| services.anki-sync-server.users.*.password | Password accepted by anki-sync-server for the associated username.
WARNING: This option is not secure
|
| services.anki-sync-server.users.*.passwordFile | File containing the password accepted by anki-sync-server for
the associated username
|
| services.anki-sync-server.users | List of user-password pairs to provide to the sync server.
|
| services.anki-sync-server.users.*.username | User name accepted by anki-sync-server.
|
| services.anki-sync-server.port | Port number anki-sync-server listens to.
|
| services.anki-sync-server.enable | Whether to enable anki-sync-server.
|
| services.anki-sync-server.package | The anki-sync-server package to use.
|
| services.anki-sync-server.address | IP address anki-sync-server listens to
|
| services.anki-sync-server.openFirewall | Whether to open the firewall for the specified port.
|
| services.anki-sync-server.baseDirectory | Base directory where user(s) synchronized data will be stored.
|
| services.syncplay.passwordFile | Path to the file that contains the server password
|
| services.bitwarden-directory-connector-cli.sync.users | Sync users.
|
| services.monero.limits.syncSize | Maximum number of blocks to sync at once
|
| services.snapraid.sync.interval | How often to run snapraid sync.
|
| hardware.uni-sync.package | The uni-sync package to use.
|
| hardware.uni-sync.devices.*.sync_rgb | Enable ARGB header sync.
|
| services.shairport-sync.user | User account name under which to run shairport-sync
|
| services.shairport-sync.group | Group account name under which to run shairport-sync
|
| services.shairport-sync.package | The shairport-sync package to use.
|
| services.taskchampion-sync-server.enable | Whether to enable TaskChampion Sync Server for Taskwarrior 3.
|
| services.shairport-sync.enable | Enable the shairport-sync daemon
|
| services.ollama.syncModels | Synchronize all currently installed models with those declared in services.ollama.loadModels,
removing any models that are installed but not currently declared there.
|
| services.syncplay.motdFile | Path to text to display when users join
|
| services.taskchampion-sync-server.package | The taskchampion-sync-server package to use.
|
| hardware.uni-sync.enable | Whether to enable udev rules and software for Lian Li Uni Controllers.
|
| hardware.uni-sync.devices | List of controllers with their configurations.
|
| services.syncplay.statsDBFile | Path to SQLite database file to store stats
|
| services.syncplay.roomsDBFile | Path to SQLite database file to store room states
|
| services.syncplay.saltFile | Path to the file that contains the server salt
|
| services.taskchampion-sync-server.openFirewall | Whether to enable Open firewall port for taskchampion-sync-server.
|
| services.taskchampion-sync-server.port | Port on which to serve
|
| services.taskchampion-sync-server.host | Host address on which to serve
|
| services.taskchampion-sync-server.user | Unix User to run the server under
|
| services.quorum.syncmode | Blockchain sync mode.
|
| services.shairport-sync.settings | Configuration options for Shairport-Sync
|
| services.taskchampion-sync-server.dataDir | Directory in which to store data
|
| services.etesync-dav.enable | Whether to enable etesync-dav, end-to-end encrypted sync for contacts, calendars and tasks.
|
| services.geth.<name>.syncmode | Blockchain sync mode.
|
| services.rsync.jobs | Synchronization jobs to run.
|
| services.taskchampion-sync-server.group | Unix Group to run the server under
|
| services.blockbook-frontend.<name>.sync | Synchronizes until tip, if together with zeromq, keeps index synchronized.
|
| hardware.uni-sync.devices.*.channels.*.mode | "PWM" to enable PWM sync. "Manual" to set speed.
|
| services.firefox-syncserver.enable | Whether to enable the Firefox Sync storage service
|
| services.rsyncd.port | TCP port the daemon will listen on.
|
| services.bitwarden-directory-connector-cli.sync.groups | Whether to sync ldap groups into BitWarden.
|
| services.firefox-syncserver.singleNode.url | URL of the host
|
| services.taskchampion-sync-server.snapshot.days | Target number of days between snapshots
|
| services.taskchampion-sync-server.allowClientIds | Client IDs to allow (can be repeated; if not specified, all clients are allowed)
|
| services.bitwarden-directory-connector-cli.sync | Options to configure what gets synced
|
| services.thanos.store.sync-block-duration | Repeat interval for syncing the blocks between local and remote view
|
| services.syncthing.enable | Whether to enable Syncthing, a self-hosted open-source alternative to Dropbox and Bittorrent Sync.
|
| services.xtreemfs.mrc.syncMode | The sync mode influences how operations are committed to the disk
log before the operation is acknowledged to the caller.
-ASYNC mode the writes to the disk log are buffered in memory by the operating system
|
| services.xtreemfs.dir.syncMode | The sync mode influences how operations are committed to the disk
log before the operation is acknowledged to the caller.
-ASYNC mode the writes to the disk log are buffered in memory by the operating system
|
| services.rsync.enable | Whether to enable periodic directory syncing via rsync.
|
| services.syncthing.guiPasswordFile | Path to file containing the plaintext password for Syncthing's GUI.
|
| services.shairport-sync.openFirewall | Whether to automatically open ports in the firewall.
|
| services.redis.servers.<name>.appendFsync | How often to fsync the append-only log, options: no, always, everysec.
|
| services.etesync-dav.apiUrl | The url to the etesync API.
|
| services.etesync-dav.host | The server host address.
|
| services.etesync-dav.port | The server host port.
|
| services.vdirsyncer.jobs.<name>.configFile | existing configuration file
|
| services.rsync.jobs.<name>.user | The name of an existing user account under which the rsync process should run.
|
| services.syncoid.group | The group for the service.
|
| services.firefox-syncserver.settings | Settings for the sync server
|
| services.rsyncd.enable | Whether to enable the rsync daemon.
|
| hardware.openrazer.syncEffectsEnabled | Set the sync effects flag to true so any assignment of
effects will work across devices.
|
| services.rsync.package | The rsync package to use.
|
| services.taskchampion-sync-server.snapshot.versions | Target number of versions between snapshots
|
| services.shairport-sync.arguments | Arguments to pass to the daemon
|
| hardware.nvidia.prime.sync.enable | Whether to enable NVIDIA Optimus support using the NVIDIA proprietary driver via PRIME
|
| hardware.uni-sync.devices.*.channels | List of channels connected to the controller.
|
| services.syncoid.sshKey | SSH private key file to use to login to the remote system
|
| services.bitwarden-directory-connector-cli.sync.userPath | User directory, relative to root.
|
| services.rsync.jobs.<name>.group | The name of an existing user group under which the rsync process should run.
|
| services.syncplay.permanentRoomsFile | File with list of rooms that will be listed even if the room is empty,
newline delimited
|
| services.syncplay.port | TCP port to bind to.
|
| services.syncplay.chat | Chat with users in the same room.
|
| services.bitwarden-directory-connector-cli.sync.groupPath | Group directory, relative to root.
|
| services.firefox-syncserver.singleNode.capacity | How many sync accounts are allowed on this server
|
| services.timesyncd.servers | The set of NTP servers from which to synchronise
|
| services.psd.resyncTimer | The amount of time to wait before syncing browser profiles back to the
disk
|
| services.bitwarden-directory-connector-cli.sync.userFilter | LDAP filter for users.
|
| services.syncoid.enable | Whether to enable Syncoid ZFS synchronization service.
|
| services.bitwarden-directory-connector-cli.sync.groupFilter | LDAP filter for groups.
|
| services.syncplay.ready | Check readiness of users.
|
| services.bitwarden-directory-connector-cli.sync.emailSuffix | Suffix for the email, normally @example.com.
|
| services.bitwarden-directory-connector-cli.sync.largeImport | Enable if you are syncing more than 2000 users/groups.
|
| hardware.uni-sync.devices.*.device_id | Unique device ID displayed at each startup.
|
| services.syncplay.certDir | TLS certificates directory to use for encryption
|
| services.bitwarden-directory-connector-cli.sync.userObjectClass | Class that users must have.
|
| services.syncplay.ipv4Only | Listen only on IPv4 when strting the server.
|
| services.syncplay.ipv6Only | Listen only on IPv6 when strting the server.
|
| services.thanos.store.block-sync-concurrency | Number of goroutines to use when syncing blocks from object storage
|
| hardware.uni-sync.devices.*.channels.*.speed | Fan speed as percentage (clamped between 0 and 100).
|
| services.rsync.jobs.<name>.sources | Source directories.
|
| services.bitwarden-directory-connector-cli.sync.groupObjectClass | A class that groups will have.
|
| services.syncoid.package | The sanoid package to use.
|
| services.corosync.enable | Whether to enable corosync.
|
| services.syncoid.service | Systemd configuration common to all syncoid services.
|
| services.rsync.jobs.<name>.timerConfig | When to run the job.
|
| services.syncplay.enable | If enabled, start the Syncplay server.
|
| services.syncplay.extraArgs | Additional arguments to be passed to the service.
|
| services.syncplay.motd | Text to display when users join
|
| services.syncthing.key | Path to the key.pem file, which will be copied into Syncthing's
configDir.
|
| services.firefox-syncserver.logLevel | Log level to run with
|
| services.rsyncd.settings | Configuration for rsyncd
|
| services.syncoid.user | The user for the service
|
| services.syncoid.commonArgs | Arguments to add to every syncoid command, unless disabled for that
command
|
| services.bitwarden-directory-connector-cli.sync.removeDisabled | Remove users from bitwarden groups if no longer in the ldap group.
|
| services.bitwarden-directory-connector-cli.sync.useEmailPrefixSuffix | If a user has no email address, combine a username prefix with a suffix value to form an email.
|
| services.syncthing.dataDir | The path where synchronised directories will exist.
|
| services.firefox-syncserver.package | The syncstorage-rs package to use.
|
| services.syncthing.cert | Path to the cert.pem file, which will be copied into Syncthing's
configDir.
|
| services.bitwarden-directory-connector-cli.sync.groupNameAttribute | Attribute for a name of group.
|
| services.bitwarden-directory-connector-cli.sync.userEmailAttribute | Attribute for a users email.
|
| services.corosync.package | The corosync package to use.
|
| services.syncoid.commands | Syncoid commands to run.
|
| services.syncplay.salt | Salt to allow room operator passwords generated by this server
instance to still work when the server is restarted
|
| services.rsync.jobs.<name>.inhibit | Run the rsync process with an inhibition lock taken;
see systemd-inhibit(1) for a list of possible operations.
|
| services.bitwarden-directory-connector-cli.sync.memberAttribute | Attribute that lists members in a LDAP group.
|
| services.vdirsyncer.jobs.<name>.forceDiscover | Run yes | vdirsyncer discover prior to vdirsyncer sync
|
| services.syncplay.package | The syncplay-nogui package to use.
|
| services.firefox-syncserver.settings.port | Port to bind to.
|
| services.syncthing.relay.port | Port to listen on for relay traffic
|
| services.firefox-syncserver.database.user | Username for database connections.
|
| services.syncthing.group | The group to run Syncthing under
|
| services.syncthing.user | The user to run Syncthing as
|
| services.firefox-syncserver.secrets | A file containing the various secrets
|
| services.firefox-syncserver.singleNode.enable | Whether to enable auto-configuration for a simple single-node setup.
|
| services.bitwarden-directory-connector-cli.sync.emailPrefixAttribute | The attribute that contains the users username.
|
| services.vdirsyncer.jobs | vdirsyncer job configurations
|
| services.firefox-syncserver.singleNode.enableTLS | Whether to enable automatic TLS setup.
|
| services.timesyncd.enable | Enables the systemd NTP client daemon.
|
| services.firefox-syncserver.database.name | Database to use for storage
|
| services.syncplay.useACMEHost | If set, use NixOS-generated ACME certificate with the specified name for TLS
|
| services.corosync.clusterName | Name of the corosync cluster.
|
| services.psd.enable | Whether to enable the Profile Sync daemon.
|
| services.firefox-syncserver.database.host | Database host name. localhost is treated specially and inserts
systemd dependencies, other hostnames or IP addresses of the local machine do not.
|
| services.syncthing.relay.pools | Relay pools to join
|
| services.rsync.jobs.<name>.settings | Settings that should be passed to rsync via long options
|
| services.bitwarden-directory-connector-cli.sync.overwriteExisting | Remove and re-add users/groups, See https://bitwarden.com/help/user-group-filters/#overwriting-syncs for more details.
|
| services.firefox-syncserver.singleNode.enableNginx | Whether to enable nginx virtualhost definitions.
|
| services.bitwarden-directory-connector-cli.sync.creationDateAttribute | Attribute that lists a user's creation date.
|
| services.syncthing.relay.enable | Whether to enable Syncthing relay service.
|
| services.corosync.nodelist | Corosync nodelist: all cluster members.
|
| services.syncplay.isolateRooms | Enable room isolation.
|
| services.syncthing.package | The syncthing package to use.
|
| services.etesync-dav.openFirewall | Whether to open the firewall for the specified port.
|
| services.syncthing.extraFlags | Extra flags passed to the syncthing command in the service definition.
|
| services.corosync.extraOptions | Additional options with which to start corosync.
|
| services.syncoid.localSourceAllow | Permissions granted for the services.syncoid.user user
for local source datasets
|
| services.firefox-syncserver.singleNode.hostname | Host name to use for this service.
|
| services.syncthing.configDir | The path where the settings and keys will exist.
|
| services.syncthing.guiAddress | The address to serve the web interface at.
|
| services.vdirsyncer.enable | Whether to enable vdirsyncer.
|
| services.corosync.nodelist.*.name | Node name
|
| services.syncthing.relay.statusPort | Port to listen on for serving the relay status API
|
| services.syncthing.relay.globalRateBps | Global bandwidth rate limit in bytes per second.
|
| services.timesyncd.extraConfig | Extra config options for systemd-timesyncd
|
| services.syncoid.interval | Run syncoid at this interval
|
| services.syncoid.commands.<name>.sshKey | SSH private key file to use to login to the remote system
|
| services.atuin.enable | Whether to enable Atuin server for shell history sync.
|
| services.vdirsyncer.package | The vdirsyncer package to use.
|
| services.vdirsyncer.jobs.<name>.user | User account to run vdirsyncer as, otherwise as a systemd
dynamic user
|
| services.vdirsyncer.jobs.<name>.group | group to run vdirsyncer as
|
| services.syncthing.databaseDir | The directory containing the database and logs.
|
| services.rsyncd.socketActivated | If enabled Rsync will be socket-activated rather than run persistently.
|
| services.syncoid.commands.<name>.extraArgs | Extra syncoid arguments for this command.
|
| services.syncthing.relay.providedBy | Human-readable description of the provider of the relay (you).
|
| services.corosync.nodelist.*.nodeid | Node ID number
|
| services.syncplay.maxChatMessageLength | Maximum number of characters in a chat message.
|
| services.rsyncd.settings.sections | attribute set of section of an INI file (attrs of INI atom (null, bool, int, float or string))
|
| services.syncthing.relay.extraOptions | Extra command line arguments to pass to strelaysrv.
|
| services.syncplay.interfaceIpv6 | The IP address to bind to for IPv6
|
| services.syncplay.interfaceIpv4 | The IP address to bind to for IPv4
|
| services.firefox-syncserver.database.createLocally | Whether to create database and user on the local machine if they do not exist
|
| services.firezone.server.provision.accounts.<name>.features.idp_sync | Whether to enable the idp_sync feature for this account.
|
| services.syncplay.maxUsernameLength | Maximum number of characters in a username.
|
| services.syncthing.systemService | Whether to auto-launch Syncthing as a system service.
|
| services.vdirsyncer.jobs.<name>.enable | Whether to enable this vdirsyncer job.
|
| services.syncoid.localTargetAllow | Permissions granted for the services.syncoid.user user
for local target datasets
|
| networking.proxy.rsyncProxy | This option specifies the rsync_proxy environment variable.
|
| services.syncoid.commands.<name>.source | Source ZFS dataset
|
| services.syncthing.relay.perSessionRateBps | Per session bandwidth rate limit in bytes per second.
|
| services.syncthing.relay.listenAddress | Address to listen on for relay traffic.
|
| services.vdirsyncer.jobs.<name>.config.pairs | vdirsyncer pair configurations
|
| services.syncoid.commands.<name>.target | Target ZFS dataset
|
| services.syncoid.commands.<name>.service | Systemd configuration specific to this syncoid service.
|
| services.rsyncd.settings.globalSection | global section of an INI file (attrs of INI atom (null, bool, int, float or string))
|
| services.rsync.jobs.<name>.destination | Destination directory.
|
| services.syncoid.commands.<name>.useCommonArgs | Whether to add the configured common arguments to this command.
|
| services.rustus.storage.force_sync | calls fsync system call after every write to disk in local storage
|
| services.syncplay.permanentRooms | List of rooms that will be listed even if the room is empty
|
| services.firefox-syncserver.settings.tokenserver.enabled | Whether to enable the token service as well.
|
| services.syncthing.settings.options | The options element contains all other global configuration options
|
| services.vdirsyncer.jobs.<name>.timerConfig | systemd timer configuration
|
| services.orangefs.server.fileSystems.<name>.troveSyncData | Sync data.
|
| services.orangefs.server.fileSystems.<name>.troveSyncMeta | Sync meta data.
|
| services.syncthing.all_proxy | Overwrites the all_proxy environment variable for the Syncthing process to
the given value
|
| services.vdirsyncer.jobs.<name>.config.statusPath | vdirsyncer's status path
|
| services.vdirsyncer.jobs.<name>.config.general | general configuration
|
| services.syncoid.commands.<name>.sendOptions | Advanced options to pass to zfs send
|
| services.syncoid.commands.<name>.recvOptions | Advanced options to pass to zfs recv
|
| services.syncthing.settings.folders.<name>.id | The ID of the folder
|
| services.syncthing.settings.devices.<name>.id | The device ID
|
| services.gammu-smsd.device.synchronizeTime | Whether to set time from computer to the phone during starting connection
|
| services.resilio.deviceName | Name of the Resilio Sync device.
|
| services.syncthing.settings.folders | Folders which should be shared by Syncthing
|
| services.syncthing.settings.devices | Peers/devices which Syncthing should communicate with
|
| services.etesync-dav.sslCertificate | Path to server SSL certificate
|
| services.syncthing.settings.devices.<name>.name | The name of the device.
|
| services.syncthing.relay.statusListenAddress | Address to listen on for serving the relay status API.
|
| services.resilio.package | The resilio-sync package to use.
|
| services.syncthing.settings | Extra configuration options for Syncthing
|
| services.syncthing.settings.folders.<name>.type | Controls how the folder is handled by Syncthing
|
| services.etesync-dav.sslCertificateKey | Path to server SSL certificate key
|
| services.syncthing.settings.folders.<name>.label | The label of the folder.
|
| services.syncoid.commands.<name>.recursive | Whether to enable the transfer of child datasets.
|
| services.syncthing.openDefaultPorts | Whether to open the default ports in the firewall: TCP/UDP 22000 for transfers
and UDP 21027 for discovery
|
| services.vdirsyncer.jobs.<name>.config.storages | vdirsyncer storage configurations
|
| services.resilio.enable | If enabled, start the Resilio Sync daemon
|
| services.syncoid.commands.<name>.localSourceAllow | Permissions granted for the services.syncoid.user user
for local source datasets
|
| services.castopod.dataDir | The path where castopod stores all data
|
| services.syncthing.overrideDevices | Whether to delete the devices which are not configured via the
devices option
|
| services.syncthing.settings.folders.<name>.path | The path to the folder which should be shared
|
| services.dendrite.settings.sync_api.search.enabled | Whether to enable Dendrite's full-text search engine.
|
| services.timesyncd.fallbackServers | The set of fallback NTP servers from which to synchronise
|
| services.corosync.nodelist.*.ring_addrs | List of addresses, one for each ring.
|
| services.syncthing.overrideFolders | Whether to delete the folders which are not configured via the
folders option
|
| services.syncthing.settings.folders.<name>.enable | Whether to share this folder
|
| security.pam.oath.window | Specify the number of one-time passwords to check in order
to accommodate for situations where the system and the
client are slightly out of sync (iteration for HOTP or time
steps for TOTP).
|
| services.drupal.sites.<name>.configSyncDir | The location of the Drupal config sync directory.
|
| services.syncoid.commands.<name>.localTargetAllow | Permissions granted for the services.syncoid.user user
for local target datasets
|
| services.syncthing.settings.options.relaysEnabled | When true, relays will be connected to and potentially used for device to device connections.
|
| services.syncthing.settings.options.localAnnouncePort | The port on which to listen and send IPv4 broadcast announcements to.
|
| services.dendrite.settings.sync_api.search.language | The language most likely to be used on the server - used when indexing, to
ensure the returned results match expectations
|
| services.prosody.modules.carbons | Keep multiple clients in sync
|
| services.syncthing.settings.options.urAccepted | Whether the user has accepted to submit anonymous usage data
|
| services.syncthing.settings.folders.<name>.devices | The devices this folder should be shared with
|
| services.resilio.storagePath | Where BitTorrent Sync will store it's database files (containing
things like username info and licenses)
|
| services.recyclarr.command | The recyclarr command to run (e.g., sync).
|
| services.snapraid.touchBeforeSync | Whether snapraid touch should be run before snapraid sync.
|
| services.vdirsyncer.jobs.<name>.additionalGroups | additional groups to add the dynamic user to
|
| services.syncthing.settings.options.limitBandwidthInLan | Whether to apply bandwidth limits to devices in the same broadcast domain as the local device.
|
| services.dendrite.settings.sync_api.search.index_path | The path the search index will be created in.
|
| services.syncthing.settings.devices.<name>.autoAcceptFolders | Automatically create or share folders that this device advertises at the default path
|
| services.syncthing.settings.folders.<name>.versioning.type | The type of versioning
|
| services.syncthing.settings.options.localAnnounceEnabled | Whether to send announcements to the local LAN, also use such announcements to find other devices.
|
| services.dendrite.settings.sync_api.database.connection_string | Database for the Sync API.
|
| services.syncthing.settings.folders.<name>.versioning | How to keep changed/deleted files with Syncthing
|
| services.syncthing.settings.options.maxFolderConcurrency | This option controls how many folders may concurrently be in I/O-intensive operations such as syncing or scanning
|
| services.syncthing.settings.folders.<name>.copyOwnershipFromParent | On Unix systems, tries to copy file/folder ownership from the parent directory (the directory it’s located in)
|
| services.syncthing.settings.folders.<name>.ignorePatterns | Syncthing can be configured to ignore certain files in a folder using ignore patterns
|
| services.znapzend.features.oracleMode | Whether to enable destroying snapshots one by one instead of using one long argument list
|
| services.k3s.autoDeployCharts | Auto deploying Helm charts that are installed by the k3s Helm controller
|
| programs.zsh.autosuggestions.async | Whether to fetch suggestions asynchronously
|
| hardware.nvidia.prime.allowExternalGpu | Whether to enable configuring X to allow external NVIDIA GPUs when using Prime [Reverse] sync optimus
.
|
| services.k3s.manifests | Auto-deploying manifests that are linked to /var/lib/rancher/k3s/server/manifests before k3s starts
|
| services.rke2.autoDeployCharts | Auto deploying Helm charts that are installed by the rke2 Helm controller
|
| services.postgresqlWalReceiver.receivers.<name>.synchronous | Flush the WAL data to disk immediately after it has been received
|
| services.athens.downloadMode | Defines how Athens behaves when a module@version
is not found in storage
|
| services.rke2.manifests | Auto-deploying manifests that are linked to /var/lib/rancher/rke2/server/manifests before rke2 starts
|
| services.dependency-track.settings."alpine.oidc.team.synchronization" | This option will ensure that team memberships for OpenID Connect users are dynamic and
synchronized with membership of OpenID Connect groups or assigned roles
|
| services.archisteamfarm.package | The archisteamfarm package to use. ::: {.warning}
Should always be the latest version, for security reasons,
since this module uses very new features and to not get out of sync with the Steam API.
:::
|
| services.jellyfin.transcoding.enableIntelLowPowerEncoding | Enable low-power encoding mode for Intel Quick Sync Video
|