| services.bookstack.settings.APP_URL | The root URL that you want to host BookStack on
|
| services.grafana-to-ntfy.settings.ntfyBAuthUser | The ntfy-sh user to use for authenticating with the ntfy-sh instance
|
| services.radicle.httpd.nginx.rejectSSL | Whether to listen for and reject all HTTPS connections to this vhost
|
| services.sourcehut.settings."lists.sr.ht".redis | The Redis connection used for the Celery worker.
|
| services.etebase-server.settings.global.debug | Whether to set django's DEBUG flag.
|
| services.parsedmarc.settings.smtp.host | The SMTP server hostname or IP address.
|
| services.parsedmarc.settings.imap.host | The IMAP server hostname or IP address.
|
| services.freeciv.settings.Newusers | Whether to enable new users to login if auth is enabled.
|
| services.aesmd.settings.whitelistUrl | URL to retrieve authorized Intel SGX enclave signers.
|
| i18n.inputMethod.fcitx5.settings.globalOptions | The global options in config file in ini format.
|
| services.suricata.settings.plugins | Plugins -- Experimental -- specify the filename for each plugin shared object.
|
| services.openssh.settings.PermitRootLogin | Whether the root user can login using ssh.
|
| services.firezone.server.api.settings | Environment variables for this component of the Firezone server
|
| services.firezone.server.web.settings | Environment variables for this component of the Firezone server
|
| services.pretix.settings.pretix.currency | Default currency for events in its ISO 4217 three-letter code.
|
| services.hatsu.settings.HATSU_DATABASE_URL | Database URL.
|
| services.public-inbox.settings.coderepo | code repositories
|
| services.yggdrasil.settings.Peers | List of outbound peer connection strings
|
| services.garage.settings.data_dir | The directory in which Garage will store the data blocks of objects
|
| services.sourcehut.settings.mail.pgp-pubkey | OpenPGP public key.
|
| services.headscale.settings | Overrides to config.yaml as a Nix attribute set
|
| networking.ifstate.settings | Content of IfState's configuration file
|
| services.radicle.ci.broker.settings.adapters | CI adapters
|
| services.minidlna.settings.inotify | Whether to enable inotify monitoring to automatically discover new files.
|
| services.searx.settingsFile | The path of the Searx server settings.yml file
|
| services.headscale.settings.policy.mode | The mode can be "file" or "database" that defines
where the ACL policies are stored and read from.
|
| services.headscale.settings.policy.path | If the mode is set to "file", the path to a
HuJSON file containing ACL policies.
|
| services.suricata.settings.vars.address-groups | The address group variables for suricata, if not defined the
default value of suricata (see example) will be used
|
| services.hedgedoc.settings.allowOrigin | List of domains to whitelist.
|
| services.gancio.settings.log_level | Gancio log level.
|
| services.tinyproxy.settings.Listen | Specify which address to listen to.
|
| services.tinc.networks.<name>.settings | Configuration of the Tinc daemon for this network
|
| services.anubis.instances.<name>.policy.settings | Additional policy settings merged into the policy file
|
| services.sourcehut.settings."todo.sr.ht".origin | URL todo.sr.ht is being served at (protocol://domain)
|
| services.sourcehut.settings."meta.sr.ht".debug-port | Port to bind the debug server to.
|
| services.sourcehut.settings."todo.sr.ht".debug-port | Port to bind the debug server to.
|
| services.sourcehut.settings."meta.sr.ht".debug-host | Address to bind the debug server to.
|
| services.sourcehut.settings."todo.sr.ht".debug-host | Address to bind the debug server to.
|
| services.sourcehut.settings."meta.sr.ht".origin | URL meta.sr.ht is being served at (protocol://domain)
|
| services.forgejo.settings.server.DISABLE_SSH | Disable external SSH feature.
|
| services.taler.merchant.settings.merchant.DB | Plugin to use for the database.
|
| services.taler.exchange.settings.exchange.DB | Plugin to use for the database.
|
| services.paperless.exporter.settings | Settings to pass to the document exporter as CLI arguments.
|
| services.sourcehut.settings."sr.ht".site-info | The top-level info page for your site.
|
| services.sourcehut.settings."sr.ht".site-name | The name of your network of sr.ht-based sites.
|
| services.libeufin.nexus.settings.nexus-ebics.USER_ID | User ID of the EBICS subscriber
|
| services.imaginary.settings | Command line arguments passed to the imaginary executable, stripped of
the prefix -
|
| hardware.bluetooth.settings | Set configuration for system-wide bluetooth (/etc/bluetooth/main.conf)
|
| services.crab-hole.settings.blocklist.lists | List of blocklists
|
| services.c2fmzq-server.settings.verbose | The level of logging verbosity: 1:Error 2:Info 3:Debug
|
| services.postfix-tlspol.settings.server.log-level | Log level
|
| services.tor.settings.FascistFirewall | See torrc manual.
|
| services.sabnzbd.settings.servers.<name>.name | The name of the server
|
| services.sabnzbd.settings.servers.<name>.host | Hostname of the server
|
| services.sabnzbd.settings.servers.<name>.port | Port of the server
|
| services.mympd.settings.http_port | The HTTP port where mympd's web interface will be available
|
| services.typesense.settings.server.api-port | Port on which the Typesense API service listens.
|
| services.warpgate.settings.postgres.key | Path to PostgreSQL listener private key.
|
| services.headscale.settings.oidc.pkce.method | PKCE method to use:
- plain: Use plain code verifier
- S256: Use SHA256 hashed code verifier (default, recommended)
|
| security.loginDefs.settings.ENCRYPT_METHOD | This defines the system default encryption algorithm for encrypting passwords.
|
| services.inadyn.settings.provider.<name>.ssl | Whether to use HTTPS for this DDNS provider.
|
| services.routinator.settings.log | A string specifying where to send log messages to
|
| services.wg-access-server.settings.dns.enabled | Enable/disable the embedded DNS proxy server
|
| services.scanservjs.settings.host | The IP to listen on.
|
| services.scanservjs.settings.port | The port to listen on.
|
| services.traefik.dynamic.settings | Dynamic configuration for Traefik, written in Nix
|
| services.xonotic.settings.hostname | The name that will appear in the server list. $g_xonoticversion
gets replaced with the current version.
|
| services.umami.settings.DISABLE_UPDATES | Disables the check for new versions of Umami.
|
| services.rosenpass.settings.listen | List of local endpoints to listen for connections.
|
| services.typesense.settings.server.data-dir | Path to the directory where data will be stored on disk.
|
| services.mediagoblin.paste.settings | Settings which are written into paste.ini.
|
| services.pretalx.settings.redis.location | URI to the redis server, used to speed up locking, caching and session storage.
|
| services.wg-access-server.settings.storage | A storage backend connection string
|
| services.biboumi.settings.hostname | The hostname served by the XMPP gateway
|
| services.cryptpad.settings.httpSafeOrigin | Cryptpad sandbox URL
|
| services.reposilite.settings.port | The TCP port to bind to.
|
| services.postgresql.settings.port | The port on which PostgreSQL listens.
|
| services.canaille.settings.CANAILLE.ACL | Access Control Lists
|
| services.sourcehut.settings."hg.sr.ht".api-origin | Origin URL for the API
|
| services.sftpgo.settings.sftpd.bindings.*.port | The port for serving SFTP requests
|
| services.opengfw.settings.ruleset.geosite | Path to geosite.dat.
|
| networking.wireless.iwd.settings | Options passed to iwd
|
| services.scrutiny.settings.web.influxdb.token | Authentication token for connecting to InfluxDB.
|
| services.rsyncd.settings.globalSection | global section of an INI file (attrs of INI atom (null, bool, int, float or string))
|
| services.epgstation.settings.port | HTTP port for EPGStation to listen on.
|
| services.tor.settings.VirtualAddrNetworkIPv4 | See torrc manual.
|
| services.tor.settings.AccountingMax | See torrc manual.
|
| services.snips-sh.settings.SNIPS_SSH_INTERNAL | The internal SSH address of the service
|
| services.tor.settings.VirtualAddrNetworkIPv6 | See torrc manual.
|
| services.matrix-conduit.settings | Generates the conduit.toml configuration file
|
| services.sourcehut.settings."todo.sr.ht::mail".sock | Path for the lmtp daemon's unix socket
|
| services.sftpgo.settings.httpd.bindings.*.port | The port for serving HTTP(S) requests
|
| services.cryptpad.settings.maxWorkers | Number of child processes, defaults to number of cores available
|
| security.auditd.plugins.<name>.settings | Plugin-specific config file to link to /etc/audit/.conf
|
| services.fediwall.settings.hideReplies | Hide replies
|
| services.zram-generator.settings | Configuration for zram-generator,
see https://github.com/systemd/zram-generator for documentation.
|
| services.mediagoblin.settings | Settings which are written into mediagoblin.ini.
|
| services.watchdogd.settings.safe-exit | With safeExit enabled, the daemon will ask the driver to disable the WDT before exiting
|
| services.inadyn.settings.custom.<name>.ddns-server | DDNS server name.
|
| services.peering-manager.settings | Configuration options to set in configuration.py
|