| boot.initrd.extraFiles.<name>.source | The object to make available inside the initrd.
|
| networking.tempAddresses | Whether to enable IPv6 Privacy Extensions for interfaces not
configured explicitly in
networking.interfaces._name_.tempAddress
|
| services.sympa.settingsFile.<name>.source | Path of the source file.
|
| services.spiped.config.<name>.source | Address on which spiped should listen for incoming
connections
|
| nixpkgs.flake.source | The path to the nixpkgs sources used to build the system
|
| services.openssh.authorizedKeysFiles | Specify the rules for which files to read on the host
|
| services.waagent.settings.ResourceDisk.FileSystem | The file system type for the resource disk
|
| services.heapster.source | Heapster metric source
|
| boot.initrd.systemd.storePaths.*.source | Path of the source file.
|
| services.asusd.asusdConfig.source | Path of the source file.
|
| services.asusd.animeConfig.source | Path of the source file.
|
| xdg.icons.fallbackCursorThemes | Names of the fallback cursor themes, in order of preference, to be used when no other icon source can be found
|
| services.rspamd.locals.<name>.source | Path of the source file.
|
| services.asusd.fanCurvesConfig.source | Path of the source file.
|
| services.asusd.userLedModesConfig.source | Path of the source file.
|
| services.asusd.auraConfigs.<name>.source | Path of the source file.
|
| programs.neovim.runtime.<name>.source | Path of the source file.
|
| services.asusd.profileConfig.source | Path of the source file.
|
| environment.etc.<name>.source | Path of the source file.
|
| boot.initrd.systemd.contents.<name>.source | Path of the source file.
|
| services.k3s.manifests.<name>.source | Path of the source .yaml file.
|
| services.fedimintd.<name>.nginx.config.rejectSSL | Whether to listen for and reject all HTTPS connections to this vhost
|
| systemd.shutdownRamfs.storePaths.*.source | Path of the source file.
|
| services.sourcehut.settings."sr.ht".source-url | The source code for your fork of sr.ht.
|
| security.wrappers.<name>.source | The absolute path to the program to be wrapped.
|
| services.rke2.manifests.<name>.source | Path of the source .yaml file.
|
| services.rspamd.overrides.<name>.source | Path of the source file.
|
| services.syncoid.commands.<name>.source | Source ZFS dataset
|
| networking.defaultGateway.source | The default source address.
|
| systemd.shutdownRamfs.contents.<name>.source | Path of the source file.
|
| networking.defaultGateway6.source | The default source address.
|
| swapDevices.*.randomEncryption.source | Define the source of randomness to obtain a random key for encryption.
|
| services.prometheus.scrapeConfigs.*.label_name_length_limit | Per-scrape limit on length of labels name that will be accepted for a sample
|
| services.bacula-sd.director.<name>.tls.caCertificateFile | The path specifying a PEM encoded TLS CA certificate(s)
|
| services.bacula-fd.director.<name>.tls.caCertificateFile | The path specifying a PEM encoded TLS CA certificate(s)
|
| services.tuliprox.sourceSettings | Source definitions
Refer to the Tuliprox documentation for available attributes
|
| services.firewalld.zones.<name>.sourcePorts | Source ports to allow in the zone.
|
| networking.nat.forwardPorts.*.sourcePort | Source port of the external interface; to specify a port range, use a string with a colon (e.g. "60000:61000")
|
| services.bacula-sd.director.<name>.tls.require | Require TLS or TLS-PSK encryption
|
| services.bacula-fd.director.<name>.tls.require | Require TLS or TLS-PSK encryption
|
| services.mail.sendmailSetuidWrapper.source | The absolute path to the program to be wrapped.
|
| image.repart.partitions.<name>.contents.<name>.source | Path of the source file.
|
| services.bacula-sd.director.<name>.tls.verifyPeer | Verify peer certificate
|
| services.bacula-fd.director.<name>.tls.verifyPeer | Verify peer certificate
|
| services.davis.nginx.rejectSSL | Whether to listen for and reject all HTTPS connections to this vhost
|
| services.slskd.nginx.rejectSSL | Whether to listen for and reject all HTTPS connections to this vhost
|
| services.movim.nginx.rejectSSL | Whether to listen for and reject all HTTPS connections to this vhost
|
| services.rsync.jobs.<name>.sources | Source directories.
|
| services.snipe-it.nginx.rejectSSL | Whether to listen for and reject all HTTPS connections to this vhost
|
| services.firewalld.services.<name>.sourcePorts | Source ports for the service.
|
| services.akkoma.nginx.rejectSSL | Whether to listen for and reject all HTTPS connections to this vhost
|
| services.fluidd.nginx.rejectSSL | Whether to listen for and reject all HTTPS connections to this vhost
|
| services.gancio.nginx.rejectSSL | Whether to listen for and reject all HTTPS connections to this vhost
|
| services.monica.nginx.rejectSSL | Whether to listen for and reject all HTTPS connections to this vhost
|
| services.matomo.nginx.rejectSSL | Whether to listen for and reject all HTTPS connections to this vhost
|
| services.snapserver.settings.stream.source | One or multiple URIs to PCM input streams.
|
| services.firewalld.zones.<name>.sourcePorts.*.port | |
| boot.loader.grub.extraFiles | A set of files to be copied to /boot
|
| services.kanboard.nginx.rejectSSL | Whether to listen for and reject all HTTPS connections to this vhost
|
| services.dolibarr.nginx.rejectSSL | Whether to listen for and reject all HTTPS connections to this vhost
|
| services.librenms.nginx.rejectSSL | Whether to listen for and reject all HTTPS connections to this vhost
|
| services.agorakit.nginx.rejectSSL | Whether to listen for and reject all HTTPS connections to this vhost
|
| services.fediwall.nginx.rejectSSL | Whether to listen for and reject all HTTPS connections to this vhost
|
| services.pixelfed.nginx.rejectSSL | Whether to listen for and reject all HTTPS connections to this vhost
|
| services.mainsail.nginx.rejectSSL | Whether to listen for and reject all HTTPS connections to this vhost
|
| services.radicle.httpd.nginx.rejectSSL | Whether to listen for and reject all HTTPS connections to this vhost
|
| services.filebeat.inputs | Inputs specify how Filebeat locates and processes input data
|
| services.postgresql.systemCallFilter | Configures the syscall filter for postgresql.service
|
| services.anuko-time-tracker.nginx.rejectSSL | Whether to listen for and reject all HTTPS connections to this vhost
|
| services.bacula-sd.director.<name>.tls.enable | Specifies if TLS should be enabled
|
| services.bacula-fd.director.<name>.tls.enable | Specifies if TLS should be enabled
|
| services.bookstack.nginx.rejectSSL | Whether to listen for and reject all HTTPS connections to this vhost
|
| services.nginx.virtualHosts.<name>.rejectSSL | Whether to listen for and reject all HTTPS connections to this vhost
|
| services.firewalld.services.<name>.sourcePorts.*.port | |
| services.zabbixWeb.nginx.virtualHost.rejectSSL | Whether to listen for and reject all HTTPS connections to this vhost
|
| services.jirafeau.nginxConfig.rejectSSL | Whether to listen for and reject all HTTPS connections to this vhost
|
| services.firewalld.zones.<name>.sourcePorts.*.protocol | |
| services.sourcehut.hg.user | User for hg.sr.ht.
|
| services.sourcehut.hg.port | Port on which the "hg" backend should listen.
|
| services.sourcehut.git.user | User for git.sr.ht.
|
| services.sourcehut.man.user | User for man.sr.ht.
|
| services.sourcehut.hub.user | User for hub.sr.ht.
|
| virtualisation.credentials.<name>.source | Source file on the host containing the credential data.
|
| services.sourcehut.git.port | Port on which the "git" backend should listen.
|
| services.sourcehut.hub.port | Port on which the "hub" backend should listen.
|
| services.sourcehut.man.port | Port on which the "man" backend should listen.
|
| programs.fish.vendor.config.enable | Whether fish should source configuration snippets provided by other packages.
|
| networking.sits.<name>.encapsulation.sourcePort | Source port when using UDP encapsulation
|
| services.sourcehut.todo.user | User for todo.sr.ht.
|
| services.sourcehut.meta.user | User for meta.sr.ht.
|
| services.sourcehut.meta.port | Port on which the "meta" backend should listen.
|
| services.sourcehut.todo.port | Port on which the "todo" backend should listen.
|
| services.firewalld.zones.<name>.sources | Source addresses, address ranges, MAC addresses or ipsets to bind.
|
| services.metricbeat.modules | Metricbeat modules are responsible for reading metrics from the various sources
|
| services.sourcehut.lists.user | User for lists.sr.ht.
|
| services.sourcehut.pages.user | User for pages.sr.ht.
|
| services.sourcehut.paste.user | User for paste.sr.ht.
|
| services.sourcehut.hg.group | Group for hg.sr.ht
|
| services.filebeat.modules | Filebeat modules provide a quick way to get started
processing common log formats
|
| services.prometheus.scrapeConfigs.*.relabel_configs.*.source_labels | The source labels select values from existing labels
|
| services.sourcehut.lists.port | Port on which the "lists" backend should listen.
|
| services.sourcehut.paste.port | Port on which the "paste" backend should listen.
|
| services.sourcehut.pages.port | Port on which the "pages" backend should listen.
|
| services.sourcehut.man.group | Group for man.sr.ht
|
| services.sourcehut.git.group | Group for git.sr.ht
|
| services.sourcehut.hub.group | Group for hub.sr.ht
|
| services.openssh.authorizedKeysInHomedir | Enables the use of the ~/.ssh/authorized_keys file
|
| services.sourcehut.hg.enable | Whether to enable hg service.
|
| services.firewalld.services.<name>.sourcePorts.*.protocol | |
| services.bacula-sd.director.<name>.tls.allowedCN | Common name attribute of allowed peer certificates
|
| services.bacula-fd.director.<name>.tls.allowedCN | Common name attribute of allowed peer certificates
|
| services.sourcehut.git.enable | Whether to enable git service.
|
| services.sourcehut.man.enable | Whether to enable man service.
|
| services.sourcehut.hub.enable | Whether to enable hub service.
|
| boot.specialFileSystems.<name>.device | The device as passed to mount
|
| services.sourcehut.todo.group | Group for todo.sr.ht
|
| services.sourcehut.meta.group | Group for meta.sr.ht
|
| services._3proxy.services.*.acl.*.sources | List of source IP range, use empty list for any.
|
| services.nncp.daemon.socketActivation.listenStreams | TCP sockets to bind to
|
| services.sourcehut.builds.user | User for builds.sr.ht.
|
| services.syncthing.overrideFolders | Whether to delete the folders which are not configured via the
folders option
|
| services.sourcehut.meta.enable | Whether to enable meta service.
|
| services.sourcehut.todo.enable | Whether to enable todo service.
|
| services.sourcehut.builds.port | Port on which the "builds" backend should listen.
|
| services.limesurvey.nginx.virtualHost.rejectSSL | Whether to listen for and reject all HTTPS connections to this vhost
|
| services.sourcehut.hg.redis.host | The redis host URL
|
| services.sourcehut.paste.group | Group for paste.sr.ht
|
| services.sourcehut.lists.group | Group for lists.sr.ht
|
| services.sourcehut.pages.group | Group for pages.sr.ht
|
| services.sourcehut.hg.package | The hgsrht package to use.
|
| boot.loader.systemd-boot.extraFiles | A set of files to be copied to $BOOT
|
| services.oauth2-proxy.azure.resource | The resource that is protected.
|
| services.sourcehut.git.redis.host | The redis host URL
|
| services.sourcehut.hub.redis.host | The redis host URL
|
| services.sourcehut.man.redis.host | The redis host URL
|
| services.sourcehut.enable | Whether to enable sourcehut - git hosting, continuous integration, mailing list, ticket tracking, wiki
and account management services
.
|
| services.sourcehut.git.package | The gitsrht package to use.
|
| services.sourcehut.man.package | The mansrht package to use.
|
| services.sourcehut.hub.package | The hubsrht package to use.
|
| services.borgmatic.configurations.<name>.source_directories | List of source directories and files to backup
|
| services.sourcehut.lists.enable | Whether to enable lists service.
|
| services.sourcehut.paste.enable | Whether to enable paste service.
|
| services.sourcehut.pages.enable | Whether to enable pages service.
|
| services.spiped.config.<name>.waitForDNS | Wait for DNS
|
| services.spiped.config.<name>.encrypt | Take unencrypted connections from the
source socket and send encrypted
connections to the target socket.
|
| services.spiped.config.<name>.decrypt | Take encrypted connections from the
source socket and send unencrypted
connections to the target socket.
|
| services.sourcehut.nginx.enable | Whether to enable local nginx integration.
|
| services.sourcehut.minio.enable | Whether to enable local minio integration.
|
| services.sourcehut.meta.redis.host | The redis host URL
|
| services.sourcehut.todo.redis.host | The redis host URL
|
| services.sourcehut.redis.enable | Whether to enable local redis integration in a dedicated redis-server.
|
| services.pgbackrest.stanzas.<name>.settings | An attribute set of options as described in:
https://pgbackrest.org/configuration.html
All options can be used
|
| services.sourcehut.meta.package | The metasrht package to use.
|
| services.sourcehut.git.gitPackage | The git package to use.
|
| services.sourcehut.todo.package | The todosrht package to use.
|
| services.sourcehut.builds.group | Group for builds.sr.ht
|
| virtualisation.sharedDirectories.<name>.source | The path of the directory to share, can be a shell variable
|
| services.misskey.reverseProxy.webserver.nginx.rejectSSL | Whether to listen for and reject all HTTPS connections to this vhost
|
| services.sourcehut.builds.enable | Whether to enable builds service.
|
| services.sourcehut.pages.redis.host | The redis host URL
|
| services.sourcehut.paste.redis.host | The redis host URL
|
| services.sourcehut.lists.redis.host | The redis host URL
|
| services.sourcehut.lists.package | The listssrht package to use.
|
| services.sourcehut.pages.package | The pagessrht package to use.
|
| services.sourcehut.paste.package | The pastesrht package to use.
|
| services.sourcehut.builds.images | Images for builds.sr.ht
|
| services.sourcehut.settings | The configuration for the sourcehut network.
|
| services.sourcehut.hg.cloneBundles | Generate clonebundles (which require more disk space but dramatically speed up cloning large repositories).
|
| services.sourcehut.builds.redis.host | The redis host URL
|
| services.sourcehut.builds.package | The buildsrht package to use.
|
| services.sourcehut.postfix.enable | Whether to enable local postfix integration.
|
| services.sourcehut.settings.mail.pgp-key-id | OpenPGP key identifier.
|
| services.bacula-sd.director.<name>.tls.certificate | The full path to the PEM encoded TLS certificate
|
| services.bacula-fd.director.<name>.tls.certificate | The full path to the PEM encoded TLS certificate
|
| services.sourcehut.nginx.virtualHost | Virtual-host configuration merged with all Sourcehut's virtual-hosts.
|
| services.matrix-synapse.log | Default configuration for the loggers used by matrix-synapse and its workers
|
| services.sourcehut.listenAddress | Address to bind to.
|
| services.sourcehut.settings.mail.smtp-from | Outgoing SMTP FROM.
|
| services.sourcehut.settings.mail.smtp-port | Outgoing SMTP port.
|
| services.sourcehut.settings.mail.smtp-host | Outgoing SMTP host.
|
| services.sourcehut.settings.mail.smtp-user | Outgoing SMTP user.
|
| networking.networkmanager.dispatcherScripts.*.source | Path to the hook script.
|
| services.sourcehut.settings.mail.error-to | Address receiving application exceptions
|
| services.sourcehut.hg.gunicorn.extraArgs | Extra arguments passed to Gunicorn.
|
| services.sourcehut.hg.webhooks.extraArgs | Extra arguments passed to the Celery responsible for webhooks.
|
| services.sourcehut.settings."hg.sr.ht".repos | Path to mercurial repositories on disk
|
| services.sourcehut.man.gunicorn.extraArgs | Extra arguments passed to Gunicorn.
|
| services.sourcehut.git.gunicorn.extraArgs | Extra arguments passed to Gunicorn.
|
| services.sourcehut.hub.gunicorn.extraArgs | Extra arguments passed to Gunicorn.
|
| services.sourcehut.lists.process.extraArgs | Extra arguments passed to the Celery responsible for processing mails.
|
| services.sourcehut.git.webhooks.extraArgs | Extra arguments passed to the Celery responsible for webhooks.
|
| services.sourcehut.settings."sr.ht".site-info | The top-level info page for your site.
|
| services.sourcehut.settings."sr.ht".site-name | The name of your network of sr.ht-based sites.
|
| services.sourcehut.settings."git.sr.ht".repos | Path to git repositories on disk
|
| services.sourcehut.settings."hg.sr.ht".origin | URL hg.sr.ht is being served at (protocol://domain)
|
| services.sourcehut.settings."hg.sr.ht".hg_ssh | Path to hg-ssh (if not in $PATH).
|
| services.sourcehut.settings."hg.sr.ht".debug-host | Address to bind the debug server to.
|
| services.sourcehut.settings."hg.sr.ht".debug-port | Port to bind the debug server to.
|
| services.firewalld.zones.<name>.sources.*.mac | A MAC address.
|
| services.sourcehut.settings.mail.error-from | Address sending application exceptions
|
| services.sourcehut.settings."hub.sr.ht".debug-port | Port to bind the debug server to.
|
| services.sourcehut.todo.gunicorn.extraArgs | Extra arguments passed to Gunicorn.
|
| services.sourcehut.settings."man.sr.ht".debug-host | Address to bind the debug server to.
|
| services.sourcehut.settings."git.sr.ht".debug-port | Port to bind the debug server to.
|
| services.sourcehut.meta.gunicorn.extraArgs | Extra arguments passed to Gunicorn.
|
| services.sourcehut.settings."man.sr.ht".debug-port | Port to bind the debug server to.
|
| services.sourcehut.settings."git.sr.ht".debug-host | Address to bind the debug server to.
|
| services.sourcehut.settings."man.sr.ht".origin | URL man.sr.ht is being served at (protocol://domain)
|
| services.sourcehut.settings."hub.sr.ht".debug-host | Address to bind the debug server to.
|
| services.sourcehut.settings."git.sr.ht".origin | URL git.sr.ht is being served at (protocol://domain)
|
| services.sourcehut.settings."hub.sr.ht".origin | URL hub.sr.ht is being served at (protocol://domain)
|
| services.sourcehut.meta.webhooks.extraArgs | Extra arguments passed to the Celery responsible for webhooks.
|
| services.sourcehut.todo.webhooks.extraArgs | Extra arguments passed to the Celery responsible for webhooks.
|
| services.sourcehut.settings."sr.ht".site-blurb | Blurb for your site.
|
| services.sourcehut.settings."sr.ht".owner-name | Owner's name.
|
| services.sourcehut.settings."lists.sr.ht".redis | The Redis connection used for the Celery worker.
|
| services.sourcehut.settings.mail.pgp-pubkey | OpenPGP public key.
|
| services.prometheus.remoteWrite.*.write_relabel_configs.*.source_labels | The source labels select values from existing labels
|
| services.sourcehut.settings."todo.sr.ht".origin | URL todo.sr.ht is being served at (protocol://domain)
|
| services.sourcehut.settings."meta.sr.ht".debug-port | Port to bind the debug server to.
|
| services.sourcehut.settings."todo.sr.ht".debug-port | Port to bind the debug server to.
|
| services.sourcehut.settings."meta.sr.ht".debug-host | Address to bind the debug server to.
|
| services.sourcehut.settings."todo.sr.ht".debug-host | Address to bind the debug server to.
|
| services.sourcehut.settings."meta.sr.ht".origin | URL meta.sr.ht is being served at (protocol://domain)
|
| services.sourcehut.pages.gunicorn.extraArgs | Extra arguments passed to Gunicorn.
|
| services.sourcehut.lists.gunicorn.extraArgs | Extra arguments passed to Gunicorn.
|
| services.sourcehut.paste.gunicorn.extraArgs | Extra arguments passed to Gunicorn.
|
| services.sourcehut.settings."hg.sr.ht".api-origin | Origin URL for the API
|
| services.sourcehut.settings."todo.sr.ht::mail".sock | Path for the lmtp daemon's unix socket
|
| services.sourcehut.lists.webhooks.extraArgs | Extra arguments passed to the Celery responsible for webhooks.
|
| services.sourcehut.settings."sr.ht".owner-email | Owner's email.
|
| services.sourcehut.settings."git.sr.ht".api-origin | Origin URL for the API
|
| services.sourcehut.settings."hub.sr.ht".api-origin | Origin URL for the API
|
| services.sourcehut.settings."man.sr.ht".api-origin | Origin URL for the API
|
| services.netbird.clients.<name>.config | Additional configuration that exists before the first start and
later overrides the existing values in config.json
|
| services.netbird.tunnels.<name>.config | Additional configuration that exists before the first start and
later overrides the existing values in config.json
|
| services.firewalld.zones.<name>.sources.*.ipset | An ipset.
|
| services.sourcehut.settings."paste.sr.ht".debug-port | Port to bind the debug server to.
|
| services.sourcehut.settings."pages.sr.ht".debug-port | Port to bind the debug server to.
|
| services.sourcehut.settings."pages.sr.ht".origin | URL pages.sr.ht is being served at (protocol://domain)
|
| services.sourcehut.settings."lists.sr.ht".debug-port | Port to bind the debug server to.
|
| services.sourcehut.settings."paste.sr.ht".origin | URL paste.sr.ht is being served at (protocol://domain)
|
| services.sourcehut.settings."paste.sr.ht".debug-host | Address to bind the debug server to.
|
| services.sourcehut.settings."lists.sr.ht".origin | URL lists.sr.ht is being served at (protocol://domain)
|
| services.sourcehut.settings."pages.sr.ht".debug-host | Address to bind the debug server to.
|
| services.sourcehut.settings."lists.sr.ht".debug-host | Address to bind the debug server to.
|
| services.sourcehut.settings."pages.sr.ht".max-site-size | Maximum size of any given site (post-gunzip), in MiB.
|
| services.sourcehut.settings."hg.sr.ht".srhtext | Path to the srht mercurial extension
(defaults to where the hgsrht code is)
|
| services.sourcehut.settings."builds.sr.ht".redis | The Redis connection used for the Celery worker.
|
| services.sourcehut.settings."meta.sr.ht".api-origin | Origin URL for the API
|
| services.sourcehut.settings."todo.sr.ht".api-origin | Origin URL for the API
|
| services.grafana.provision.datasources.settings.datasources | List of datasources to insert/update.
|
| services.sourcehut.settings."todo.sr.ht".notify-from | Outgoing email for notifications generated by users.
|
| services.sourcehut.builds.gunicorn.extraArgs | Extra arguments passed to Gunicorn.
|
| services.grafana.provision.datasources.settings.datasources.*.url | Url of the datasource.
|
| services.sourcehut.settings."hg.sr.ht".oauth-client-id | hg.sr.ht's OAuth client id for meta.sr.ht.
|
| services.sourcehut.settings."meta.sr.ht::aliases" | Aliases for the client IDs of commonly used OAuth clients.
|
| services.sourcehut.builds.enableWorker | Whether to enable worker for builds.sr.ht
For smaller deployments, job runners can be installed alongside the master server
but even if you only build your own software, integration with other services
may cause you to run untrusted builds
(e.g. automatic testing of patches via listssrht)
|
| services.sourcehut.settings."todo.sr.ht::mail".sock-group | The lmtp daemon will make the unix socket group-read/write
for users in this group.
|
| services.sourcehut.settings."man.sr.ht".oauth-client-id | man.sr.ht's OAuth client id for meta.sr.ht.
|
| services.sourcehut.settings."git.sr.ht".oauth-client-id | git.sr.ht's OAuth client id for meta.sr.ht.
|
| services.sourcehut.settings."hub.sr.ht".oauth-client-id | hub.sr.ht's OAuth client id for meta.sr.ht.
|
| services.grafana.provision.datasources.settings.datasources.*.name | Name of the datasource
|
| services.grafana.provision.datasources.settings.datasources.*.type | Datasource type
|
| services.sourcehut.lists.process.celeryConfig | Content of the celeryconfig.py used by the Celery of listssrht-process.
|
| services.sourcehut.hg.webhooks.celeryConfig | Content of the celeryconfig.py used by the Celery responsible for webhooks.
|
| services.sourcehut.settings."builds.sr.ht".debug-host | Address to bind the debug server to.
|
| services.sourcehut.settings."builds.sr.ht".origin | URL builds.sr.ht is being served at (protocol://domain)
|
| services.sourcehut.settings."builds.sr.ht".debug-port | Port to bind the debug server to.
|
| services.sourcehut.settings."pages.sr.ht".api-origin | Origin URL for the API
|
| services.sourcehut.settings."lists.sr.ht".api-origin | Origin URL for the API
|
| services.sourcehut.settings."paste.sr.ht".api-origin | Origin URL for the API
|
| services.grafana.provision.datasources.settings.datasources.*.uid | Custom UID which can be used to reference this datasource in other parts of the configuration, if not specified will be generated automatically.
|
| services.sourcehut.settings."lists.sr.ht".notify-from | Outgoing email for notifications generated by users.
|
| boot.loader.limine.additionalFiles | A set of files to be copied to /boot
|
| boot.loader.refind.additionalFiles | A set of files to be copied to /boot
|
| services.sourcehut.git.webhooks.celeryConfig | Content of the celeryconfig.py used by the Celery responsible for webhooks.
|
| services.sourcehut.settings."builds.sr.ht".allow-free | Whether to enable nonpaying users to submit builds.
|
| services.prometheus.scrapeConfigs.*.metric_relabel_configs.*.source_labels | The source labels select values from existing labels
|
| services.sourcehut.settings."hg.sr.ht".webhooks | The Redis connection used for the webhooks worker.
|
| services.sourcehut.settings."lists.sr.ht".allow-new-lists | Whether to enable creation of new lists.
|
| services.sourcehut.settings."todo.sr.ht".oauth-client-id | todo.sr.ht's OAuth client id for meta.sr.ht.
|
| services.sourcehut.settings."pages.sr.ht".user-domain | Configures the user domain, if enabled
|
| services.waagent.settings.ResourceDisk.SwapSizeMB | Specifies the size of the swap file in MiB (1024×1024 bytes)
|
| services.grafana.provision.datasources.settings.datasources.*.jsonData | Extra data for datasource plugins.
|
| services.sourcehut.settings."builds.sr.ht".shell | Scripts used to launch on SSH connection.
/usr/bin/master-shell on master,
/usr/bin/runner-shell on runner
|
| services.sourcehut.settings."git.sr.ht".webhooks | The Redis connection used for the webhooks worker.
|
| services.sourcehut.meta.webhooks.celeryConfig | Content of the celeryconfig.py used by the Celery responsible for webhooks.
|
| services.sourcehut.todo.webhooks.celeryConfig | Content of the celeryconfig.py used by the Celery responsible for webhooks.
|
| services.grafana.provision.datasources.settings.deleteDatasources | List of datasources that should be deleted from the database.
|
| services.sourcehut.hg.mercurialPackage | The mercurial package to use.
|
| services.sourcehut.settings."sr.ht".global-domain | Global domain name.
|
| services.sourcehut.settings."builds.sr.ht".api-origin | Origin URL for the API
|
| services.grafana.provision.datasources.settings.datasources.*.access | Access mode. proxy or direct (Server or Browser in the UI)
|
| services.sourcehut.settings."lists.sr.ht::worker".sock | Path for the lmtp daemon's unix socket
|
| services.sourcehut.settings."meta.sr.ht".webhooks | The Redis connection used for the webhooks worker.
|
| services.sourcehut.settings."todo.sr.ht".webhooks | The Redis connection used for the webhooks worker.
|
| services.sourcehut.settings."lists.sr.ht".oauth-client-id | lists.sr.ht's OAuth client id for meta.sr.ht.
|
| services.sourcehut.settings."pages.sr.ht".oauth-client-id | pages.sr.ht's OAuth client id for meta.sr.ht.
|
| services.sourcehut.settings."paste.sr.ht".oauth-client-id | paste.sr.ht's OAuth client id for meta.sr.ht.
|
| services.sourcehut.settings."pages.sr.ht".gemini-certs | An absolute file path (which should be outside the Nix-store)
to Gemini certificates.
|
| services.grafana.provision.datasources.settings.deleteDatasources.*.orgId | Organization ID of the datasource to delete.
|
| services.grafana.provision.datasources.settings.deleteDatasources.*.name | Name of the datasource to delete.
|
| services.sourcehut.settings.mail.smtp-password | Outgoing SMTP password.
|
| services.sourcehut.lists.webhooks.celeryConfig | Content of the celeryconfig.py used by the Celery responsible for webhooks.
|
| services.sourcehut.settings."builds.sr.ht::worker".name | Listening address and listening port
of the build runner (with HTTP port if not 80).
|
| services.sourcehut.settings."sr.ht".network-key | An absolute file path (which should be outside the Nix-store)
to a secret key to encrypt internal messages with
|
| services.vmalert.settings."datasource.url" | Datasource compatible with Prometheus HTTP API.
|
| services.sourcehut.postgresql.enable | Whether to enable local postgresql integration.
|
| services.sourcehut.settings.mail.pgp-privkey | An absolute file path (which should be outside the Nix-store)
to an OpenPGP private key
|
| services.sourcehut.settings.objects.s3-access-key | Access key to the S3-compatible object storage service
|
| services.sourcehut.settings."lists.sr.ht".webhooks | The Redis connection used for the webhooks worker.
|
| services.sourcehut.settings."lists.sr.ht::worker".reject-url | Reject URL.
|
| services.sourcehut.settings."builds.sr.ht".oauth-client-id | builds.sr.ht's OAuth client id for meta.sr.ht.
|
| services.sourcehut.settings."hg.sr.ht".oauth-client-secret | hg.sr.ht's OAuth client secret for meta.sr.ht.
|
| services.waagent.settings.ResourceDisk.MountPoint | This option specifies the path at which the resource disk is mounted
|
| services.sourcehut.settings."git.sr.ht".post-update-script | A post-update script which is installed in every git repo
|
| services.waagent.settings.ResourceDisk.EnableSwap | If enabled, the agent creates a swap file (/swapfile) on the resource disk
and adds it to the system swap space
|
| services.sourcehut.settings.objects.s3-secret-key | An absolute file path (which should be outside the Nix-store)
to the secret key of the S3-compatible object storage service.
|
| services.sourcehut.settings."git.sr.ht".oauth-client-secret | git.sr.ht's OAuth client secret for meta.sr.ht.
|
| services.sourcehut.settings."hub.sr.ht".oauth-client-secret | hub.sr.ht's OAuth client secret for meta.sr.ht.
|
| services.sourcehut.settings."man.sr.ht".oauth-client-secret | man.sr.ht's OAuth client secret for meta.sr.ht.
|
| services.sourcehut.settings."lists.sr.ht::worker".sock-group | The lmtp daemon will make the unix socket group-read/write
for users in this group.
|
| services.grafana.provision.datasources.settings.datasources.*.editable | Allow users to edit datasources from the UI.
|
| services.sourcehut.git.fcgiwrap.preforkProcess | Number of fcgiwrap processes to prefork.
|
| services.waagent.settings.ResourceDisk.Format | If set to true, waagent formats and mounts the resource disk that the platform provides,
unless the file system type in `ResourceDisk
|
| services.sourcehut.settings."meta.sr.ht".welcome-emails | Whether to enable sending stock sourcehut welcome emails after signup.
|
| services.sourcehut.settings."lists.sr.ht".posting-domain | Posting domain.
|
| services.sourcehut.settings."todo.sr.ht".oauth-client-secret | todo.sr.ht's OAuth client secret for meta.sr.ht.
|
| services.sourcehut.settings."sr.ht".service-key | An absolute file path (which should be outside the Nix-store)
to a key used for encrypting session cookies
|
| services.sourcehut.settings."git.sr.ht".outgoing-domain | Outgoing domain.
|
| services.sourcehut.settings."todo.sr.ht::mail".posting-domain | Posting domain.
|
| services.grafana.provision.datasources.settings.datasources.*.secureJsonData | Datasource specific secure configuration
|
| services.sourcehut.settings."hg.sr.ht".migrate-on-upgrade | Whether to enable automatic migrations on package upgrade.
|
| services.sourcehut.settings."git.sr.ht".migrate-on-upgrade | Whether to enable automatic migrations on package upgrade.
|
| services.sourcehut.settings."man.sr.ht".migrate-on-upgrade | Whether to enable automatic migrations on package upgrade.
|
| services.sourcehut.settings."hub.sr.ht".migrate-on-upgrade | Whether to enable automatic migrations on package upgrade.
|
| services.sourcehut.settings."meta.sr.ht::billing".enabled | Whether to enable the billing system.
|
| services.firewalld.zones.<name>.sources.*.address | An IP address or a network IP address with a mask for IPv4 or IPv6
|
| services.sourcehut.settings."lists.sr.ht".oauth-client-secret | lists.sr.ht's OAuth client secret for meta.sr.ht.
|
| services.sourcehut.settings."paste.sr.ht".oauth-client-secret | paste.sr.ht's OAuth client secret for meta.sr.ht.
|
| services.sourcehut.settings."pages.sr.ht".oauth-client-secret | pages.sr.ht's OAuth client secret for meta.sr.ht.
|
| services.hadoop.yarn.nodemanager.resource.cpuVCores | Number of vcores that can be allocated for containers.
|
| services.icingaweb2.resources | resources.ini contents
|
| services.sourcehut.settings."git.sr.ht::api".internal-ipnet | Set of IP subnets which are permitted to utilize internal API
authentication
|
| services.sourcehut.settings.objects.s3-upstream | Configure the S3-compatible object storage service.
|
| services.sourcehut.settings."meta.sr.ht".migrate-on-upgrade | Whether to enable automatic migrations on package upgrade.
|
| services.sourcehut.settings."todo.sr.ht".migrate-on-upgrade | Whether to enable automatic migrations on package upgrade.
|
| services.sourcehut.hg.postgresql.database | PostgreSQL database name for the hg.sr.ht service,
used if services.sourcehut.postgresql.enable is true.
|
| services.waagent.settings.ResourceDisk.MountOptions | This option specifies disk mount options to be passed to the mount -o command
|
| services.sourcehut.settings."builds.sr.ht::worker".timeout | Max build duration
|
| services.sourcehut.man.postgresql.database | PostgreSQL database name for the man.sr.ht service,
used if services.sourcehut.postgresql.enable is true.
|
| services.sourcehut.git.postgresql.database | PostgreSQL database name for the git.sr.ht service,
used if services.sourcehut.postgresql.enable is true.
|
| services.sourcehut.hub.postgresql.database | PostgreSQL database name for the hub.sr.ht service,
used if services.sourcehut.postgresql.enable is true.
|
| services.xserver.windowManager.xmonad.config | Configuration from which XMonad gets compiled
|
| services.sourcehut.settings."meta.sr.ht::api".internal-ipnet | Set of IP subnets which are permitted to utilize internal API
authentication
|
| services.hadoop.yarn.nodemanager.resource.memoryMB | Amount of physical memory, in MB, that can be allocated for containers.
|
| services.sourcehut.settings."builds.sr.ht".oauth-client-secret | builds.sr.ht's OAuth client secret for meta.sr.ht.
|
| services.sourcehut.settings."pages.sr.ht".migrate-on-upgrade | Whether to enable automatic migrations on package upgrade.
|
| services.sourcehut.settings."lists.sr.ht".migrate-on-upgrade | Whether to enable automatic migrations on package upgrade.
|
| services.sourcehut.settings."paste.sr.ht".migrate-on-upgrade | Whether to enable automatic migrations on package upgrade.
|
| services.sourcehut.todo.postgresql.database | PostgreSQL database name for the todo.sr.ht service,
used if services.sourcehut.postgresql.enable is true.
|
| services.sourcehut.meta.postgresql.database | PostgreSQL database name for the meta.sr.ht service,
used if services.sourcehut.postgresql.enable is true.
|
| services.sourcehut.settings."pages.sr.ht::api".internal-ipnet | Set of IP subnets which are permitted to utilize internal API
authentication
|
| services.grafana.provision.datasources | Declaratively provision Grafana's datasources.
|
| services.sourcehut.settings."builds.sr.ht::worker".bind-address | HTTP bind address for serving local build information/monitoring.
|
| services.sourcehut.lists.postgresql.database | PostgreSQL database name for the lists.sr.ht service,
used if services.sourcehut.postgresql.enable is true.
|
| services.sourcehut.paste.postgresql.database | PostgreSQL database name for the paste.sr.ht service,
used if services.sourcehut.postgresql.enable is true.
|
| services.sourcehut.pages.postgresql.database | PostgreSQL database name for the pages.sr.ht service,
used if services.sourcehut.postgresql.enable is true.
|
| services.sourcehut.settings."builds.sr.ht".migrate-on-upgrade | Whether to enable automatic migrations on package upgrade.
|
| services.sourcehut.settings."meta.sr.ht::billing".stripe-public-key | Public key for Stripe
|
| services.sourcehut.settings.webhooks.private-key | An absolute file path (which should be outside the Nix-store)
to a base64-encoded Ed25519 key for signing webhook payloads
|
| services.grafana.provision.datasources.path | Path to YAML datasource configuration
|
| services.sourcehut.settings."meta.sr.ht::billing".stripe-secret-key | An absolute file path (which should be outside the Nix-store)
to a secret key for Stripe
|
| services.sourcehut.builds.postgresql.database | PostgreSQL database name for the builds.sr.ht service,
used if services.sourcehut.postgresql.enable is true.
|
| services.sourcehut.settings."meta.sr.ht::settings".user-invites | How many invites each user is issued upon registration
(only applicable if open registration is disabled).
|
| services.sourcehut.settings."hg.sr.ht".connection-string | SQLAlchemy connection string for the database.
|
| services.sourcehut.settings."hub.sr.ht".connection-string | SQLAlchemy connection string for the database.
|
| services.sourcehut.settings."git.sr.ht".connection-string | SQLAlchemy connection string for the database.
|
| services.sourcehut.settings."man.sr.ht".connection-string | SQLAlchemy connection string for the database.
|
| services.sourcehut.settings."builds.sr.ht::worker".buildlogs | Path to write build logs.
|
| services.sourcehut.settings."sr.ht".environment | Values other than "production" adds a banner to each page.
|
| services.sourcehut.settings."meta.sr.ht".connection-string | SQLAlchemy connection string for the database.
|
| services.sourcehut.settings."todo.sr.ht".connection-string | SQLAlchemy connection string for the database.
|
| services.sourcehut.settings."pages.sr.ht".connection-string | SQLAlchemy connection string for the database.
|
| services.sourcehut.settings."paste.sr.ht".connection-string | SQLAlchemy connection string for the database.
|
| services.sourcehut.settings."lists.sr.ht".connection-string | SQLAlchemy connection string for the database.
|
| virtualisation.xen.dom0Resources.maxVCPUs | Amount of virtual CPU cores allocated to Domain 0 on boot
|
| services.sourcehut.settings."builds.sr.ht".connection-string | SQLAlchemy connection string for the database.
|
| services.matrix-synapse.settings.listeners.*.resources | List of HTTP resources to serve on this listener.
|
| services.sourcehut.settings."hg.sr.ht".changegroup-script | A changegroup script which is installed in every mercurial repo
|
| virtualisation.xen.dom0Resources.memory | Amount of memory (in MiB) allocated to Domain 0 on boot
|
| virtualisation.xen.dom0Resources.maxMemory | Maximum amount of memory (in MiB) that Domain 0 can
dynamically allocate to itself
|
| services.hadoop.yarn.resourcemanager.extraEnv | Extra environment variables
|
| services.grafana.provision.datasources.settings | Grafana datasource configuration in Nix
|
| services.vmalert.instances.<name>.settings."datasource.url" | Datasource compatible with Prometheus HTTP API.
|
| services.grafana.provision.datasources.settings.prune | When true, provisioned datasources from this file will be deleted
automatically when removed from
services.grafana.provision.datasources.settings.datasources.
|
| services.sourcehut.settings."lists.sr.ht::worker".reject-mimetypes | Comma-delimited list of Content-Types to reject
|
| services.hadoop.yarn.resourcemanager.enable | Whether to enable Hadoop YARN ResourceManager.
|
| services.firezone.server.provision.accounts.<name>.resources | All resources to provision
|
| services.matrix-synapse.settings.listeners.*.resources.*.names | List of resources to host on this listener.
|
| services.hadoop.yarn.resourcemanager.extraFlags | Extra command line flags to pass to the service
|
| services.parsedmarc.provision.grafana.datasource | Whether the automatically provisioned Elasticsearch
instance should be added as a grafana datasource
|
| services.grafana.provision.datasources.settings.apiVersion | Config file version.
|
| services.firezone.server.provision.accounts.<name>.resources.<name>.type | The resource type
|
| services.firezone.server.provision.accounts.<name>.resources.<name>.name | The name of this resource
|
| services.prometheus.exporters.pve.collectors.resources | Collect PVE resources info
|
| services.hadoop.yarn.nodemanager.resource.maximumAllocationMB | The maximum physical memory any container can be allocated.
|
| services.hadoop.yarn.resourcemanager.openFirewall | Open firewall ports for resourcemanager
|
| services.outline.azureAuthentication.resourceAppId | Authentication application resource ID.
|
| services.sourcehut.settings."meta.sr.ht::settings".registration | Whether to enable public registration.
|
| services.firezone.server.provision.accounts.<name>.policies.<name>.resource | The resource to which access should be allowed.
|
| services.sourcehut.settings."meta.sr.ht::settings".onboarding-redirect | Where to redirect new users upon registration.
|
| services.hadoop.yarn.nodemanager.resource.maximumAllocationVCores | The maximum virtual CPU cores any container can be allocated.
|
| services.firezone.server.provision.accounts.<name>.resources.<name>.filters | A list of filter to restrict traffic
|
| services.firezone.server.provision.accounts.<name>.resources.<name>.address | The address of this resource
|
| services.matrix-synapse.settings.listeners.*.resources.*.compress | Whether synapse should compress HTTP responses to clients that support it
|
| services.borgmatic.settings.source_directories | List of source directories and files to backup
|
| services.icingaweb2.modules.monitoring.backends.<name>.resource | Name of the IDO resource
|
| services.firezone.server.provision.accounts.<name>.resources.<name>.filters.*.ports | Either a single port or port range to allow
|
| services.firezone.server.provision.accounts.<name>.resources.<name>.filters.*.ports.*.to | The end of the port range, inclusive.
|
| services.hadoop.yarn.resourcemanager.restartIfChanged | Automatically restart the service on config change
|
| services.firezone.server.provision.accounts.<name>.resources.<name>.filters.*.ports.*.from | The start of the port range, inclusive.
|
| services.firezone.server.provision.accounts.<name>.resources.<name>.gatewayGroups | A list of gateway groups (sites) which can reach the resource and may be used to connect to it.
|
| services.firezone.server.provision.accounts.<name>.resources.<name>.filters.*.protocol | The protocol to allow
|
| services.szurubooru.server.settings.delete_source_files | Whether to delete thumbnails and source files on post delete.
|
| services.icingaweb2.modules.monitoring.transports.<name>.resource | SSH identity resource for the remote transport
|
| services.firezone.server.provision.accounts.<name>.resources.<name>.addressDescription | An optional description for resource address, usually a full link to the resource including a schema.
|
| services.warpgate.settings.config_provider | Source of truth of users
|
| services.matrix-synapse.workers.<name>.worker_listeners.*.resources | List of HTTP resources to serve on this listener.
|
| services.go2rtc.settings.streams | Stream source configuration
|
| services.matrix-synapse.workers.<name>.worker_listeners.*.resources.*.names | List of resources to host on this listener.
|
| services.firezone.server.provision.accounts.<name>.features.internet_resource | Whether to enable the internet_resource feature for this account.
|
| hardware.nvidia.open | Whether to enable the open source NVIDIA kernel module.
|
| services.odoo.enable | Whether to enable odoo, an open source ERP and CRM system.
|
| services.grafana.settings.security.data_source_proxy_whitelist | Define a whitelist of allowed IP addresses or domains, with ports,
to be used in data source URLs with the Grafana data source proxy
|
| services.matrix-synapse.workers.<name>.worker_listeners.*.resources.*.compress | Whether synapse should compress HTTP responses to clients that support it
|
| services.maddy.enable | Whether to enable Maddy, a free an open source mail server.
|
| services.komga.enable | Whether to enable Komga, a free and open source comics/mangas media server.
|
| services.maubot.settings.server.override_resource_path | Override path from where to load UI resources.
|
| services.snipe-it.enable | Whether to enable snipe-it, a free open source IT asset/license management system.
|
| services.geoclue2.enableStatic | Whether to enable the static source
|
| services.sourcehut.settings."hg.sr.ht".clone_bundle_threshold | .hg/store size (in MB) past which the nightly job generates clone bundles.
|
| networking.ucarp.srcIp | Source (real) IP address of this host.
|
| services.prometheus.scrapeConfigs.*.relabel_configs.*.modulus | Modulus to take of the hash of the source label values.
|
| services.firezone.server.provision.accounts.<name>.features.multi_site_resources | Whether to enable the multi_site_resources feature for this account.
|
| services.cockroachdb.package | The cockroachdb package to use
|
| services.zammad.enable | Whether to enable Zammad, a web-based, open source user support/ticketing solution.
|
| services.tayga.ipv4.address | The source IPv4 address of the TAYGA server.
|
| services.tayga.ipv6.address | The source IPv6 address of the TAYGA server.
|
| programs.obs-studio.enable | Whether to enable Free and open source software for video recording and live streaming.
|
| services.thanos.rule.alert.query-url | The external Thanos Query URL that would be set in all alerts 'Source' field.
|
| services.traccar.enable | Whether to enable Traccar, an open source GPS tracking system.
|
| services.prometheus.scrapeConfigs.*.relabel_configs.*.separator | Separator placed between concatenated source label values
|
| services.thanos.rule.labels | Labels to be applied to all generated metrics
|
| nixpkgs.pkgs | If set, the pkgs argument to all NixOS modules is the value of
this option, extended with nixpkgs.overlays, if
that is also set
|
| programs.dms-shell.plugins.<name>.src | Source of the plugin package or path
|
| services.opengfw.enable | Whether to enable OpenGFW, A flexible, easy-to-use, open source implementation of GFW on Linux
.
|
| services.firefly-iii.enable | Whether to enable Firefly III: A free and open source personal finance manager.
|
| services.gpsd.devices | List of devices that gpsd should subscribe to
|
| services.docuseal.enable | Whether to enable DocuSeal, open source document signing.
|
| services.ferretdb.enable | Whether to enable FerretDB, an Open Source MongoDB alternative.
|
| programs.htop.settings | Extra global default configuration for htop
which is read on first startup only
|
| services.vmalert.enable | Wether to enable VictoriaMetrics's vmalert.
vmalert evaluates alerting and recording rules against a data source, sends notifications via Alertmanager.
|
| services.chromadb.enable | Whether to enable ChromaDB, an open-source AI application database..
|
| services.qui.settings | qui configuration options
|
| services.airsonic.enable | Whether to enable Airsonic, the Free and Open Source media streaming server (fork of Subsonic and Libresonic).
|
| services.geoclue2.enableWifi | Whether to enable WiFi source.
|
| services.geoclue2.enableCDMA | Whether to enable CDMA source.
|
| services.discourse.enable | Whether to enable Discourse, an open source discussion platform.
|
| services.ntp.restrictSource | The restriction flags to be set on source
|
| services.headscale.enable | Whether to enable headscale, Open Source coordination server for Tailscale.
|
| services.amule.settings.eMule.UDPPort | UDP port for eD2k traffic (searches, source exchange) and all Kad network communication
|
| programs.localsend.enable | Whether to enable localsend, an open source cross-platform alternative to AirDrop.
|
| services.geoclue2.enable3G | Whether to enable 3G source.
|
| services.znapzend.zetup.<name>.enable | Whether to enable this source.
|
| services.syncthing.enable | Whether to enable Syncthing, a self-hosted open-source alternative to Dropbox and Bittorrent Sync.
|
| services.syncoid.localSourceAllow | Permissions granted for the services.syncoid.user user
for local source datasets
|
| services.logmein-hamachi.enable | Whether to enable LogMeIn Hamachi, a proprietary
(closed source) commercial VPN software.
|
| services.sks.webroot | Source directory (will be symlinked, if not null) for the files the
built-in webserver should serve
|
| services.geoclue2.enableModemGPS | Whether to enable Modem-GPS source.
|
| services.znapzend.zetup.<name>.dataset | The dataset to use for this source.
|
| hardware.deviceTree.kernelPackage | Kernel package where device tree include directory is from
|
| services.suwayomi-server.enable | Whether to enable Suwayomi, a free and open source manga reader server that runs extensions built for Tachiyomi.
|
| services.ebusd.device | Use DEV as eBUS device [/dev/ttyUSB0]
|
| services.snapserver.streams | The definition for an input source.
|
| services.prometheus.remoteWrite.*.write_relabel_configs.*.modulus | Modulus to take of the hash of the source label values.
|
| services.privatebin.enable | Whether to enable Privatebin: A minimalist, open source online
pastebin where the server has zero knowledge of pasted data..
|
| networking.interfaces.<name>.tempAddress | When IPv6 is enabled with SLAAC, this option controls the use of
temporary address (aka privacy extensions) on this
interface
|
| services.lubelogger.enable | Whether to enable LubeLogger, a self-hosted, open-source, web-based vehicle maintenance and fuel milage tracker.
|
| services.prometheus.remoteWrite.*.write_relabel_configs.*.separator | Separator placed between concatenated source label values
|
| services.rke2.images | List of derivations that provide container images
|
| services.znapzend.zetup.<name>.presnap | Command to run before snapshots are taken on the source dataset,
e.g. for database locking/flushing
|
| services.dashy.enable | Whether to enable Dashy, a highly customizable, easy to use, privacy-respecting dashboard app
|
| services.znapzend.features.skipIntermediates | Whether to enable the skipIntermediates feature to send a single increment
between latest common snapshot and the newly made one
|
| services.sabnzbd.allowConfigWrite | By default we create the sabnzbd configuration read-only,
which keeps the nixos configuration as the single source
of truth
|
| services.journald.remote.output | The location of the output journal
|
| services.prometheus.scrapeConfigs.*.metric_relabel_configs.*.modulus | Modulus to take of the hash of the source label values.
|
| hardware.tuxedo-drivers.enable | Whether to enable The tuxedo-drivers driver enables access to the following on TUXEDO notebooks:
- Driver for Fn-keys
- SysFS control of brightness/color/mode for most TUXEDO keyboards
- Hardware I/O driver for TUXEDO Control Center
For more inforation it is best to check at the source code description: https://gitlab.com/tuxedocomputers/development/packages/tuxedo-drivers
.
|
| services.geoclue2.staticAltitude | Altitude in meters to use for the static source.
|
| services.firewalld.settings.IPv6_rpfilter | Performs reverse path filtering (RPF) on IPv6 packets as per RFC 3704
|
| services.qbittorrent.extraArgs | Extra arguments passed to qbittorrent
|
| services.geoclue2.staticLatitude | Latitude to use for the static source
|
| services.geoclue2.staticAccuracy | Accuracy radius in meters to use for the static source.
|
| services.znapzend.zetup.<name>.postsnap | Command to run after snapshots are taken on the source dataset,
e.g. for database unlocking
|
| services.nsd.ratelimit.ratelimit | Max qps allowed from any query source.
0 means unlimited
|
| services.prometheus.scrapeConfigs.*.metric_relabel_configs.*.separator | Separator placed between concatenated source label values
|
| services.ntpd-rs.useNetworkingTimeServers | Use source time servers from networking.timeServers in config.
|
| services.opencloud.settings | Additional YAML configuration for OpenCloud services
|
| boot.loader.grub.extraGrubInstallArgs | Additional arguments passed to grub-install
|
| programs.steam.dedicatedServer.openFirewall | Open ports in the firewall for Source Dedicated Server.
|
| services.vmalert.instances.<name>.enable | Wether to enable VictoriaMetrics's vmalert.
vmalert evaluates alerting and recording rules against a data source, sends notifications via Alertmanager.
|
| services.geoclue2.staticLongitude | Longitude to use for the static source
|
| services.znapzend.features.oracleMode | Whether to enable destroying snapshots one by one instead of using one long argument list
|
| services.victorialogs.enable | Whether to enable VictoriaLogs is an open source user-friendly database for logs from VictoriaMetrics.
|
| swapDevices.*.randomEncryption.keySize | Set the encryption key size for the plain device
|
| services.pufferpanel.environment | Environment variables to set for the service
|
| boot.loader.grub.memtest86.params | Parameters added to the Memtest86+ command line
|
| services.znapzend.features.sendRaw | Whether to enable sendRaw feature which adds the options -w to the
zfs send command
|
| systemd.sysupdate.reboot.enable | Whether to automatically reboot after an update
|
| services.silverbullet.enable | Whether to enable Silverbullet, an open-source, self-hosted, offline-capable Personal Knowledge Management (PKM) web application.
|
| networking.jool.enable | Whether to enable Jool, an Open Source implementation of IPv4/IPv6
translation on Linux
|
| services.suwayomi-server.settings.server.localSourcePath | Path to the local source folder.
|
| services.syncoid.commands.<name>.localSourceAllow | Permissions granted for the services.syncoid.user user
for local source datasets
|
| services.hedgedoc.settings.allowGravatar | Whether to enable Libravatar as
profile picture source on your instance
|
| fileSystems.<name>.device | The device as passed to mount
|
| services.hostapd.radios.<name>.settings | Extra configuration options to put at the end of global initialization, before defining BSSs
|
| services.znapzend.zetup.<name>.plan | The znapzend backup plan to use for the source
|
| services.thanos.query.query.auto-downsampling | Enable automatic adjustment (step / 5) to what source of data should
be used in store gateways if no
max_source_resolution param is specified.
|
| containers.<name>.forwardPorts.*.hostPort | Source port of the external interface on host
|
| services.shadowsocks.extraConfig | Additional configuration for shadowsocks that is not covered by the
provided options
|
| services.pid-fan-controller.settings.heatSources.*.name | Name of the heat source.
|
| documentation.man.man-db.manualPages | The manual pages to generate caches for if documentation.man.generateCaches
is enabled
|
| boot.kernelPatches | A list of additional patches to apply to the kernel
|
| services.firezone.server.provision.accounts | All accounts to provision
|
| services.victoriatraces.enable | Whether to enable VictoriaTraces is an open source distributed traces storage and query engine from VictoriaMetrics.
|
| networking.firewall.checkReversePath | Performs a reverse path filter test on a packet
|
| services.guix.substituters.authorizedKeys | A list of signing keys for each substitute server to be authorized as
a source of substitutes
|
| containers.<name>.extraVeths.<name>.forwardPorts.*.hostPort | Source port of the external interface on host
|
| services.hostapd.radios.<name>.networks.<name>.settings | Extra configuration options to put at the end of this BSS's defintion in the
hostapd.conf for the associated interface
|
| services.strongswan-swanctl.swanctl.connections.<name>.children.<name>.per_cpu_sas | Enable per-CPU CHILD_SAs
|
| services.jellyfin.forceEncodingConfig | Whether to overwrite Jellyfin's encoding.xml configuration file on each service start
|
| services.prometheus.alertmanagerIrcRelay.settings | Configuration for Alertmanager IRC Relay as a Nix attribute set
|
| virtualisation.credentials.<name>.text | Text content of the credential
|
| virtualisation.fileSystems.<name>.device | The device as passed to mount
|
| services.znapzend.zetup.<name>.destinations.<name>.plan | The znapzend backup plan to use for the source
|
| services.nixseparatedebuginfod.enable | Whether to enable separatedebuginfod, a debuginfod server providing source and debuginfo for nix packages.
|
| services.strongswan-swanctl.swanctl.connections.<name>.remote_addrs | Remote address(es) to use for IKE communication
|
| services.nixseparatedebuginfod2.enable | Whether to enable nixseparatedebuginfod2, a debuginfod server providing source and debuginfo for nix packages.
|