services.transmission.settings.download-dir ‐ NixOS ‐ Searchix

Search Nix packages and options from NixOS, Darwin, Home Manager, Nix Packages and NUR

Indexing last ran 5 hours ago, will run again in 18 hours.

NixOS options search

Title	Description
services.transmission.settings.download-dir	Directory where to download torrents.
services.transmission.downloadDirPermissions	If not `null`, is used as the permissions set by `system.activationScripts.transmission-daemon` on the directories services.transmission.settings.download-dir, services.transmission.settings.incomplete-dir. and services.transmission.settings.watch-dir
services.transmission.settings.incomplete-dir	When enabled with services.transmission.home services.transmission.settings.incomplete-dir-enabled, new torrents will download the files to this directory
services.transmission.home	The directory where Transmission will create `.config/transmission-daemon`. as well as `Downloads/` unless services.transmission.settings.download-dir is changed, and `.incomplete/` unless services.transmission.settings.incomplete-dir is changed.
services.aria2.settings.dir	Directory to store downloaded files.
services.opengfw.dir	Working directory of the OpenGFW service and home of `opengfw.user`.
services.xserver.xkb.dir	Path used for -xkbdir xserver parameter.
services.transmission.settings.watch-dir-enabled	Whether to enable the services.transmission.settings.watch-dir.
services.xtreemfs.dir.enable	Whether to enable XtreemFS DIR service.
services.transmission.settings.watch-dir	Watch a directory for torrent files and add them to transmission.
services.xtreemfs.dir.port	The port to listen on for incoming connections (TCP).
services.xtreemfs.dir.extraConfig	Configuration of XtreemFS DIR service
services.bacula-dir.tls	TLS Options for the Director
services.xtreemfs.dir.httpPort	Specifies the listen port for the HTTP service that returns the status page.
services.bacula-dir.name	The director name used by the system administrator
services.xtreemfs.dir.uuid	Must be set to a unique identifier, preferably a UUID according to RFC 4122
services.bacula-dir.tls.key	The path of a PEM encoded TLS private key
services.xtreemfs.dir.address	If specified, it defines the interface to listen on
services.public-inbox.settings.coderepo.<name>.dir	Path to a git repository
services.bacula-dir.enable	Whether to enable Bacula Director Daemon.
services.transmission.settings.incomplete-dir-enabled
services.traefik.dynamic.dir	Path to the directory Traefik should watch for configuration files. Files in this directory matching the glob `_nixos-` (reserved for Nix-managed dynamic configurations) will be deleted as part of `systemd-tmpfiles-resetup.service`, regardless of their origin.*.
services.netbird.tunnels.<name>.dir.baseName	A systemd service name to use (without `.service` suffix).
services.netbird.clients.<name>.dir.baseName	A systemd service name to use (without `.service` suffix).
services.netbird.clients.<name>.dir.state	A state directory used by NetBird client to store config.json, state.json & resolv.conf.
services.netbird.tunnels.<name>.dir.state	A state directory used by NetBird client to store config.json, state.json & resolv.conf.
services.bacula-dir.extraConfig	Extra configuration for Bacula Director Daemon.
services.bacula-dir.tls.enable	Specifies if TLS should be enabled
services.netbird.tunnels.<name>.dir.runtime	A runtime directory used by NetBird client.
services.netbird.clients.<name>.dir.runtime	A runtime directory used by NetBird client.
services.bacula-dir.port	Specify the port (a positive integer) on which the Director daemon will listen for Bacula Console connections
services.xtreemfs.dir.replication.enable	Whether to enable XtreemFS DIR replication plugin.
services.bacula-dir.password	Specifies the password that must be supplied for a Director.
services.postsrsd.settings.chroot-dir	Path to chroot into at runtime as an additional layer of protection. We confine the runtime environment through systemd hardening instead, so this option is read-only.
services.typesense.settings.server.data-dir	Path to the directory where data will be stored on disk.
services.xtreemfs.dir.replication.extraConfig	Configuration of XtreemFS DIR replication plugin
services.rustus.info_storage.dir	directory to store info about uploads
services.suricata.settings.default-log-dir	The default logging directory
services.below.dirs.log	Where to store below's logs
services.filebrowser.settings.cache-dir	The directory where FileBrowser stores its cache.
services.bacula-dir.tls.allowedCN	Common name attribute of allowed peer certificates
services.slskd.settings.directories.downloads	Directory where downloaded files are stored.
programs.direnv.nix-direnv.enable	Whether to enable a faster, persistent implementation of use_nix and use_flake, to replace the builtin one .
programs.direnv.nix-direnv.package	The nix-direnv package to use
services.below.dirs.store	Where to store below's data
services.bacula-dir.extraMessagesConfig	Extra configuration to be passed in Messages directive.
services.bacula-dir.extraDirectorConfig	Extra configuration to be passed in Director directive.
services.legit.settings.dirs.static	Directories where static files are located.
services.bacula-dir.tls.caCertificateFile	The path specifying a PEM encoded TLS CA certificate(s)
programs.direnv.direnvrcExtra	Extra lines to append to the sourced direnvrc
services.bacula-dir.tls.require	Require TLS or TLS-PSK encryption
services.apache-kafka.settings."log.dirs"	Log file directories.
services.bacula-dir.tls.verifyPeer	Verify peer certificate
services.xtreemfs.dir.syncMode	The sync mode influences how operations are committed to the disk log before the operation is acknowledged to the caller. -ASYNC mode the writes to the disk log are buffered in memory by the operating system
services.routinator.settings.repository-dir	The path where the collected RPKI data is stored.
services.pretix.settings.pretix.logdir	Directory for storing log files.
programs.direnv.settings	Direnv configuration
services.minidlna.settings.db_dir	Specify the directory to store database and album art cache.
services.artalk.workdir	Artalk working directory
services.pretix.settings.pretix.datadir	Directory for storing user uploads and similar data.
services.legit.settings.dirs.templates	Directories where template files are located.
services.bacula-dir.tls.certificate	The full path to the PEM encoded TLS certificate
services.pretix.settings.pretix.cachedir	Directory for storing temporary files.
services.kubo.dataDir	The data dir for Kubo
services.garage.settings.data_dir	The directory in which Garage will store the data blocks of objects
services.bind.directory	Working directory of BIND.
services.transmission.settings.trash-original-torrent-files	Whether to delete torrents added from the services.transmission.settings.watch-dir.
services.bacula-sd.director	This option defines Director resources in Bacula Storage Daemon.
services.bacula-fd.director	This option defines director resources in Bacula File Daemon.
services.hickory-dns.settings.directory	The directory in which hickory-dns should look for .zone files, whenever zones aren't specified by absolute path.
programs.direnv.silent	Whether to enable the hiding of direnv logging .
services.lighttpd.cgit.subdir	The subdirectory in which to serve cgit
programs.direnv.angrr.autoUse	Whether to automatically use angrr before loading .envrc.
services.chrony.directory	Directory where chrony state is stored.
services.vdirsyncer.jobs	vdirsyncer job configurations
programs.direnv.package	The direnv package to use.
services.bacula-sd.director.<name>.tls	TLS Options for the Director in this Configuration.
services.bacula-fd.director.<name>.tls	TLS Options for the Director in this Configuration.
services.oauth2-proxy.redirectURL	The OAuth2 redirect URL.
services.minidlna.settings.media_dir	Directories to be scanned for media files
services.bosun.ledisDir	Path to bosun's ledis data dir
services.radicle.ci.broker.settings.report_dir	Directory where HTML and JSON report pages are written.
programs.direnv.angrr.enable	Whether to enable angrr direnv integration.
services.movim.h2o.tls.redirectCode	HTTP status used by `globalRedirect` & `forceSSL`
services.yandex-disk.directory	The directory to use for Yandex
services.slskd.settings.shares.directories	Paths to shared directories
services.bacula-sd.director.<name>.tls.key	The path of a PEM encoded TLS private key
services.bacula-fd.director.<name>.tls.key	The path of a PEM encoded TLS private key
services.tuned.settings.profile_dirs	Directories to search for profiles, separated by `,` or `;`.
programs.direnv.loadInNixShell	Whether to enable loading direnv in `nix-shell` `nix shell` or `nix develop` .
services.szurubooru.server.settings.data_dir	Path to the static files.
services.rustus.storage.data_dir	path to the local directory where all files are stored
services.vdirsyncer.enable	Whether to enable vdirsyncer.
power.ups.ups.<name>.directives	List of configuration directives for this UPS.
services.davis.nginx.globalRedirect	If set, all requests for this host are redirected (defaults to 301, configurable with `redirectCode`) to the given hostname.
services.slskd.nginx.globalRedirect	If set, all requests for this host are redirected (defaults to 301, configurable with `redirectCode`) to the given hostname.
services.movim.nginx.globalRedirect	If set, all requests for this host are redirected (defaults to 301, configurable with `redirectCode`) to the given hostname.
services.hadoop.hbase.rootdir	This option will set "hbase.rootdir" in hbase-site.xml and determine the directory shared by region servers and into which HBase persists
services.garage.settings.metadata_dir	The metadata directory, put this on a fast disk (e.g
services.snipe-it.nginx.globalRedirect	If set, all requests for this host are redirected (defaults to 301, configurable with `redirectCode`) to the given hostname.
services.davis.nginx.redirectCode	HTTP status used by `globalRedirect` and `forceSSL`
services.movim.nginx.redirectCode	HTTP status used by `globalRedirect` and `forceSSL`
services.slskd.nginx.redirectCode	HTTP status used by `globalRedirect` and `forceSSL`
programs.direnv.finalPackage	The wrapped direnv package.
programs.direnv.enable	Whether to enable direnv integration
services.snipe-it.nginx.redirectCode	HTTP status used by `globalRedirect` and `forceSSL`
services.resilio.directoryRoot	Default directory to add folders in the web UI.
services.spark.worker.workDir	Spark worker work dir.
services.charybdis.statedir	Location of the state directory of charybdis.
services.h2o.hosts.<name>.tls.redirectCode	HTTP status used by `globalRedirect` & `forceSSL`
services.thanos.sidecar.reloader.rule-dirs	Rule directories for the reloader to refresh.
services.akkoma.nginx.globalRedirect	If set, all requests for this host are redirected (defaults to 301, configurable with `redirectCode`) to the given hostname.
services.fluidd.nginx.globalRedirect	If set, all requests for this host are redirected (defaults to 301, configurable with `redirectCode`) to the given hostname.
services.gancio.nginx.globalRedirect	If set, all requests for this host are redirected (defaults to 301, configurable with `redirectCode`) to the given hostname.
services.monica.nginx.globalRedirect	If set, all requests for this host are redirected (defaults to 301, configurable with `redirectCode`) to the given hostname.
services.matomo.nginx.globalRedirect	If set, all requests for this host are redirected (defaults to 301, configurable with `redirectCode`) to the given hostname.
security.krb5.settings.includedir	Directories containing files to include in the Kerberos configuration.
services.vdirsyncer.package	The vdirsyncer package to use.
services.actual.settings.dataDir	Directory under which Actual runs and saves its data
services.vdirsyncer.jobs.<name>.group	group to run vdirsyncer as
services.vdirsyncer.jobs.<name>.user	User account to run vdirsyncer as, otherwise as a systemd dynamic user
services.gancio.nginx.redirectCode	HTTP status used by `globalRedirect` and `forceSSL`
services.fluidd.nginx.redirectCode	HTTP status used by `globalRedirect` and `forceSSL`
services.akkoma.nginx.redirectCode	HTTP status used by `globalRedirect` and `forceSSL`
services.monica.nginx.redirectCode	HTTP status used by `globalRedirect` and `forceSSL`
services.matomo.nginx.redirectCode	HTTP status used by `globalRedirect` and `forceSSL`
programs.gnupg.dirmngr.enable	Enables GnuPG network certificate management daemon with socket-activation for every user session.
services.nextcloud.datadir	Nextcloud's data storage path
services.ipfs-cluster.dataDir	The data dir for ipfs-cluster.
services.bacula-sd.director.<name>.tls.caCertificateFile	The path specifying a PEM encoded TLS CA certificate(s)
services.bacula-fd.director.<name>.tls.caCertificateFile	The path specifying a PEM encoded TLS CA certificate(s)
services.veilid.settings.core.table_store.directory	The filesystem directory to store your table store within.
services.veilid.settings.core.block_store.directory	The filesystem directory to store blocks for the block store.
services.vdirsyncer.jobs.<name>.enable	Whether to enable this vdirsyncer job.
services.dolibarr.h2o.tls.redirectCode	HTTP status used by `globalRedirect` & `forceSSL`
services.bacula-sd.director.<name>.tls.enable	Specifies if TLS should be enabled
services.bacula-fd.director.<name>.tls.enable	Specifies if TLS should be enabled
services.openafsClient.cache.directory	Cache directory.
services.vsftpd.anonymousMkdirEnable	Whether any uploads are permitted to anonymous users.
services.slskd.settings.directories.incomplete	Directory where incomplete downloading files are stored.
services.xtreemfs.homeDir	XtreemFS home dir for the xtreemfs user.
services.vdirsyncer.jobs.<name>.config.pairs	vdirsyncer pair configurations
services.radicle.httpd.nginx.globalRedirect	If set, all requests for this host are redirected (defaults to 301, configurable with `redirectCode`) to the given hostname.
services.vdirsyncer.jobs.<name>.configFile	existing configuration file
services.kbfs.enableRedirector	Whether to enable the Keybase root redirector service, allowing any user to access KBFS files via `/keybase`, which will show different contents depending on the requester.
services.radicle.httpd.nginx.redirectCode	HTTP status used by `globalRedirect` and `forceSSL`
services.dependency-track.settings."alpine.data.directory"	Defines the path to the data directory
services.dolibarr.nginx.globalRedirect	If set, all requests for this host are redirected (defaults to 301, configurable with `redirectCode`) to the given hostname.
services.fediwall.nginx.globalRedirect	If set, all requests for this host are redirected (defaults to 301, configurable with `redirectCode`) to the given hostname.
services.kanboard.nginx.globalRedirect	If set, all requests for this host are redirected (defaults to 301, configurable with `redirectCode`) to the given hostname.
services.agorakit.nginx.globalRedirect	If set, all requests for this host are redirected (defaults to 301, configurable with `redirectCode`) to the given hostname.
services.librenms.nginx.globalRedirect	If set, all requests for this host are redirected (defaults to 301, configurable with `redirectCode`) to the given hostname.
services.mainsail.nginx.globalRedirect	If set, all requests for this host are redirected (defaults to 301, configurable with `redirectCode`) to the given hostname.
services.pixelfed.nginx.globalRedirect	If set, all requests for this host are redirected (defaults to 301, configurable with `redirectCode`) to the given hostname.
services.nagios.virtualHost.globalRedirect	If set, all requests for this host are redirected permanently to the given URL.
services.moodle.virtualHost.globalRedirect	If set, all requests for this host are redirected permanently to the given URL.
services.public-inbox.inboxes.<name>.inboxdir	The absolute path to the directory which hosts the public-inbox.
services.neo4j.directories.home	Path of the Neo4j home directory
services.vdirsyncer.jobs.<name>.timerConfig	systemd timer configuration
services.fediwall.nginx.redirectCode	HTTP status used by `globalRedirect` and `forceSSL`
services.librenms.nginx.redirectCode	HTTP status used by `globalRedirect` and `forceSSL`
services.dolibarr.nginx.redirectCode	HTTP status used by `globalRedirect` and `forceSSL`
services.agorakit.nginx.redirectCode	HTTP status used by `globalRedirect` and `forceSSL`
services.kanboard.nginx.redirectCode	HTTP status used by `globalRedirect` and `forceSSL`
services.pixelfed.nginx.redirectCode	HTTP status used by `globalRedirect` and `forceSSL`
services.mainsail.nginx.redirectCode	HTTP status used by `globalRedirect` and `forceSSL`
security.acme.certs.<name>.directory	Directory where certificate and other state is stored.
services.sourcehut.settings."meta.sr.ht::settings".onboarding-redirect	Where to redirect new users upon registration.
services.neo4j.directories.data	Path of the data directory
fileSystems.<name>.overlay.workdir	The path to the workdir
services.anuko-time-tracker.nginx.globalRedirect	If set, all requests for this host are redirected (defaults to 301, configurable with `redirectCode`) to the given hostname.
services.zabbixWeb.httpd.virtualHost.globalRedirect	If set, all requests for this host are redirected permanently to the given URL.
services.vdirsyncer.jobs.<name>.config.statusPath	vdirsyncer's status path
services.vdirsyncer.jobs.<name>.config.general	general configuration
services.anuko-time-tracker.nginx.redirectCode	HTTP status used by `globalRedirect` and `forceSSL`
services.bookstack.nginx.globalRedirect	If set, all requests for this host are redirected (defaults to 301, configurable with `redirectCode`) to the given hostname.
services.zabbixWeb.nginx.virtualHost.globalRedirect	If set, all requests for this host are redirected (defaults to 301, configurable with `redirectCode`) to the given hostname.
services.httpd.virtualHosts.<name>.globalRedirect	If set, all requests for this host are redirected permanently to the given URL.
services.bookstack.nginx.redirectCode	HTTP status used by `globalRedirect` and `forceSSL`
services.zabbixWeb.nginx.virtualHost.redirectCode	HTTP status used by `globalRedirect` and `forceSSL`
services.mpd.settings.music_directory	The directory or URI where MPD reads music from
services.chhoto-url.settings.redirect_method	The redirect method to use.
services.riemann-dash.dataDir	Location of the riemann-base dir
services.nginx.virtualHosts.<name>.globalRedirect	If set, all requests for this host are redirected (defaults to 301, configurable with `redirectCode`) to the given hostname.
services.redsocks.redsocks.*.doNotRedirect	Iptables filters that if matched will get the packet off of redsocks.
services.jirafeau.nginxConfig.globalRedirect	If set, all requests for this host are redirected (defaults to 301, configurable with `redirectCode`) to the given hostname.
services.bacula-sd.director.<name>.monitor	If Monitor is set to `no`, this director will have full access to this Storage daemon
services.bacula-fd.director.<name>.monitor	If Monitor is set to `no`, this director will have full access to this Storage daemon
services.bacula-sd.director.<name>.tls.allowedCN	Common name attribute of allowed peer certificates
services.bacula-fd.director.<name>.tls.allowedCN	Common name attribute of allowed peer certificates
services.lighttpd.mod_userdir	If true, requests in the form /~user/page.html are rewritten to take the file public_html/page.html from the home directory of the user.
services.drupal.sites.<name>.virtualHost.globalRedirect	If set, all requests for this host are redirected permanently to the given URL.
services.nginx.virtualHosts.<name>.redirectCode	HTTP status used by `globalRedirect` and `forceSSL`
services.jirafeau.nginxConfig.redirectCode	HTTP status used by `globalRedirect` and `forceSSL`
services.vdirsyncer.jobs.<name>.config.storages	vdirsyncer storage configurations
services.veilid.settings.client_api.ipc_directory	IPC directory where file sockets are stored.
services.paperless.exporter.directory	Directory to store export.
services.vdirsyncer.jobs.<name>.forceDiscover	Run `yes \| vdirsyncer discover` prior to `vdirsyncer sync`
services.neo4j.directories.imports	The root directory for file URLs used with the Cypher `LOAD CSV` clause
services.neo4j.directories.plugins	Path of the database plugin directory
services.libreswan.disableRedirects	Whether to disable send and accept redirects for all network interfaces
services.tarsnap.archives.<name>.cachedir	The cache allows tarsnap to identify previously stored data blocks, reducing archival time and bandwidth usage
services.mediawiki.httpd.virtualHost.globalRedirect	If set, all requests for this host are redirected permanently to the given URL.
fileSystems.<name>.overlay.upperdir	The path to the upperdir
fileSystems.<name>.overlay.lowerdir	The list of path(s) to the lowerdir(s)
services.openssh.authorizedKeysInHomedir	Enables the use of the `~/.ssh/authorized_keys` file
services.bacula-sd.director.<name>.tls.require	Require TLS or TLS-PSK encryption
services.bacula-fd.director.<name>.tls.require	Require TLS or TLS-PSK encryption
services.fedimintd.<name>.nginx.config.globalRedirect	If set, all requests for this host are redirected (defaults to 301, configurable with `redirectCode`) to the given hostname.
services.veilid.settings.core.protected_store.directory	The filesystem directory to store your protected store in.
services.bacula-sd.director.<name>.tls.verifyPeer	Verify peer certificate
services.bacula-fd.director.<name>.tls.verifyPeer	Verify peer certificate
services.fedimintd.<name>.nginx.config.redirectCode	HTTP status used by `globalRedirect` and `forceSSL`
services.biboumi.settings.policy_directory	A directory that should contain the policy files, used to customize Botan’s behaviour when negotiating the TLS connections with the IRC servers.
services.limesurvey.virtualHost.globalRedirect	If set, all requests for this host are redirected permanently to the given URL.
services.kerberos_server.settings.includedir	Directories containing files to include in the Kerberos configuration.
services.bitwarden-directory-connector-cli.ldap.ssl	Whether to use TLS.
services.tarsnap.archives.<name>.directories	List of filesystem paths to archive.
services.limesurvey.httpd.virtualHost.globalRedirect	If set, all requests for this host are redirected permanently to the given URL.
services.bitwarden-directory-connector-cli.ldap.ad	Whether the LDAP Server is an Active Directory.
services.rustus.storage.dir_structure	pattern of a directory structure locally and on s3
services.wordpress.sites.<name>.virtualHost.globalRedirect	If set, all requests for this host are redirected permanently to the given URL.
services.limesurvey.nginx.virtualHost.globalRedirect	If set, all requests for this host are redirected (defaults to 301, configurable with `redirectCode`) to the given hostname.
services.bitwarden-directory-connector-cli.ldap.port	Port LDAP is accessible on.
services.bitwarden-directory-connector-cli.user	User to run the program.
services.limesurvey.nginx.virtualHost.redirectCode	HTTP status used by `globalRedirect` and `forceSSL`
services.bitwarden-directory-connector-cli.sync.users	Sync users.
services.redsocks.redsocks.*.redirectInternetOnly	Exclude all non-globally-routable IPs from redsocks
services.bitwarden-directory-connector-cli.ldap.rootPath	Root path for LDAP.
services.vdirsyncer.jobs.<name>.additionalGroups	additional groups to add the dynamic user to
services.bacula-sd.director.<name>.password	Specifies the password that must be supplied for the default Bacula Console to be authorized
services.bacula-fd.director.<name>.password	Specifies the password that must be supplied for the default Bacula Console to be authorized
programs.direnv.enableZshIntegration	Whether to enable Zsh integration .
services.bitwarden-directory-connector-cli.sync.userPath	User directory, relative to root.
services.bitwarden-directory-connector-cli.ldap.startTls	Whether to use STARTTLS.
services.nomad.extraSettingsPlugins	Additional plugins dir used to configure nomad.
services.misskey.reverseProxy.webserver.nginx.globalRedirect	If set, all requests for this host are redirected (defaults to 301, configurable with `redirectCode`) to the given hostname.
services.postgresql.initdbArgs	Additional arguments passed to `initdb` during data dir initialisation.
programs.direnv.enableBashIntegration	Whether to enable Bash integration .
programs.direnv.enableFishIntegration	Whether to enable Fish integration .
services.bitwarden-directory-connector-cli.sync.groupPath	Group directory, relative to root.
services.misskey.reverseProxy.webserver.nginx.redirectCode	HTTP status used by `globalRedirect` and `forceSSL`
services.bitwarden-directory-connector-cli.sync.groups	Whether to sync ldap groups into BitWarden.
services.maubot.settings.plugin_directories.load	The directories from which plugins should be loaded
services.maubot.settings.plugin_directories	Plugin directory paths
services.bitwarden-directory-connector-cli.domain	The domain the Bitwarden/Vaultwarden is accessible on.
services.akkoma.config.":pleroma".":instance".upload_dir	Directory where Akkoma will put uploaded files.
services.mpd.settings.playlist_directory	The directory where MPD stores playlists
services.bacula-sd.director.<name>.tls.certificate	The full path to the PEM encoded TLS certificate
services.bacula-fd.director.<name>.tls.certificate	The full path to the PEM encoded TLS certificate
services.bitwarden-directory-connector-cli.enable	Whether to enable Bitwarden Directory Connector.
services.fedimintd.<name>.dataDir	Path to the data dir fedimintd will use to store its data
services.mobilizon.settings.":mobilizon"."Mobilizon.Storage.Repo".socket_dir	Path to the postgres socket directory
services.bitwarden-directory-connector-cli.sync.userFilter	LDAP filter for users.
programs.direnv.enableXonshIntegration	Whether to enable Xonsh integration .
services.maubot.settings.plugin_directories.trash	The directory where old plugin versions and conflicting plugins should be moved
services.maubot.settings.plugin_directories.upload	The directory where uploaded new plugins should be stored.
services.nghttpx.backends.*.params.redirect-if-not-tls	If true, a backend match requires the frontend connection be TLS encrypted
services.bitwarden-directory-connector-cli.ldap	Options to configure the LDAP connection
services.bitwarden-directory-connector-cli.sync	Options to configure what gets synced
security.auditd.plugins.<name>.direction	The option is dictated by the plugin
services.bitwarden-directory-connector-cli.sync.groupFilter	LDAP filter for groups.
services.rstudio-server.serverWorkingDir	Default working directory for server (server-working-dir in rserver.conf).
services.nextcloud.settings.skeletondirectory	The directory where the skeleton files are located
services.bitwarden-directory-connector-cli.secrets.ldap	Path to file that contains LDAP password for user in {option}`ldap.username
services.bitwarden-directory-connector-cli.sync.emailSuffix	Suffix for the email, normally @example.com.
services.bitwarden-directory-connector-cli.sync.largeImport	Enable if you are syncing more than 2000 users/groups.
services.bitwarden-directory-connector-cli.ldap.pagedSearch	Whether the LDAP server paginates search results.
services.bitwarden-directory-connector-cli.package	The bitwarden-directory-connector-cli package to use.
services.bitwarden-directory-connector-cli.ldap.username	The user to authenticate as.
services.bitwarden-directory-connector-cli.sync.userObjectClass	Class that users must have.
services.bitwarden-directory-connector-cli.ldap.hostname	The host the LDAP is accessible on.
programs.tsmClient.servers.<name>.passworddir	Directory that holds the TSM node's password information.
services.bitwarden-directory-connector-cli.sync.groupObjectClass	A class that groups will have.
services.bitwarden-directory-connector-cli.interval	The interval when to run the connector
services.borgmatic.settings.source_directories	List of source directories and files to backup
services.akkoma.config.":pleroma".":instance".static_dir	Directory of static files
documentation.nixos.checkRedirects	Check redirects for manualHTML.
services.bitwarden-directory-connector-cli.sync.useEmailPrefixSuffix	If a user has no email address, combine a username prefix with a suffix value to form an email.
services.bitwarden-directory-connector-cli.sync.removeDisabled	Remove users from bitwarden groups if no longer in the ldap group.
networking.nftables.checkRulesetRedirects	Set of paths that should be intercepted and rewritten while checking the ruleset using `pkgs.buildPackages.libredirect`.
services.postgresqlWalReceiver.receivers.<name>.directory	Directory to write the output to.
services.blockbook-frontend.<name>.cssDir	Location of the dir with main.css CSS file
services.redsocks.redsocks.*.redirectCondition	Conditions to make outbound packets go through this redsocks instance
services.cyrus-imap.imapdSettings.configdirectory	The pathname of the IMAP configuration directory.
services.bitwarden-directory-connector-cli.sync.groupNameAttribute	Attribute for a name of group.
services.bitwarden-directory-connector-cli.sync.userEmailAttribute	Attribute for a users email.
services.bitwarden-directory-connector-cli.sync.memberAttribute	Attribute that lists members in a LDAP group.
virtualisation.directBoot.initrd	In direct boot situations, you may want to influence the initrd to load to use your own customized payload
services.kanidm.provision.systems.oauth2.<name>.enableLocalhostRedirects	Allow localhost redirects
services.bitwarden-directory-connector-cli.sync.emailPrefixAttribute	The attribute that contains the users username.
services.neo4j.directories.certificates	Directory for storing certificates to be used by Neo4j for TLS connections
services.bitwarden-directory-connector-cli.sync.overwriteExisting	Remove and re-add users/groups, See https://bitwarden.com/help/user-group-filters/#overwriting-syncs for more details.
services.bitwarden-directory-connector-cli.sync.creationDateAttribute	Attribute that lists a user's creation date.
services.bacula-sd.tls.caCertificateFile	The path specifying a PEM encoded TLS CA certificate(s)
services.bacula-fd.tls.caCertificateFile	The path specifying a PEM encoded TLS CA certificate(s)
services.paperless.consumptionDirIsPublic	Whether all users can write to the consumption dir.
virtualisation.fileSystems.<name>.overlay.workdir	The path to the workdir
virtualisation.directBoot.enable	If enabled, the virtual machine will boot directly into the kernel instead of through a bootloader
virtualisation.fileSystems.<name>.overlay.upperdir	The path to the upperdir
virtualisation.fileSystems.<name>.overlay.lowerdir	The list of path(s) to the lowerdir(s)
services.chhoto-url.settings.custom_landing_directory	The path of a directory which contains a custom landing page.
virtualisation.spiceUSBRedirection.enable	Install the SPICE USB redirection helper with setuid privileges
hardware.nvidia-container-toolkit.mount-nvidia-docker-1-directories	Mount nvidia-docker-1 directories on containers: /usr/local/nvidia/lib and /usr/local/nvidia/lib64.
services.bitwarden-directory-connector-cli.secrets.bitwarden.client_path_id	Path to file that contains Client ID.
virtualisation.oci-containers.containers.<name>.workdir	Override the default working directory for the container.
services.bitwarden-directory-connector-cli.secrets.bitwarden.client_path_secret	Path to file that contains Client Secret.
services.strongswan-swanctl.swanctl.connections.<name>.if_id_in	XFRM interface ID set on inbound policies/SA, can be overridden by child config, see there for details
services.borgmatic.configurations.<name>.source_directories	List of source directories and files to backup
services.strongswan-swanctl.swanctl.connections.<name>.if_id_out	XFRM interface ID set on outbound policies/SA, can be overridden by child config, see there for details
services.prometheus.scrapeConfigs..http_sd_configs..follow_redirects	Configure whether HTTP requests follow HTTP 3xx redirects
services.prometheus.scrapeConfigs..kuma_sd_configs..follow_redirects	Configure whether HTTP requests follow HTTP 3xx redirects
services.prometheus.scrapeConfigs..uyuni_sd_configs..follow_redirects	Configure whether HTTP requests follow HTTP 3xx redirects
services.prometheus.scrapeConfigs..azure_sd_configs..follow_redirects	Configure whether HTTP requests follow HTTP 3xx redirects
services.strongswan-swanctl.swanctl.connections.<name>.children.<name>.if_id_in	XFRM interface ID set on inbound policies/SA
services.prometheus.scrapeConfigs..eureka_sd_configs..follow_redirects	Configure whether HTTP requests follow HTTP 3xx redirects
services.prometheus.scrapeConfigs..linode_sd_configs..follow_redirects	Configure whether HTTP requests follow HTTP 3xx redirects
services.prometheus.scrapeConfigs..docker_sd_configs..follow_redirects	Configure whether HTTP requests follow HTTP 3xx redirects
services.prometheus.scrapeConfigs..consul_sd_configs..follow_redirects	Configure whether HTTP requests follow HTTP 3xx redirects
services.strongswan-swanctl.swanctl.connections.<name>.children.<name>.if_id_out	XFRM interface ID set on outbound policies/SA
services.prometheus.scrapeConfigs..hetzner_sd_configs..follow_redirects	Configure whether HTTP requests follow HTTP 3xx redirects
services.strongswan-swanctl.swanctl.connections.<name>.children.<name>.mark_in	Netfilter mark and mask for input traffic
services.strongswan-swanctl.swanctl.connections.<name>.children.<name>.mark_out	Netfilter mark and mask for output traffic
services.prometheus.scrapeConfigs..puppetdb_sd_configs..follow_redirects	Configure whether HTTP requests follow HTTP 3xx redirects
services.prometheus.scrapeConfigs..marathon_sd_configs..follow_redirects	Configure whether HTTP requests follow HTTP 3xx redirects
services.prometheus.scrapeConfigs..scaleway_sd_configs..follow_redirects	Configure whether HTTP requests follow HTTP 3xx redirects
services.strongswan-swanctl.swanctl.connections.<name>.children.<name>.set_mark_in	Netfilter mark applied to packets after the inbound IPsec SA processed them
services.strongswan-swanctl.swanctl.connections.<name>.children.<name>.set_mark_out	Netfilter mark applied to packets after the outbound IPsec SA processed them
services.prometheus.scrapeConfigs..kubernetes_sd_configs..follow_redirects	Configure whether HTTP requests follow HTTP 3xx redirects
services.prometheus.scrapeConfigs..dockerswarm_sd_configs..follow_redirects	Configure whether HTTP requests follow HTTP 3xx redirects
services.prometheus.scrapeConfigs..digitalocean_sd_configs..follow_redirects	Configure whether HTTP requests follow HTTP 3xx redirects