| users.users.<name>.name | The name of the user account
|
| users.groups.<name>.name | The group's name
|
| users.users.<name>.uid | The user's UID.
|
| users.users.<name>.gid | The user's primary group.
|
| users.users.<name>.home | The user's home directory
|
| users.groups.<name>.gid | The group's GID.
|
| users.users.<name>.isHidden | Whether to make the user account hidden.
|
| users.users.<name>.shell | The user's shell
|
| users.users.<name>.createHome | Create the home directory when creating the user.
|
| launchd.user.agents.<name>.path | Packages added to the service's PATH
environment variable
|
| programs.vim.vimOptions.<name>.target | Name of symlink
|
| users.users.<name>.packages | The set of packages that should be made availabe to the user
|
| homebrew.casks.*.name | The name of the cask to install.
|
| homebrew.brews.*.name | The name of the formula to install.
|
| programs.tmux.tmuxOptions.<name>.target | Name of symlink
|
| users.users.<name>.description | A short description of the user account, typically the
user's full name
|
| users.groups.<name>.members | The group's members.
|
| launchd.user.agents.<name>.script | Shell commands executed as the service's main process.
|
| programs.ssh.knownHosts.<name>.hostNames | The set of system-wide known SSH hosts
|
| launchd.user.agents.<name>.command | Command executed as the service's main process.
|
| launchd.user.agents.<name>.serviceConfig.Sockets.<name>.Bonjour | This optional key can be used to request that the service be registered with the
mDNSResponder(8)
|
| services.github-runners.<name>.name | Name of the runner to configure
|
| homebrew.taps.*.name | When clone_target is unspecified, this is the name of a formula
repository to tap from GitHub using HTTPS
|
| launchd.user.agents.<name>.serviceConfig.Sockets.<name>.SockType | This optional key tells launchctl what type of socket to create
|
| launchd.user.agents.<name>.serviceConfig.Sockets.<name>.SockNodeName | This optional key specifies the node to connect(2) or bind(2) to.
|
| services.cachix-agent.name | Agent name, usually the same as the hostname.
|
| launchd.user.agents.<name>.serviceConfig.Sockets.<name>.SockPathName | This optional key implies SockFamily is set to "Unix"
|
| security.sandbox.profiles.<name>.closure | List of store paths to make accessible.
|
| launchd.user.agents.<name>.serviceConfig.Sockets.<name>.SockPathMode | This optional key specifies the mode of the socket
|
| programs.vim.vimOptions.<name>.text | Text of the file.
|
| launchd.user.agents.<name>.serviceConfig.Sockets.<name>.SockFamily | This optional key can be used to specifically request that "IPv4" or "IPv6" socket(s) be created.
|
| services.buildkite-agents.<name>.name | The name of the agent as seen in the buildkite dashboard.
|
| environment.userLaunchAgents.<name>.target | Name of symlink
|
| launchd.user.agents.<name>.serviceConfig.Sockets.<name>.SockPassive | This optional key specifies whether listen(2) or connect(2) should be called on the created file
descriptor
|
| programs.tmux.tmuxOptions.<name>.text | Text of the file.
|
| launchd.user.agents.<name>.serviceConfig | Each attribute in this set specifies an option for a key in the plist.
https://developer.apple.com/legacy/library/documentation/Darwin/Reference/ManPages/man5/launchd.plist.5.html
|
| launchd.user.agents.<name>.serviceConfig.Sockets.<name>.SockServiceName | This optional key specifies the service on the node to connect(2) or bind(2) to.
|
| launchd.user.agents.<name>.serviceConfig.Nice | This optional key specifies what nice(3) value should be applied to the daemon.
|
| services.github-runners.<name>.user | User under which to run the service
|
| launchd.user.agents.<name>.serviceConfig.Sockets.<name>.SockProtocol | This optional key specifies the protocol to be passed to socket(2)
|
| security.sandbox.profiles.<name>.allowSystemPaths | Whether to allow read access to FHS paths like /etc and /var.
|
| programs.vim.vimOptions.<name>.source | Path of the source file.
|
| launchd.user.agents.<name>.serviceConfig.Label | This required key uniquely identifies the job to launchd.
|
| security.sandbox.profiles.<name>.readablePaths | List of paths that should be read-only inside the sandbox.
|
| security.sandbox.profiles.<name>.writablePaths | List of paths that should be read/write inside the sandbox.
|
| launchd.user.agents.<name>.serviceConfig.Sockets.<name>.SecureSocketWithKey | This optional key is a variant of SockPathName
|
| launchd.user.agents.<name>.serviceConfig.Debug | This optional key specifies that launchd should adjust its log mask temporarily to LOG_DEBUG while
dealing with this job.
|
| programs.vim.vimOptions.<name>.enable | Whether this file should be generated
|
| launchd.user.agents.<name>.serviceConfig.RunAtLoad | This optional key is used to control whether your job is launched once at the time the job is loaded
|
| launchd.user.agents.<name>.serviceConfig.UserName | This optional key specifies the user to run the job as
|
| launchd.user.agents.<name>.serviceConfig.TimeOut | The recommended idle time out (in seconds) to pass to the job
|
| users.users.<name>.ignoreShellProgramCheck | By default, nix-darwin will check that programs
|
| programs.tmux.tmuxOptions.<name>.source | Path of the source file.
|
| launchd.user.agents.<name>.serviceConfig.Umask | This optional key specifies what value should be passed to umask(2) before running the job
|
| launchd.user.agents.<name>.serviceConfig.ExitTimeOut | The amount of time launchd waits before sending a SIGKILL signal
|
| programs.tmux.tmuxOptions.<name>.enable | Whether this file should be generated
|
| programs.ssh.knownHosts.<name>.publicKey | The public key data for the host
|
| launchd.user.agents.<name>.serviceConfig.WatchPaths | This optional key causes the job to be started if any one of the listed paths are modified.
|
| nix.registry.<name>.to | The flake reference from is rewritten to.
|
| launchd.user.agents.<name>.serviceConfig.StartOnMount | This optional key causes the job to be started every time a filesystem is mounted.
|
| launchd.user.agents.<name>.serviceConfig.GroupName | This optional key specifies the group to run the job as
|
| programs.ssh.knownHosts.<name>.extraHostNames | A list of additional host names and/or IP numbers used for
accessing the host's ssh service
|
| launchd.user.agents.<name>.serviceConfig.Sockets.<name>.MulticastGroup | This optional key can be used to request that the datagram socket join a multicast group
|
| security.sandbox.profiles.<name>.allowNetworking | Whether to allow network access inside the sandbox.
|
| launchd.user.agents.<name>.serviceConfig.OnDemand | This key was used in Mac OS X 10.4 to control whether a job was kept alive or not
|
| launchd.user.agents.<name>.serviceConfig.MachServices | This optional key is used to specify Mach services to be registered with the Mach bootstrap sub-system
|
| launchd.user.agents.<name>.serviceConfig.InitGroups | This optional key specifies whether initgroups(3) should be called before running the job
|
| nix.registry.<name>.from | The flake reference to be rewritten.
|
| launchd.user.agents.<name>.environment | Environment variables passed to the service's processes.
|
| launchd.user.agents.<name>.serviceConfig.ServiceIPC | This optional key specifies whether the job participates in advanced
communication with launchd
|
| launchd.user.agents.<name>.serviceConfig.Program | This key maps to the first argument of execvp(3)
|
| launchd.user.agents.<name>.serviceConfig.LimitLoadToHosts | This configuration file only applies to the hosts listed with this key
|
| services.autossh.sessions.*.name | Name of the local AutoSSH session
|
| environment.userLaunchAgents.<name>.text | Text of the file.
|
| launchd.user.agents.<name>.serviceConfig.LaunchOnlyOnce | This optional key specifies whether the job can only be run once and only once
|
| users.groups.<name>.description | The group's description.
|
| programs.ssh.knownHosts.<name>.publicKeyFile | The path to the public key file for the host
|
| security.sandbox.profiles.<name>.allowLocalNetworking | Whether to allow localhost network access inside the sandbox.
|
| launchd.user.agents.<name>.serviceConfig.LimitLoadFromHosts | This configuration file only applies to hosts NOT listed with this key
|
| environment.etc.<name>.target | Name of symlink
|
| launchd.user.agents.<name>.serviceConfig.LowPriorityIO | This optional key specifies whether the kernel should consider this daemon to be low priority when
doing file system I/O.
|
| launchd.user.agents.<name>.serviceConfig.StandardInPath | This optional key specifies what file should be used for data being supplied to stdin when using
stdio(3).
|
| users.users.<name>.openssh.authorizedKeys.keys | A list of verbatim OpenSSH public keys that should be added to the
user's authorized keys
|
| nix.registry.<name>.flake | The flake input from is rewritten to.
|
| launchd.user.agents.<name>.serviceConfig.StandardOutPath | This optional key specifies what file should be used for data being sent to stdout when using stdio(3).
|
| launchd.user.agents.<name>.serviceConfig.WaitForDebugger | This optional key specifies that launchd should instruct the kernel to have the job wait for a debugger
to attach before any code in the job is executed.
|
| launchd.user.agents.<name>.serviceConfig.SessionCreate | This key specifies that the job should be spawned into a new security
audit session rather than the default session for the context is belongs
to
|
| users.users.<name>.openssh.authorizedKeys.keyFiles | A list of files each containing one OpenSSH public key that should be
added to the user's authorized keys
|
| programs.ssh.knownHosts.<name>.certAuthority | This public key is an SSH certificate authority, rather than an
individual host's key.
|
| environment.userLaunchAgents.<name>.source | Path of the source file.
|
| launchd.user.agents.<name>.serviceConfig.RootDirectory | This optional key is used to specify a directory to chroot(2) to before running the job.
|
| launchd.user.agents.<name>.serviceConfig.LimitLoadToSessionType | This configuration file only applies to sessions of the type specified
|
| environment.userLaunchAgents.<name>.enable | Whether this file should be generated
|
| launchd.user.agents.<name>.serviceConfig.EnableGlobbing | This flag causes launchd to use the glob(3) mechanism to update the program arguments before invocation.
|
| launchd.user.agents.<name>.serviceConfig.StandardErrorPath | This optional key specifies what file should be used for data being sent to stderr when using stdio(3).
|
| launchd.user.agents.<name>.serviceConfig.KeepAlive | This optional key is used to control whether your job is to be kept continuously running or to let
demand and conditions control the invocation
|
| launchd.user.agents.<name>.serviceConfig.HardResourceLimits.CPU | The maximum amount of cpu time (in seconds) to be used by each process.
|
| launchd.user.agents.<name>.serviceConfig.SoftResourceLimits.CPU | The maximum amount of cpu time (in seconds) to be used by each process.
|
| services.buildkite-agents.<name>.hooksPath | Path to the directory storing the hooks
|
| launchd.user.agents.<name>.serviceConfig.SoftResourceLimits.Core | The largest size (in bytes) core file that may be created.
|