow.RestartDisabledWhileLoggedIn | Apple menu > System Preferences > Users and Groups > Login Options
Disables the “Restart” option when users are logged in
|
| launchd.user.agents.<name>.environment | Environment variables passed to the service's processes.
|
| system.defaults.menuExtraClock.ShowDate | Show the full date
|
| system.defaults.WindowManager.EnableTilingByEdgeDrag | Enable dragging windows to screen edges to tile them
|
| environment.interactiveShellInit | Shell script code called during interactive shell initialisation
|
| system.defaults.dock.persistent-apps.*.spacer | A spacer to be added to the dock
|
| system.defaults.trackpad.FirstClickThreshold | For normal click: 0 for light clicking, 1 for medium, 2 for firm
|
| users.users.<name>.openssh.authorizedKeys.keys | A list of verbatim OpenSSH public keys that should be added to the
user's authorized keys
|
| programs.bash.enable | Whether to configure bash as an interactive shell.
|
| launchd.daemons.<name>.serviceConfig.EnableGlobbing | This flag causes launchd to use the glob(3) mechanism to update the program arguments before invocation.
|
| system.defaults.trackpad.Clicking | Whether to enable tap to click
|
| nix.linux-builder.protocol | The protocol used for communicating with the build machine
|
| nix.buildMachines.*.system | The system type the build machine can execute derivations on
|
| system.defaults.screencapture.include-date | Include date and time in screenshot filenames
|
| users.users.<name>.ignoreShellProgramCheck | By default, nix-darwin will check that programs
|
| system.defaults.finder.FXPreferredViewStyle | Change the default finder view.
"icnv" = Icon view, "Nlsv" = List view, "clmv" = Column View, "Flwv" = Gallery View
The default is icnv.
|
| launchd.agents.<name>.serviceConfig.WatchPaths | This optional key causes the job to be started if any one of the listed paths are modified.
|
| launchd.agents.<name>.serviceConfig.HardResourceLimits.NumberOfProcesses | The maximum number of simultaneous processes for this user id
|
| services.gitlab-runner.services.<name>.postBuildScript | Runner-specific command script executed after code is pulled
and just after build executes.
|
| services.kwm.enable | Whether to enable the khd window manager.
|
| nix.linux-builder.ephemeral | Whether to enable wipe the builder's filesystem on every restart
|
| services.netdata.workDir | Working directory for Netdata
|
| services.offlineimap.extraConfig | Additional text to be appended to offlineimaprc.
|
| services.gitlab-runner.enable | Whether to enable Gitlab Runner.
|
| launchd.daemons.<name>.serviceConfig.StartOnMount | This optional key causes the job to be started every time a filesystem is mounted.
|
| services.offlineimap.package | Offlineimap derivation to use.
|
| services.redis.enable | Whether to enable the redis database service.
|
| launchd.user.agents.<name>.serviceConfig.HardResourceLimits.NumberOfProcesses | The maximum number of simultaneous processes for this user id
|
| launchd.user.agents.<name>.serviceConfig.StartInterval | This optional key causes the job to be started every N seconds
|
| homebrew.onActivation.upgrade | Whether to enable Homebrew to upgrade outdated formulae and Mac App Store apps during
nix-darwin system activation
|
| programs.tmux.extraConfig | Extra configuration to add to tmux.conf.
|
| users.groups.<name>.name | The group's name
|
| system.defaults.dock.scroll-to-open | Scroll up on a Dock icon to show all Space's opened windows for an app, or open stack
|
| system.profile | Profile to use for the system.
|
| homebrew.enableFishIntegration | Whether to enable Homebrew Fish shell integration, which sets up Homebrew's environment
and shell completions
.
|
| launchd.agents.<name>.serviceConfig.Program | This key maps to the first argument of execvp(3)
|
| launchd.agents.<name>.serviceConfig.Sockets.<name>.SockNodeName | This optional key specifies the node to connect(2) or bind(2) to.
|
| launchd.user.agents.<name>.serviceConfig.HardResourceLimits.NumberOfFiles | The maximum number of open files for this process
|
| launchd.agents.<name>.serviceConfig.Sockets.<name>.SockFamily | This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.
|
| services.synapse-bt.enable | Whether to run Synapse BitTorrent Daemon.
|
| services.dnsmasq.servers | List of upstream DNS servers to forward queries to
|
| system.keyboard.swapLeftCtrlAndFn | Whether to swap the left Control key and Fn (Globe) key.
|
| homebrew.caskArgs.no_binaries | Whether to disable linking of helper executables
|
| nix.package | This option specifies the Nix package instance to use throughout the system.
|
| programs.tmux.tmuxOptions.<name>.text | Text of the file.
|
| services.gitlab-runner.services | GitLab Runner services.
|
| programs.ssh.knownHosts.<name>.publicKeyFile | The path to the public key file for the host
|
| homebrew.goPackages | List of Go packages to install using go install
|
| services.gitlab-runner.services.<name>.runUntagged | Register to run untagged builds; defaults to
true when tagList is empty.
|
| programs.fish.shellAliases | Set of aliases for fish shell
|
| programs.fish.promptInit | Shell script code used to initialise fish prompt.
|
| programs.vim.plugins | VAM plugin dictionaries to use for vim_configurable.
|
| system.defaults.trackpad.SecondClickThreshold | For force touch: 0 for light clicking, 1 for medium, 2 for firm
|
| system.keyboard.enableKeyMapping | Whether to enable keyboard mappings.
|
| launchd.agents.<name>.serviceConfig.Nice | This optional key specifies what nice(3) value should be applied to the daemon.
|
| launchd.agents.<name>.serviceConfig.ServiceIPC | This optional key specifies whether the job participates in advanced
communication with launchd
|
| services.chunkwm.hotload | Whether to enable hotload.
|
| system.defaults.dock.autohide-delay | Sets the speed of the autohide delay
|
| services.nextdns.enable | Whether to enable the NextDNS DNS/53 to DoH Proxy service.
|
| environment.userLaunchAgents.<name>.text | Text of the file.
|
| system.defaults.NSGlobalDomain."com.apple.trackpad.trackpadCornerClickBehavior" | Configures the trackpad corner click behavior
|
| programs.zsh.enableGlobalCompInit | Enable execution of compinit call for all interactive zsh shells
|
| services.ofborg.enable | Whether to enable the ofborg builder service.
|
| nix.buildMachines.*.sshKey | The path to the SSH private key with which to authenticate on
the build machine
|
| programs.zsh.enableBashCompletion | Enable bash completion for all interactive zsh shells.
|
| services.gitlab-runner.services.<name>.environmentVariables | Custom environment variables injected to build environment
|
| networking.hostName | The hostname of your system, as visible from the command line and used by local and remote
networks when connecting through SSH and Remote Login
|
| programs.zsh.histSize | Change history size.
|
| launchd.user.agents.<name>.serviceConfig.EnvironmentVariables | This optional key is used to specify additional environment variables to be set before running the
job.
|
| services.privoxy.templdir | Directory for privoxy template files.
|
| services.jankyborders.style | Specifies the style of the border (either round or square).
|
| system.defaults.menuExtraClock.ShowDayOfWeek | Show the day of the week
|
| system.defaults.dock.mouse-over-hilite-stack | Enable highlight hover effect for the grid view of a stack in the Dock.
|
| programs.zsh.loginShellInit | Shell script code called during zsh login shell initialisation.
|
| services.aerospace.settings.default-root-container-orientation | Default orientation for the root container.
|
| launchd.daemons.<name>.path | Packages added to the service's PATH
environment variable
|
| system.defaults.controlcenter.NowPlaying | Apple menu > System Preferences > Control Center > Now Playing
Show a Now Playing control in menu bar
|
| programs.arqbackup.package | The arq package to use.
|
| system.defaults.finder.ShowMountedServersOnDesktop | Whether to show connected servers on desktop
|
| launchd.user.agents.<name>.serviceConfig.MachServices | This optional key is used to specify Mach services to be registered with the Mach bootstrap sub-system
|
| nixpkgs.system | Specifies the Nix platform type on which nix-darwin should be built
|
| services.jankyborders.width | Determines the width of the border
|
| programs.ssh.knownHosts.<name>.extraHostNames | A list of additional host names and/or IP numbers used for
accessing the host's ssh service
|
| system.keyboard.remapCapsLockToEscape | Whether to remap the Caps Lock key to Escape.
|
| system.defaults.screencapture.show-thumbnail | Show thumbnail after screencapture before writing to file
|
| system.defaults.menuExtraClock.ShowDayOfMonth | Show the day of the month
|
| system.defaults.trackpad.ActuationStrength | 0 to enable Silent Clicking, 1 to disable
|
| launchd.agents.<name>.serviceConfig.LaunchOnlyOnce | This optional key specifies whether the job can only be run once and only once
|
| nixpkgs.source | The path to import Nixpkgs from
|
| services.postgresql.authentication | Defines how users authenticate themselves to the server
|
| services.aerospace.settings.on-window-detected.*."if".workspace | The workspace name to match (optional).
|
| system.defaults.NSGlobalDomain."com.apple.keyboard.fnState" | Use F1, F2, etc. keys as standard function keys.
|
| services.dnscrypt-proxy.package | The dnscrypt-proxy package to use.
|
| launchd.daemons.<name>.serviceConfig.RunAtLoad | This optional key is used to control whether your job is launched once at the time the job is loaded
|
| launchd.user.agents.<name>.serviceConfig.SoftResourceLimits.MemoryLock | The maximum size (in bytes) which a process may lock into memory using the mlock(2) function.
|
| services.buildkite-agents | Attribute set of buildkite agents
|
| services.buildkite-agents.<name>.enable | Whether to enable this buildkite agent
|
| services.cachix-agent.enable | Enable to run Cachix Agent as a system service
|
| system.defaults.NSGlobalDomain.AppleIconAppearanceTheme | Set icon and widget style
To set to default mode, set this to null and you'll need to manually run
defaults delete -g AppleIconAppearanceTheme
|
| services.netdata.cacheDir | Cache directory for Netdata
|
| homebrew.taps.*.name | When clone_target is unspecified, this is the name of a formula
repository to tap from GitHub using HTTPS
|
| launchd.user.agents.<name>.serviceConfig.HardResourceLimits.Data | The maximum size (in bytes) of the data segment for a process; this defines how far a program may
extend its break with the sbrk(2) system call.
|
| services.postgresql.package | PostgreSQL package to use.
|
| launchd.agents.<name>.serviceConfig.Debug | This optional key specifies that launchd should adjust its log mask temporarily to LOG_DEBUG while
dealing with this job.
|
| services.skhd.package | This option specifies the skhd package to use.
|
| system.defaults.NSGlobalDomain."com.apple.sound.beep.volume" | Apple menu > System Preferences > Sound
Sets the beep/alert volume level from 0.000 (muted) to 1.000 (100% volume).
75% = 0.7788008
50% = 0.6065307
25% = 0.4723665
|
| system.defaults.finder.FXEnableExtensionChangeWarning | Whether to show warnings when change the file extension of files
|
| launchd.daemons.<name>.serviceConfig.Sockets | This optional key is used to specify launch on demand sockets that can be used to let launchd know when
to run the job
|
| services.aerospace.settings.on-window-detected.*."if".during-aerospace-startup | Whether to match during aerospace startup (optional).
|
| services.dnscrypt-proxy.enable | Whether to enable the dnscrypt-proxy service..
|
| system.defaults.WindowManager.StandardHideWidgets | Hide widgets on desktop.
|
| system.defaults.smb.ServerDescription | Hostname to use for sharing services.
|
| launchd.agents.<name>.serviceConfig.HardResourceLimits.Core | The largest size (in bytes) core file that may be created.
|
| launchd.agents.<name>.serviceConfig.StartInterval | This optional key causes the job to be started every N seconds
|
| launchd.daemons.<name>.serviceConfig.WorkingDirectory | This optional key is used to specify a directory to chdir(2) to before running the job.
|
| nix.gc.options | Options given to nix-collect-garbage when the
garbage collector is run automatically.
|
| system.defaults.trackpad.TrackpadThreeFingerVertSwipeGesture | Whether to enable three-finger vertical swipe gesture (down for Mission Control, up for App Exposé): 0 to disable, 2 to enable
|
| launchd.user.agents.<name>.serviceConfig.Sockets.<name>.SockFamily | This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.
|
| launchd.agents.<name>.serviceConfig.WaitForDebugger | This optional key specifies that launchd should instruct the kernel to have the job wait for a debugger
to attach before any code in the job is executed.
|
| launchd.daemons.<name>.serviceConfig.EnableTransactions | This flag instructs launchd that the job promises to use vproc_transaction_begin(3) and
vproc_transaction_end(3) to track outstanding transactions that need to be reconciled before the
process can safely terminate
|
| services.aerospace.settings.on-window-detected.*.check-further-callbacks | Whether to check further callbacks after this rule (optional).
|
| security.sandbox.profiles.<name>.writablePaths | List of paths that should be read/write inside the sandbox.
|
| programs.ssh.extraConfig | Extra configuration text loaded in ssh_config
|
| system.defaults.NSGlobalDomain.NSAutomaticQuoteSubstitutionEnabled | Whether to enable smart quote substitution
|
| system.defaults.CustomUserPreferences | Sets custom user preferences
|
| launchd.agents.<name>.serviceConfig.WorkingDirectory | This optional key is used to specify a directory to chdir(2) to before running the job.
|
| launchd.user.agents.<name>.script | Shell commands executed as the service's main process.
|
| system.checks.verifyNixPath | Whether to run the NIX_PATH validation checks.
|
| launchd.daemons.<name>.serviceConfig.LaunchOnlyOnce | This optional key specifies whether the job can only be run once and only once
|
| nix.settings.require-sigs | If enabled (the default), Nix will only download binaries from binary caches if
they are cryptographically signed with any of the keys listed in
nix.settings.trusted-public-keys
|
| programs.fish.package | The fish package to use.
|
| homebrew.vscode | List of Visual Studio Code extensions to install using Homebrew Bundle
|
| services.chunkwm.extraConfig | Additional commands for chunkwmrc.
|
| system.defaults.NSGlobalDomain.NSStatusItemSelectionPadding | Sets the padding around status icons in the menu bar.
|
| launchd.user.agents.<name>.serviceConfig.Sockets.<name>.Bonjour | This optional key can be used to request that the service be registered with the
mDNSResponder(8)
|
| system.defaults.finder.ShowRemovableMediaOnDesktop | Whether to show removable media (CDs, DVDs and iPods) on desktop
|
| programs.tmux.enableMouse | Enable mouse support for tmux.
|
| system.defaults.loginwindow.SHOWFULLNAME | Apple menu > System Preferences > Users and Groups > Login Options
Displays login window as a name and password field instead of a list of users
|
| system.defaults.dock.persistent-others.*.folder.arrangement | Sort order for files in folder when clicked.
|
| launchd.daemons.<name>.serviceConfig.StandardErrorPath | This optional key specifies what file should be used for data being sent to stderr when using stdio(3).
|
| users.users.<name>.name | The name of the user account
|
| launchd.daemons.<name>.serviceConfig.UserName | This optional key specifies the user to run the job as
|
| launchd.agents.<name>.script | Shell commands executed as the service's main process.
|
| nixpkgs.pkgs | If set, the pkgs argument to all nix-darwin modules is the value of
this option, extended with nixpkgs.overlays, if
that is also set
|
| launchd.agents.<name>.serviceConfig.EnvironmentVariables | This optional key is used to specify additional environment variables to be set before running the
job.
|
| programs.tmux.tmuxOptions.<name>.source | Path of the source file.
|
| system.defaults.NSGlobalDomain.NSDisableAutomaticTermination | Whether to disable the automatic termination of inactive apps.
|
| services.ofborg.configFile | Configuration file to use for ofborg
|
| system.defaults.dock.mru-spaces | Whether to automatically rearrange spaces based on most recent use
|
| system.defaults.loginwindow.ShutDownDisabledWhileLoggedIn | Apple menu > System Preferences > Users and Groups > Login Options
Disables the "Shutdown" option when users are logged in
|
| homebrew.caskArgs.mdimporterdir | Target location for Spotlight Plugins
|
| nix.settings.max-jobs | This option defines the maximum number of jobs that Nix will try to
build in parallel
|
| system.defaults.finder.CreateDesktop | Whether to show icons on the desktop or not
|
| system.defaults.NSGlobalDomain.NSAutomaticSpellingCorrectionEnabled | Whether to enable automatic spelling correction
|
| system.defaults.dock.enable-spring-load-actions-on-all-items | Enable spring loading for all Dock items
|
| nix.linux-builder.speedFactor | The relative speed of the Linux builder
|
| services.github-runners.<name>.extraLabels | Extra labels in addition to the default (unless disabled through the noDefaultLabels option)
|
| users.users.<name>.createHome | Create the home directory when creating the user.
|
| launchd.daemons.<name>.serviceConfig.ServiceIPC | This optional key specifies whether the job participates in advanced
communication with launchd
|
| launchd.user.agents.<name>.serviceConfig.Sockets.<name>.SockNodeName | This optional key specifies the node to connect(2) or bind(2) to.
|
| launchd.daemons.<name>.serviceConfig.LaunchEvents | Specifies higher-level event types to be used as launch-on-demand event
sources
|
| services.buildkite-agents.<name>.shell | Command that buildkite-agent 3 will execute when it spawns a shell.
|
| homebrew.caskArgs.ignore_dependencies | Whether to ignore cask dependencies, e.g., when you manage them externally
|
| services.synergy.server.tls.cert | The TLS certificate to use for encryption.
|
| environment.launchAgents.<name>.text | Text of the file.
|
| launchd.agents | Definition of per-user launchd agents
|
| security.sudo.keepTerminfo | Whether to preserve the TERMINFO and TERMINFO_DIRS
environment variables, for root and the admin group.
|
| system.defaults.menuExtraClock.ShowAMPM | Show the AM/PM label
|
| networking.wg-quick.interfaces.<name>.autostart | Whether to bring up this interface automatically during boot.
|
| services.postgresql.ensureUsers.*.ensurePermissions | Permissions to ensure for the user, specified as an attribute set
|
| launchd.agents.<name>.serviceConfig.KeepAlive | This optional key is used to control whether your job is to be kept continuously running or to let
demand and conditions control the invocation
|
| services.redis.appendOnly | By default data is only periodically persisted to disk, enable this option to use an append-only file for improved persistence.
|
| launchd.agents.<name>.serviceConfig.HardResourceLimits.ResidentSetSize | The maximum size (in bytes) to which a process's resident set size may grow
|
| nix.buildMachines.*.maxJobs | The number of concurrent jobs the build machine supports
|
| nix.registry.<name>.flake | The flake input from is rewritten to.
|
| services.chunkwm.package | This option specifies the chunkwm package to use.
|
| services.postgresql.dataDir | The data directory for PostgreSQL
|
| environment.launchDaemons.<name>.source | Path of the source file.
|
| launchd.daemons.<name>.serviceConfig.SoftResourceLimits.Stack | The maximum size (in bytes) of the stack segment for a process; this defines how far a program's
stack segment may be extended
|
| services.hercules-ci-agent.settings.secretsJsonPath | Path to a JSON file containing secrets for effects
|
| launchd.user.agents.<name>.serviceConfig.RootDirectory | This optional key is used to specify a directory to chroot(2) to before running the job.
|
| system.defaults.dock.persistent-apps.*.app | An application to be added to the dock.
|
| system.defaults.trackpad.TrackpadThreeFingerDrag | Whether to enable three-finger drag
|
| networking.wg-quick.interfaces.<name>.peers.*.allowedIPs | List of IP addresses associated with this peer.
|
| programs.fish.loginShellInit | Shell script code called during fish login shell initialisation.
|
| launchd.agents.<name>.serviceConfig.ProgramArguments | This key maps to the second argument of execvp(3)
|
| programs.vim.vimOptions.<name>.target | Name of symlink
|
| system.defaults.NSGlobalDomain.AppleInterfaceStyleSwitchesAutomatically | Whether to automatically switch between light and dark mode
|
| system.defaults.NSGlobalDomain.NSWindowShouldDragOnGesture | Whether to enable moving window by holding anywhere on it like on Linux
|
| system.keyboard.remapCapsLockToControl | Whether to remap the Caps Lock key to Control.
|
| launchd.daemons.<name>.script | Shell commands executed as the service's main process.
|
| nix.settings | Configuration for Nix, see
https://nixos.org/manual/nix/stable/#sec-conf-file
for avalaible options
|
| services.aerospace.settings.after-login-command | Do not use AeroSpace to run commands after login. (Managed by launchd instead)
|
| system.tools.darwin-option.enable | Whether to enable darwin-option script.
|
| launchd.user.agents.<name>.command | Command executed as the service's main process.
|
| services.gitlab-runner.extraPackages | Extra packages to add to PATH for the gitlab-runner process.
|
| services.gitlab-runner.sessionServer.sessionTimeout | How long in seconds the session can stay active after
the job completes (which will block the job from finishing).
|
| services.hercules-ci-agent.settings.staticSecretsDirectory | This is the default directory to look for statically configured secrets like cluster-join-token.key
|
| system.defaults.finder.FXDefaultSearchScope | Change the default search scope
|
| services.sketchybar.package | The sketchybar package to use.
|
| system.defaults.trackpad.TrackpadTwoFingerDoubleTapGesture | Whether to enable smart zoom when double-tapping with two fingers
|
| launchd.daemons.<name>.serviceConfig.Nice | This optional key specifies what nice(3) value should be applied to the daemon.
|
| programs.tmux.enableVim | Enable vim style keybindings for copy mode, and navigation of tmux panes.
|
| services.postgresql.identMap | Defines the mapping from system users to database users
|
| launchd.agents.<name>.serviceConfig.LimitLoadToHosts | This configuration file only applies to the hosts listed with this key
|
| launchd.agents.<name>.serviceConfig.Sockets.<name>.SockPathName | This optional key implies SockFamily is set to "Unix"
|
| system.defaults.dock.show-recents | Show recent applications in the dock
|
| services.aerospace.settings.on-window-detected.*."if".app-id | The application ID to match (optional).
|
| system.defaults.NSGlobalDomain.NSAutomaticWindowAnimationsEnabled | Whether to animate opening and closing of windows and popovers
|
| nix.buildMachines.*.publicHostKey | The (base64-encoded) public host key of this builder
|
| launchd.agents.<name>.serviceConfig.SoftResourceLimits.FileSize | The largest size (in bytes) file that may be created.
|
| environment.extraOutputsToInstall | Entries listed here will be appended to the meta.outputsToInstall attribute for each package in environment.systemPackages, and the files from the corresponding derivation outputs symlinked into /run/current-system/sw
|
| launchd.agents.<name>.serviceConfig.SoftResourceLimits | Resource limits to be imposed on the job
|
| services.telegraf.enable | Whether to enable telegraf agent.
|
| system.defaults.dock.show-process-indicators | Show indicator lights for open applications in the Dock
|
| users.groups | Configuration for groups.
|
| launchd.daemons.<name>.command | Command executed as the service's main process.
|
| launchd.user.agents.<name>.serviceConfig.WaitForDebugger | This optional key specifies that launchd should instruct the kernel to have the job wait for a debugger
to attach before any code in the job is executed.
|
| networking.wg-quick.interfaces.<name>.address | List of IP addresses for this interface.
|
| programs.direnv.nix-direnv.package | The nix-direnv package to use.
|
| services.synergy.server.autoStart | Whether the Synergy server should be started automatically.
|
| services.tailscale.enable | Whether to enable Tailscale client daemon.
|
| services.buildkite-agents.<name>.extraConfig | Extra lines to be added verbatim to the configuration file.
|
| homebrew.brews.*.name | The name of the formula to install.
|
| system.defaults.NSGlobalDomain.NSTableViewDefaultSizeMode | Sets the size of the finder sidebar icons: 1 (small), 2 (medium) or 3 (large)
|
| launchd.agents.<name>.serviceConfig.RunAtLoad | This optional key is used to control whether your job is launched once at the time the job is loaded
|
| services.kwm.kwmConfig | Config to use for kwmrc.
|
| launchd.daemons.<name>.serviceConfig.WaitForDebugger | This optional key specifies that launchd should instruct the kernel to have the job wait for a debugger
to attach before any code in the job is executed.
|
| launchd.daemons.<name>.serviceConfig.LowPriorityIO | This optional key specifies whether the kernel should consider this daemon to be low priority when
doing file system I/O.
|
| nix.distributedBuilds | Whether to distribute builds to the machines listed in
nix.buildMachines.
|
| system.defaults.trackpad.TrackpadTwoFingerFromRightEdgeSwipeGesture | Whether to enable two-finger swipe-from-right-edge gesture: 0 to disable, 3 to open Notification Center
|
| users.groups.<name>.gid | The group's GID.
|
| launchd.agents.<name>.serviceConfig.EnableTransactions | This flag instructs launchd that the job promises to use vproc_transaction_begin(3) and
vproc_transaction_end(3) to track outstanding transactions that need to be reconciled before the
process can safely terminate
|
| launchd.agents.<name>.serviceConfig.SoftResourceLimits.Core | The largest size (in bytes) core file that may be created.
|
| launchd.daemons.<name>.serviceConfig.HardResourceLimits.MemoryLock | The maximum size (in bytes) which a process may lock into memory using the mlock(2) function.
|
| launchd.daemons.<name>.serviceConfig.LimitLoadToSessionType | This configuration file only applies to sessions of the type specified
|
| launchd.user.agents.<name>.serviceConfig.SoftResourceLimits.Stack | The maximum size (in bytes) of the stack segment for a process; this defines how far a program's
stack segment may be extended
|
| system.defaults.WindowManager.EnableStandardClickToShowDesktop | Click wallpaper to reveal desktop
Clicking your wallpaper will move all windows out of the way to allow access to your desktop items and widgets
|
| system.defaults.dock.autohide | Whether to automatically hide and show the dock
|
| system.defaults.trackpad.TrackpadRightClick | Whether to enable trackpad right click (two-finger tap/click)
|
| environment.defaultPackages | Set of default packages that aren't strictly necessary
for a running system, entries can be removed for a more
minimal NixOS installation
|
| system.defaults.dock.wvous-tl-corner | Hot corner action for top left corner
|
| launchd.user.agents.<name>.serviceConfig.KeepAlive | This optional key is used to control whether your job is to be kept continuously running or to let
demand and conditions control the invocation
|
| services.offlineimap.startInterval | Optional key to start offlineimap services each N seconds
|
| system.defaults.NSGlobalDomain.AppleMetricUnits | Whether to use the metric system
|
| system.defaults.trackpad.TrackpadRotate | Whether to enable two-finger rotation gesture
|
| services.openssh.enable | Whether to enable Apple's built-in OpenSSH server
|
| homebrew.caskArgs.require_sha | Whether to require casks to have a checksum
|
| homebrew.onActivation | Options for configuring the behavior of the brew bundle command that
nix-darwin runs during system activation.
|
| system.tools.darwin-version.enable | Whether to enable darwin-version script.
|
| services.cachix-agent.package | Package containing cachix executable.
|
| launchd.daemons.<name>.serviceConfig.ExitTimeOut | The amount of time launchd waits before sending a SIGKILL signal
|
| services.postgresql.logLinePrefix | A printf-style string that is output at the beginning of each log line
|
| system.defaults.loginwindow.ShutDownDisabled | Apple menu > System Preferences > Users and Groups > Login Options
Hides the Shut Down button on the login screen
|
| programs._1password.enable | Whether to enable the 1Password CLI tool.
|
| launchd.user.agents.<name>.serviceConfig.StandardErrorPath | This optional key specifies what file should be used for data being sent to stderr when using stdio(3).
|
| launchd.daemons.<name>.serviceConfig.Program | This key maps to the first argument of execvp(3)
|
| services.ipfs.package | The ipfs package to use.
|
| services.kwm.package | This option specifies the kwm package to use.
|
| nix.linux-builder.config | This option specifies extra NixOS configuration for the builder
|
| services.buildkite-agents.<name>.hooks.pre-exit | The pre-exit hook will run just before your build job finishes
|
| services.emacs.enable | Whether to enable the Emacs Daemon.
|
| services.github-runners.<name>.package | The github-runner package to use.
|
| system.defaults.NSGlobalDomain."com.apple.trackpad.forceClick" | Whether to enable trackpad force click.
|
| nix.linux-builder.supportedFeatures | A list of features supported by the Linux builder
|
| networking.dns | The list of dns servers used when resolving domain names.
|
| launchd.daemons.<name>.serviceConfig.Sockets.<name>.SockServiceName | This optional key specifies the service on the node to connect(2) or bind(2) to.
|
| programs.ssh.knownHosts | The set of system-wide known SSH hosts
|
| system.activationScripts.<name>.text | Text of the file.
|
| environment.profiles | A list of profiles used to setup the global environment.
|
| services.buildkite-agents.<name>.hooksPath | Path to the directory storing the hooks
|
| system.defaults.screencapture.disable-shadow | Disable drop shadow border around screencaptures
|
| environment.launchDaemons.<name>.target | Name of symlink
|
| security.pam.services.sudo_local.watchIdAuth | Use Apple Watch for sudo authentication, for devices without Touch ID or
laptops with lids closed, consider using this
|
| homebrew.caskArgs.vst3_plugindir | Target location for VST3 Plugins
|
| launchd.daemons.<name>.serviceConfig.LimitLoadToHosts | This configuration file only applies to the hosts listed with this key
|
| launchd.agents.<name>.serviceConfig.SoftResourceLimits.MemoryLock | The maximum size (in bytes) which a process may lock into memory using the mlock(2) function.
|
| networking.wg-quick.interfaces.<name>.peers.*.endpoint | IP and port to connect to this peer at.
|
| security.pki.caCertificateBlacklist | A list of blacklisted CA certificate names that won't be imported from
the Mozilla Trust Store into
/etc/ssl/certs/ca-certificates.crt
|
| services.yabai.enableScriptingAddition | Whether to enable yabai's scripting-addition
|
| launchd.user.agents.<name>.path | Packages added to the service's PATH
environment variable
|
| launchd.user.agents.<name>.serviceConfig.ProgramArguments | This key maps to the second argument of execvp(3)
|
| services.dnsmasq.addresses | List of domains that will be redirected by the DNSmasq.
|
| system.defaults.WindowManager.StandardHideDesktopIcons | Hide items on desktop.
|
| system.defaults.screencapture.type | The image format to use, such as "jpg".
|
| services.cachix-agent.name | Agent name, usually the same as the hostname.
|
| environment.extraSetup | Shell fragments to be run after the system environment has been created
|
| system.defaults.screencapture.target | Target to which screencapture should save screenshot to
|
| launchd.user.agents.<name>.serviceConfig.ThrottleInterval | This key lets one override the default throttling policy imposed on jobs by launchd
|
| services.spacebar.enable | Whether to enable the spacebar.
|
| services.synergy.server.address | Address on which to listen for clients.
|
| environment.launchDaemons.<name>.text | Text of the file.
|
| system.defaults.NSGlobalDomain.AppleEnableSwipeNavigateWithScrolls | Enables swiping left or right with two fingers to navigate backward or forward
|
| services.telegraf.package | Which telegraf derivation to use
|
| launchd.agents.<name>.serviceConfig.InitGroups | This optional key specifies whether initgroups(3) should be called before running the job
|
| services.jankyborders.inactive_color | Sets the border color for all windows not in focus (format: 0xAARRGGBB)
|
| launchd.daemons.<name>.serviceConfig.StandardInPath | This optional key specifies what file should be used for data being supplied to stdin when using
stdio(3).
|
| programs.zsh.enable | Whether to configure zsh as an interactive shell.
|
| system.defaults.loginwindow.autoLoginUser | Apple menu > System Preferences > Users and Groups > Login Options
Auto login the supplied user on boot
|
| homebrew.caskArgs.fontdir | Target location for Fonts
|
| networking.fqdn | The fully qualified domain name (FQDN) of this host
|
| launchd.envVariables | A set of environment variables to be set on all future
processes launched by launchd in the caller's context
|
| services.prometheus.exporters.node.extraFlags | Extra commandline options to pass to the Node exporter executable.
|
| power.sleep.computer | Amount of idle time (in minutes) until the computer sleeps.
"never" disables computer sleeping
|
| homebrew.taps.*.clone_target | Use this option to tap a formula repository from anywhere, using any transport protocol
that git handles
|
| services.nextdns.arguments | Additional arguments to be passed to nextdns run.
|
| environment.enableAllTerminfo | Whether to install all terminfo outputs
|
| launchd.user.agents.<name>.serviceConfig.HardResourceLimits.FileSize | The largest size (in bytes) file that may be created.
|
| nix.optimise.interval | The calendar interval at which the optimiser will run
|
| programs.vim.extraKnownPlugins | Custom plugin declarations to add to VAM's knownPlugins.
|
| services.dnsmasq.bind | This option specifies the interface on which DNSmasq will listen.
|
| system.defaults.WindowManager.StageManagerHideWidgets | Hide widgets in Stage Manager.
|
| launchd.agents.<name>.serviceConfig.HardResourceLimits.MemoryLock | The maximum size (in bytes) which a process may lock into memory using the mlock(2) function.
|
| launchd.daemons.<name>.serviceConfig | Each attribute in this set specifies an option for a key in the plist.
https://developer.apple.com/legacy/library/documentation/Darwin/Reference/ManPages/man5/launchd.plist.5.html
|
| services.postgresql.ensureUsers.*.name | Name of the user to ensure.
|
| launchd.agents.<name>.serviceConfig.LowPriorityIO | This optional key specifies whether the kernel should consider this daemon to be low priority when
doing file system I/O.
|
| networking.wg-quick.interfaces.<name>.peers.*.persistentKeepalive | Interval in seconds to send keepalive packets
|
| services.chunkwm.plugins.border.config | Optional border plugin configuration.
|
| system.defaults.dock.persistent-others.*.folder.displayas | How to display the folder before clicked. stack: Stack of file previews. folder: A folder icon
|
| launchd.agents.<name>.serviceConfig.SoftResourceLimits.CPU | The maximum amount of cpu time (in seconds) to be used by each process.
|
| services.postgresql.enable | Whether to enable PostgreSQL Server.
|
| services.eternal-terminal.port | The port the server should listen on
|
| system.defaults.smb.NetBIOSName | Hostname to use for NetBIOS.
|
| programs.tmux.tmuxOptions.<name>.target | Name of symlink
|
| launchd.user.agents.<name>.serviceConfig.LaunchOnlyOnce | This optional key specifies whether the job can only be run once and only once
|
| services.gitlab-runner.concurrent | Limits how many jobs globally can be run concurrently
|
| system.defaults.loginwindow.PowerOffDisabledWhileLoggedIn | Apple menu > System Preferences > Users and Groups > Login Options
If set to true, the Power Off menu item will be disabled when the user is logged in
|
| homebrew.caskArgs.screen_saverdir | Target location for Screen Savers
|
| homebrew.greedyCasks | Whether to always upgrade casks listed in homebrew.casks regardless
of whether it's unversioned or it updates itself
|
| services.privoxy.confdir | Directory for privoxy files such as .action and .filter.
|
| system.defaults.dock.expose-group-apps | Whether to group windows by application in Mission Control's Exposé
|
| system.defaults.dock.static-only | Show only open applications in the Dock
|
| system.defaults.magicmouse.MouseButtonMode | "OneButton": any tap is a left click. "TwoButton": allow left-
and right-clicking.
|
| homebrew.brews.*.start_service | Whether to run brew services start for the formula and register it to
launch at login (or boot)
|
| launchd.user.agents.<name>.serviceConfig.Sockets.<name>.SockServiceName | This optional key specifies the service on the node to connect(2) or bind(2) to.
|
| nix.buildMachines.*.sshUser | The username to log in as on the remote host
|
| services.jankyborders.blur_radius | Sets the blur radius applied to the borders or backgrounds with transparency.
|
| system.defaults.NSGlobalDomain.AppleEnableMouseSwipeNavigateWithScrolls | Enables swiping left or right with two fingers to navigate backward or forward
|
| services.mopidy.mediakeys.package | This option specifies the mediakeys package to use.
|
| launchd.daemons.<name>.serviceConfig.Sockets.<name>.SockPassive | This optional key specifies whether listen(2) or connect(2) should be called on the created file
descriptor
|
| launchd.agents.<name>.serviceConfig.Umask | This optional key specifies what value should be passed to umask(2) before running the job
|
| launchd.agents.<name>.serviceConfig.Sockets | This optional key is used to specify launch on demand sockets that can be used to let launchd know when
to run the job
|
| launchd.daemons.<name>.serviceConfig.Sockets.<name>.SockProtocol | This optional key specifies the protocol to be passed to socket(2)
|
| nix.buildMachines.*.supportedFeatures | A list of features supported by this builder
|
| system.defaults.NSGlobalDomain.AppleShowScrollBars | When to show the scrollbars
|
| system.defaults.NSGlobalDomain.NSAutomaticInlinePredictionEnabled | Whether to enable inline predictive text
|
| system.defaults.WindowManager.AppWindowGroupingBehavior | Grouping strategy when showing windows from an application.
false means "One at a time"
true means "All at once"
|
| programs.zsh.interactiveShellInit | Shell script code called during interactive zsh shell initialisation.
|
| system.defaults.loginwindow.GuestEnabled | Apple menu > System Preferences > Users and Groups > Login Options
Allow users to login to the machine as guests using the Guest account
|
| nixpkgs.flake.setNixPath | Whether to set NIX_PATH to include nixpkgs=flake:nixpkgs such that <nixpkgs>
lookups receive the version of nixpkgs that the system was built with, in concert with
nixpkgs.flake.setFlakeRegistry
|
| system.defaults.dock.persistent-others.*.folder.path | Path to a folder to be added to the dock.
|
| networking.dhcpClientId | The DHCP client identifier to use when requesting an IP address from a DHCP server
|
| services.gitlab-runner.checkInterval | Defines the interval length, in seconds, between new jobs check
|
| system.defaults.NSGlobalDomain.NSDocumentSaveNewDocumentsToCloud | Whether to save new documents to iCloud by default
|
| homebrew.caskArgs.prefpanedir | Target location for Preference Panes
|
| services.gitlab-runner.services.<name>.executor | Select executor, eg. shell, docker, etc
|
| launchd.agents.<name>.serviceConfig.OnDemand | This key was used in Mac OS X 10.4 to control whether a job was kept alive or not
|
| environment.userLaunchAgents | Set of files that have to be linked in ~/Library/LaunchAgents.
|
| homebrew.caskArgs.audio_unit_plugindir | Target location for Audio Unit Plugins
|
| homebrew.caskArgs.vst_plugindir | Target location for VST Plugins
|
| services.aerospace.settings | AeroSpace configuration, see
|
| services.buildkite-agents.<name>.tokenPath | The token from your Buildkite "Agents" page
|
| system.startup.chime | Whether to enable the startup chime
|
| users.groups.<name>.members | The group's members.
|
| launchd.agents.<name>.serviceConfig.RootDirectory | This optional key is used to specify a directory to chroot(2) to before running the job.
|
| launchd.daemons.<name>.serviceConfig.inetdCompatibility.Wait | This flag corresponds to the "wait" or "nowait" option of inetd
|
| services.redis.extraConfig | Additional text to be appended to redis.conf.
|
| homebrew.caskArgs.no_quarantine | Whether to disable quarantining of downloads
|
| launchd.agents.<name>.serviceConfig.LimitLoadToSessionType | This configuration file only applies to sessions of the type specified
|
| system.defaults.trackpad.TrackpadMomentumScroll | Whether to use inertia when scrolling
|
| launchd.agents.<name>.serviceConfig.SessionCreate | This key specifies that the job should be spawned into a new security
audit session rather than the default session for the context is belongs
to
|
| system.defaults.dock.minimize-to-application | Whether to minimize windows into their application icon
|
| services.buildkite-agents.<name>.dataDir | The workdir for the agent
|
| programs.zsh.shellInit | Shell script code called during zsh shell initialisation.
|
| services.buildkite-agents.<name>.hooks.pre-checkout | The pre-checkout hook will run just before your projects source code is
checked out from your SCM provider
|
| system.defaults.dock.persistent-others.*.file | A file to be added to the dock.
|
| system.defaults.finder.ShowPathbar | Show path breadcrumbs in finder windows
|
| system.defaults.dock.showMissionControlGestureEnabled | Whether to enable trackpad gestures (three- or four-finger vertical swipe) to show Mission Control
|
| launchd.agents.<name>.serviceConfig.GroupName | This optional key specifies the group to run the job as
|
| services.gitlab-runner.package | Gitlab Runner package to use.
|
| launchd.user.agents.<name>.serviceConfig.LowPriorityIO | This optional key specifies whether the kernel should consider this daemon to be low priority when
doing file system I/O.
|
| launchd.daemons.<name>.serviceConfig.Sockets.<name>.SockFamily | This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.
|
| launchd.user.agents.<name>.serviceConfig.Sockets.<name>.SockType | This optional key tells launchctl what type of socket to create
|
| programs.zsh.enableFzfGit | Enable fzf keybindings for C-g git browsing.
|
| services.aerospace.settings.after-startup-command | Add commands that run after AeroSpace startup
|
| services.github-runners.<name>.extraPackages | Extra packages to add to PATH of the service to make them available to workflows.
|
| services.gitlab-runner.sentryDSN | Data Source Name for tracking of all system level errors to Sentry.
|
| services.netdata.enable | Whether to enable Netdata daemon.
|
| services.prometheus.exporters.node.listenAddress | Address where Node exporter exposes its HTTP interface
|
| launchd.daemons.<name>.serviceConfig.GroupName | This optional key specifies the group to run the job as
|
| nix.linux-builder.enable | Whether to enable Linux builder.
|
| services.jankyborders.active_color | Sets the border color for the focused window (format: 0xAARRGGBB)
|
| launchd.user.agents.<name>.serviceConfig.StandardOutPath | This optional key specifies what file should be used for data being sent to stdout when using stdio(3).
|
| programs.nix-index.package | This option specifies the nix-index package to use.
|
| users.knownGroups | List of groups owned and managed by nix-darwin
|
| system.defaults.NSGlobalDomain.NSWindowResizeTime | Sets the speed speed of window resizing
|
| system.defaults.screencapture.location | The filesystem path to which screencaptures should be written.
|
| homebrew.brews.*.conflicts_with | List of formulae that should be unlinked and their services stopped (if they are
installed).
|
| homebrew.caskArgs.colorpickerdir | Target location for Color Pickers
|
| launchd.daemons.<name>.serviceConfig.Sockets.<name>.Bonjour | This optional key can be used to request that the service be registered with the
mDNSResponder(8)
|
| launchd.daemons.<name>.serviceConfig.SoftResourceLimits.FileSize | The largest size (in bytes) file that may be created.
|
| nix.buildMachines.*.mandatoryFeatures | A list of features mandatory for this builder
|
| services.jankyborders.blacklist | The applications specified here are excluded from being bordered
|
| system.defaults.NSGlobalDomain.AppleShowAllExtensions | Whether to show all file extensions in Finder
|
| system.defaults.NSGlobalDomain."com.apple.sound.beep.feedback" | Apple menu > System Preferences > Sound
Make a feedback sound when the system volume changed
|
| environment.variables | A set of environment variables used in the global environment
|
| launchd.daemons.<name>.serviceConfig.HardResourceLimits.Stack | The maximum size (in bytes) of the stack segment for a process; this defines how far a program's
stack segment may be extended
|
| system.defaults.NSGlobalDomain."com.apple.springing.enabled" | Whether to enable spring loading (expose) for directories.
|
| system.defaults.finder.ShowExternalHardDrivesOnDesktop | Whether to show external disks on desktop
|
| system.defaults.ActivityMonitor.OpenMainWindow | Open the main window when opening Activity Monitor
|
| power.restartAfterFreeze | Whether to restart the computer after a system freeze.
|
| launchd.agents.<name>.path | Packages added to the service's PATH
environment variable
|
| launchd.user.agents.<name>.serviceConfig.SessionCreate | This key specifies that the job should be spawned into a new security
audit session rather than the default session for the context is belongs
to
|
| services.aerospace.enable | Whether to enable AeroSpace window manager.
|
| services.jankyborders.ax_focus | If set to true, the (slower) accessibility API is used to resolve the focused window.
|
| nixpkgs.hostPlatform | Specifies the platform where the nix-darwin configuration will run
|
| launchd.agents.<name>.serviceConfig.StandardErrorPath | This optional key specifies what file should be used for data being sent to stderr when using stdio(3).
|
| services.buildkite-agents.<name>.hooks.command | The command hook script will replace the default implementation of running
the build command.
|
| system.defaults.WindowManager.EnableTopTilingByEdgeDrag | Enable dragging windows to the menu bar to fill the screen
|
| networking.search | The list of search paths used when resolving domain names.
|
| launchd.daemons.<name>.serviceConfig.HardResourceLimits.Data | The maximum size (in bytes) of the data segment for a process; this defines how far a program may
extend its break with the sbrk(2) system call.
|
| launchd.user.agents.<name>.serviceConfig.AbandonProcessGroup | When a job dies, launchd kills any remaining processes with the same process group ID as the job
|
| services.postgresql.ensureDatabases | Ensures that the specified databases exist
|
| services.skhd.skhdConfig | Config to use for skhdrc.
|
| services.synergy.server.enable | Whether to enable the Synergy server (send keyboard and mouse events).
|
| security.pam.services.sudo_local.enable | Whether to enable managing /etc/pam.d/sudo_local with nix-darwin.
|
| environment.launchAgents.<name>.enable | Whether this file should be generated
|
| system.defaults.dock.launchanim | Animate opening applications from the Dock
|
| networking.wg-quick.interfaces.<name>.preDown | List of commands to run before interface shutdown.
|
| services.prometheus.exporters.node.enabledCollectors | Collectors to enable in addition to the ones that are enabled by default.
|
| system.defaults.controlcenter.BatteryShowPercentage | Apple menu > System Preferences > Control Center > Battery
Show a battery percentage in menu bar
|
| system.defaults.finder._FXSortFoldersFirstOnDesktop | Keep folders on top when sorting by name on the desktop
|
| environment.shells | A list of permissible login shells for user accounts
|
| security.pam.services.sudo_local.touchIdAuth | Whether to enable Touch ID with sudo
|
| services.github-runners.<name>.name | Name of the runner to configure
|
| services.tailscale.package | The package to use for tailscale
|
| launchd.user.agents.<name>.serviceConfig.LaunchEvents | Specifies higher-level event types to be used as launch-on-demand event
sources
|
| system.defaults.NSGlobalDomain."com.apple.trackpad.enableSecondaryClick" | Whether to enable trackpad secondary click
|
| launchd.user.agents.<name>.serviceConfig.QueueDirectories | Much like the WatchPaths option, this key will watch the paths for modifications
|
| launchd.user.agents.<name>.serviceConfig.Sockets.<name>.SockPassive | This optional key specifies whether listen(2) or connect(2) should be called on the created file
descriptor
|
| services.jankyborders.enable | Whether to enable the jankyborders service..
|
| services.jankyborders.order | Specifies whether borders should be drawn above or below windows.
|
| system.defaults.dock.showLaunchpadGestureEnabled | Whether to enable four-finger pinch gesture to show the Launchpad
|
| homebrew.casks | List of Homebrew casks to install
|
| environment.extraInit | Shell script code called during global environment initialisation
after all variables and profileVariables have been set
|
| homebrew.global.brewfile | Whether to enable Homebrew to automatically use the Brewfile that this module generates in
the Nix store, when you manually invoke brew bundle
|
| launchd.agents.<name>.serviceConfig.SoftResourceLimits.Data | The maximum size (in bytes) of the data segment for a process; this defines how far a program may
extend its break with the sbrk(2) system call.
|
| launchd.agents.<name>.serviceConfig.StartCalendarInterval | This optional key causes the job to be started every calendar interval as specified
|
| launchd.daemons.<name>.serviceConfig.SessionCreate | This key specifies that the job should be spawned into a new security
audit session rather than the default session for the context is belongs
to
|
| services.buildkite-agents.<name>.hooks.pre-artifact | The pre-artifact hook will run just before artifacts are uploaded
|
| services.eternal-terminal.enable | Whether to enable Eternal Terminal server.
|
| launchd.agents.<name>.serviceConfig.Sockets.<name>.SockProtocol | This optional key specifies the protocol to be passed to socket(2)
|
| nix.buildMachines | This option lists the machines to be used if distributed builds are
enabled (see nix.distributedBuilds)
|
| nix.registry.<name>.to | The flake reference from is rewritten to.
|
| programs.direnv.finalPackage | The wrapped direnv package.
|
| services.buildkite-agents.<name>.hooks.checkout | The checkout hook script will replace the default checkout routine of the
bootstrap.sh script
|
| services.netdata.logDir | Log directory for Netdata
|
| programs.direnv.enableZshIntegration | Whether to enable Zsh integration
.
|
| launchd.agents.<name>.serviceConfig.inetdCompatibility | The presence of this key specifies that the daemon expects to be run as if it were launched from inetd.
|
| programs.zsh.histFile | Change history file.
|
| services.buildkite-agents.<name>.hooks.post-artifact | The post-artifact hook will run just after artifacts are uploaded
|
| services.aerospace.settings.on-window-detected | Commands to run every time a new window is detected with optional conditions.
|
| launchd.user.agents.<name>.serviceConfig.Umask | This optional key specifies what value should be passed to umask(2) before running the job
|
| power.sleep.allowSleepByPowerButton | Whether the power button can sleep the computer.
|
| services.jankyborders.hidpi | If set to on, the border will be drawn with retina resolution.
|
| system.defaults.trackpad.DragLock | Whether to enable drag lock
|
| system.defaults.controlcenter.Sound | Apple menu > System Preferences > Control Center > Sound
Show a sound control in menu bar
|
| system.defaults.trackpad.TrackpadThreeFingerTapGesture | Whether to enable three-finger tap gesture: 0 to disable, 2 to trigger Look up & data detectors
|
| services.github-runners.<name>.replace | Replace any existing runner with the same name
|
| nix.settings.sandbox | If set, Nix will perform builds in a sandboxed environment that it
will set up automatically for each build
|
| services.netbird.enable | Whether to enable Netbird daemon.
|
| services.netdata.config | Custom configuration for Netdata
|
| homebrew.user | The user that owns the Homebrew installation
|
| services.aerospace.settings.key-mapping.preset | Keymapping preset.
|
| programs.gnupg.package | The gnupg package to use.
|
| networking.wg-quick.interfaces | Set of wg-quick interfaces.
|
| programs.direnv.enableFishIntegration | Whether to enable Fish integration
.
|
| launchd.user.agents.<name>.serviceConfig.Debug | This optional key specifies that launchd should adjust its log mask temporarily to LOG_DEBUG while
dealing with this job.
|
| programs.fish.vendor.completions.enable | Whether fish should use completion files provided by other packages.
|
| services.ipfs.enableGarbageCollection | Passes --enable-gc flag to ipfs daemon.
|
| networking.wg-quick.interfaces.<name>.postUp | List of commands to run after interface setup.
|
| nix.settings.trusted-users | A list of names of users that have additional rights when
connecting to the Nix daemon, such as the ability to specify
additional binary caches, or to import unsigned NARs
|
| environment.launchDaemons.<name>.enable | Whether this file should be generated
|
| programs.fish.babelfishPackage | The babelfish package to use when useBabelfish is
set to true.
|
| services.offlineimap.runQuick | Run only quick synchronizations
|
| services.prometheus.exporters.node.package | The prometheus-node-exporter package to use.
|
| environment.darwinConfig | The path of the darwin configuration.nix used to configure the system,
this updates the default darwin-config entry in NIX_PATH
|
| launchd.user.agents.<name>.serviceConfig.Nice | This optional key specifies what nice(3) value should be applied to the daemon.
|
| programs.vim.enable | Whether to configure vim.
|
| security.pki.certificates | A list of trusted root certificates in PEM format.
|
| system.defaults.iCal."TimeZone support enabled" | Turn on time zone support
|
| services.sketchybar.extraPackages | Extra packages to add to PATH.
|
| system.defaults.loginwindow.LoginwindowText | Text to be shown on the login window
|
| documentation.man.enable | Whether to install manual pages and the man command
|
| launchd.agents.<name>.serviceConfig.StandardInPath | This optional key specifies what file should be used for data being supplied to stdin when using
stdio(3).
|
| launchd.user.agents.<name>.serviceConfig.HardResourceLimits.ResidentSetSize | The maximum size (in bytes) to which a process's resident set size may grow
|
| programs.zsh.enableFastSyntaxHighlighting | Whether to enable zsh-fast-syntax-highlighting.
|
| system.defaults.NSGlobalDomain.NSNavPanelExpandedStateForSaveMode | Whether to use expanded save panel by default
|
| services.autossh.sessions.*.user | Name of the user the AutoSSH session should run as
|
| system.defaults.dock.persistent-others.*.folder.showas | Effect to show files when clicked. fan: fan-out effect, grid: box, list: list
|
| services.tailscale.overrideLocalDns | This option implements Override local DNS as it is not yet implemented in Tailscaled-on-macOS
|
| system.defaults.controlcenter.Bluetooth | Apple menu > System Preferences > Control Center > Bluetooth
Show a bluetooth control in menu bar
|
| homebrew.caskArgs.qlplugindir | Target location for QuickLook Plugins
|
| launchd.user.agents.<name>.serviceConfig.WorkingDirectory | This optional key is used to specify a directory to chdir(2) to before running the job.
|
| system.defaults.dock.appswitcher-all-displays | Whether to display the appswitcher on all displays or only the main one
|
| launchd.user.agents.<name>.serviceConfig.GroupName | This optional key specifies the group to run the job as
|
| security.sandbox.profiles.<name>.allowNetworking | Whether to allow network access inside the sandbox.
|
| system.defaults.".GlobalPreferences"."com.apple.sound.beep.sound" | Sets the system-wide alert sound
|
| networking.wakeOnLan.enable | Enable Wake-on-LAN for the device
|
| nix.registry.<name>.exact | Whether the from reference needs to match exactly
|
| launchd.daemons.<name>.serviceConfig.KeepAlive | This optional key is used to control whether your job is to be kept continuously running or to let
demand and conditions control the invocation
|
| programs.direnv.enable | Whether to enable direnv integration
|
| services.gitlab-runner.gracefulTimeout | Time to wait until a graceful shutdown is turned into a forceful one.
|
| services.ofborg.logFile | The logfile to use for the ofborg service.
|
| services.aerospace.settings.workspace-to-monitor-force-assignment | Map workspaces to specific monitors
|
| services.ipfs.logFile | The logfile to use for the ipfs service
|
| launchd.agents.<name>.serviceConfig.EnableGlobbing | This flag causes launchd to use the glob(3) mechanism to update the program arguments before invocation.
|
| launchd.daemons.<name>.serviceConfig.WatchPaths | This optional key causes the job to be started if any one of the listed paths are modified.
|
| launchd.user.agents.<name>.serviceConfig.LimitLoadFromHosts | This configuration file only applies to hosts NOT listed with this key
|
| launchd.user.agents.<name>.serviceConfig.SoftResourceLimits.NumberOfFiles | The maximum number of open files for this process
|
| services.hercules-ci-agent.settings.apiBaseUrl | API base URL that the agent will connect to
|
| system.defaults.NSGlobalDomain.NSNavPanelExpandedStateForSaveMode2 | Whether to use expanded save panel by default
|
| system.defaults.trackpad.ActuateDetents | Whether to enable haptic feedback
|
| launchd.user.agents.<name>.serviceConfig.Disabled | This optional key is used as a hint to launchctl(1) that it should not submit this job to launchd when
loading a job or jobs
|
| launchd.user.agents.<name>.serviceConfig.LowPriorityBackgroundIO | This optional key specifies whether the kernel should consider this daemon to be low priority when
doing file system I/O when the process is throttled with the Darwin-background classification.
|
| programs.arqbackup.enable | Whether to enable Arq backup.
|
| services.hercules-ci-agent.package | Package containing the bin/hercules-ci-agent executable.
|
| services.mopidy.enable | Whether to enable the Mopidy Daemon.
|
| system.defaults.NSGlobalDomain.PMPrintingExpandedStateForPrint | Whether to use the expanded print panel by default
|
| nixpkgs.buildPlatform | Specifies the platform on which nix-darwin should be built
|
| environment.launchAgents.<name>.source | Path of the source file.
|
| launchd.agents.<name>.serviceConfig.ProcessType | This optional key describes, at a high level, the intended purpose of the job
|
| documentation.info.enable | Whether to install info pages and the info command
|
| environment.pathsToLink | List of directories to be symlinked in /run/current-system/sw.
|
| launchd.agents.<name>.serviceConfig.HardResourceLimits.Stack | The maximum size (in bytes) of the stack segment for a process; this defines how far a program's
stack segment may be extended
|
| services.gitlab-runner.services.<name>.dockerExtraHosts | Add a custom host-to-IP mapping.
|
| services.synapse-bt.extraConfig | Extra configuration options for Synapse BitTorrent.
|
| system.activationScripts.<name>.target | Name of symlink
|
| programs.direnv.nix-direnv.enable | Whether to enable a faster, persistent implementation of use_nix and use_flake, to replace the built-in one
.
|
| services.netdata.package | The netdata package to use.
|
| system.defaults.NSGlobalDomain.InitialKeyRepeat | Apple menu > System Preferences > Keyboard
If you press and hold certain keyboard keys when in a text area, the key’s character begins to repeat
|
| system.patches | Set of patches to apply to /.
This can modify everything so use with caution.
Useful for safely changing system files
|
| users.users.<name>.description | A short description of the user account, typically the
user's full name
|
| launchd.user.agents.<name>.serviceConfig.Sockets.<name>.MulticastGroup | This optional key can be used to request that the datagram socket join a multicast group
|
| networking.computerName | The user-friendly name for the system, set in System Preferences > Sharing > Computer Name
|
| services.cachix-agent.logFile | Absolute path to log all stderr and stdout
|
| services.emacs.additionalPath | This option specifies additional PATH that the emacs daemon would have
|
| launchd.user.agents.<name>.serviceConfig.LimitLoadToHosts | This configuration file only applies to the hosts listed with this key
|
| networking.domain | The domain
|
| security.pam.services.sudo_local.reattach | Whether to enable reattaching a program to the user's bootstrap session
|
| services.eternal-terminal.silent | If enabled, disables all logging.
|
| programs.gnupg.agent.enableSSHSupport | Enable SSH agent support in GnuPG agent
|
| services.mopidy.mediakeys.enable | Whether to enable the Mopidy OSX Media Keys support daemon.
|
| launchd.daemons.<name>.serviceConfig.ProgramArguments | This key maps to the second argument of execvp(3)
|
| system.defaults.NSGlobalDomain."com.apple.springing.delay" | Set the spring loading delay for directories
|
| system.defaults.NSGlobalDomain.KeyRepeat | Apple menu > System Preferences > Keyboard
If you press and hold certain keyboard keys when in a text area, the key’s character begins to repeat
|
| system.stateVersion | Every once in a while, a new nix-darwin release may change
configuration defaults in a way incompatible with stateful
data
|
| homebrew.brews.*.args | Argument flags to pass to brew install
|
| services.aerospace.package | The aerospace package to use.
|
| system.darwinLabel | Label to be used in the names of generated outputs.
|
| users.users.<name>.shell | The user's shell
|
| launchd.daemons.<name>.serviceConfig.Debug | This optional key specifies that launchd should adjust its log mask temporarily to LOG_DEBUG while
dealing with this job.
|
| launchd.user.agents.<name>.serviceConfig.SoftResourceLimits.FileSize | The largest size (in bytes) file that may be created.
|
| nix.registry.<name>.from | The flake reference to be rewritten.
|
| nix.settings.trusted-substituters | List of binary cache URLs that non-root users can use (in
addition to those specified using
nix.settings.substituters) by passing
--option binary-caches to Nix commands.
|
| services.github-runners.<name>.group | Group under which to run the service
|
| launchd.user.agents.<name>.serviceConfig.Sockets.<name>.SockPathName | This optional key implies SockFamily is set to "Unix"
|
| networking.localHostName | The local hostname, or local network name, is displayed beneath the computer's name at the
top of the Sharing preferences pane
|
| services.aerospace.settings.enable-normalization-flatten-containers | Containers that have only one child are "flattened".
|
| services.redis.port | The port for Redis to listen to.
|
| launchd.daemons.<name>.serviceConfig.Sockets.<name>.MulticastGroup | This optional key can be used to request that the datagram socket join a multicast group
|
| system.defaults.trackpad.TrackpadFourFingerVertSwipeGesture | 0 to disable four finger vertical swipe gestures, 2 to enable (down for Mission Control, up for App Exposé)
|
| programs.zsh.variables | A set of environment variables used in the global environment
|
| homebrew.casks.*.greedy | Whether to always upgrade this cask regardless of whether it's unversioned or it updates
itself.
|
| programs.tmux.tmuxOptions.<name>.enable | Whether this file should be generated
|
| nix.linux-builder.workingDirectory | The working directory of the Linux builder daemon process.
|
| launchd.daemons.<name>.serviceConfig.inetdCompatibility | The presence of this key specifies that the daemon expects to be run as if it were launched from inetd.
|
| services.github-runners.<name>.ephemeral | If enabled, causes the following behavior:
- Passes the
--ephemeral flag to the runner configuration script
- De-registers and stops the runner with GitHub after it has processed one job
- Restarts the service after its successful exit
- On start, wipes the state directory and configures a new runner
You should only enable this option if tokenFile points to a file which contains a
personal access token (PAT)
|
| services.gitlab-runner.services.<name>.preCloneScript | Runner-specific command script executed before code is pulled.
|
| system.defaults.dock.tilesize | Size of the icons in the dock
|
| environment.etc | Set of files that have to be linked in /etc.
|
| homebrew.caskArgs.servicedir | Target location for Services
|
| launchd.agents.<name>.serviceConfig.Sockets.<name>.MulticastGroup | This optional key can be used to request that the datagram socket join a multicast group
|
| launchd.user.agents.<name>.serviceConfig.HardResourceLimits | Resource limits to be imposed on the job
|
| launchd.user.agents.<name>.serviceConfig.Sockets.<name>.SecureSocketWithKey | This optional key is a variant of SockPathName
|
| programs.ssh.knownHosts.<name>.publicKey | The public key data for the host
|
| services.github-runners.<name>.runnerGroup | Name of the runner group to add this runner to (defaults to the default runner group)
|
| system.defaults.finder.AppleShowAllExtensions | Whether to always show file extensions
|
| documentation.doc.enable | Whether to install documentation distributed in packages' /share/doc
|
| launchd.agents.<name>.serviceConfig.UserName | This optional key specifies the user to run the job as
|
| services.gitlab-runner.services.<name>.maximumTimeout | What is the maximum timeout (in seconds) that will be set for
job when using this Runner. 0 (default) simply means don't limit.
|
| system.defaults.NSGlobalDomain.AppleTemperatureUnit | Whether to use Celsius or Fahrenheit
|
| system.defaults.dock.persistent-others | Persistent files, and folders in the dock.
|
| system.defaults.finder.ShowStatusBar | Show status bar at bottom of finder windows with item/disk space stats
|
| homebrew.cargoPackages | List of Rust packages to install using cargo install
|
| launchd.daemons.<name>.serviceConfig.Sockets.<name>.SockNodeName | This optional key specifies the node to connect(2) or bind(2) to.
|
| networking.applicationFirewall.blockAllIncoming | Whether to block all incoming connections.
|
| security.pki.certificateFiles | A list of files containing trusted root certificates in PEM
format
|
| services.buildkite-agents.<name>.package | Which buildkite-agent derivation to use
|
| services.gitlab-runner.services.<name>.limit | Limit how many jobs can be handled concurrently by this service.
0 (default) simply means don't limit.
|
| system.defaults.NSGlobalDomain."com.apple.swipescrolldirection" | Whether to enable "Natural" scrolling direction
|
| launchd.agents.<name>.serviceConfig.Sockets.<name>.Bonjour | This optional key can be used to request that the service be registered with the
mDNSResponder(8)
|
| launchd.daemons.<name>.serviceConfig.SoftResourceLimits.NumberOfFiles | The maximum number of open files for this process
|
| networking.wg-quick.interfaces.<name>.peers.*.publicKey | The public key for this peer.
|
| nixpkgs.overlays | List of overlays to apply to Nixpkgs
|
| services.github-runners.<name>.nodeRuntimes | List of Node.js runtimes the runner should support.
|
| services.synapse-bt.downloadDir | Download directory for Synapse BitTorrent.
|
| services.synergy.client.autoStart | Whether the Synergy client should be started automatically.
|
| system.defaults.WindowManager.GloballyEnabled | Enable Stage Manager
Stage Manager arranges your recent windows into a single strip for reduced clutter and quick access
|
| homebrew.enableBashIntegration | Whether to enable Homebrew Bash shell integration, which sets up Homebrew's environment
and shell completions
.
|
| launchd.agents.<name>.serviceConfig.HardResourceLimits | Resource limits to be imposed on the job
|
| launchd.agents.<name>.serviceConfig.LowPriorityBackgroundIO | This optional key specifies whether the kernel should consider this daemon to be low priority when
doing file system I/O when the process is throttled with the Darwin-background classification.
|
| launchd.daemons.<name>.serviceConfig.Sockets.<name>.SockPathMode | This optional key specifies the mode of the socket
|
| nix.nixPath | The default Nix expression search path, used by the Nix
evaluator to look up paths enclosed in angle brackets
(e.g. <nixpkgs>)
|
| system.defaults.dock.magnification | Magnify icon on hover
|
| launchd.daemons.<name>.serviceConfig.StandardOutPath | This optional key specifies what file should be used for data being sent to stdout when using stdio(3).
|
| programs.direnv.settings | Direnv configuration
|
| services.aerospace.settings.on-focused-monitor-changed | Commands to run every time focused monitor changes.
|
| services.buildkite-agents.<name>.hooks.post-checkout | The post-checkout hook will run after the bootstrap script has checked out
your projects source code.
|
| services.chunkwm.plugins.list | Chunkwm Plugins to enable.
|
| networking.applicationFirewall.enableStealthMode | Whether to enable stealth mode.
|
| services.eternal-terminal.package | This option specifies the eternal-terminal package to use.
|
| services.hercules-ci-agent.settings | These settings are written to the agent.toml file
|
| system.defaults.NSGlobalDomain.AppleSpacesSwitchOnActivate | Whether or not to switch to a workspace that has a window of the application open, that is switched to
|
| launchd.daemons.<name>.serviceConfig.SoftResourceLimits.CPU | The maximum amount of cpu time (in seconds) to be used by each process.
|
| services.aerospace.settings.start-at-login | Do not start AeroSpace at login. (Managed by launchd instead)
|
| services.nix-daemon.enableSocketListener | Whether to make the nix-daemon service socket activated.
|
| services.redis.unixSocket | The path to the socket to bind to.
|
| system.checks.verifyMacOSVersion | Whether to run the macOS version check.
|
| homebrew.brews.*.restart_service | Whether to run brew services restart for the formula and register it to
launch at login (or boot)
|
| launchd.agents.<name>.serviceConfig.HardResourceLimits.FileSize | The largest size (in bytes) file that may be created.
|
| programs._1password-gui.enable | Whether to enable the 1Password GUI application.
|
| services.prometheus.exporters.node.port | Port where the Node exporter exposes its HTTP interface.
|
| environment.systemPath | The set of paths that are added to PATH.
|
| launchd.daemons.<name>.environment | Environment variables passed to the service's processes.
|
| launchd.user.agents.<name>.serviceConfig.HardResourceLimits.Stack | The maximum size (in bytes) of the stack segment for a process; this defines how far a program's
stack segment may be extended
|
| networking.wg-quick.interfaces.<name>.dns | List of DNS servers for this interface.
|
| programs.ssh.knownHosts.<name>.certAuthority | This public key is an SSH certificate authority, rather than an
individual host's key.
|
| programs.zsh.enableCompletion | Enable zsh completion for all interactive zsh shells.
|
| programs.zsh.enableFzfHistory | Enable fzf keybinding for Ctrl-r history search.
|
| services.github-runners.<name>.user | User under which to run the service
|
| launchd.daemons.<name>.serviceConfig.HardResourceLimits.ResidentSetSize | The maximum size (in bytes) to which a process's resident set size may grow
|
| launchd.labelPrefix | The default prefix of the service label
|
| services.eternal-terminal.logSize | The maximum log size.
|
| services.github-runners.<name>.noDefaultLabels | Disables adding the default labels
|
| services.khd.khdConfig | Config to use for khdrc.
|
| system.defaults.finder.FXRemoveOldTrashItems | Remove items in the trash after 30 days
|
| system.defaults.finder.ShowHardDrivesOnDesktop | Whether to show hard disks on desktop
|
| system.defaults.screencapture.save-selections | Remember the selection window of the last screencapture
|
| power.restartAfterPowerFailure | Whether to restart the computer after a power failure
|
| launchd.user.envVariables | A set of environment variables to be set on all future
processes launched by launchd in the caller's context
|
| programs.vim.vimOptions.<name>.enable | Whether this file should be generated
|
| programs.fish.shellInit | Shell script code called during fish shell initialisation.
|
| services.autossh.sessions | List of AutoSSH sessions to start as launchd daemon
|
| services.buildkite-agents.<name>.hooks.post-command | The post-command hook will run after the bootstrap script has run your
build commands
|
| system.defaults.finder.AppleShowAllFiles | Whether to always show hidden files
|
| launchd.daemons.<name>.serviceConfig.Sockets.<name>.SockType | This optional key tells launchctl what type of socket to create
|
| programs.tmux.enableFzf | Enable fzf keybindings for selecting tmux sessions and panes.
|
| homebrew.caskArgs.input_methoddir | Target location for Input Methods
|
| services.aerospace.settings.on-window-detected.*."if".window-title-regex-substring | Substring to match in the window title (optional).
|
| services.postgresql.recoveryConfig | Contents of the recovery.conf file.
|
| system.defaults.NSGlobalDomain.PMPrintingExpandedStateForPrint2 | Whether to use the expanded print panel by default
|
| launchd.agents.<name>.serviceConfig.Sockets.<name>.SockServiceName | This optional key specifies the service on the node to connect(2) or bind(2) to.
|
| lib | This option allows modules to define helper functions, constants, etc.
|
| services.privoxy.enable | Whether to enable the privoxy proxy service.
|
| security.sandbox.profiles.<name>.allowSystemPaths | Whether to allow read access to FHS paths like /etc and /var.
|
| system.keyboard.nonUS.remapTilde | Whether to remap the Tilde key on non-us keyboards.
|
| users.users.<name>.home | The user's home directory
|
| launchd.user.agents.<name>.serviceConfig.SoftResourceLimits.CPU | The maximum amount of cpu time (in seconds) to be used by each process.
|
| security.sandbox.profiles | Definition of sandbox profiles.
|
| services.buildkite-agents.<name>.runtimePackages | Add programs to the buildkite-agent environment
|
| homebrew.enable | Whether to enable nix-darwin to manage installing/updating/upgrading Homebrew taps, formulae,
casks, Mac App Store apps, Visual Studio Code extensions, Go packages, and Cargo
crates using Homebrew Bundle
|
| launchd.daemons.<name>.serviceConfig.Sockets.<name>.SecureSocketWithKey | This optional key is a variant of SockPathName
|
| launchd.daemons.<name>.serviceConfig.SoftResourceLimits.Data | The maximum size (in bytes) of the data segment for a process; this defines how far a program may
extend its break with the sbrk(2) system call.
|
| networking.applicationFirewall.allowSignedApp | Whether to allow downloaded signed software to receive incoming connections.
|
| networking.wg-quick.interfaces.<name>.preUp | List of commands to run before interface setup.
|
| services.aerospace.settings.exec-on-workspace-change | Commands to run every time workspace changes.
|
| system.defaults.NSGlobalDomain.AppleKeyboardUIMode | Configures the keyboard control behavior
|
| system.defaults.dock.showDesktopGestureEnabled | Whether to enable four-finger spread gesture to show the Desktop
|
| launchd.daemons.<name>.serviceConfig.SoftResourceLimits.ResidentSetSize | The maximum size (in bytes) to which a process's resident set size may grow
|
| services.privoxy.package | This option specifies the privoxy package to use.
|
| launchd.daemons.<name>.serviceConfig.Label | This required key uniquely identifies the job to launchd.
|
| programs.direnv.package | The direnv package to use.
|
| services.gitlab-runner.services.<name>.requestConcurrency | Limit number of concurrent requests for new jobs from GitLab.
|
| services.nix-daemon.logFile | The logfile to use for the nix-daemon service
|
| services.postgresql.extraPlugins | List of PostgreSQL plugins
|
| services.spotifyd.package | The spotifyd package to use.
|
| users.users.<name>.gid | The user's primary group.
|
| services.redis.package | This option specifies the redis package to use
|
| launchd.daemons.<name>.serviceConfig.Disabled | This optional key is used as a hint to launchctl(1) that it should not submit this job to launchd when
loading a job or jobs
|
| system.defaults.dock.slow-motion-allowed | Allow for slow-motion minimize effect while holding Shift key
|
| homebrew.whalebrews | List of Docker images to install using whalebrew
|
| homebrew.global.lockfiles | Whether to enable Homebrew to generate lockfiles when you manually invoke
brew bundle [install]
|
| homebrew.brewPrefix | The path prefix where the brew executable is located
|