| networking.nat.extraStopCommands | Additional shell commands executed as part of the nat
teardown script
|
| boot.initrd.luks.devices.<name>.preOpenCommands | Commands that should be run right before we try to mount our LUKS device
|
| services.biboumi.settings.admin | The bare JID of the gateway administrator
|
| programs.bash.undistractMe.playSound | Whether to enable notification sounds when long-running terminal commands complete.
|
| services.cyrus-imap.cyrusSettings.START | This section lists the processes to run before any SERVICES are spawned
|
| services.softether.vpnclient.up | Shell commands executed when the Virtual Network Adapter(s) is/are starting.
|
| users.mutableUsers | If set to true, you are free to add new users and groups to the system
with the ordinary useradd and
groupadd commands
|
| services.distccd.allowedClients | Client IPs which are allowed to connect to distccd in CIDR notation
|
| services.envfs.extraFallbackPathCommands | Extra commands to run in the package that contains fallback executables in case not other executable is found
|
| networking.hostId | The 32-bit host ID of the machine, formatted as 8 hexadecimal characters
|
| services.softether.vpnclient.down | Shell commands executed when the Virtual Network Adapter(s) is/are shutting down.
|
| services.xscreensaver.hooks | An attrset of events and commands to run upon each event
|
| networking.wg-quick.interfaces.<name>.preUp | Commands called at the start of the interface setup.
|
| networking.wg-quick.interfaces.<name>.postUp | Commands called after the interface setup.
|
| services.firezone.gateway.enable | Whether to enable the firezone gateway
|
| networking.nftables.extraDeletions | Extra deletion commands to be run on every firewall start, reload
and after stopping the firewall.
|
| boot.loader.systemd-boot.extraInstallCommands | Additional shell commands inserted in the bootloader installer
script after generating menu entries
|
| programs.steam.protontricks.enable | Whether to enable protontricks, a simple wrapper for running Winetricks commands for Proton-enabled games.
|
| services.prosody.modules.admin_adhoc | Allows administration via an XMPP client that supports ad-hoc commands
|
| services.networkd-dispatcher.rules.<name>.script | Shell commands executed on specified operational states.
|
| networking.firewall.extraCommands | Additional shell commands executed as part of the firewall
initialisation script
|
| networking.firewall.extraStopCommands | Additional shell commands executed as part of the firewall
shutdown script
|
| services.openssh.authorizedKeysCommandUser | Specifies the user under whose account the AuthorizedKeysCommand
is run
|
| services.kmonad.keyboards.<name>.defcfg.allowCommands | Whether to enable keys to run shell commands.
|
| nix.settings.trusted-substituters | List of binary cache URLs that non-root users can use (in
addition to those specified using
nix.settings.substituters) by passing
--option binary-caches to Nix commands.
|
| services.reaction.stopForFirewall | Whether to stop reaction when reloading the firewall
|
| services.xserver.displayManager.setupCommands | Shell commands executed just after the X server has started
|
| systemd.services.<name>.confinement.binSh | The program to make available as /bin/sh inside
the chroot
|
| services.taskserver.confirmation | Determines whether certain commands are confirmed.
|
| services.xserver.windowManager.i3.extraSessionCommands | Shell commands executed just before i3 is started.
|
| services.xserver.displayManager.startx.extraCommands | Shell commands to be added to the system-wide xinitrc script.
|
| services.kmonad.keyboards.<name>.enableHardening | Whether to enable systemd hardening.
If KMonad is used to execute shell commands, hardening may make some of them fail.
|
| services.xserver.windowManager.dwm.extraSessionCommands | Shell commands executed just before dwm is started.
|
| networking.wireguard.interfaces.<name>.preSetup | Commands called at the start of the interface setup.
|
| networking.wireguard.interfaces.<name>.postSetup | Commands called at the end of the interface setup.
|
| powerManagement.powertop.postStart | Shell commands executed after powertop is started
|
| virtualisation.podman.extraRuntimes | Extra runtime packages to be installed in the Podman wrapper
|
| networking.wireguard.interfaces.<name>.preShutdown | Commands called before shutting down the interface.
|
| networking.wireguard.interfaces.<name>.postShutdown | Commands called after shutting down the interface.
|
| services.rutorrent.nginx.exposeInsecureRPC2mount | If you do not enable one of the rpc or httprpc plugins you need to expose an RPC mount through scgi using this option
|
| services.prometheus.exporters.wireguard.prependSudo | Whether or no to prepend sudo to wg commands.
|
| services.xserver.windowManager.wmderland.extraSessionCommands | Shell commands executed just before wmderland is started.
|
| users.users.<name>.password | Specifies the (clear text) password for the user
|
| users.extraUsers.<name>.password | Specifies the (clear text) password for the user
|
| services.biboumi.settings.realname_customization | Whether the users will be able to use
the ad-hoc commands that lets them configure
their realname and username.
|