| services.nostr-rs-relay.dataDir | Directory for SQLite files.
|
| services.nagios.virtualHost.adminAddr | E-mail address of the server administrator.
|
| services.mysql.ensureDatabases | Ensures that the specified databases exist
|
| services.nvme-rs.enable | Whether to enable nvme-rs, a monitoring service.
|
| services.stalwart.dataDir | Data directory for stalwart
|
| services.prometheus.exporters.imap-mailstat.user | User name under which the imap-mailstat exporter shall be run.
|
| services.matrix-conduit.enable | Whether to enable matrix-conduit.
|
| services.plausible.database.clickhouse.url | The URL to be used to connect to clickhouse.
|
| services.strongswan.ca | A set of CAs (certification authorities) and their options for
the ‘ca xxx’ sections of the ipsec.conf
file.
|
| services.ttyd.interface | Network interface to bind.
|
| services.mediawiki.httpd.virtualHost.servedDirs | This option provides a simple way to serve static directories.
|
| services.lighttpd.collectd.enable | Whether to enable collectd subservice accessible at http://yourserver/collectd.
|
| services.prometheus.exporters.restic.port | Port to listen on.
|
| services.matter-server.logLevel | Verbosity of logs from the matter-server
|
| services.nfs.idmapd.settings | libnfsidmap configuration
|
| services.openssh.settings.DenyGroups | If specified, login is denied for all users part of the listed
groups
|
| services.nfs.server.enable | Whether to enable the kernel's NFS server.
|
| services.searx.enable | Whether to enable Searx, the meta search engine.
|
| services.prometheus.exporters.snmp.user | User name under which the snmp exporter shall be run.
|
| services.multipath.overrides | This section defines values for attributes that should override the
device-specific settings for all devices.
|
| services.misskey.reverseProxy.webserver.caddy.hostName | Canonical hostname for the server.
|
| services.pacemaker.enable | Whether to enable pacemaker.
|
| services.prometheus.exporters.exportarr-radarr.enable | Whether to enable the prometheus exportarr-radarr exporter.
|
| services.prometheus.exporters.ping.telemetryPath | Path under which to expose metrics.
|
| services.nylon.<name>.acceptInterface | Tell nylon which interface to listen for client requests on, default is "lo".
|
| services.nifi.initJavaHeapSize | Set the initial heap size for the JVM in MB.
|
| services.lubelogger.environmentFile | Path to a file containing extra LubeLogger config options in the systemd EnvironmentFile format
|
| services.prometheus.exporters.lnd.enable | Whether to enable the prometheus lnd exporter.
|
| services.public-inbox.settings.coderepo.<name>.cgitUrl | URL of a cgit instance
|
| services.porn-vault.openFirewall | Whether to open the Porn-Vault port in the firewall.
|
| services.plex.extraPlugins | A list of paths to extra plugin bundles to install in Plex's plugin
directory
|
| services.prometheus.exporters.unbound.telemetryPath | Path under which to expose metrics.
|
| services.resolved.enable | Whether to enable the Systemd DNS resolver daemon (systemd-resolved).
|
| services.pipewire.wireplumber.package | The WirePlumber derivation to use.
|
| services.prometheus.exporters.lnd.lndTlsPath | Path to lnd TLS certificate.
|
| services.rustdesk-server.enable | Whether to enable RustDesk, a remote access and remote control software, allowing maintenance of computers and other devices.
|
| services.nginx.tailscaleAuth.socketPath | Alias of services.tailscaleAuth.socketPath.
|
| services.tor.settings.ExtORPortCookieAuthFileGroupReadable | See torrc manual.
|
| services.renovate.validateSettings | Whether to run renovate's config validator on the built configuration.
|
| services.ombi.openFirewall | Open ports in the firewall for the Ombi web interface.
|
| services.maddy.primaryDomain | Primary MX domain to use
|
| services.rkvm.client.settings.certificate | TLS ceritficate path.
This should be generated with rkvm-certificate-gen.
|
| services.tomcat.javaOpts | Parameters to pass to the Java Virtual Machine which spawns Apache Tomcat
|
| services.slskd.nginx.extraConfig | These lines go to the end of the vhost verbatim.
|
| services.multipath.devices.*.path_selector | The default path selector algorithm to use; they are offered by the kernel multipath target
|
| services.strongswan-swanctl.enable | Whether to enable strongswan-swanctl service.
|
| services.udp-over-tcp.tcp2udp.<name>.recvBufferSize | If given, sets the SO_RCVBUF option on the TCP socket to the given number of bytes
|
| services.rsyslogd.extraParams | Additional parameters passed to rsyslogd.
|
| services.mysql.initialDatabases.*.name | The name of the database to create.
|
| services.strongswan-swanctl.swanctl.connections.<name>.children.<name>.reqid | Fixed reqid to use for this CHILD_SA
|
| services.nginx.resolver.addresses | List of resolvers to use
|
| services.mmsd.enable | Whether to enable Multimedia Messaging Service Daemon.
|
| services.pihole-ftl.useDnsmasqConfig | Import options defined in services.dnsmasq.settings via
misc.dnsmasq_lines in Pi-hole's config.
|
| services.prometheus.exporters.pihole.protocol | The protocol which is used to connect to Pi-Hole
|
| services.maubot.settings.homeservers.<name>.url | Client-server API URL
|
| services.nvme-rs.settings.email.smtp_port | SMTP server port
|
| services.microsocks.authUsername | Optional username to use for authentication.
|
| services.netbird.tunnels.<name>.dir.runtime | A runtime directory used by NetBird client.
|
| services.lighthouse.beacon | Beacon node
|
| services.prometheus.scrapeConfigs.*.docker_sd_configs.*.follow_redirects | Configure whether HTTP requests follow HTTP 3xx redirects
|
| services.prometheus.exporters.unpoller.listenAddress | Address to listen on.
|
| services.saunafs.metalogger.settings | Contents of metalogger config file (see sfsmetalogger.cfg(5)).
|
| services.spice-webdavd.enable | Whether to enable the spice guest webdav proxy daemon.
|
| services.prometheus.exporters.py-air-control.group | Group under which the py-air-control exporter shall be run.
|
| services.miredo.package | The miredo package to use.
|
| services.minidlna.package | The minidlna package to use.
|
| services.teamspeak3.fileTransferIP | IP on which the server instance will listen for incoming file transfer connections
|
| services.redmine.database.name | Database name.
|
| services.rkvm.server.settings.switch-keys | A key list specifying a host switch combination.
A list of key names is available in https://github.com/htrefil/rkvm/blob/master/switch-keys.md.
|
| services.prometheus.exporters.pgbouncer.telemetryPath | Path under which to expose metrics.
|
| services.snipe-it.user | User snipe-it runs as.
|
| services.scion.package | The scion package to use.
|
| services.mattermost.logDir | Mattermost log directory.
|
| services.picom.wintypes | Rules for specific window types.
|
| services.misskey.settings.redis | ioredis options
|
| services.tor.settings.KeyDirectoryGroupReadable | See torrc manual.
|
| services.monica.nginx.addSSL | Whether to enable HTTPS in addition to plain HTTP
|
| services.neo4j.constrainLoadCsv | Sets the root directory for file URLs used with the Cypher
LOAD CSV clause to be that defined by
directories.imports
|
| services.parsedmarc.settings.elasticsearch.user | Username to use when connecting to Elasticsearch, if
required.
|
| services.prometheus.remoteRead.*.tls_config.cert_file | Certificate file for client cert authentication to the server.
|
| services.prometheus.exporters.postgres.extraFlags | Extra commandline options to pass to the postgres exporter.
|
| services.radicle.httpd.nginx.listen.*.proxyProtocol | Enable PROXY protocol.
|
| services.matomo.nginx.locations.<name>.recommendedProxySettings | Enable recommended proxy settings.
|
| services.slskd.settings.rooms | Chat rooms to join on startup.
|
| services.strongswan-swanctl.swanctl.connections.<name>.remote.<name>.ca_id | Identity in CA certificate to accept for authentication
|
| services.longview.enable | If enabled, system metrics will be sent to Linode LongView.
|
| services.ntp.servers | The set of NTP servers from which to synchronise.
|
| services.opkssh.providers.<name>.issuer | Issuer URI
|
| services.prometheus.exporters.snmp.listenAddress | Address to listen on.
|
| services.rutorrent.rpcSocket | Path to rtorrent rpc socket.
|
| services.strongswan-swanctl.swanctl.connections.<name>.local.<name>.eap_id | Client EAP-Identity to use in EAP-Identity exchange and the EAP method.
|
| services.prometheus.alertmanager-ntfy.settings.ntfy.notification.priority | The ntfy.sh message priority (see https://docs.ntfy.sh/publish/#message-priority for more information)
|
| services.moodle.package | The moodle package to use.
|
| services.syncthing.overrideFolders | Whether to delete the folders which are not configured via the
folders option
|
| services.mattermost.environmentFile | Environment file (see systemd.exec(5)
"EnvironmentFile=" section for the syntax) which sets config options
for mattermost (see the Mattermost documentation)
|
| services.ollama.user | User account under which to run ollama
|
| services.misskey.reverseProxy.webserver.nginx.acmeRoot | Directory for the ACME challenge, which is public
|
| services.prometheus.exporters.exportarr-lidarr.enable | Whether to enable the prometheus exportarr-lidarr exporter.
|
| services.netbird.tunnels.<name>.openFirewall | Opens up firewall port for communication between NetBird peers directly over LAN or public IP,
without using (internet-hosted) TURN servers as intermediaries.
|
| services.scrutiny.settings.web.listen.host | Interface address for web application to bind to.
|