| services.filesender.settings | Configuration options used by FileSender
|
| services.homebridge.settings | Configuration options for homebridge
|
| services.snapserver.settings | Snapserver configuration
|
| services.privatebin.settings | Options for privatebin configuration
|
| services.mattermost.settings | Additional configuration options as Nix attribute set in config.json schema.
|
| services.sourcehut.settings.mail.pgp-pubkey | OpenPGP public key.
|
| services.libeufin.nexus.settings.nexus-ebics.NAME | Legal entity that is associated with the EBICS subscriber.
|
| services.slskd.settings.global.download.slots | Limit of the number of concurrent download slots.
|
| services.rsyncd.settings.globalSection | global section of an INI file (attrs of INI atom (null, bool, int, float or string))
|
| services.samba.settings.global."invalid users" | List of users who are denied to login via Samba.
|
| services.tor.settings.CellStatistics | See torrc manual.
|
| services.tor.settings.DirReqStatistics | See torrc manual.
|
| services.tor.settings.OptimisticData | See torrc manual.
|
| services.snips-sh.settings.SNIPS_HTTP_INTERNAL | The internal HTTP address of the service
|
| services.sourcehut.settings."lists.sr.ht".redis | The Redis connection used for the Celery worker.
|
| services.etebase-server.settings.global.debug | Whether to set django's DEBUG flag.
|
| services.parsedmarc.settings.smtp.host | The SMTP server hostname or IP address.
|
| services.parsedmarc.settings.imap.host | The IMAP server hostname or IP address.
|
| nix.settings.trusted-users | A list of names of users that have additional rights when
connecting to the Nix daemon, such as the ability to specify
additional binary caches, or to import unsigned NARs
|
| services.shairport-sync.settings | Configuration options for Shairport-Sync
|
| services.rosenpass.settings.peers.*.peer | WireGuard public key corresponding to the remote Rosenpass peer.
|
| programs.openvpn3.log-service.settings | Options stored in /etc/openvpn3/log-service.json configuration file
|
| services.postfix-tlspol.settings.server.log-level | Log level
|
| services.sftpgo.settings.smtp.auth_type |
0: Plain1: Login2: CRAM-MD5
|
| services.scrutiny.settings.web.influxdb.org | InfluxDB organisation under which to store data.
|
| services.lokinet.settings.network.exit-node | Specify a .loki address and an optional ip range to use as an exit broker
|
| security.loginDefs.settings.GID_MIN | Range of group IDs used for the creation of regular groups by useradd, groupadd, or newusers.
|
| security.loginDefs.settings.GID_MAX | Range of group IDs used for the creation of regular groups by useradd, groupadd, or newusers.
|
| services.grocy.settings.calendar.firstDayOfWeek | Which day of the week (0=Sunday, 1=Monday etc.) should be the
first day.
|
| services.libeufin.nexus.settings.nexus-ebics.IBAN | IBAN of the bank account that is associated with the EBICS subscriber.
|
| services.wgautomesh.settings.peers | wgautomesh peer list.
|
| services.sourcehut.settings."todo.sr.ht".origin | URL todo.sr.ht is being served at (protocol://domain)
|
| services.sourcehut.settings."meta.sr.ht".debug-port | Port to bind the debug server to.
|
| services.sourcehut.settings."todo.sr.ht".debug-port | Port to bind the debug server to.
|
| services.sourcehut.settings."meta.sr.ht".debug-host | Address to bind the debug server to.
|
| services.sourcehut.settings."todo.sr.ht".debug-host | Address to bind the debug server to.
|
| services.sourcehut.settings."meta.sr.ht".origin | URL meta.sr.ht is being served at (protocol://domain)
|
| services.forgejo.settings.server.DISABLE_SSH | Disable external SSH feature.
|
| nix.settings.system-features | The set of features supported by the machine
|
| services.opensnitch.settings | opensnitchd configuration
|
| services.x2goserver.settings | x2goserver.conf ini configuration as nix attributes
|
| services.kavita.settings.IpAddresses | IP Addresses to bind to
|
| security.pam.u2f.settings.appid | By default pam-u2f module sets the application
ID to pam://$HOSTNAME
|
| services.amule.settings.WebServer.Password | MD5 hash of the password, obtainaible with echo "<password>" | md5sum | cut -d ' ' -f 1
|
| services.garage.settings.data_dir | The directory in which Garage will store the data blocks of objects
|
| services.privoxy.settings.listen-address | Pair of address:port the proxy server is listening to.
|
| services.sftpgo.settings.ftpd.bindings.*.port | The port for serving FTP requests
|
| services.dsnet.settings.ExternalIP6 | The external IPv6 address of the server
|
| networking.interfaces.<name>.name | Name of the interface.
|
| services.pretix.settings.pretix.currency | Default currency for events in its ISO 4217 three-letter code.
|
| services.suricata.settings.host-mode | If the Suricata box is a router for the sniffed networks, set it to 'router'
|
| services.languagetool.settings | Configuration file options for LanguageTool, see
'languagetool-http-server --help'
for supported settings.
|
| services.i2pd.inTunnels.<name>.enable | Whether to enable ‹name›.
|
| systemd.network.networks.<name>.networkEmulatorConfig | Each attribute in this set specifies an option in the
[NetworkEmulator] section of the unit
|
| nix.settings.allowed-users | A list of names of users (separated by whitespace) that are
allowed to connect to the Nix daemon
|
| services.radicle.ci.broker.settings.triggers | CI triggers.
|
| services.typesense.settings.server.api-port | Port on which the Typesense API service listens.
|
| services.warpgate.settings.postgres.key | Path to PostgreSQL listener private key.
|
| services.tor.settings.ExitPolicyRejectPrivate | See torrc manual.
|
| services.tor.settings.ServerDNSAllowBrokenConfig | See torrc manual.
|
| services.invoiceplane.sites.<name>.database.name | Database name.
|
| services.autotierfs.settings | The contents of the configuration file for autotier
|
| services.gitlab.pages.settings | Configuration options to set in the GitLab Pages config
file
|
| services.bacula-sd.device.<name>.archiveDevice | The specified name-string gives the system file name of the storage
device managed by this storage daemon
|
| services.opengfw.settings.ruleset.geosite | Path to geosite.dat.
|
| services.watchdogd.settings.safe-exit | With safeExit enabled, the daemon will ask the driver to disable the WDT before exiting
|
| hardware.apple.touchBar.settings | Configuration for tiny-dfr
|
| services.bookstack.database.name | Database name.
|
| services.mediawiki.database.name | Database name.
|
| services.opencloud.settings | Additional YAML configuration for OpenCloud services
|
| services.kanidm.server.settings.domain | The domain that Kanidm manages
|
| services.headscale.settings.policy.mode | The mode can be "file" or "database" that defines
where the ACL policies are stored and read from.
|
| services.headscale.settings.policy.path | If the mode is set to "file", the path to a
HuJSON file containing ACL policies.
|
| services.sourcehut.settings."sr.ht".owner-email | Owner's email.
|
| services.navidrome.settings.Address | Address to run Navidrome on.
|
| services.pid-fan-controller.settings.fans | List of fans to be controlled.
|
| services.watchdogd.settings.timeout | The WDT timeout before reset.
|
| services.openssh.settings.GatewayPorts | Specifies whether remote hosts are allowed to connect to
ports forwarded for the client
|
| services.scrutiny.settings.web.influxdb.port | The port of the InfluxDB instance.
|
| services.typesense.settings.server.data-dir | Path to the directory where data will be stored on disk.
|
| services.nsd.zones.<name>.data | The actual zone data
|
| services.bitmagnet.settings.dht_server | DHT server settings
|
| services.yggdrasil-jumper.settings | Configuration for Yggdrasil Jumper as a Nix attribute set.
|
| services.sourcehut.settings."sr.ht".source-url | The source code for your fork of sr.ht.
|
| services.imaginary.settings.return-size | Return the image size in the HTTP headers.
|
| services.postgrest.settings.server-port | The TCP port to bind the web server.
|
| services.librespeed.frontend.settings | Override default settings of the speedtest web client
|
| services.centrifugo.settings | Declarative Centrifugo configuration
|
| users.groups.<name>.gid | The group GID
|
| services.mautrix-discord.settings.bridge | Bridge configuration
|
| services.vmalert.settings."notifier.url" | Prometheus Alertmanager URL
|
| services.yggdrasil.settings.Listen | Listen addresses for incoming connections
|
| services.umami.settings.APP_SECRET_FILE | A file containing a secure random string
|
| services.crab-hole.settings.blocklist.lists | List of blocklists
|
| services.reaction.settingsFiles | Configuration for reaction, see the wiki.
reaction supports JSON, YAML and JSONnet
|
| services.postgrest.settings | PostgREST configuration as documented in:
https://docs.postgrest.org/en/stable/references/configuration.html#list-of-parameters
db-uri is represented as an attribute set, see settings.db-uri
The settings.jwt-secret option is blocked
|
| services.cgit.<name>.nginx.virtualHost | VirtualHost to serve cgit on, defaults to the attribute name.
|
| services.tts.servers.<name>.model | Name of the model to download and use for speech synthesis
|
| services.discourse.database.name | Discourse database name.
|
| services.angrr.settings.profile-policies | Profile GC root policies.
|