| services.athens.storage.azureblob.accountKey | Account key for the Azure Blob storage backend
|
| services.mautrix-whatsapp.settings | config.yaml configuration as a Nix attribute set
|
| services.prometheus.scrapeConfigs.*.kuma_sd_configs.*.basic_auth | Optional HTTP basic authentication information.
|
| services.prometheus.scrapeConfigs.*.consul_sd_configs.*.tags | An optional list of tags used to filter nodes for a given
service
|
| services.gokapi.environment.GOKAPI_CONFIG_FILE | Sets the filename for the config file.
|
| services.zwave-js.secretsConfigFile | JSON file containing secret keys
|
| services.matrix-synapse.workers.<name>.worker_log_config | The file for log configuration
|
| services.prometheus.scrapeConfigs.*.kuma_sd_configs.*.oauth2.client_id | OAuth client ID.
|
| services.prometheus.scrapeConfigs.*.kuma_sd_configs.*.oauth2.token_url | The URL to fetch the token from.
|
| services.prometheus.scrapeConfigs.*.eureka_sd_configs.*.server | The URL to connect to the Eureka server.
|
| services.prometheus.scrapeConfigs.*.docker_sd_configs.*.port | The port to scrape metrics from, when role is nodes, and for discovered
tasks and services that don't have published ports
|
| services.prometheus.scrapeConfigs.*.eureka_sd_configs.*.oauth2 | Optional OAuth 2.0 configuration
|
| services.prometheus.scrapeConfigs.*.consul_sd_configs.*.oauth2 | Optional OAuth 2.0 configuration
|
| services.prometheus.scrapeConfigs.*.docker_sd_configs.*.oauth2 | Optional OAuth 2.0 configuration
|
| services.prometheus.scrapeConfigs.*.linode_sd_configs.*.oauth2 | Optional OAuth 2.0 configuration
|
| services.prometheus.scrapeConfigs.*.http_sd_configs.*.basic_auth | Authentication information used to authenticate to the API server.
password and password_file are mutually exclusive.
|
| services.audiobookshelf.dataDir | Path to Audiobookshelf config and metadata inside of /var/lib.
|
| services.prometheus.scrapeConfigs.*.hetzner_sd_configs | List of Hetzner service discovery configurations.
|
| services.prometheus.scrapeConfigs.*.puppetdb_sd_configs.*.tls_config.insecure_skip_verify | Disable validation of the server certificate.
|
| services.prometheus.scrapeConfigs.*.scaleway_sd_configs.*.tls_config.insecure_skip_verify | Disable validation of the server certificate.
|
| services.prometheus.scrapeConfigs.*.marathon_sd_configs.*.tls_config.insecure_skip_verify | Disable validation of the server certificate.
|
| services.prometheus.scrapeConfigs.*.consul_sd_configs.*.scheme | Consul scheme
Defaults to http in prometheus
when set to null.
|
| services.livekit.ingress.settings.rtc_config.use_external_ip | When set to true, attempts to discover the host's public IP via STUN
|
| services.prometheus.scrapeConfigs.*.uyuni_sd_configs.*.proxy_url | Optional proxy URL.
|
| services.prometheus.scrapeConfigs.*.azure_sd_configs.*.proxy_url | Optional proxy URL.
|
| services.prometheus.scrapeConfigs.*.consul_sd_configs.*.server | Consul server to query
|
| services.postgresql.ensureUsers | Ensures that the specified users exist
|
| services.prometheus.scrapeConfigs.*.azure_sd_configs.*.client_id | Optional client ID
|
| services.prometheus.scrapeConfigs.*.azure_sd_configs.*.tenant_id | Optional tenant ID
|
| services.limesurvey.virtualHost.locations | Declarative location config
|
| services.saunafs.chunkserver.settings | Contents of chunkserver config file (see sfschunkserver.cfg(5)).
|
| services.sssd.environmentFile | Environment file as defined in systemd.exec(5)
|
| services.prometheus.scrapeConfigs.*.triton_sd_configs.*.account | The account to use for discovering new targets.
|
| services.livekit.ingress.settings.rtc_config.port_range_start | Start of UDP port range for WebRTC
|
| services.hadoop.hdfs.httpfs.restartIfChanged | Automatically restart the service on config change
|
| services.orangefs.server.fileSystems.<name>.extraStorageHints | Extra config for <StorageHints> section.
|
| services.mediawiki.httpd.virtualHost.locations | Declarative location config
|
| services.prometheus.scrapeConfigs.*.triton_sd_configs.*.groups | A list of groups for which targets are retrieved, only supported when targeting the container role
|
| services.gitlab.pages.settings | Configuration options to set in the GitLab Pages config
file
|
| boot.kernelPatches | A list of additional patches to apply to the kernel
|
| services.prometheus.scrapeConfigs.*.docker_sd_configs.*.filters | Optional filters to limit the discovery process to a subset of available resources.
|
| services.prometheus.scrapeConfigs.*.uyuni_sd_configs.*.separator | The string by which Uyuni group names are joined into the groups label
Defaults to , in prometheus
when set to null.
|
| services.prometheus.scrapeConfigs.*.triton_sd_configs.*.version | The Triton discovery API version
|
| services.hadoop.hbase.regionServer.overrideHosts | Remove /etc/hosts entries for "127.0.0.2" and "::1" defined in nixos/modules/config/networking.nix
Regionservers must be able to resolve their hostnames to their IP addresses, through PTR records
or /etc/hosts entries.
|
| services.firefox-syncserver.settings | Settings for the sync server
|
| services.druid.overlord.restartIfChanged | Automatically restart the service on config change
|
| services.prometheus.scrapeConfigs.*.consul_sd_configs.*.password | Consul password
|
| services.prometheus.scrapeConfigs.*.consul_sd_configs.*.username | Consul username
|
| services.prometheus.scrapeConfigs.*.openstack_sd_configs.*.tls_config.insecure_skip_verify | Disable validation of the server certificate.
|
| services.keepalived.vrrpInstances.<name>.virtualIps | Declarative vhost config
|
| services.telegraf.environmentFiles | File to load as environment file
|
| services.pangolin.environmentFile | Path to a file containing sensitive environment variables for Pangolin
|
| services.prometheus.scrapeConfigs.*.consul_sd_configs.*.oauth2.scopes | Scopes for the token request.
|
| services.prometheus.scrapeConfigs.*.linode_sd_configs.*.oauth2.scopes | Scopes for the token request.
|
| services.prometheus.scrapeConfigs.*.docker_sd_configs.*.oauth2.scopes | Scopes for the token request.
|
| services.prometheus.scrapeConfigs.*.eureka_sd_configs.*.oauth2.scopes | Scopes for the token request.
|
| services.prometheus.scrapeConfigs.*.consul_sd_configs.*.services | A list of services for which targets are retrieved.
|
| services.prometheus.scrapeConfigs.*.hetzner_sd_configs.*.role | The Hetzner role of entities that should be discovered
|
| services.prometheus.scrapeConfigs.*.uyuni_sd_configs.*.basic_auth | Optional HTTP basic authentication information.
|
| services.prometheus.scrapeConfigs.*.hetzner_sd_configs.*.port | The port to scrape metrics from
|
| services.prometheus.scrapeConfigs.*.relabel_configs.*.replacement | Replacement value against which a regex replace is performed if the
regular expression matches
|
| services.prometheus.scrapeConfigs.*.triton_sd_configs.*.role | The type of targets to discover, can be set to:
- "container" to discover virtual machines (SmartOS zones, lx/KVM/bhyve branded zones) running on Triton
- "cn" to discover compute nodes (servers/global zones) making up the Triton infrastructure
Defaults to container in prometheus
when set to null.
|
| services.prometheus.scrapeConfigs.*.uyuni_sd_configs.*.oauth2.token_url | The URL to fetch the token from.
|
| services.prometheus.scrapeConfigs.*.uyuni_sd_configs.*.oauth2.client_id | OAuth client ID.
|
| services.transmission.settings | Settings whose options overwrite fields in
.config/transmission-daemon/settings.json
(each time the service starts)
|
| services.postfix.submissionsOptions | Options for the submission config via smtps in master.cf.
smtpd_tls_security_level will be set to encrypt, if it is missing
or has one of the values "may" or "none".
smtpd_tls_wrappermode with value "yes" will be added automatically.
|
| services.wordpress.sites.<name>.virtualHost.locations | Declarative location config
|
| virtualisation.lxc.lxcfs.enable | This enables LXCFS, a FUSE filesystem for LXC
|
| services.ocis.environment | Extra config options
|
| services.mattermost.mutableConfig | Whether the Mattermost config.json is writeable by Mattermost
|
| services.prometheus.scrapeConfigs.*.triton_sd_configs.*.endpoint | The Triton discovery endpoint (e.g. cmon.us-east-3b.triton.zone)
|
| services.prometheus.scrapeConfigs.*.docker_sd_configs.*.filters.*.values | Value for the filter.
|
| services.firezone.server.provision.accounts.<name>.auth.<name>.adapter_config.clientSecretFile | A file containing a the client secret for an openid_connect adapter
|
| services.opensearch.restartIfChanged | Automatically restart the service on config change
|
| services.limesurvey.nginx.virtualHost.locations | Declarative location config
|
| virtualisation.lxc.usernetConfig | This is the config file for managing unprivileged user network
administration access in LXC
|
| services.prometheus.scrapeConfigs.*.docker_sd_configs.*.filters.*.name | Name of the filter
|
| services.prometheus.scrapeConfigs.*.hetzner_sd_configs.*.oauth2 | Optional OAuth 2.0 configuration
|
| services.prometheus.scrapeConfigs.*.consul_sd_configs.*.proxy_url | Optional proxy URL.
|
| services.prometheus.scrapeConfigs.*.eureka_sd_configs.*.proxy_url | Optional proxy URL.
|
| services.prometheus.scrapeConfigs.*.linode_sd_configs.*.proxy_url | Optional proxy URL.
|
| services.prometheus.scrapeConfigs.*.docker_sd_configs.*.proxy_url | Optional proxy URL.
|
| services.prometheus.scrapeConfigs.*.puppetdb_sd_configs | List of PuppetDB service discovery configurations.
|
| services.prometheus.scrapeConfigs.*.marathon_sd_configs | List of Marathon service discovery configurations.
|
| services.prometheus.scrapeConfigs.*.scaleway_sd_configs | List of Scaleway service discovery configurations.
|
| services.druid.middleManager.restartIfChanged | Automatically restart the service on config change
|
| services.prometheus.scrapeConfigs.*.kuma_sd_configs.*.basic_auth.password | HTTP password
|
| services.prometheus.scrapeConfigs.*.http_sd_configs.*.basic_auth.username | HTTP username
|
| services.prometheus.scrapeConfigs.*.http_sd_configs.*.basic_auth.password | HTTP password
|
| services.prometheus.scrapeConfigs.*.kuma_sd_configs.*.basic_auth.username | HTTP username
|
| services.prometheus.scrapeConfigs.*.relabel_configs.*.target_label | Label to which the resulting value is written in a replace action
|
| services.prometheus.scrapeConfigs.*.kubernetes_sd_configs.*.tls_config.insecure_skip_verify | Disable validation of the server certificate.
|
| services.prometheus.scrapeConfigs.*.consul_sd_configs.*.node_meta | Node metadata used to filter nodes for a given service.
|
| security.pam.u2f.settings.authfile | By default pam-u2f module reads the keys from
$XDG_CONFIG_HOME/Yubico/u2f_keys (or
$HOME/.config/Yubico/u2f_keys if XDG variable is
not set)
|
| services.prometheus.remoteWrite.*.metadata_config.send_interval | How frequently metric metadata is sent to remote storage.
|
| services.prometheus.scrapeConfigs.*.azure_sd_configs.*.environment | The Azure environment
|
| services.limesurvey.httpd.virtualHost.locations | Declarative location config
|
| services.synapse-auto-compressor.postgresUrl | Connection string to postgresql in the
[rust postgres crate config format](https://docs.rs/postgres/latest/postgres/config/struct
|
| services.woodpecker-server.environment | woodpecker-server config environment variables, for other options read the documentation
|
| services.wasabibackend.customConfigFile | Defines the path to a custom configuration file that is copied to the user's directory
|