Profile GC root policies.

Paths to the Nix profile

Retention period for the GC roots in this profile.

Keep the latest N GC roots in this profile.

The maximum charge level to help reduce battery wear:

• high_capacity charges to 100% (driver default)
• balanced charges to 90%
• stationary charges to 80% (maximum lifespan)

Note: Regardless of the configured charging profile, the operating system will always report the battery as being charged to 100%.

Whether to enable this angrr policy.

Makes user-profiles globally available under nextcloud.tld/u/user.name

Whether to keep the last booted system generation

Whether to keep the current system generation

Niceness.

CPU scheduler priority.

The input method configure in profile file in ini format.

IO scheduler priority.

CPU scheduler class.

IO scheduler class.

Process matchers.

Attrset of dconf profiles

Directories to search for profiles, separated by , or ;.

Automatically login user on remote or other kind of externally supplied authentication, otherwise redirect to login form as normal

Whether to enable Libravatar as profile picture source on your instance

Declaratively define NetworkManager profiles

Whether to enable API access for mobile apps and third-party clients (Google Reader API and Fever API)

Keyboard profile to apply at boot time

Custom configuration profiles for schroot.

Profile name, defaults to 'system' (NixOS).

The certificate profile to choose if the CA offers multiple profiles.

Set to true to disable the use of Gravatar for user profile images.

The certificate profile to choose if the CA offers multiple profiles.

A file in the format described in fstab(5), used to mount filesystems inside the chroot

Name of the default cryptographic profile chosen from the profile_dir directory.

Profile access endpoint.

Profiles for TuneD

Free-form settings mapped to the qBittorrent.conf file in the profile

Names of the Disnix profiles to expose in the system's PATH

Profile hook scripts.

A list of files to copy into the chroot from the host system.

The profile file contents

Per output profile configuration.

Directory that contains all cryptographic profiles known to FAPI.

The named AWS profile used to authenticate.

The content of /etc/asusd/profile.ron

Text of the file.

A list of profiles used to setup the global environment.

the path passed to qbittorrent via --profile.

Autorandr profiles specification.

System databases (as described in /etc/nsswitch.conf on GNU/Linux systems) to copy into the chroot from the host.

Map of PPD profiles to native TuneD profiles.

Path of the source file.

The power-profiles-daemon package to use.

Whether to enable power-profiles-daemon, a DBus daemon that allows changing system behavior based upon user-selected power profiles.

A list of profiles to enable

NNCP configuration, see http://www.nncpgo.org/Configuration.html

Attribute set of environment variable

The configuration settings for ukify

Settings on what to generate

Sets the pointer acceleration profile to the given profile

Configuration included in $YAZI_CONFIG_HOME.

Output DPI configuration.

Parameters to be written to the system-wide bat configuration file.

Output resolution.

Output framerate.

Parameters to be written to /etc/atoprc.

Output video display controller.

Vertical scaling factor/pixels.

Horizontal scaling factor/pixels.

Configuration included in vfs.toml

Output gamma configuration.

Schroot configuration settings

Configuration included in yazi.toml

Sets the pointer acceleration profile to the given profile

Whether to enable the output.

Output rotate configuration.

Configuration for foot terminal emulator

Extra global default configuration for htop which is read on first startup only

Configuration included in theme.toml

Output scaling method.

Whether output should be marked as primary

Settings for LACT

Direnv configuration

Preswitch hook executed before mode switch.

Predetect hook executed before autorandr attempts to run xrandr.

Output scale configuration

Additional settings (see mjolnir default config for available settings)

Output position

Configuration included in keymap.toml

System-wide configuration for GameMode (/etc/gamemode.ini)

Add settings here to override NixOS module generated settings

Configuration for /etc/gnupg/gpg-agent.conf

Postswitch hook executed after mode switch.

Lazygit configuration

Named AWS profile used to connect to the API.

ReGreet configuration file

Refer to xrandr(1) for the documentation of the transform matrix.

Output name to EDID mapping

Free form attribute set for aMule settings

Settings option for systemd-oomd

The system-wide spacefm configuration

Configuration included in starship.toml

Settings

Odoo configuration settings

ncdns settings

Attribute set of environment variable used in the global environment

sslh configuration

Settings for Newt module, see Newt CLI docs for more information.

The configuration object

Picom settings

Extra settings appended to the configuration of davfs2

Settings for MaryTTS

Settings to write to ntp.toml

See https://docs.ntpd-rs.pendulum-project.org/man/ntp.toml.5 for more information about available options.

Settings for the auto-epp application

Settings for rimgo, see the official documentation for supported options.

Searx settings

A path of a profile file to include

Configuration for xdg-desktop-portal-wlr

Content of the Stubby configuration file

See GitHub for available settings.

Free-form settings written directly to the acme-dns.cfg file

Whether to enable the Profile Sync daemon.

Settings for hickory-dns

.env settings for Movim

Free-form settings written directly to the lldap_config.toml file

Screego settings passed as Nix attribute set, they will be merged with the defaults

These settings are written to the agent.toml file

Settings for Wakapi

Options stored in /etc/openvpn3/netcfg.json configuration file

Additional settings to add to upsmon.conf.

logrotate freeform settings: each attribute here will define its own section, ordered by services.logrotate.settings.<name>.priority, which can either define files to rotate with their settings or settings common to all further files settings

Database settings.

IO settings.

Settings of g3proxy.

Settings for mailman.cfg

Configuration settings for the generated config json file

This option is mapped to the main Privoxy configuration file

Configuration for H2O (see https://h2o.examp1e.net/configure.html)

Generates the aria2.conf file

Settings for this slot.

Settings for pgadmin4. Documentation

Free-form settings written directly to the config file

Free-form settings written to Draupnir's configuration file

See torrc manual for documentation.

See configurationFile.

configurationFile takes precedence over settings.

Settings of uMurmur

YAML settings for maubot

Contents of sssd.conf.

Configuration for n8n, see https://docs.n8n.io/hosting/environment-variables/configuration-methods/ for supported values.

Settings of OpenBao

Settings passed to OpenGFW. Example config

This option defines the maximum number of jobs that Nix will try to build in parallel

settings-local.yaml for private-gpt

Extra configuration as nix values.

Options passed to TLP

pretix configuration as a Nix attribute set

The port qui listens on.

Settings to configure web service

Settings for evremap

Name of the database to use.

The host address qui listens on.

Settings for the public-inbox config file.

Grafana settings

Options stored in /etc/openvpn3/log-service.json configuration file

Ethereum Swarm Bee configuration

Lemmy configuration

AESM configuration

Stash configuration

Kafka broker configuration server.properties

Parameters for the msr kernel module.

Configuration for ntfy.sh, supported values are here.

Turn-rs server config file

Suricata settings

See torrc manual.

Settings for custom DNS providers.

Configuration of the IFM service

Allowed MACs

Defaults to recommended settings from both https://stribika.github.io/2015/01/04/secure-secure-shell.html and https://infosec.mozilla.org/guidelines/openssh#modern-openssh-67

See https://github.com/bitvora/haven for documentation.

Settings option for systemd-logind

Configuration settings for the generated config file

Port to listen on

This option defines the maximum number of concurrent tasks during one build

Frp configuration, for configuration options see the example of client or server on github.

See torrc manual.

See torrc manual.

See torrc manual.

Allows you to host Umami under a subdirectory

This setting is the TCP port that is desired for the daemon to get assigned to.

Specify the configuration for Envoy in Nix.

Configuration for unl0kr

Free-form settings written directly to the app.ini configfile file

IP to bind the HTTP API on.

Thinkfan settings

Settings that should be passed to rsync via long options

The database port

The database host

The database user

The database name

Settings to configure wiki-js

TLS backend to use.

Configuration for isso

The global options in config file in yaml format

Attrset of daemon configuration

Declarative NATS configuration

PowerDNS Recursor settings

Dolibarr settings, see https://github.com/Dolibarr/dolibarr/blob/develop/htdocs/conf/conf.php.example for details.

Settings for MediaMTX

Komga configuration

Global configuration for angrr in TOML format.

Dunst configuration, see dunst(5)

Configuration for zrepl

See torrc manual.

See torrc manual.

See torrc manual.

TCP port the process should listen to.

Server settings, refer to the documentation for available options

Hostname or socket-path to connect to.

pretalx configuration as a Nix attribute set

Configuration for Lokinet

IPs the service should listen to.

General configuration for NFS daemons and tools

API key to use when modifying DNS records.

Settings for Canaille

Howdy configuration file

Configuration for Gonic, see https://github.com/sentriz/gonic#configuration-options for supported values.

Configuration of clatd

Configuration for plikd, see https://github.com/root-gg/plik/blob/master/server/plikd.cfg for supported values.

Configuration options for the /etc/omnom/config.yml file.

Application configuration for slskd

Configuration options to set in /etc/nipap/nipap.conf.

Debug output to stderr.

The port to use.

The port to listen on.

Path to a JSON file containing settings that will be merged with the settings option

Database type.

NotifyOSD settings

See torrc manual.

Configuration to be written to the libncf-nci configuration files

Environment variables to set for the service

Named AWS profile used to connect to the API.

Karma dashboard configuration as nix attributes

Configuration for Hatsu, see

Gitea configuration

Configuration for TuneD

XMRig configuration

The port that Stash should listen on.

Configuration for nvme-rs in TOML format

Port that the /debug/pprof endpoint will listen on.

Settings for cockpit that will be saved in /etc/cockpit/cockpit.conf

PCAP replay settings.

Settings for Kanidm, see the documentation and example configuration for possible values.

Customize the default settings, refer to https://github.com/kanboard/kanboard/blob/main/config.default.php for details on supported values.

Configuration for dendrite, see: https://github.com/matrix-org/dendrite/blob/main/dendrite-sample.yaml for available options with which to populate settings.

.env settings for Pixelfed

Directory to store downloaded files.

Port to listen on (default: 443).

See torrc manual.

See torrc manual.

The ip address that Stash should bind to.

Configuration for Gatus

Configuration for ulogd

Configuration for pgSCV, in YAML format

Specify the configuration for Tempo in Nix

Listen port for the HTTP API.

Settings to merge with the default configuration

Filename of the Paisa database.

Email notification configuration

Crab-holes config

See inadyn.conf (5)

INI configuration for Mbpfan.

The HTTP listen port.

Recipient email address

Port where lemmy should listen for incoming requests.

The primary legit configuration

Additional configuration (environment variables) for Umami, see https://umami.is/docs/environment-variables for supported values.

Whether to enable listening on the SSL port

Directories from the host filesystem to be included in the sandbox.

See torrc manual.

Rauc configuration that will be converted to INI

Structured cloud-init configuration.

Options for Kismet

Specify the configuration for Vector in Nix.

URL of DID PLC directory

Runtime settings for AMDVLK to be configured /etc/amd/amdVulkanSettings.cfg

Configuration for Nix, see https://nixos.org/manual/nix/stable/command-ref/conf-file.html or nix.conf(5) for available options

Path to cache

Kea DHCP-DDNS configuration as an attribute set, see https://kea.readthedocs.io/en/kea-3.0.2/arm/ddns.html.

alice-lg configuration, for configuration options see the example on github

The TCP port to serve the Gatus service at.

The main.cf configuration file as key value set

Structured configurations of atticd

Please configuration

Garage configuration, see https://garagehq.deuxfleurs.fr/documentation/reference-manual/configuration/ for reference.

Path to paisa data directory.

See torrc manual.

See torrc manual.

See torrc manual.

See torrc manual.

Settings to be rendered into the configuration file

Kea DHCP4 configuration as an attribute set, see https://kea.readthedocs.io/en/kea-3.0.2/arm/dhcp4-srv.html.

Kea DHCP6 configuration as an attribute set, see https://kea.readthedocs.io/en/kea-3.0.2/arm/dhcp6-srv.html.

HTTP network proxy.

SMTP server hostname.

The IPv4 address that the server will use on the network

Whether to enable Whether TLS encryption should be used..

The available options can be found in the example configuration

The port to listen on

Port to bind to.

libnfsidmap configuration

Configuration for Hebbot, see, for examples:

• https://github.com/matrix-org/twim-config/blob/master/config.toml
• https://gitlab.gnome.org/Teams/Websites/thisweek.gnome.org/-/blob/main/hebbot/config.toml

Kavita configuration options, as configured in appsettings.json.

Configuration for Gancio, see https://gancio.org/install/config for supported values.

Contents of the dgraph config

Configuration for rsyncd

Settings specific to this plugin.

Extra paperless config options

Worker settings.

Configuration for GoDNS

The sympa.conf configuration file as key value set

Options for part-db configuration

Chat rooms to join on startup.

See torrc manual.

SMTP server port address.

The absolute path to the configuration file

evcc configuration as a Nix attribute set

SMTP configuration section.

Cryptpad configuration settings

General log level.

Sender email address

cgit configuration, see cgitrc(5)

Configuration of uhub

The IPv6 address that the server will use on the network Leave this empty to let dsnet choose an address.

Blocky configuration

Configuration for Erigon Refer to https://github.com/ledgerwatch/erigon#usage for details on supported values.

greetd configuration (documentation) as a Nix attribute set.

GoBGP configuration

The contents of the configuration file for soft-serve

Configuration for Qdrant Refer to https://github.com/qdrant/qdrant/blob/master/config/config.yaml for details on supported values.

Gerrit configuration

Zeyple configuration. refer to https://github.com/infertux/zeyple/blob/master/zeyple/zeyple.conf.example for details on supported values.

Options to pass to the PAM module

Neard INI-style configuration file as a Nix attribute set

Structured contents of the krb5.conf file

PHP-FPM global directives

qui configuration options

Renovate's global configuration

Artalk server listen port

Artalk server listen host

The hostname to use for the tsnet node.

See torrc manual.

Structured server daemon configuration

Structured client daemon configuration

Connection string for the PostgreSQL database

Whether to enable debug mode.

ZFS Event Daemon /etc/zfs/zed.d/zed.rc content

See zed(8) for details on ZED and the scripts in /etc/zfs/zed.d to find the possible variables

auditd configuration file contents

The configuration that Mopidy should use

Configuration options to set for the Strfry service

Configuration for MCHPRS via Config.toml

Config options for zenoh.json5 configuration file

Enable GPU monitoring.

Where to mount the MFS namespace to

Define how much detail is supposed to be logged at runtime.

The port to listen on.

Set this to the URL where your cast page is running

Website title.

The database name.

See https://git.sr.ht/~gheartsfield/nostr-rs-relay/#configuration for documentation.

Port the cross-seed daemon listens on.

Kea Control Agent configuration as an attribute set, see https://kea.readthedocs.io/en/kea-3.0.2/arm/agent.html.

Options for systemd-homed

See https://github.com/Nefelim4ag/Ananicy/blob/master/ananicy.d/ananicy.conf

See https://app.radicle.xyz/nodes/seed.radicle.garden/rad:z3gqcJUoA1n9HaHKufZs5FCSGazv5/tree/radicle/src/node/config.rs#L275

From address.

Additional configuration to extend clight.conf

Configuration options to set in configuration.py

The primary sftpgo configuration

Configuration for Porn-Vault

PgHero configuration

Authentication cookie.

Enable SSL/TLS encryption.

See torrc manual.

Extra environment variables passed to the zwave-js-ui process

Configuration file for the Samba suite in ini format

Use systemd-journald

Static settings set in the config.toml, see https://github.com/knadh/listmonk/blob/master/config.toml.sample for details

Environment variables to be passed

The master.cf configuration file as an attribute set of service defitions

Port for the server

Message of the day

Configuration file path.

Attrset to be transformed into YAML for host config

Settings for schleuder.yml

Configuration of Chhoto URL

Configuration of doh-server in toml

Configuration options for pihole.toml

SMTP username.

Parameters of freeciv-server.

Configuration for sshd_config(5).

Configuration for reaction

Global configuration options for the taler config file

The path to the password you will use in the Grafana webhook settings.

Allowed ciphers

Defaults to recommended settings from both https://stribika.github.io/2015/01/04/secure-secure-shell.html and https://infosec.mozilla.org/guidelines/openssh#modern-openssh-67

Root path for log files.

HTTP path for resolve application

See torrc manual.

The URL where you will access the app.

Extra settings merged in and overwriting defaults in config.ini.

The settings Invidious should use

Nominatim configuration settings

Modules to obtain Kerberos configuration from.

The TTL ("Time to Live") value to set for your DNS records

Where to mount the IPNS namespace to

Where to mount the IPFS namespace to

Port of the SMTP Server.

The path to MPD's database.

Listen on localhost:.

Config options for dwm-status, see https://github.com/Gerschtli/dwm-status#configuration for available options.

Configuration of the Mealie service

Build veilid-server.conf with nix expression

go2rtc configuration as a Nix attribute set

Configuration for LiteLLM

Whether to enable the OpenBao web UI.

Museum yaml configuration

Options for grocy's PHPFPM pool.

See torrc manual.

See torrc manual.

See torrc manual.

See torrc manual.

See torrc manual.

See torrc manual.

Set logging level: debug, info, warn, error.

llama-swap configuration

Manages the configuration files declaratively

Whether this setting is a global option or not: set to have these settings apply to all files settings with a higher priority.

See biboumi 9.0

for documentation.

The waagent.conf configuration, see https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/agent-linux for documentation.

Configuration of Zipline

molly-brown configuration

Options for the global systemd service manager

This is the name that will be displayed by NetworkManager and GUIs.

The PostgreSQL port.

The PostgreSQL host.

DID of bsky frontend

Startup script.

Timeout in seconds.

Directory where legit will scan for repositories.

Configuration written to a yaml file that is read by glance

The artalk configuration

Whether to enable the use of a daemon for TuneD.

location of your media files

Database driver to use for persistence

Database connection scheme

TCP port for eD2k connections

Onion address.

See torrc manual.

Settings for go-csp-collector

Options to pass to the pam_rssh module

As alternative to settings, you can provide whole configuration directly in the almost-YAML format of Knot DNS

If enabled (the default), Nix will only download binaries from binary caches if they are cryptographically signed with any of the keys listed in nix.settings.trusted-public-keys

Hostname of the SMTP server use for mail delivery.

Port of the SMTP server to use for mail delivery.

TLS key path.

URL of bsky frontend

The port that ZITADEL listens on.

Additional configuration for Uptime Kuma, see https://github.com/louislam/uptime-kuma/wiki/Environment-Variables for supported values.

The file mode creation mask is initialized to this value.

List of pages to be present on the dashboard

By default pam-u2f module does not inform user that he needs to use the u2f device, it just waits without a prompt

Range of user IDs used for the creation of regular users by useradd or newusers.

Range of user IDs used for the creation of regular users by useradd or newusers.

Host address.

Server name.

Legit port.

Repositories to ignore.

Extra settings merged in and overwriting defaults in sddm.conf.

NZBGet configuration, passed via command line using switch -o

Enable logging

The port to listen on.

The host to listen on.

Directory where aMule stores incomplete downloads (.part/.part.met files).

PHP-FPM pool directives

Autobrr configuration options

Configuration for Klipper

Additional configuration for Readeck, see https://readeck.org/en/docs/configuration for supported values.

Redmine configuration (configuration.yml)

Configuration for Misskey, see example.yml for all supported options.

Contents of the runtime configuration file

Vikunja configuration

The ID generation method for Sharkey to use

The user used for database authentication.

Netlink send buffer size.

The password used for database authentication.

Netlink receive buffer size.

E-Mail address used in the FROM header of outgoing mails.

A list of names of users that have additional rights when connecting to the Nix daemon, such as the ability to specify additional binary caches, or to import unsigned NARs

Whether to enable server authentication.

List of enabled features in order.

Listen for clients on given port

Whether to enable PAM authentication.

See torrc manual.

The port your Misskey server should listen on.

See torrc manual.

See torrc manual.

See torrc manual.

The port that Sharkey will listen on.

The port Xonotic will listen on.

Settings for DDNS providers built-in to inadyn

How verbose should the logging be

Settings to pass to the livekit server

Range of group IDs used for the creation of regular groups by useradd, groupadd, or newusers.

Range of group IDs used for the creation of regular groups by useradd, groupadd, or newusers.

Readme files to look for.

HTTP port to listen on.

Port to bind nipapd to.

Paisa configuration

The set of features supported by the machine

The connection type defines the connection kind, like vpn, wireguard, gsm, wifi and more.

GLPI Agent configuration options

By default pam-u2f module sets the application ID to pam://$HOSTNAME

The user that you will authenticate with in the Grafana webhook settings

Configuration for Corteza, will be passed as environment variables

Configuration written to a json file that is read by orthanc

zeronet.conf configuration

The ID generation method to use

Configure Kanidm unix daemon

The sing-box configuration, see https://sing-box.sagernet.org/configuration/ for documentation

Generate to config.json as a Nix attribute set

Listener config

A list of names of users (separated by whitespace) that are allowed to connect to the Nix daemon

Number of tries if upstream DNS fails

Configuration of go-httpbin

Add timestamp log file

Configuration for tiny-dfr

Add directories containing your adult videos and images

The port that Komga will listen on.

Directories where static files are located.

Omnom sender e-mail.

The global options in config file in ini format

See torrc manual.

See torrc manual.

See torrc manual.

Secret API key to use when modifying DNS records.

Settings for spacecookie

Configuration of goeland

Configuration for CoreRAD, see https://github.com/mdlayher/corerad/blob/main/internal/config/reference.toml for supported values

Merecat configuration

Configuration options for Sharkey

The sabnzbd configuration (see also sabnzbd's wiki for extra documentation)

Additional settings passed straight through to PackageKit.conf

Main TCP port for RoomService and RTC endpoint.

Host to connect to.

Address to bind to for handling DNS requests.

List of remappings.

The address to listen on.

Location of SMTP email server

Generates the server.cfg file

See torrc manual.

See torrc manual.

See torrc manual.

The TCP port to use to connect to the local XMPP component.

Enable OAuth token exchange using RFC 8693.

Web server port

User used for authentication.

Extra connection options.

MQTT server hostname

Address of the Kanidm server.

The full URL that the Sharkey instance will be publically accessible on

The base URI below which your pretalx instance will be reachable.

Configuration for peertube.

Quickwit configuration.

Warpgate configuration.

The full configuration of the Hound daemon

The environment variables to configure Memos.

Display language of the frontend.

Settings for the main CrowdSec configuration file

Files to include in the Kerberos configuration.

Path to file containing OpenGFW settings.

Settings serialized into user-data/conf.yml before build

Range of user IDs used for the creation of system users by useradd or newusers.

Range of user IDs used for the creation of system users by useradd or newusers.

Set to true if you want to send RST for blocked TCP connections, needs local = false.

Configuration for haste-server

Zabbix Proxy configuration

Zabbix Agent configuration

The homebox configuration as environment variables

State transition definitions

Declarative Unbound configuration See the unbound.conf(5) manpage for a list of available options.

Configuration to be written to the osqueryd JSON configuration file

Whether to get IPv6 addresses from interfaces.

The ffmpeg package to use for transcoding.

Additional opendkim configuration

Set debug log level.

See torrc manual.

General log level.

Path to the pdftk executable.

Enable debug logging.

Extra configuration options to append or override

For development

Disable latest file updates and enable sideloading.

Scrutiny settings to be rendered into the configuration file

Range of group IDs used for the creation of system groups by useradd, groupadd, or newusers

Range of group IDs used for the creation of system groups by useradd, groupadd, or newusers

Structural Kimai's local.yaml configuration

The path of the sqlite database.

Log file directories.

Port Number

The port to listen on

Port Number

Port Number

vmalert configuration, passed via command line flags

Whether to allow writes to MSRs ("on") or not ("off").

Path to the TLS certificate private key.

Settings option for systemd-resolved

Port to listen on

Address to the dashboard.

The port to listen on.

MySQL configuration

Extra configuration options for influxdb

Set of various configuration attributes

Configuration for OpenLDAP, in OLC format

Configuration for minidlna.conf(5).

Config options for the /etc/login.defs file, that defines the site-specific configuration for the shadow password suite

Attrset to be transformed into YAML for host config

Enable JSON-RPC/XML-RPC server.

Configuration for lxd-image-server

HTTP listen address and port

See torrc manual.

See torrc manual.

Sonic Server configuration options

Glance port to listen on

Glance bind address

Main branch to look for.

Path to the TLS certificate.

PowerDNS Recursor settings

Bootstrap json to populate database

The primary patroni configuration

LiveKit configuration file expressed in nix

ClamAV configuration

Port for the Web UI to listen on for incoming connections.

The installation’s full URL, without a trailing slash.

Address for the Web UI to listen on for incoming connections.

List of zones to serve.

The Redis host.

Storage type.

The Redis port.

ioredis options

Full public URL of gitea server.

Settings serialized into config.yml before build

HedgeDoc configuration, see https://docs.hedgedoc.org/configuration/ for documentation.

Configuration of OliveTin

Configuration for RouteDNS, see https://github.com/folbricht/routedns/blob/master/doc/configuration.md for more information.

Attribute set of arbitrary config options

Configuration options for cross-seed

Attribute set of arbitrary config options

Attribute set of arbitrary config options

List of directories where cross-seed will create links

Tags to follow

Port to listen on.

Address to listen on.

Name of the database

Name of the database

User of the database

Host of the database

User of the database

Host of the database

File used as configuration for traccar

See https://www.freie-netze.org/wg-access-server/2-configuration/ for possible options

API listen address, conforming to a Go address string.

The server will put all the budget files in this directory as binary blobs.

Whether to disable reverse DNS lookups, thus keeping IP address literals in the log.

File to include additional settings for this provider from.

See torrc manual.

Settings that go into ca.json

Whether to enable exit instead of restarting when a game ends.

Ergo IRC daemon configuration file. https://raw.githubusercontent.com/ergochat/ergo/master/default.yaml

Configuration for Spotifyd

Configuration for Netatalk

CAPI Configuration attributes

LAPI Configuration attributes

UDP port for eD2k traffic (searches, source exchange) and all Kad network communication

Type of transition

Contents for the TOML Polaris config, applied each start

URL of crawlers

Root path for log files.

Options passed to udisksd

Configuration options for the Default Terminal Execution Specification

Database file path.

Configuration for peroxide

Fediwall configuration

Additional configuration for FerretDB, see https://docs.ferretdb.io/configuration/flags/ for supported values.

Location for the SQLite database.

The database dialect to use

IO queue size.

Configuration for MPD

Additional policy settings merged into the policy file

See torrc manual.

Rest server configuration for Quickwit

Set to false if you want to run OpenGFW on FORWARD chain. (e.g. on a router)

Settings of the onion service

The port your database is listening at. sqlite does not require this value to be filled.

Path to the data directory

Content of IfState's initrd configuration file

Database host.

Database user.

Configuration file for hockeypuck, here you can override certain settings (loglevel and openpgp.db.dsn) by just setting those values

Use TLS for SMTP connection

An internet socket address to listen on, either IPv4 or IPv6.

The domain name of your instance (eg 'hatsu.local').

Host and port combination for the server to listen on.

Variables to be used within the suricata rules.

Seconds to wait before sending another request.

Cross platform libpcap capture support.

Global gitlab-runner configuration

Global configuration options for the libeufin bank system config file.

Temporal configuration

Configuration for Sshwifty

Zabbix Server configuration

Directory where cross-seed will place torrent files it finds.

Configuration for auto-cpufreq

Environment variables to set for the service

The directory where pages are stored.

Domain name of your server.

Rathole configuration, for options reference see the example on GitHub

Frigate configuration as a nix attribute set

The DNS servers which dnsmasq should query.

The URL to the ntfy-sh topic.

The full URL under which the server is reachable.

See torrc manual.

Master configuration options (mfsmaster.cfg).

Listen port

The app environment

List of public keys used to sign binary caches

Path to HTTPS listener private key.

An RKVM server's internet socket address, either IPv4 or IPv6.

The role of this server

Environment variables used for Castopod

Configuration for Radicale

Settings which are written into mediagoblin.ini.

Type of proxy to use

The final user-facing URL

How many invites each user is issued upon registration (only applicable if open registration is disabled).

Upstream timeout

Enable logging

The address to listen on.

IP address to bind nipapd to.

Listen address

Instance hostname (base domain name)

The UNIX socket your Misskey server should listen on.

Filename of the main journal / ledger file.

Whether the app is behind a reverse proxy.

Configuration for Prosody Filer

scion-router configuration

scion-daemon configuration

Path to store SSH host & client keys.

See torrc manual.

See torrc manual.

Path to config file to parse and append to settings

Settings to include in /etc/buffyboard.conf

Port Number

Additional attributes to be merged with the configuration options and written to Pangolin's config.yml file.

Your pinnwand.toml as a Nix attribute set

Configuration options for the postsrsd.conf file

The addon configures in conf folder in ini format with global sections

Port on which immich-kiosk will listen.

Run Suricata with a specific user-id.

URL of DID PLC directory

Attributes of the parent entry.

Path to the SQLite database

Dynamic settings in the PostgreSQL database, set by a SQL script, see https://github.com/knadh/listmonk/blob/master/schema.sql#L177-L230 for details.

Configuration for immich-kiosk

Whether to enable guests to login if auth is enabled.

Contents of config file (sfsmaster.cfg(5)).

Configuration of radicle-ci-broker

Settings for the sync server

Port number for HTTP traffic (descriptions, SOAP, media transfer).

Older PowerDNS Recursor settings

Log level for Scrutiny.

Configure Kanidm clients, needed for the PAM daemon

Configuration options to set in extra_settings.py.

The URL where you will access the app.

See torrc manual.

See torrc manual.

Additional policy settings merged into the policy file

freshclam configuration

Attrset that is converted and passed as config file

URL of the redis backend

URL of the redis backend

The settings to use for dsnet

Settings for FileBrowser

See https://torsion.org/borgmatic/docs/reference/configuration/

Base port -- others used are offset from this one, see https://docs.lizardbyte.dev/projects/sunshine/en/latest/about/advanced_usage.html#port for details.

Path to the files with alerting and/or recording rules.

Set UDP listening port range used by DHT(IPv4, IPv6) and UDP tracker.

Additional configuration for MicroBin, see https://microbin.eu/docs/installation-and-configuration/configuration/ for supported values

Additional configuration for wastebin, see https://github.com/matze/wastebin#usage for supported values

Size limit of uploaded blobs in bytes

The domain name of your instance (eg 'lemmy.ml').

ISO 4217 code for the currency to display.

A list of domains for which the proxy must not be used

Kea DHCP6 configuration as a path, see https://kea.readthedocs.io/en/kea-3.0.2/arm/dhcp6-srv.html

Kea DHCP4 configuration as a path, see https://kea.readthedocs.io/en/kea-3.0.2/arm/dhcp4-srv.html

Attribute set of arbitrary config options

Flags from tlsrpt-fetcher(1) as key-value pairs.

Flags from tlsrpt-reportd(1) as key-value pairs.

If specified, creates a UNIX socket at the given path that Sharkey listens on.

Whether to enable printing /etc/motd when a user logs in interactively.

The IPv4 network that the server will use to allocate IPs on the network

OpenID Connect settings

Hide posts from bot accounts

Port on which the Node.js server should listen

Whether to use HTTPS for this DDNS provider.

Cache directory

The base path in the url for web requests.

Path to MySQL listener private key.

The configuration for the sourcehut network.

Bitmagnet configuration (https://bitmagnet.io/setup/configuration.html).

Configuration for tinyproxy.

Controls log level

Configuration for c2FmZQ-server passed as CLI arguments

Contents of the teleport.yaml config file

The public URL of the server, for password reset links.

Configuration options of docs

Declare systemd-tmpfiles rules to create, delete, and clean up volatile and temporary files and directories

Configuration for Immich

Save games to given directory, a sub-directory named after the starting date of the service will me inserted to preserve older saves.

On which address Keycloak should accept new connections.

Structural DokuWiki configuration

By default pam-u2f module sets the origin to pam://$HOSTNAME

Zone name server.

Settings whose options overwrite fields in .config/transmission-daemon/settings.json (each time the service starts)

The IPv6 network that the server will use to allocate IPs on the network

See torrc manual.

See torrc manual.

See torrc manual.

Directory under which Actual runs and saves its data

Server address.

Contents of the config.yaml config file

Configuration options for the Stalwart server

Paths to be searched for matching data

Run Suricata with a specific group-id.

Save error/unfinished downloads to FILE on exit.

Python logging configuration

The address that Sharkey binds to.

Usenet provider specification

Additional settings for this bridge.

Configuration settings for Meilisearch

Settings which are written into paste.ini.

On which port Keycloak should listen for new HTTP connections.

Additional configuration for transfer-sh, see https://github.com/dutchcoders/transfer.sh#usage-1 for supported values

Domain name to serve the requests off of.

Directory for storing log files.

URL path for the website

Options for the global systemd service manager used in initrd

Package providing the ffmpeg and ffprobe executables below the bin/ directory.

Settings to pass to the document exporter as CLI arguments.

The address to listen on

The TLS certificate private key, as a base64-encoded string

Attrset to be transformed into YAML for host config

Public facing base URL of the service

This setting is required for any of the following features:

• attachments (to return a download URL)
• e-mail sending (for the topic URL in the email footer)
• iOS push notifications for self-hosted servers (to calculate the Firebase poll_request topic)
• Matrix Push Gateway (to validate that the pushkey is correct)

Port where hatsu should listen for incoming requests.

Host where hatsu should listen for incoming requests.

Environment variables for the Firezone server

Name of the PostgreSQL database

Hostname or IP to listen on.

Configuration of GlitchTip

The content of /etc/supergfxd.conf

Configuration for Rosenpass, see https://rosenpass.eu/ for further information.

Options for mackerel-agent.conf

Configuration for Manticoresearch

Global configuration options for the mosquitto broker.

Attrset of the LibreNMS configuration

Configuration for Gemstash

Configuration options of meet

The bare JID of the gateway administrator

Linux high speed af-xdp capture support, see docs/capture-hardware/af-xdp.

Set this to the URL where your accounts page is running

See torrc manual.

Path to your SSL CA certificate.

The address(es) to listen on for HTTP requests.

The unix socket for the gancio server to listen on.

Path to UNIX domain socket to listen on

Directory Gancio logs into

Show media in posts

Port to run Navidrome on.

Specify which port to listen to.

The footer in raw HTML.

The TLS certificate, as a base64-encoded string

Homepage settings

Zone name, like "example.com", "localhost", or "0.0.127.in-addr.arpa".

Attrset that is converted and passed as config file

Configuration for IPP

Config file for swapspace

Configuration for Navidrome, see https://www.navidrome.org/docs/usage/configuration-options/ for supported values.

Extra options which should be appended to Nextcloud's config.php file.

Configuration for PgBouncer, see https://www.pgbouncer.org/config.html for supported values.

The terminal permissions: the login tty will be owned by the TTYGROUP group, and the permissions will be set to TTYPERM

Configuration for etebase-server

Redis configuration

Generates the tuwunel.toml configuration file

Only monitors owned symbolic link target of GC roots.

• "auto": behaves like true for normal users, false for root.
• "true": only monitor GC roots owned by the current user.
• "false": monitor all GC roots.

If set to true, Nix automatically detects files in the store that have identical contents, and replaces them with hard links to a single copy

Attribute set of cameras configurations.

https://docs.frigate.video/configuration/cameras

Text displayed when players join the server.

Allow all users to access the FUSE mount points

The origin of your Kanidm instance

Broker ID. -1 or null to auto-allocate in zookeeper mode.

scion-control configuration

If you set http proxy, waagent will use is proxy to access the Internet.

If you set http proxy, waagent will use this proxy to access the Internet.

The domain name under which the server is reachable.

Options for kanboard's PHPFPM pool.

Duration (in seconds) after which an update is forced.

See torrc manual.

See torrc manual.

See torrc manual.

Full public URL of Forgejo server.

Name of database to use on PostgreSQL server.

Regular expressions of files to exclude from sharing.

app-layer configuration, see upstream docs.

Specify a port number for JSON-RPC/XML-RPC server to listen to

Address for the server

Stream source configuration

Gives the verbosity level that is used when logging messages from sshd(8)

FirewallD config file

Configuration for Moonraker

Mobilizon Elixir documentation, see https://docs.joinmobilizon.org/administration/configure/reference/ for supported values.

Typesense configuration

Options for firefly-iii configuration

The contents of Pomerium's config.yaml, in Nix expressions

Extra config options.

Whether to enable SSH listener.

Listen endpoint of SSH listener.

Indicate if login is allowed if we can't cd to the home directory.

The physical device name to listen on

IP+port combination to bind and serve the DNS server on.

URI to the celery broker used for the asynchronous job queue.

The postgresql database server to connect to

List of administrator users

As an alternative to specifying config, you can specify the path to the evaluated NixOS system configuration, typically a symlink to a system profile.

Whether to enable SMTP.

Data storage directory.

File to include additional settings for this provider from.

Whether to use an email service to send notifications.

Limit of the number of concurrent upload slots.

The minimum priority of api events to be logged.

Use Tailscale Funnel to make tsidp available on the public internet so it works with SaaS products.

Specify the configuration for sequelize

If specified, login is denied for all listed users

Must be set to a unique identifier, preferably a UUID according to RFC 4122

Port Number

Database username.

Database name.

Port Number

Settings for zeronsd

The port on which to listen for IMAP connections.

The port on which to listen for SMTP connections.

See torrc manual.

See torrc manual.

See torrc manual.

SSH port displayed in clone URL

Search filters to display on the front page.

LiveKit Ingress configuration

Connection string for the database

IMAP authentication configuration for rspamd-trainer

If specified, login is allowed only for the listed users

The port your database is listening at.

The domain to serve static pages on.

Directory for storing master metadata.

Whether to enable MQTT support.

On which port Keycloak should listen for new HTTPS connections.

The database to connect to when using postgres, mysql, or mysql2.

Configuration for Nomad

A key list specifying a host switch combination.

A list of key names is available in https://github.com/htrefil/rkvm/blob/master/switch-keys.md.

DID of mod service

DID of bsky frontend

The port to listen on.

The CIDR networks that should route through this server

Nix-based (RFC 42) configuration for Knot Resolver

The file access mode of the UNIX socket.

Linux high speed capture support.

Should the app try to improve its incoming network connectivity using UPnP?

Configuration for create_ap

Configuration to put in watchdogd.conf

The Redis port.

The Redis host.

The IP or hostname which hosts your database.

Help link from the main menu.

See torrc manual.

See torrc manual.

See torrc manual.

The type of the service

Disable the built-in HTTPS server

The address(es) to listen on for HTTPS requests.

Set to 1 to enable the web server

The address(es) to listen on for proxy requests.

PostgreSQL host to connect to

Specify the directory to store database and album art cache.

The APP_URL used by firefly-iii internally

attribute set of section of an INI file (attrs of INI atom (null, bool, int, float or string))

URL of mod service

URL of bsky frontend

The port on which to have the LDAP server.

Path to generated files

Static configuration for Traefik, written in Nix.

Disable external SSH feature.

Database host or socket path.

Listen endpoint of HTTP listener.

Content of IfState's configuration file

Specifies which file should be used as the list of trusted CA when negotiating a TLS session.

Attrset that is converted and passed as TOML config file

Hide boosts

Enable logging

The configuration of snips-sh is done through environment variables, therefore you must use upper snake case (e.g. SNIPS_HTTP_INTERNAL)

Configuration options for the libeufin bank system config file

OpenPGP key identifier.

Domain name of your server.

headscale log level.

Path to the sqlite database.

Path to Kanidm database.

If you're running a self hosted instance and wish to serve public links, set this to the URL where your albums web app is running.

The postfix-tlspol configuration file as a Nix attribute set

The URL under which Chhoto URL is externally reachable.

Listen port

Flags from tlsrpt-collectd(1) as key-value pairs.

Enable Captcha.

Path to geoip.dat.

config.yaml configuration as a Nix attribute set

Configuration for the server

Port for web application to listen on.

See torrc manual.

See torrc manual.

See torrc manual.

List of peers to exchange keys with.

Configure listen addresses and ports for ftpd.

Configuration options for the Stalwart email server

Similar to systemd.tmpfiles.settings but the rules are only applied by systemd-tmpfiles before initrd-switch-root.target

Whether sshd should check file modes and ownership of directories

Attribute set of arbitrary config options

Attribute set of arbitrary config options

The key sequence that should be remapped

Load public posts

Autoplay videos in posts

Load trending posts

Structured configuration for Caddy to generate a Caddy JSON configuration file

TLS key in pem format.

The robot.conf configuration file as key value set

The primary synapse configuration

Listen address

The currency which taler services will operate with

If enabled, the agent attempts to install and then load an RDMA kernel driver that matches the version of the firmware on the underlying hardware.

List of public signing keys of users that can access the admin panel

Configuration of the Tinc daemon for this network

Database engine to use.

Interface address for web application to bind to.

Directory containing torrent files, or if you're using a torrent client integration and injection - your torrent client's .torrent file store/cache.

Configuration for zram-generator, see https://github.com/systemd/zram-generator for documentation.

Whether to enable GNOME Settings Daemon.

Email associated with this account.

If we should not auto-open a browser window on startup

See https://blackfire.io/docs/up-and-running/configuration/agent

configuration options for influxdb2, see https://docs.influxdata.com/influxdb/v2.0/reference/config-options for details.

Options passed to the gdm daemon

ioredis options for the job queue

The Redis port.

The Redis host.

Zone admin email address for SOA.

Overrides to config.yaml as a Nix attribute set

Domain to use for website

Configuration for journal-upload

Files to load suricata-update managed rules, relative to 'default-rule-path'.

Console Configuration attributes

Servers to load posts from

Configuration file version.

Channel tree definitions.

All settings of nginxlog expressed as an Nix attrset

The host address that the LDAP server will be bound to.

The host address that the HTTP server will be bound to.

The port on which to have the HTTP server, for user login and administration.

Configuration to write to server.conf

Redis configuration for synapse

A set that will be generated into configuration file, see the SmartDNS README for details of configuration parameters

Samba security type.

Mail sending mode

Directory for storing user uploads and similar data.

Command line arguments passed to the imaginary executable, stripped of the prefix -

Set configuration for system-wide bluetooth (/etc/bluetooth/main.conf)

OpenSearch configuration.

Configuration for wgautomesh.

Outgoing SMTP FROM.

Configuration options to set in configuration.py

Whether to use redis as the session storage.

Configuration options for the libeufin nexus config file

Configuration options for the taler exchange config file

Configuration options for the taler merchant config file

Forum link from the main menu.

See torrc manual.

For development

See torrc manual.

Port to bind to (UDP and TCP).

Configure a listener for responding to requests.

Flask Secret Key

ioredis options for pubsub

Optional

Optional

The machine which hosts your database

Settings to generate easytier-‹name›.toml

Configuration for peertube-runner

Public GitLab server URL.

Directories where template files are located.

Which mail server protocol to use.

Scopes used in the OIDC flow.

Whether to disable caching queries.

Whether to enable MySQL listener.

Listen endpoint of MySQL listener.

Set of files to be linked in /var/lib/sympa.

Directory to store state

Path to the data directory

URI to the celery broker used for the asynchronous job queue.

URI to the celery backend used for the asynchronous job queue.

Power cycle the adapter when getting a driver error from the kernel.

The address group variables for suricata, if not defined the default value of suricata (see example) will be used

Plugin-specific config file to link to /etc/audit/.conf

Outgoing SMTP port.

Outgoing SMTP host.

Outgoing SMTP user.

SMTP server port

The name of the service to run

Database URL.

code repositories

See the documentation.

Configuration for rebuilderd (rebuilderd.conf)

The terminal permissions: the login tty will be owned by the TTYGROUP group, and the permissions will be set to TTYPERM

Configuration in the journal-remote configuration file

The database.yml configuration file as key value set

Upper level of template and static files path.

Host and port used to connect to a redis instance.

Number of workers

The domain name on which canaille will be served.

Quit if no players for given time in seconds.

Enable database connection with given configuration.

Required password to join server, if specified.

List of local domains, that do not require rewriting.

Additional settings for this listener.

MTA hostname.

Database type.

MTA port.

Database name.

Database username.

Controls whether log output should go to stdout of the systemd service

If set, Nix will perform builds in a sandboxed environment that it will set up automatically for each build

Where Kubo listens for incoming p2p connections

Configure listen addresses and ports for httpd.

Whether to use redis as the session storage.

Configure listen addresses and ports for sftpd.

Whether to enable suricata global stats.

Enable to use SSL server.

The path Draupnir will store its state/data in.

See torrc manual.

Address receiving application exceptions

The port group variables for suricata.

Directory where grafana will automatically scan and look for plugins

Gancio log level.

List of domains to whitelist.

Specify which address to listen to.

The full URI to the database

attribute set of section of an INI file (attrs of INI atom (null, bool, int, float or string))

If specified, login is denied for all users part of the listed groups

Shared secret token to authenticate the client

Shared secret token to authenticate the client

Config to set in config.local.js's afterConfig.

Configuration written to the reposilite.cdn file

Announce game in LAN using given protocol.

Whether the server supports TLS

IPv4 address to bind to

MTA requires authentication.

MTA authentication username.

The name of the Grafana database.

headscale log format.

The IP to listen on.

The port to listen on.

Listen protocol. +unix means "over unix", not "in addition to."

global section of an INI file (attrs of INI atom (null, bool, int, float or string))

If specified, login is allowed only for users part of the listed groups

Predefined DNS records served in addition to the _acme-challenge TXT records.

The name of the database to use

Specifies whether sshd(8) should look up the remote host name, and to check that the resolved host name for the remote IP address maps back to the very same IP address

Settings for MeshCentral

Hostname of the server

Port of the server

See torrc manual.

The name of the server

Options to add to config.yml

Whether to enable new users to login if auth is enabled.

The global options in config file in ini format.

URL to retrieve authorized Intel SGX enclave signers.

Plugins -- Experimental -- specify the filename for each plugin shared object.

Whether the root user can login using ssh.

The database user (not applicable for sqlite3).

File path to a key file.

Receiving address for email alerts

Database host or socket path.

The addresses to send outgoing mail to.

Path to the SQLite database used

List of IP addresses to query as recursive DNS resolvers.

Cryptpad sandbox URL

The TCP port to bind to.

The port on which PostgreSQL listens.

DDNS server path

Split DNS configuration (map of domains and which DNS server to use for each)

The top-level info page for your site.

The name of your network of sr.ht-based sites.

config.yml configuration as a Nix attribute set

Worker queue size.

Hide replies

List of urls containing DERP maps

Specifies what environment variables sent by the client will be copied into the session's environment

Mimic the verification and directory layout used by the Open Redstone Engineers Schemati plugin

Cursor acceleration (how fast speed increases from minSpeed to maxSpeed)

List of local endpoints to listen for connections.

Disables the check for new versions of Umami.

The IP to listen on

Whether to add the activation script to the system profile

Whether to enable inotify monitoring to automatically discover new files.

Configuration for metricbeat

Configuration for Routinator 3000, see https://routinator.docs.nlnetlabs.nl/en/stable/manual-page.html#configuration-file for options.

config.yaml configuration as a Nix attribute set

For sqlite3 only

Configuration file options for LanguageTool, see 'languagetool-http-server --help' for supported settings.

Configuration for yggdrasil, as a structured Nix attribute set

The path to your appkey

Directory where aMule moves completed downloads

Whether to act as an exit node

HTTP port for EPGStation to listen on.

See torrc manual.

See torrc manual.

The internal SSH address of the service

See torrc manual.

libpq connection parameters as documented in:

https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-PARAMKEYWORDS

The path to load specific local geoip/geosite db files

This defines the system default encryption algorithm for encrypting passwords.

Whether to use HTTPS for this DDNS provider.

A string specifying where to send log messages to

URL hg.sr.ht is being served at (protocol://domain)

Path to hg-ssh (if not in $PATH).

Address to bind the debug server to.

Port to bind the debug server to.

Port to listen on for snapclient connections.

Path to the collectd sqlite database.

Default PPD profile.

Blurb for your site.

Owner's name.

URL to the livekit server

Engine statistics such as packet counters, memory use counters and others can be logged in several ways

Influences logging

Attribute set of environment variables.

https://github.com/Glimesh/broadcast-box#environment-variables

URL to OpenID issuer.

The level of logging verbosity: 1:Error 2:Info 3:Debug

URL of crawlers

The hostname to listen on.

URI to the redis server, used to speed up locking, caching and session storage.

Path of UNIX socket of log forwarder

Path where the socket should be created when protocol=socket

Additional configuration for LubeLogger, see https://docs.lubelogger.com/Environment%20Variables for supported values.

See the getting-started guide for available options.

DDNS server name.

Use an encrypted SSL/TLS connection.

Use an encrypted SSL/TLS connection.

DHT server settings

A storage backend connection string

Configuration for go-autoconfig

A list of ACME accounts