| networking.supplicant.<name>.userControlled.enable | Allow normal users to control wpa_supplicant through wpa_gui or wpa_cli
|
| services.magnetico.web.credentials | The credentials to access the web interface, in case authentication is
enabled, in the format username:hash
|
| services.magnetico.web.credentialsFile | The path to the file holding the credentials to access the web
interface
|
| services.mosquitto.listeners.*.users.<name>.hashedPasswordFile | Specifies the path to a file containing the
hashed password for the MQTT user
|
| services.postgresqlWalReceiver.receivers.<name>.postgresqlPackage | The postgresql package to use.
|
| system.replaceDependencies.replacements.*.newDependency | The replacement package.
|
| system.replaceDependencies.replacements.*.oldDependency | The original package to override.
|
| programs.miriway.config | Miriway's config
|
| services.keycloak.plugins | Keycloak plugin jar, ear files or derivations containing
them
|
| services.dokuwiki.sites.<name>.plugins | List of path(s) to respective plugin(s) which are copied into the 'plugin' directory.
These plugins need to be packaged before use, see example.
|
| services.wordpress.sites.<name>.themes | Path(s) to respective theme(s) which are copied from the 'theme' directory.
These themes need to be packaged before use, see example.
|
| services.nginx.additionalModules | Additional third-party nginx modules
to install
|
| services.wordpress.sites.<name>.plugins | Path(s) to respective plugin(s) which are copied from the 'plugins' directory.
These plugins need to be packaged before use, see example.
|
| services.k3s.charts | Packaged Helm charts that are linked to /var/lib/rancher/k3s/server/static/charts before k3s starts
|
| services.rke2.charts | Packaged Helm charts that are linked to /var/lib/rancher/rke2/server/static/charts before rke2 starts
|
| services.dokuwiki.sites.<name>.templates | List of path(s) to respective template(s) which are copied into the 'tpl' directory.
These templates need to be packaged before use, see example.
|
| services.invoiceplane.sites.<name>.quoteTemplates | List of path(s) to respective template(s) which are copied from the 'quote_templates/pdf' directory.
These templates need to be packaged before use, see example.
|
| services.invoiceplane.sites.<name>.invoiceTemplates | List of path(s) to respective template(s) which are copied from the 'invoice_templates/pdf' directory.
These templates need to be packaged before use, see example.
|
| qt.platformTheme | Selects the platform theme to use for Qt applications
|
| services.xserver.videoDrivers | The names of the video drivers the configuration
supports
|
| qt.style | Selects the style to use for Qt applications
|
| services.opensmtpd.procPackages | Packages to search for filters, tables, queues, and schedulers
|
| programs.steam.extraCompatPackages | Extra packages to be used as compatibility tools for Steam on Linux
|
| services.pipewire.extraLv2Packages | List of packages that provide LV2 plugins in lib/lv2 that should
be made available to PipeWire for [filter chains][wiki-filter-chain]
|
| environment.defaultPackages | Set of default packages that aren't strictly necessary
for a running system, entries can be removed for a more
minimal NixOS installation
|
| services.gitlab-runner.extraPackages | Extra packages to add to PATH for the gitlab-runner process
|
| system.checks | Packages that are added as dependencies of the system's build, usually
for the purpose of validating some part of the configuration
|
| services.fail2ban.extraPackages | Extra packages to be made available to the fail2ban service
|
| services.keycloak.themes | Additional theme packages for Keycloak
|
| environment.corePackages | Set of core packages for a normal interactive system
|
| documentation.enable | Whether to install documentation of packages from
environment.systemPackages into the generated system path
|
| programs.kde-pim.enable | Whether to enable KDE PIM base packages.
|
| services.pipewire.configPackages | List of packages that provide PipeWire configuration, in the form of
share/pipewire/*/*.conf files
|
| services.netdata.extraNdsudoPackages | Extra packages to add to PATH to make available to ndsudo.
ndsudo has SUID privileges, be careful what packages you list here.
cfg.package must be built with withNdsudo = true
|
| services.pipewire.wireplumber.extraLv2Packages | List of packages that provide LV2 plugins in lib/lv2 that should
be made available to WirePlumber for [filter chains][wiki-filter-chain]
|
| boot.extraModulePackages | A list of additional packages supplying kernel modules.
|
| services.udev.path | Packages added to the PATH environment variable when
executing programs from Udev rules.
coreutils, gnu{sed,grep}, util-linux and config.systemd.package are
automatically included.
|
| environment.systemPackages | The set of packages that appear in
/run/current-system/sw
|
| services.pcscd.plugins | Plugin packages to be used for PCSC-Lite.
|
| programs.zsh.ohMyZsh.customPkgs | List of custom packages that should be loaded into oh-my-zsh.
|
| programs.tmux.enable | Whenever to configure tmux system-wide.
|
| boot.initrd.systemd.initrdBin | Packages to include in /bin for the stage 1 emergency shell.
|
| services.netbox.plugins | List of plugin packages to install.
|
| services.olivetin.path | Packages added to the service's PATH.
|
| nix.settings.sandbox | If set, Nix will perform builds in a sandboxed environment that it
will set up automatically for each build
|
| networking.jool.enable | Whether to enable Jool, an Open Source implementation of IPv4/IPv6
translation on Linux
|
| services.public-inbox.path | Additional packages to place in the path of public-inbox-mda,
public-inbox-watch, etc.
|
| services.zenohd.plugins | Plugin packages to add to zenohd search paths.
|
| services.ferm.enable | Whether to enable Ferm Firewall.
Warning: Enabling this service WILL disable the existing NixOS
firewall! Default firewall rules provided by packages are not
considered at the moment.
|
| services.searx.enable | Whether to enable Searx, the meta search engine.
|
| services.jupyterhub.jupyterhubEnv | Python environment to run jupyterhub
Customizing will affect the packages available in the hub and
proxy
|
| hardware.fw-fanctrl.enable | Whether to enable the fw-fanctrl systemd service and install the needed packages.
|
| services.nagios.plugins | Packages to be added to the Nagios PATH
|
| services.mediawiki.path | Extra packages to add to the PATH of phpfpm-pool.
|
| services.xserver.modules | Packages to be added to the module search path of the X server.
|
| services.beszel.agent.extraPath | Extra packages to add to beszel path (such as nvidia-smi or rocm-smi).
|
| services.zenohd.backends | Storage backend packages to add to zenohd search paths.
|
| programs.tsmClient.dsmSysText | This configuration key contains the effective text
of the client system-options file "dsm.sys"
|
| services.cockpit.plugins | List of cockpit plugins
|
| programs.steam.extraPackages | Additional packages to add to the Steam environment.
|
| services.xserver.windowManager.xmonad.haskellPackages | haskellPackages used to build Xmonad and other packages
|
| programs.xonsh.extraPackages | Xontribs and extra Python packages to be available in xonsh.
|
| services.znc.modulePackages | A list of global znc module packages to add to znc.
|
| programs.ssh.setXAuthLocation | Whether to set the path to xauth for X11-forwarded connections
|
| services.guix.storeDir | The store directory where the Guix service will serve to/from
|
| programs.sway.extraPackages | Extra packages to be installed system wide
|
| services.nomad.extraPackages | Extra packages to add to PATH for the Nomad agent process.
|
| services.incron.extraPackages | Extra packages available to the system incrontab.
|
| nix.settings.cores | This option defines the maximum number of concurrent tasks during
one build
|
| boot.plymouth.themePackages | Extra theme packages for plymouth.
|
| xdg.portal.configPackages | List of packages that provide XDG desktop portal configuration, usually in
the form of share/xdg-desktop-portal/$desktop-portals.conf
|
| services.pipewire.wireplumber.configPackages | List of packages that provide WirePlumber configuration, in the form of
share/wireplumber/*/*.conf files
|
| hardware.enableAllFirmware | Whether to enable all firmware, including unfree packages that must be explictly allowed
|
| services.cloud-init.extraPackages | List of additional packages to be available within cloud-init jobs.
|
| programs.fish.vendor.config.enable | Whether fish should source configuration snippets provided by other packages.
|
| networking.networkmanager.plugins | List of plugin packages to install
|
| services.davis.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| services.movim.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| services.slskd.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| services.jupyter.extraPackages | Extra packages to be available in the jupyter runtime environment
|
| services.code-server.extraPackages | Additional packages to add to the code-server PATH.
|
| services.maubot.pythonPackages | List of additional Python packages to make available for maubot.
|
| services.snipe-it.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| services.waagent.extraPackages | Additional packages to add to the waagent PATH.
|
| services.peering-manager.plugins | List of plugin packages to install.
|
| programs.river.extraPackages | Extra packages to be installed system wide
|
| programs.gdk-pixbuf.modulePackages | Packages providing GDK-Pixbuf modules, for cache generation.
|
| services.gancio.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| services.akkoma.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| services.fluidd.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| services.monica.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| services.matomo.nginx.basicAuthFile | Basic Auth password file for a vhost
|
| i18n.inputMethod.fcitx5.plasma6Support | Use qt6 versions of fcitx5 packages
|
| system.stateVersion | This option defines the first version of NixOS you have installed on this particular machine,
and is used to maintain compatibility with application data (e.g. databases) created on older NixOS versions
|
| services.rebuilderd.enable | Whether to enable rebuilderd service for independent verification of binary packages.
|
| services.livebook.extraPackages | Extra packages to make available to the Livebook service.
|
| services.zabbixAgent.extraPackages | Packages to be added to the Zabbix PATH
|
| services.zabbixProxy.extraPackages | Packages to be added to the Zabbix PATH
|
| services.xserver.excludePackages | Which X11 packages to exclude from the default environment
|
| services.deluge.extraPackages | Extra packages available at runtime to enable Deluge's plugins
|