| services.amule.settings.WebServer.Password | MD5 hash of the password, obtainaible with echo "<password>" | md5sum | cut -d ' ' -f 1
|
| services.privoxy.settings.listen-address | Pair of address:port the proxy server is listening to.
|
| services.sftpgo.settings.ftpd.bindings.*.port | The port for serving FTP requests
|
| services.tts.servers.<name>.model | Name of the model to download and use for speech synthesis
|
| services.bacula-sd.device.<name>.archiveDevice | The specified name-string gives the system file name of the storage
device managed by this storage daemon
|
| services.pretix.settings.pretix.currency | Default currency for events in its ISO 4217 three-letter code.
|
| services.autotierfs.settings | The contents of the configuration file for autotier
|
| services.opencloud.settings | Additional YAML configuration for OpenCloud services
|
| services.cgit.<name>.nginx.virtualHost | VirtualHost to serve cgit on, defaults to the attribute name.
|
| services.bookstack.database.name | Database name.
|
| services.mediawiki.database.name | Database name.
|
| services.tor.settings.ExitPolicyRejectPrivate | See torrc manual.
|
| services.tor.settings.ServerDNSAllowBrokenConfig | See torrc manual.
|
| services.watchdogd.settings.safe-exit | With safeExit enabled, the daemon will ask the driver to disable the WDT before exiting
|
| services.languagetool.settings | Configuration file options for LanguageTool, see
'languagetool-http-server --help'
for supported settings.
|
| services.typesense.settings.server.api-port | Port on which the Typesense API service listens.
|
| services.warpgate.settings.postgres.key | Path to PostgreSQL listener private key.
|
| services.kanidm.server.settings.domain | The domain that Kanidm manages
|
| services.radicle.ci.broker.settings.triggers | CI triggers.
|
| services.opengfw.settings.ruleset.geosite | Path to geosite.dat.
|
| services.openssh.settings.GatewayPorts | Specifies whether remote hosts are allowed to connect to
ports forwarded for the client
|
| services.geth.<name>.gcmode | Blockchain garbage collection mode.
|
| services.uhub.<name>.enable | Whether to enable hub instance.
|
| services.headscale.settings.policy.mode | The mode can be "file" or "database" that defines
where the ACL policies are stored and read from.
|
| services.headscale.settings.policy.path | If the mode is set to "file", the path to a
HuJSON file containing ACL policies.
|
| services.i2pd.outTunnels.<name>.enable | Whether to enable ‹name›.
|
| services.umami.settings.APP_SECRET_FILE | A file containing a secure random string
|
| services.sourcehut.settings."sr.ht".owner-email | Owner's email.
|
| services.navidrome.settings.Address | Address to run Navidrome on.
|
| services.pid-fan-controller.settings.fans | List of fans to be controlled.
|
| services.watchdogd.settings.timeout | The WDT timeout before reset.
|
| services.yggdrasil-jumper.settings | Configuration for Yggdrasil Jumper as a Nix attribute set.
|
| services.reaction.settingsFiles | Configuration for reaction, see the wiki.
reaction supports JSON, YAML and JSONnet
|
| services.postgrest.settings | PostgREST configuration as documented in:
https://docs.postgrest.org/en/stable/references/configuration.html#list-of-parameters
db-uri is represented as an attribute set, see settings.db-uri
The settings.jwt-secret option is blocked
|
| services.invoiceplane.sites.<name>.database.name | Database name.
|
| services.centrifugo.settings | Declarative Centrifugo configuration
|
| services.typesense.settings.server.data-dir | Path to the directory where data will be stored on disk.
|
| services.sourcehut.settings."sr.ht".source-url | The source code for your fork of sr.ht.
|
| services.imaginary.settings.return-size | Return the image size in the HTTP headers.
|
| services.postgrest.settings.server-port | The TCP port to bind the web server.
|
| services.discourse.database.name | Discourse database name.
|
| services.scrutiny.settings.web.influxdb.port | The port of the InfluxDB instance.
|
| services.bind.zones.<name>.file | Zone file resource records contain columns of data, separated by whitespace, that define the record.
|
| services.vmalert.settings."notifier.url" | Prometheus Alertmanager URL
|
| services.yggdrasil.settings.Listen | Listen addresses for incoming connections
|
| programs.lazygit.settings | Lazygit configuration
|
| services.mautrix-discord.settings.bridge | Bridge configuration
|
| services.h2o.hosts.<name>.acme.root | Directory for the ACME challenge, which is public
|
| services.crab-hole.settings.blocklist.lists | List of blocklists
|
| services.hans.clients | Each attribute of this option defines a systemd service that
runs hans
|
| services.librespeed.frontend.settings | Override default settings of the speedtest web client
|
| services.bitmagnet.settings.dht_server | DHT server settings
|
| services.angrr.settings.touch.project-globs | List of glob patterns to include or exclude files when touching GC roots
|
| services.h2o.hosts.<name>.tls.quic | Enables HTTP/3 over QUIC on the UDP port for TLS
|
| services.angrr.settings.profile-policies | Profile GC root policies.
|
| services.moosefs.cgiserver.settings | GUI server configuration options.
|
| services.tor.settings.RelayBandwidthBurst | See torrc manual.
|
| services.opensearch.settings."http.port" | The port to listen on for HTTP traffic.
|
| services.hercules-ci-agent.settings.apiBaseUrl | API base URL that the agent will connect to
|
| services.sitespeed-io.runs.*.settings | Configuration for sitespeed-io, see
https://www.sitespeed.io/documentation/sitespeed.io/configuration/
for available options
|
| services.invidious-router.settings | Configuration for invidious-router
|
| services.matrix-hookshot.settings.passFile | A passkey used to encrypt tokens stored inside the bridge
|
| services.postgrest.settings.db-config | Enables the in-database configuration.
https://docs.postgrest.org/en/stable/references/configuration.html#in-database-configuration
This is enabled by default upstream, but disabled by default in this module.
|
| services.canaille.settings.CANAILLE.ACL | Access Control Lists
|
| services.openldap.settings.includes | LDIF files to include after the parent's attributes but before its children.
|
| services.openldap.settings.children | Child entries of the current entry, with recursively the same structure.
|
| services.grafana.settings.server.protocol | Which protocol to listen.
|
| services.scrutiny.settings.web.influxdb.host | IP or hostname of the InfluxDB instance.
|
| systemd.settings.Manager | Options for the global systemd service manager
|
| services.dnscrypt-proxy2.settings | Attrset that is converted and passed as TOML config file
|
| services.pretalx.settings.redis.location | URI to the redis server, used to speed up locking, caching and session storage.
|
| services.nntp-proxy.users.<name>.username | Username
|
| services.listmonk.database.settings.smtp | List of outgoing SMTP servers
|
| services.suwayomi-server.settings.server.port | The port that Suwayomi will listen to.
|
| services.geth.<name>.extraArgs | Additional arguments passed to Go Ethereum.
|
| services.geth.<name>.enable | Whether to enable Go Ethereum Node.
|
| services.nginx.virtualHosts.<name>.serverName | Name of this virtual host
|
| services.journald.remote.settings.Remote.Seal | Periodically sign the data in the journal using Forward Secure
Sealing.
|
| services.traefik.dynamic.settings | Dynamic configuration for Traefik, written in Nix
|
| services.bluesky-pds.settings.PDS_BLOB_UPLOAD_LIMIT | Size limit of uploaded blobs in bytes
|
| services.umurmur.settings.max_users | Maximum number of concurrent clients allowed.
|
| services.nsd.zones.<name>.allowNotify | Listed primary servers are allowed to notify this secondary server
|
| services.parsedmarc.settings | Configuration parameters to set in
parsedmarc.ini
|
| services.tlsrpt.collectd.settings.storage | Storage backend definition.
|
| services.postfix-tlspol.settings.server.cache-file | Path to the cache file.
|
| services.crowdsec-firewall-bouncer.settings | Settings for the main CrowdSec Firewall Bouncer
|
| programs.regreet.settings | ReGreet configuration file
|
| services.sourcehut.settings."hg.sr.ht".api-origin | Origin URL for the API
|
| services.grocy.settings.calendar.showWeekNumber | Show the number of the weeks in the calendar views.
|
| services.tor.settings.EntryStatistics | See torrc manual.
|
| services.tor.settings.UseDefaultFallbackDirs | See torrc manual.
|
| services.tor.settings.AccountingStart | See torrc manual.
|
| services.tor.settings.ProtocolWarnings | See torrc manual.
|
| services.lasuite-meet.settings.CELERY_BROKER_URL | URL of the redis backend for celery
|
| services.lasuite-docs.settings.CELERY_BROKER_URL | URL of the redis backend for celery
|
| security.pam.rssh.settings | Options to pass to the pam_rssh module
|
| services.k3s.manifests.<name>.target | Name of the symlink (relative to /var/lib/rancher/k3s/server/manifests)
|
| services.suricata.settings.dpdk.eal-params.proc-type | dpdk eal-params.proc-type, see data plane development kit docs.
|
| services.scrutiny.collector.settings | Collector settings to be rendered into the collector configuration file
|
| services.filebeat.settings | Configuration for filebeat
|