Where to store below's data

Path to the Nix store when looking for kernels at boot

The store directory where the Guix service will serve to/from

The directory where to store the uploaded images

Whether to enable the Thanos store node giving access to blocks in a bucket provider.

Object store configuration

Path to the certificate store on disk

Store paths to copy into the initrd as well.

Path to files that contain addresses of store API servers

Path to YAML file that contains object store configuration

Defines the mount options used on a bind mount for the /nix/store

Number of threads used for pushing store paths

The maximum samples allowed for a single Series request

Data directory relative to /var/lib in which to cache remote blocks.

Log filtering level

Log format to use.

Maximum number of concurrent Series calls

Path to the Xen Store Daemon

End of time range limit to serve

Start of time range limit to serve

Specify the attribute name of the store partition.

If set to true, Nix automatically detects files in the store that have identical contents, and replaces them with hard links to a single copy

If set, NixOS will enforce the immutability of the Nix store by making /nix/store a read-only bind mount

Whether to enable Cachix Watch Store: https://docs.cachix.org.

Store paths to copy into the shutdown ramfs as well.

Maximum size of concurrently allocatable bytes for chunks

Timeout before an unhealthy store is cleaned from the store UI page

If a Store doesn't send any data in this specified duration then a Store will be ignored and partial data will be returned if it's enabled. 0 disables timeout

TLS Key for the gRPC server, leave blank to disable TLS

Maximum size of items held in the index cache

TLS Certificate for gRPC server, leave blank to disable TLS

Listen host:port for HTTP endpoints

Arguments to the thanos store command

Tracing configuration

An attribute set describing an HTTP to GCS proxy that allows us to use GCS bucket via HTTP protocol.

Listen ip:port address for gRPC endpoints (StoreAPI)

Don't send the password immediately after login, but store for PAM session.

Whether to enable serving the Nix store as a remote store via SSH.

Cachix host to connect to

The prefix to use for store paths

Optional file containing a self-managed signing key to sign uploaded store paths.

The store paths to include in the partition.

TLS CA to verify clients against

Interval between DNS resolutions

Path to YAML file that contains tracing configuration

Repeat interval for syncing the blocks between local and remote view

Refresh interval to re-read file SD files

Whether to enable proxy for this bucket

Path of the symlink.

Whether to enable nix-store-veritysetup.

Path of the source file.

Cachix binary cache name

Whether to enable copying of this file and symlinking it.

The address of the proxy.

Name of Google storage bucket

Path to the Xen Store log file.

Logging level for the Xen Store.

The OCaml-based Xen Store Daemon configuration

The cachix package to use.

Enable verbose output

Path to the Xen Store Daemon PID file.

Path to the Xen Store access log file.

Path of the symlink.

Path of the source file.

Required file that needs to contain the cachix auth token.

Object store configuration

Whether to enable copying of this file and symlinking it.

Number of goroutines to use when syncing blocks from object storage

Whether to strip /nix/store/ from the store paths

Pleroma public configuration

WARNING: This option will expose store your config unencrypted world-readable in the nix store

Object store configuration

Object store configuration

Object store configuration

The directory used to store all data for kasmweb.

Whether to enable writing to the Nix store as a remote store via SSH

The path to the nixpkgs sources used to build the system

Size limit for transactions.

Path limit for the quota system.

Features to enable via dlopen ELF notes

Specify the attribute name of the store's dm-verity hash partition.

Password for database (STORED PLAIN TEXT, WORLD-READABLE IN NIX STORE)

Maximum number of watches by the Xenstore Watchdog.

Priority of dlopen ELF notes to include. "required" is minimal, "recommended" includes "required", and "suggested" includes "recommended"

Whether to enable the quota system.

Whether to enable transaction merge support.

This option defines the default shell assigned to user accounts

Whether to enable the node permission system.

Entity limit for transactions.

Path to YAML file that contains object store configuration

Build and use a disk image for the Nix store, instead of accessing the host's one through 9p

Storages are used to actually store your files

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

This option lists the machines to be used if distributed builds are enabled (see nix.distributedBuilds)

Password for admin account

Basic Auth protection for a vhost

Object store configuration

Password for this DDNS provider

Maximum number of outstanding watch events per watch.

Maximum number of requests per transaction.

Features to enable via dlopen ELF notes

Specifies the clear text password for the account

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

The compression level for ZSTD compression (between 0 and 16)

File containing the password to use for basic http authentication

Perodic scanning for all the rings as a safenet for lazy clients

Priority of dlopen ELF notes to include. "required" is minimal, "recommended" includes "required", and "suggested" includes "recommended"

Whether to activate the filed base backend.

Your yandex.com password

Path to YAML file that contains object store configuration

Path to YAML file that contains object store configuration

Path to YAML file that contains object store configuration

Cache directory to be used by oh-my-zsh

The filesystem directory to store your table store within.

The filesystem directory to store blocks for the block store.

Password for this DDNS provider

Maximum number of transactions.

Whether to enable the watch permission system

The path to the file used for signing derivation data

Maximum outstanding requests, i.e. in-flight requests / domain.

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

A list of paths to NNCP configuration files that should not be in the Nix store

File containing the password of the SMTP server for GitLab

Allow the installation and updating of apps from the Nextcloud appstore

Basic Auth protection for a vhost

Location of a file containing the SMTP password

Limits applied to domains whose writes cause other domains' transaction commits to fail

This specifies the vector database provider you want to use to store and query embeddings.

Path to the file containing your secret pleroma configuration.

DO NOT POINT THIS OPTION TO THE NIX STORE, the store being world-readable, it'll compromise all your secrets.

Basic Auth protection for a vhost

Store tmux socket under /run, which is more secure than /tmp, but as a downside it doesn't survive user logout.

Basic Auth protection for a vhost

Path to YAML file that contains object store configuration

A file containing the password to access the GNS3 Server.

Basic Auth protection for a vhost

If enabled, the Nix store in the VM is made writable by layering an overlay filesystem on top of the host's Nix store

The directory where to store the uploaded images & database.

Append an additional file's contents to /etc/iscsid.conf

Limits applied to domains whose writes cause other domains' transaction commits to fail

The password corresponding to database.user

Packages that are added as dependencies of the system's build, usually for the purpose of validating some part of the configuration

Where to store below's logs

Access Control Lists: see https://www.dokuwiki.org/acl Mutually exclusive with services.dokuwiki.aclFile Set this to a value other than null to take precedence over aclFile option

Append an additional file's contents to /etc/iscsid.conf

Basic Auth protection for a vhost

Other endpoint's CA private key

List of chromium extensions to install

Basic Auth protection for a vhost

Attrset that is converted and passed as config file

The directory in which to store BOINC's configuration and data files.

Path to a script that streams the desired image on standard output

The filesystem directory to store your protected store in.

The directory where to store the database

Java KeyStore file containing the certificates.

Password for SMTP email account

The password of the user used by netbird to connect to the coturn server

Archive format used to store the dump file.

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

NNCP configuration, see http://www.nncpgo.org/Configuration.html

File containing the password for the given username

Basic Auth protection for a vhost

Path to root certificate store.

File containing the Redis password

SSL key file path

Directory to store MCHPRS database and other state/data files.

A path to a file containing the admin user's password

Path to intermediate certificate store.

Directory to store data for the server.

The path to a file containing the secret_key_base secret

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

The password to store inside the credentials file.

If the conflict.rateLimitIsAggregate option is true, then after each tick one point of conflict-credit is given to just one domain: the one at the front of the queue

Path to an environment file loaded for the tsidp service

Password to send to proxy

Settings serialized into user-data/conf.yml before build

Path in which to store user data

A file including Invidious settings

The password used to authenticate the XMPP component to your XMPP server

The directory where Pocket ID will store its data, such as the database when using SQLite.

Whether generation of Diffie-Hellman parameters should be stateful or not

The local directory for storing configuration and cached store paths

A list of paths whose closure should be made available to the VM

Settings serialized into config.yml before build

Directory used to store Graylog server state.

The k3s token to use when connecting to a server.

WARNING: This option will expose your token unencrypted in the world-readable nix store

Password for the postgresql connection

Password used for authentication

The directory used to store all data for changedetection-io.

This option can be used to store the username / password credentials with the "auth-user-pass" authentication method

Generate your init file from your list of plugins and custom commands

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

Basic Auth protection for a vhost

The directory the bot should store various bits of information in.

Basic Auth protection for a vhost

The rke2 token to use when connecting to a server.

WARNING: This option will expose your token unencrypted in the world-readable nix store

How long to store RPC logs for in the database

Environment variables which are loaded from the contents of the specified file paths

Path to configuration file

Basic Auth protection for a vhost

Archive format used to store the dump file.

Where to store LFS files.

Specifies the directory where Memos will store its data.

File containing the Discourse database user password

The hostname of the cache server. This is used to generate the private key used for signing store paths (.narinfo)

The state directory where Guix service will store its data such as its user-specific profiles, cache, and state files.

Basic Auth protection for a vhost

This option contains the store path that typically represents a NixOS system

RPC password for JSON-RPC connections

Basic Auth protection for a vhost

Basic Auth protection for a vhost

The path to a file containing the secret_key_base secret

The maximum size of the store

Certificate specs as described by: https://github.com/cloudflare/certmgr#certificate-specs These will be added to the Nix store, so they will be world readable.

A file containing the password of the SMTP server account

Whether to use binary caches for downloading store paths

Path to an environment file to be loaded

Specifies the (clear text) password for the user

Password for local Mattermost database user

Whether to enable building images with a dm-verity protected nix store.

Basic Auth protection for a vhost

allow Artalk store the settings to config file persistently

Basic Auth protection for a vhost

Directory to store downloaded files.

Store mails on disk or in memory.

Default user to store mail for virtual users.

Database to store feeds

Named accounts and their respective configurations

Basic Auth protection for a vhost

The path to the data directory in which Pingvin Share will store its data.

Specify an alternative directory to store all the per-user configuration files.

Base64 private key generated by wg genkey

RPC password for the bitcoin endpoint

Automatically run the nix store optimiser at a specific time.

Directory to store the Etebase server data.

A run-time path to the nutUser password file, which should be provisioned outside of Nix store.

The database user's password (not applicable for sqlite3)

MQTT password

Directory to store the Froide-Govplan server data.

Whether to enable substitute server for your Guix store directory.

Directory to store the Paperless data.

Path where to store data files.

Default group to store mail for virtual users.

When set, enables the feature of serving . on top of /nix/store/-

A path to directory writable by logstash that it uses to store data

The directory to store all user data, such as flow and credential files and all library data

Where to store LFS files.

The Sonarr home directory used to store all data

Specifies the (clear text) password for the user

Alloy configuration file/directory path

Whether to enable VictoriaMetrics's vlagent.

vlagent is a tiny agent which helps you collect logs from various sources and store them in VictoriaLogs .

Store messages in an archive and allow users to access it

The path to the public key file for the host

Password for the user

Path to file containing a secret for session store.

Basic Auth protection for a vhost

Directory to store the Paperless documents.

Environment variables from this file will be interpolated into the final config file using envsubst with this syntax: $ENVIRONMENT or ${VARIABLE}

File that contains the cadvisor storage driver password.

storageDriverPasswordFile takes precedence over storageDriverPassword

Warning: when storageDriverPassword is non-empty this defaults to a file in the world-readable Nix store that contains the value of storageDriverPassword

Path to the services config file

The max length of each history item the atuin server should store.

Text to display when users join

A list of files containing additional configuration to be included using the include directive

The k3s token agents can use to connect to the server

Environment variables from this file will be interpolated into the final config file using envsubst with this syntax: $ENVIRONMENT or ${VARIABLE}

Password for primary user

Whether to enable the Thanos ruler service which evaluates Prometheus rules against given Query nodes, exposing Store API and storing old blocks in bucket.

Whether to enable the Thanos query node exposing PromQL enabled Query API with data retrieved from multiple store nodes.

Path to SQLite database file to store stats

The prosody home directory used to store all data

Defines how Athens behaves when a module@version is not found in storage

Whether to run a correctness check for the configuration file

Longview API key

Path to the service's config file

Mutual TLS - client key to call remote instance requiring client certs

Path to SQLite database file to store room states

The local directory for storing configuration and cached store paths

Private key for OCSP responder certificate

Store data using one-way hash functions (SHA1)

File containing environment variables to substitute when copying the configuration out of Nix store to the services.mautrix-discord.dataDir

The cron spec for cleaning the store to keep it under config.ncps.cache.maxSize

The rke2 token agents can use to connect to the server

Controls where to store journal data

Alias of virtualisation.docker.daemon.settings.live-restore.

Path where to store data files.

Directory where to store cache files (if cache.type = "file").

Path to an environment file loaded for the rmfakecloud service

Directory to store log files in.

The access key for the S3 bucket.

A secret file to be sourced for the .env settings

Directory to store the bridge's configuration and database files

Options for the 'restore' command

Basic Auth protection for a vhost

User accounts for GRUB

Location for any persistent data Traefik creates, such as the ACME certificate store.

The path to the SSH private key with which to authenticate on the build machine

Base64 private key generated by wg genkey

Password for InfluxDB login

Slurm expects config files for plugins in the same path as slurm.conf

Absolute path for where the LibreChat server will use as its data directory to store logs, user uploads, and generated images.

Use SSL for objectstore access.

Required for some non-Amazon implementations.

Whether to enable the Thanos compactor which continuously compacts blocks in an object store bucket.

Service to use to store sms data.

Path to keystore (combined PEM with cert/key, or PKCS12 keystore)

Connection to a redis server

Database to store feeds

The path to the data directory in which Szurubooru will store its data.

Directory to store TS3 database and other state/data files.

A path to the password file for your bot

Salt to allow room operator passwords generated by this server instance to still work when the server is restarted

Where BitTorrent Sync will store it's database files (containing things like username info and licenses)

The contents of the snmpd.conf

Whether to store offline passwords when the server is down.

Directory to store downloads.

The gitolite home directory used to store all repositories

Metadata file for root certificate presence

The name of the S3 bucket.

Path to a JSON file containing settings that will be merged with the settings option

API key to authenticate with a local crowdsec API

Directory to store Minecraft database and other state/data files.

Location where to store the ShellHub Agent private key.

Required for some non-Amazon implementations.

Attribute set of arbitrary config options

Configuration options for cross-seed

Attribute set of arbitrary config options

Attribute set of arbitrary config options

Directory used to store media files

Path within the configuration store where Patroni will keep information about the cluster.

Basic Auth protection for a vhost

Whether to run a correctness check for the configuration file

HCL configuration to insert in the storageBackend section

Sets the admin api key for typesense

A list of paths to extra steps files

Configuration of XtreemFS DIR service

Configuration of XtreemFS OSD service

Configuration of XtreemFS MRC service

Extra configuration files

The number of shares required to store a file.

Host and port of the bosun server that will store the collected data.

The full path to a file that contains the access secret.

Path to config file to parse and append to settings

File containing environment variables to substitute when copying the configuration out of Nix store to the services.mautrix-meta.dataDir

Maximum size in Megabytes of cache used to store compile environments of compile clients.

Configuration options for the Stalwart server

The number of distinct storage nodes required to store a file.

URI to use for the main PostgreSQL database

This can be used to pass secrets to the systemd service without adding them to the nix store.

Path to store SSH host & client keys.

Database name to store sms data

File used to store the Buildbot Worker password

Path to the data dir fedimintd will use to store its data

Base64 preshared key generated by wg genpsk

Path of a file with extra environment variables to be loaded from disk

Attribute set of arbitrary config options

Path to the service's environment file

A state directory used by NetBird client to store config.json, state.json & resolv.conf.

A state directory used by NetBird client to store config.json, state.json & resolv.conf.

Determines where on the local filesystem a data node should store its blocks.

Required for some non-Amazon implementations.

Required for some non-Amazon S3 implementations

Specifies the password hash for the account, generated with grub-mkpasswd-pbkdf2

The resulting path of the generated Diffie-Hellman parameters file for other services to reference

Directory below /var/lib to store Prometheus metrics data

Images for builds.sr.ht

A list of public keys of upstream caches in the format host[-[0-9]*]:public-key

Environment variables from this file will be interpolated into the final config file using envsubst with this syntax: $ENVIRONMENT or ${VARIABLE}

The USBGuard daemon modifies some attributes of controller devices like the default authorization state of new child device instances

Where to store the backups

Whether to enable S3 object storage as primary storage

Config files to merge into the settings defined in services.olivetin.settings

Configuration options for the Stalwart email server

Specify the directory to store database and album art cache.

Default location for kubernetes secrets

A file containing the firezone relay token

If set, this file system will be mounted in the initial ramdisk

Location of the Django secret key

The password corresponding to mysqlUser

Attribute set of arbitrary config options

Attribute set of arbitrary config options

Path to the baseq3 files (pak*.pk3)

Directory to store state

Directory to store downloads.

Whether to enable caching of AppArmor policies in /var/cache/apparmor/

If provided this is the full path to a file that contains the key to enable [server-side encryption with customer-provided keys][1] (SSE-C)

The path of the Searx server settings.yml file

Roles that are allowed to access the JMX (e.g. nodetool) BEWARE: The passwords will be stored world readable in the nix store

URI to use for the main PostgreSQL database

Directory containing torrent files, or if you're using a torrent client integration and injection - your torrent client's .torrent file store/cache.

Specifies the initial password for the admin, i.e. the password assigned if the user does not already exist

The directory which will be used to store the message journal

The TLS certificate private key, as a base64-encoded string

Store paths specified in the storePaths option that should not be copied.

The TLS certificate, as a base64-encoded string

Override default chart values via Nix expressions

Whether the service is chrooted to have only access to the services.postfix.queueDir and the closure of store paths specified by the program option.

Path to store homebridge user files (needs to be writeable).

Path where to store the data files of the hidden service

Run a regular auto-update of all apps installed from the Nextcloud app store.

Base64 preshared key generated by wg genpsk

A list of public keys of upstream caches in the format host[-[0-9]*]:public-key

The path Draupnir will store its state/data in.

The name of the database to use

Whether to enable the Thanos downsampler which continuously downsamples blocks in an object store bucket.

The artalk configuration

Directory below /var/lib/ to store journalbeat's own logs and other data

A file containing the secret used to encrypt variables in the DB

Allow dockerd to be restarted without affecting running container

A file containing the secret used to encrypt session keys

Override default chart values via Nix expressions

If the master is password protected (using the requirePass configuration) it is possible to tell the slave to authenticate before starting the replication synchronization process, otherwise the master will refuse the slave request. (STORED PLAIN TEXT, WORLD-READABLE IN NIX STORE)

Environment variables which are read by healthchecks (local)_settings.py

The token from your Buildkite "Agents" page

A list of paths to extra settings files

Tracing configuration

Configuration settings for the generated config file

The path of Apache's document root directory

The path of Apache's document root directory

A file containing the firezone gateway token

User token in Jenkins used to reload config

Whether to use top-level directories as LOCALSTATEDIR instead of the store path ones

server secret for safe session cookies, must be set

Environment variables which are read by healthchecks (local)_settings.py

Whether to copy the necessary boot files into /boot, so /nix/store is not needed by the boot loader.

A file containing the secret used to encrypt secrets for OTP tokens

directory to store info about uploads

Passkeys required to access the periphery API

Configures logging

Tracing configuration

Path to the service's config file

Environment file to be passed to the systemd service

The file to store the PID in.

Folder to store Silverbullet's space/workspace

Where to store runtime data (save files, persistent items, etc)

File to load as environment file

File containing the initial password of the root account if this is a new install

File containing the GitLab database user password

The path of Apache's document root directory

Erlang cookie is a string of arbitrary length which must be the same for several nodes to be allowed to communicate

The linyaps-web-store-installer package to use.

Environment variables from this file will be interpolated into the final config file using envsubst with this syntax: $ENVIRONMENT or ${VARIABLE}

File to load as environment file

List of directories to store localized files in.

InfluxDB organisation under which to store data.

Where the XBOOTLDR partition is mounted

The name of the database to store data in.

path to a file containing e.g.: DBPASSWORD=supersecret

stored outside the nix store, read by systemd as EnvironmentFile.

The directory in which Garage will store the data blocks of objects

Initial password file for the pgAdmin account

The username to store inside the credentials file.

The server will put an account.sqlite file in this directory, which will contain the (hashed) server password, a list of all the budget files the server knows about, and the active session token (along with anything else the server may want to store in the future).

Extra config files to include

Directory below /var/lib to store VictoriaLogs data

Whether the service is chrooted to have only access to the services.postfix.queueDir and the closure of store paths specified by the program option.

Path to keystore (combined PEM with cert/key, or PKCS12 keystore)

Environment file to be passed to the systemd service

Environment file to be passed to the systemd service

A file containing the secret used to encrypt variables in the DB

Whether to generate the password files at build time and store them directly in the system closure, without requiring any services at boot time

Directory in which to store data

Directory to store state

Path to a TOML file to be merged with the settings

Path to CA bundle file (PEM/X509)

The path of Apache's document root directory

Environment file to be passed to the systemd service

Path to a file containing extra ntfy environment variables in the systemd EnvironmentFile format

The id of the bootloader to store in efi nvram

OpenSSH private key

A run-time path to the key file, which is supposed to be provisioned outside of Nix store.

Mount the host Nix store as a 9p mount.

Tracing configuration

Tracing configuration

Tracing configuration

Path to a file containing the admin password for kanidm

Files to load environment variables from in addition to services.chhoto-url.settings

Directory to store export.

A file that contains the server secret for safe session cookies, must be set.

secretKeyFile takes precedence over secretKey

The path of Apache's document root directory

Path to store the gem files and the sqlite database

Default admin password

Whether to leave interfaces configured on dhcpcd daemon shutdown

Files to load environment variables from (in addition to services.zipline.settings)

Environment variables for configuring the beszel-agent service

A file containing a secure random string

InfluxDB bucket in which to store data.

The directory used to store all data for healthchecks.

This can be used to pass secrets to the systemd service without adding them to the nix store

A file containing the salt for active record encryption in the DB

Environment file to be passed to the systemd service

An absolute file path (which should be outside the Nix-store) to Gemini certificates.

Each item in this array specifies an option in the [WireGuardPeer] section of the unit

Whether to pin nixpkgs in the system-wide flake registry (/etc/nix/registry.json) to the store path of the sources of nixpkgs used to build the NixOS system

File to load as the environment file

If set, Nix will perform builds in a sandboxed environment that it will set up automatically for each build

Extra configuration files to include in the swanctl configuration

Directory used to store media files

A file containing the firezone client token

Attribute set containing paths to files to add to the environment of linkwarden

JSON file containing secret keys

Path to the environment file sourced on startup

Directory where uploaded images and attachments are stored.

List of paths to files containing environment variables for Sharkey to use at runtime

Specifies the MAC addresses to deny if macAcl is set to "deny" or "radius"

Path to store session recordings.

WARNING: THIS IS INSECURE, as your password will end up in /nix/store, thus publicly readable

Run nft check on the ruleset to spot syntax errors during build

Path to a configuration file to be merged with the settings

Specify SSH host keys to import into the initrd

Additional Munin plugins to activate

Each attribute in this set specifies an option in the [WireGuard] section of the unit

resources.ini contents

If set, all the required runtime store paths for this service are bind-mounted into a tmpfs-based chroot(2).

A file containing the Discourse API key used to add posts and messages from mail

Store blobs at this location, set to null to use e.g

Configuration options for wpa_supplicant.conf

Whether to enable Simple Ollama web UI service; an easy to use web frontend for a Ollama backend service

Environment file as defined in systemd.exec(5)

An absolute file path (which should be outside the Nix-store) to a secret key to encrypt internal messages with

The directory where pantalaimon should store its state such as the database file.

Specifies the MAC addresses to allow if macAcl is set to "allow" or "radius"

Path to a file containing the idm admin password for kanidm

Configuration options corresponding to parameters set in conf/keycloak.conf

The network's pre-shared key in plaintext defaulting to being a network without any authentication.

This option can be used to store some or all of the options given to the commandline client

The path to the public key file for the host

Locations where the historical will store its data.

An absolute file path (which should be outside the Nix-store) to the secret key of the S3-compatible object storage service.

Additional environment file as defined in systemd.exec(5)

Info storages are used to store information about file uploads

A list of blacklisted CA certificate names that won't be imported from the Mozilla Trust Store into /etc/ssl/certs/ca-certificates.crt

32-byte key used to encrypt variables in the database

Path to a JSON file containing secrets for effects

The maximum in-memory storage capacity available to store temporary data for SQL queries

Tracing configuration

Path to YAML rules configuration

Proxy to use to connect to the wstunnel server (USER:PASS@HOST:PORT).

Additional Munin plugins to autoconfigure, using munin-node-configure --suggest

File to load as environment file

The path of Apache's document root directory

The path of Apache's document root directory

Additional policy settings merged into the policy file

Environment file as defined in systemd.exec(5)

Files to load environment variables from in addition to services.glitchtip.settings

Extra config options

It is recommended you keep your secrets separate from the configuration

Cadvisor storage driver password

Specify the local database filename to store persistent data

the path to store the segments

Where to store blobs

Path to the private key file on the host system

Enable automatic adjustment (step / 5) to what source of data should be used in store gateways if no max_source_resolution param is specified.

This file can be used to store some or all of the options given to the commandline client

An environment file as defined in systemd.exec(5)

Filesystem location where Nexus should store the bank public keys.

Additional policy settings merged into the policy file

24-byte used to encrypt variables in the database

Path to a JSON file containing binary cache secret keys

Type of 9p cache to use when mounting host nix store. "none" provides no caching. "loose" enables Linux's local VFS cache. "fscache" uses Linux's fscache subsystem

The password for this entry

File containing environment variables to substitute in the configuration before starting Traccar

Configuration files to load besides the immutable one defined by the NixOS module

Directory below /var/lib to store VictoriaTraces data

Use this option to configure advanced authentication methods like EAP

The path of Apache's document root directory

API Token to set for the admin user

A file containing the secret used to encrypt some rails data in the DB

File containing environment variables to be passed to the mautrix-signal service

Configuration of XtreemFS DIR replication plugin

Configuration of XtreemFS MRC replication plugin

Plaintext password used to unlock the Java KeyStore set in services.reposilite.settings.keyPath

Use a tmpfs for the writable store instead of writing to the VM's own filesystem.

Path to YAML dashboard configuration

A list of remote servers to which to send each message

Tracing configuration

POSIX Extended Regular Expressions that match store paths that should not appear in the system closure, with the exception of system.extraDependencies, which is not checked.

Environment file as defined in systemd.exec(5)

The path of Apache's document root directory

An absolute file path (which should be outside the Nix-store) to an OpenPGP private key

Appservice registration file

The configuration file for OpenVPN.

Secrets like SECRET_KEY_BASE and BASIC_AUTH_PASSWORD should be passed to the service without adding them to the world-readable Nix store

Directory below /var/lib to store metrics

Store blobs at this location, set to null to use e.g

Directory below /var/lib to store runtime data

The ASF home directory used to store all data

An absolute file path (which should be outside the Nix-store) to a secret key for Stripe

Configuration for the rclone remote being used for backup

Path to YAML mute timings configuration

name of the qdrant collection used to store documents.

The basic secret to use for this service

Path to the file containing the password for the intermediate certificate private key.

An absolute file path (which should be outside the Nix-store) to a key used for encrypting session cookies

Path to a file containing extra paperless config options in the systemd EnvironmentFile format

Filesystem location where Nexus should store the subscriber private keys.

Path to YAML notification policies configuration

Path to YAML datasource configuration

Location of the cluster-join-token.key file

File containing environment variables to be passed to the mautrix-whatsapp service

Whether to include the full closure of the systemd unit file into the chroot, instead of just the dependencies for the executables.

File consisting of lines of the form varname=value to define variables for the wireless configuration

Directory below /var/lib to store VictoriaMetrics metrics data

Either the raw pre-shared key in hexadecimal format or the name of the secret (as defined inside networking.wireless.secretsFile and prefixed with ext:) containing the network pre-shared key.

Configure the type of alert (and other) logging you would like

Path to YAML contact points configuration

The directory where pantalaimon should store its state such as the database file.

Path to the private key corresponding to the server certificate

API key to talk to the Immich server

Path to YAML templates configuration

The keyfile which associates this machine with your tarsnap account

Set a specific keyfile for this archive

A list of capabilities to disable (for example, DHTV to say you cannot store DHT information).

Environment file as defined in systemd.exec(5)

Path of a file with extra environment variables to be loaded from disk

Extra configuration to append to the default ~/.gitolite.rc

Environment file to be passed to the systemd service

Environment file to be passed to the systemd service

An absolute file path (which should be outside the Nix-store) to a base64-encoded Ed25519 key for signing webhook payloads

Path to a file containing extra LubeLogger config options in the systemd EnvironmentFile format

A path to a SSL secret key file in PEM format

Environment file as defined in systemd.exec(5)

Configures the rate limiting burst limit (number of messages per interval) that is applied to all messages generated on the system

Environment file as defined in systemd.exec(5)

Path to a JSON file to be merged with the settings

Secret key used for signing

Use services.mattermost.environmentFile to configure the database instead of writing the database URI to the Nix store

Password to connect to deluge server

The token from your Buildkite "Agents" page

Environment file as defined in systemd.exec(5)

Path to CA bundle file (PEM/X509)

Environment file (see systemd.exec(5) "EnvironmentFile=" section for the syntax) which sets config options for mattermost (see the Mattermost documentation)

Additional packages or strings with context to add to the closure of the chroot

File to load as environment file

Text content of the credential

Fluent Bit configuration

The credentials to access the web interface, in case authentication is enabled, in the format username:hash

The passphrase the backups are encrypted with

Config files to merge into the settings defined in services.prometheus.alertmanager-ntfy.settings

If set, this file system will be mounted in the initial ramdisk

File to load as environment file

Whether to enable Validate configuration file.

The directory to store the database files in

Use these credentials to authenticate during the HTTP upgrade request (Basic authorization type, USER:[PASS]).

Create the objectstore bucket if it does not exist.

Additional environment file or files as defined in systemd.exec(5)

Environment file as defined in systemd.exec(5)

Configuration for the rclone remote being used for backup

A file containing the secret used to encrypt some rails data in a deterministic way in the DB

Store historical flow data in clickhouse

A unique identifier for this authentication token

Additional environment variables to provide to authelia

Seconds to store cached auth entries for.

EnvironmentFile as defined in systemd.exec(5)

Connection string for accessing pgBouncer

Environment file as defined in systemd.exec(5)

List of volumes to attach to this container

Amazon CloudWatch Agent configuration file

Amazon CloudWatch Agent common configuration

Sets the password for WPA-PSK

Environment file as defined in systemd.exec(5)

Absolute path to a file with environment variables used for gitlab-runner registration with runner registration tokens

Datasource specific secure configuration

Absolute path to a file containing environment variables used for gitlab-runner registrations with runner authentication tokens

If we can't use system-provided secure storage, should we proceed anyway?

Sets allowed passwords for WPA3-SAE

Sets the password for WPA-PSK that will be converted to the pre-shared key

Specifies the initial password for the user, i.e. the password assigned if the user does not already exist

Sets the password for WPA3-SAE

Specifies the initial password for the user, i.e. the password assigned if the user does not already exist

Should we bypass any attempt to use system-provided secure storage?

.hg/store size (in MB) past which the nightly job generates clone bundles.

nix substituter to fetch debuginfo from