| services.transmission.settings.script-torrent-done-filename | Executable to be run at torrent completion.
|
| services.transmission.settings.script-torrent-done-enabled | Whether to run
services.transmission.settings.script-torrent-done-filename
at torrent completion.
|
| services.rutorrent.nginx.enable | Whether to enable nginx virtual host management
|
| services.cross-seed.settings.torrentDir | Directory containing torrent files, or if you're using a torrent
client integration and injection - your torrent client's .torrent
file store/cache.
|
| services.suricata.settings.unix-command.filename | Filename for unix-command socket.
|
| services.suricata.settings.logging.outputs.file.filename | Filename of the logfile.
|
| services.monica.config | monica configuration options to set in the
.env file
|
| services.transmission.settings.trash-original-torrent-files | Whether to delete torrents added from the
services.transmission.settings.watch-dir.
|
| services.agorakit.config | Agorakit configuration options to set in the
.env file
|
| services.wyoming.satellite.sounds.done | Path to audio file in WAV format to play when voice command recording has ended.
|
| image.baseName | Basename of the image filename without any extension (e.g. image_1).
|
| services.jigasi.config | Contents of the sip-communicator.properties configuration file for jigasi.
|
| services.prometheus.exporters.dmarc.folders.done | IMAP mailbox that successfully processed reports are moved to.
|
| image.fileName | Filename of the image including all extensions (e.g image_1.raw or
image_1.raw.zst).
|
| services.rtorrent.port | The rtorrent port.
|
| services.rtorrent.user | User account under which rtorrent runs.
|
| services.rtorrent.group | Group under which rtorrent runs.
|
| services.rtorrent.dataDir | The directory where rtorrent stores its data files.
|
| services.qbittorrent.torrentingPort | the port passed to qbittorrent via --torrenting-port
|
| hardware.display.outputs.<name>.edid | An EDID filename to be used for configured display, as in edid/<filename>
|
| services.rtorrent.enable | Whether to enable rtorrent.
|
| services.transmission.settings.watch-dir | Watch a directory for torrent files and add them to transmission.
|
| services.rutorrent.user | User which runs the ruTorrent service.
|
| services.rutorrent.dataDir | Storage path of ruTorrent.
|
| services.rtorrent.rpcSocket | RPC socket path.
|
| services.rutorrent.group | Group which runs the ruTorrent service.
|
| services.rutorrent.hostName | FQDN for the ruTorrent instance.
|
| services.rtorrent.package | The rtorrent package to use.
|
| services.rutorrent.enable | Whether to enable ruTorrent.
|
| image.extension | Extension of the image filename (e.g. raw).
|
| services.rutorrent.rpcSocket | Path to rtorrent rpc socket.
|
| services.drupal.webserver | Whether to use nginx or caddy for virtual host management
|
| services.rtorrent.downloadDir | Where to put downloaded files.
|
| programs.proxychains.chain.type | dynamic - Each connection will be done via chained proxies
all proxies chained in the order as they appear in the list
at least one proxy must be online to play in chain
(dead proxies are skipped)
otherwise EINTR is returned to the app.
strict - Each connection will be done via chained proxies
all proxies chained in the order as they appear in the list
all proxies must be online to play in chain
otherwise EINTR is returned to the app.
random - Each connection will be done via random proxy
(or proxy chain, see programs.proxychains.chain.length) from the list.
|
| services.gitea.dump.file | Filename to be used for the dump
|
| services.paisa.settings.dbFile | Filename of the Paisa database.
|
| services.rtorrent.configText | The content of rtorrent.rc
|
| environment.wvdial.dialerDefaults | Contents of the "Dialer Defaults" section of
/etc/wvdial.conf.
|
| services.rtorrent.openFirewall | Whether to open the firewall for the port in services.rtorrent.port.
|
| services.qbittorrent.user | User account under which qbittorrent runs.
|
| services.diod.logdest | Set the destination for logging
|
| services.qbittorrent.group | Group under which qbittorrent runs.
|
| services.freshrss.webserver | Whether to use nginx or caddy for virtual host management
|
| services.dokuwiki.webserver | Whether to use nginx or caddy for virtual host management
|
| services.athens.filterFile | Filename for the include exclude filter.
|
| i18n.defaultLocale | The default locale
|
| services.qbittorrent.enable | Whether to enable qbittorrent, BitTorrent client.
|
| services.wordpress.webserver | Whether to use apache2 or nginx for virtual host management
|
| services.qbittorrent.webuiPort | the port passed to qbittorrent via --webui-port
|
| services.forgejo.dump.file | Filename to be used for the dump
|
| services.rutorrent.poolSettings | Options for ruTorrent's PHP pool
|
| services.qbittorrent.package | The qbittorrent-nox package to use.
|
| services.qbittorrent.extraArgs | Extra arguments passed to qbittorrent
|
| services.soju.configFile | Path to config file
|
| services.jackett.enable | Whether to enable Jackett, API support for your favorite torrent trackers.
|
| services.qbittorrent.profileDir | the path passed to qbittorrent via --profile.
|
| services.hylafax.faxqclean.doneqMinutes | Set the job
age threshold (in minutes) that controls how long
jobs may reside in the doneq directory.
|
| services.paisa.settings.journalFile | Filename of the main journal / ledger file.
|
| boot.loader.grub.copyKernels | Whether the GRUB menu builder should copy kernels and initial
ramdisks to /boot
|
| services.webdav.configFile | Path to config file
|
| services.cross-seed.settings.outputDir | Directory where cross-seed will place torrent files it finds.
|
| services.torrentstream.port | TorrentStream port.
|
| services.rutorrent.plugins | List of plugins to enable
|
| services.sympa.web.server | The webserver used for the Sympa web interface
|
| services.rtorrent.dataPermissions | Unix Permissions in octal on the rtorrent directory.
|
| services.qbittorrent.openFirewall | Whether to enable opening both the webuiPort and torrentPort over TCP in the firewall.
|
| services.prowlarr.enable | Whether to enable Prowlarr, an indexer manager/proxy for Torrent trackers and Usenet indexers.
|
| services.moodle.virtualHost | Apache configuration can be done by adapting services.httpd.virtualHosts
|
| services.nagios.virtualHost | Apache configuration can be done by adapting services.httpd.virtualHosts
|
| services.torrentstream.enable | Whether to enable TorrentStream daemon.
|
| services.torrentstream.address | Address to listen on.
|
| services.torrentstream.package | The torrentstream package to use.
|
| services.suricata.settings.plugins | Plugins -- Experimental -- specify the filename for each plugin shared object.
|
| hardware.tenstorrent.enable | Whether to enable Tenstorrent driver & utilities.
|
| services.snips-sh.settings | The configuration of snips-sh is done through environment variables,
therefore you must use upper snake case (e.g. SNIPS_HTTP_INTERNAL)
|
| services.davis.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| services.movim.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| services.slskd.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| services.snipe-it.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| services.webdav-server-rs.configFile | Path to config file
|
| services.fluidd.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| services.akkoma.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| services.gancio.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| services.matomo.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| services.monica.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| services.ergochat.configFile | Path to configuration file
|
| services.drupal.sites.<name>.virtualHost | Apache configuration can be done by adapting services.httpd.virtualHosts.
|
| services.postfix.masterConfig | An attribute set of service options, which correspond to the service
definitions usually done within the Postfix
master.cf file.
|
| services.torrentstream.openFirewall | Open ports in the firewall for TorrentStream daemon.
|
| services.zabbixWeb.httpd.virtualHost | Apache configuration can be done by adapting services.httpd.virtualHosts.<name>
|
| services.zabbixWeb.nginx.virtualHost | Nginx configuration can be done by adapting services.nginx.virtualHosts.<name>
|
| programs.river.package | The river package to use
|
| fileSystems.<name>.device | The device as passed to mount
|
| services.pfix-srsd.secretsFile | The secret data used to encode the SRS address.
to generate, use a command like:
for n in $(seq 5); do dd if=/dev/urandom count=1 bs=1024 status=none | sha256sum | sed 's/ -$//' | sed 's/^/ /'; done
|
| services.qbittorrent.serverConfig | Free-form settings mapped to the qBittorrent.conf file in the profile
|
| services.nominatim.enable | Whether to enable nominatim
|
| services.roundcube.enable | Whether to enable roundcube
|
| services.zapret.params | Specify the bypass parameters for Zapret binary
|
| services.kanboard.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| services.librenms.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| services.dolibarr.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| services.agorakit.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| services.fediwall.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| services.mainsail.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| services.pixelfed.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| services.caddy.adapter | Name of the config adapter to use
|
| programs.sway.package | The sway package to use
|
| services.rutorrent.nginx.exposeInsecureRPC2mount | If you do not enable one of the rpc or httprpc plugins you need to expose an RPC mount through scgi using this option
|
| services.dnscrypt-proxy.configFile | Path to TOML config file
|
| services.radicle.httpd.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| services.nginx.virtualHosts.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| services.anuko-time-tracker.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| services.bookstack.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| services.limesurvey.virtualHost | Apache configuration can be done by adapting services.httpd.virtualHosts.<name>
|
| services.dnscrypt-proxy2.configFile | Path to TOML config file
|
| services.ocis.configDir | Path to directory containing oCIS config file
|
| services.mediawiki.httpd.virtualHost | Apache configuration can be done by adapting services.httpd.virtualHosts
|
| services.wordpress.sites.<name>.virtualHost | Apache configuration can be done by adapting services.httpd.virtualHosts.
|
| services.suricata.settings.unix-command | Unix command socket that can be used to pass commands to Suricata
|
| services.gitlab.backup.uploadOptions | GitLab automatic upload specification
|
| services.jitsi-meet.nginx.enable | Whether to enable nginx virtual host that will serve the javascript application and act as
a proxy for the XMPP server
|
| hardware.display.edid.packages | List of packages containing EDID binary files at $out/lib/firmware/edid
|
| programs.river-classic.package | The river-classic package to use
|
| services.jirafeau.nginxConfig.basicAuthFile | Basic Auth password file for a vhost
|
| services.systembus-notify.enable | Whether to enable System bus notification support
WARNING: enabling this option (while convenient) should not be done on a
machine where you do not trust the other users as it allows any other
local user to DoS your session by spamming notifications
.
|
| services.headscale.settings.database.type | Database engine to use
|
| services.maddy.tls.loader | TLS certificates are obtained by modules called "certificate
loaders"
|
| services.zabbixWeb.nginx.virtualHost.basicAuthFile | Basic Auth password file for a vhost
|
| services.invidious.nginx.enable | Whether to configure nginx as a reverse proxy for Invidious
|
| boot.specialFileSystems.<name>.device | The device as passed to mount
|
| services.stash.mutableSettings | Whether the Stash config.yml is writeable by Stash
|
| services.limesurvey.httpd.virtualHost | Apache configuration can be done by adapting services.httpd.virtualHosts.<name>
|
| services.limesurvey.nginx.virtualHost | Nginx configuration can be done by adapting services.nginx.virtualHosts.<name>
|
| services.librenms.phpOptions | Options for PHP's php.ini file for librenms
|
| services.cloud-init.enable | Enable the cloud-init service
|
| services.vsftpd.userDbPath | Only applies if enableVirtualUsers is true
|
| services.davis.nginx.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| services.movim.nginx.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| services.slskd.nginx.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| users.ldap.bind.distinguishedName | The distinguished name to bind to the LDAP server with
|
| services.snipe-it.nginx.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| services.webhook.hooksTemplated | Same as hooks, but these hooks are specified as literal strings instead of Nix values,
and hence can include template syntax
which might not be representable as JSON
|
| services.tinc.networks.<name>.chroot | Change process root directory to the directory where the config file is located (/etc/tinc/netname/), for added security
|
| swapDevices.*.encrypted.keyFile | Path to a keyfile used to unlock the backing encrypted
device
|
| services.akkoma.nginx.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| services.fluidd.nginx.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| services.fedimintd.<name>.nginx.config.basicAuthFile | Basic Auth password file for a vhost
|
| services.gancio.nginx.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| services.monica.nginx.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| services.matomo.nginx.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| fonts.fontconfig.hinting.style | Hintstyle is the amount of font reshaping done to line up
to the grid.
slight will make the font more fuzzy to line up to the grid but
will be better in retaining font shape, while full will be a
crisp font that aligns well to the pixel grid but will lose a
greater amount of font shape.
|
| services.pdns-recursor.dnssecValidation | Controls the level of DNSSEC processing done by the PowerDNS Recursor
|
| services.gokapi.environment.GOKAPI_CONFIG_FILE | Sets the filename for the config file.
|
| services.postfixadmin.enable | Whether to enable postfixadmin
|
| fileSystems.<name>.encrypted.keyFile | Path to a keyfile used to unlock the backing encrypted
device
|
| services.rabbitmq.configItems | Configuration options in RabbitMQ's new config file format,
which is a simple key-value format that can not express nested
data structures
|
| services.nghttpx.backends.*.params.dns | Name resolution of a backends host name is done at start up,
or configuration reload
|
| services.nextcloud.phpOptions | Options for PHP's php.ini file for nextcloud
|
| services.mailpit.instances.<name>.database | Specify the local database filename to store persistent data
|
| services.dolibarr.nginx.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| services.kanboard.nginx.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| services.librenms.nginx.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| services.agorakit.nginx.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| services.fediwall.nginx.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| services.mainsail.nginx.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| services.pixelfed.nginx.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| services.limesurvey.nginx.virtualHost.basicAuthFile | Basic Auth password file for a vhost
|
| services.radicle.httpd.nginx.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| services.listmonk.database.mutableSettings | Database settings will be reset to the value set in this module if this is not enabled
|
| systemd.tmpfiles.settings.<config-name>.<path>.<tmpfiles-type>.age | Delete a file when it reaches a certain age
|
| services.nginx.virtualHosts.<name>.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| services.anuko-time-tracker.nginx.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| services.bookstack.nginx.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| services.tor.relay.onionServices | See torrc manual.
Because tor.service runs in its own RootDirectory=,
when using a onion service to reverse-proxy to a Unix socket,
you need to make that Unix socket available
within the mount namespace of tor.service
|
| services.jirafeau.nginxConfig.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| services.zabbixWeb.nginx.virtualHost.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| services.misskey.reverseProxy.webserver.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| boot.initrd.systemd.tmpfiles.settings.<config-name>.<path>.<tmpfiles-type>.age | Delete a file when it reaches a certain age
|
| services.xserver.displayManager.sx.enable | Whether to enable the "sx" pseudo-display manager, which allows users
to start manually via the "sx" command from a vt shell
|
| services.resolved.dnsovertls | If set to
"true":
all DNS lookups will be encrypted
|
| services.fedimintd.<name>.nginx.config.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| virtualisation.libvirtd.onBoot | Specifies the action to be done to / on the guests when the host boots
|
| documentation.man.mandoc.settings.output.includes | A string of relative path used as a template for the output path of
linked header files (usually via the In macro) in HTML output
|
| services.matrix-synapse.log | Default configuration for the loggers used by matrix-synapse and its workers
|
| services.limesurvey.nginx.virtualHost.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| services.fluent-bit.configurationFile | Fluent Bit configuration
|
| virtualisation.fileSystems.<name>.device | The device as passed to mount
|
| services.prometheus.exporters.deluge.exportPerTorrentMetrics | Enable per-torrent metrics
|
| services.earlyoom.enableNotifications | Send notifications about killed processes via the system d-bus
|
| services.misskey.reverseProxy.webserver.nginx.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| services.nextcloud.notify_push.bendDomainToLocalhost | Whether to add an entry to /etc/hosts for the configured nextcloud domain to point to localhost and add localhost to nextcloud's trusted_proxies config option
|
| services.vaultwarden.config | The configuration of vaultwarden is done through environment variables,
therefore it is recommended to use upper snake case (e.g. DISABLE_2FA_REMEMBER)
|
| networking.firewall.connectionTrackingModules | List of connection-tracking helpers that are auto-loaded
|
| services.postgresql.systemCallFilter | Configures the syscall filter for postgresql.service
|
| services.smartd.notifications.systembus-notify.enable | Whenever to send systembus-notify notifications
|
| services.prometheus.scrapeConfigs.*.file_sd_configs.*.files | Patterns for files from which target groups are extracted
|
| virtualisation.fileSystems.<name>.encrypted.keyFile | Path to a keyfile used to unlock the backing encrypted
device
|
| virtualisation.xen.boot.builderVerbosity | The boot entry builder script should be called with exactly one of the following arguments in order to specify its verbosity:
-
quiet supresses all messages.
-
default adds a simple "Installing Xen Project Hypervisor boot entries...done." message to the script.
-
info is the same as default, but it also prints a diff with information on which generations were altered.
- This option adds two extra dependencies to the script:
diffutils and bat.
-
debug prints information messages for every single step of the script
|
| virtualisation.xen.efi.bootBuilderVerbosity | The EFI boot entry builder script should be called with exactly one of the following arguments in order to specify its verbosity:
-
quiet supresses all messages.
-
default adds a simple "Installing Xen Project Hypervisor boot entries...done." message to the script.
-
info is the same as default, but it also prints a diff with information on which generations were altered.
- This option adds two extra dependencies to the script:
diffutils and bat.
-
debug prints information messages for every single step of the script
|
| networking.wireguard.interfaces.<name>.peers.*.endpoint | Endpoint IP or hostname of the peer, followed by a colon,
and then a port number of the peer
|
| services.amazon-cloudwatch-agent.configurationFile | Amazon CloudWatch Agent configuration file
|
| services.github-runners.<name>.tokenFile | The full path to a file which contains either
- a fine-grained personal access token (PAT),
- a classic PAT
- or a runner registration token
Changing this option or the tokenFile’s content triggers a new runner registration
|
| services.amazon-cloudwatch-agent.commonConfigurationFile | Amazon CloudWatch Agent common configuration
|
| networking.networkmanager.ensureProfiles.secrets.entries | A list of secrets to provide to NetworkManager by reading their values from configured files
|
| services.movim.h2o.tls.recommendations | By default, H2O, without prejudice, will use as many TLS versions &
cipher suites as it & the TLS library (OpenSSL) can support
|
| services.h2o.hosts.<name>.tls.recommendations | By default, H2O, without prejudice, will use as many TLS versions &
cipher suites as it & the TLS library (OpenSSL) can support
|
| services.h2o.defaultTLSRecommendations | By default, H2O, without prejudice, will use as many TLS versions &
cipher suites as it & the TLS library (OpenSSL) can support
|
| services.strongswan-swanctl.swanctl.connections.<name>.local_addrs | Local address(es) to use for IKE communication
|
| services.dolibarr.h2o.tls.recommendations | By default, H2O, without prejudice, will use as many TLS versions &
cipher suites as it & the TLS library (OpenSSL) can support
|
| services.strongswan-swanctl.swanctl.connections.<name>.remote_addrs | Remote address(es) to use for IKE communication
|