| services.thanos.query.query.timeout | Maximum time to process query by query node
|
| services.minetest-server.world | Name of the world to use
|
| nixpkgs.crossSystem | Systems with a recently generated hardware-configuration.nix
may instead specify only nixpkgs.buildPlatform,
or fall back to removing the nixpkgs.hostPlatform line from the generated config
|
| system.autoUpgrade.rebootWindow | Define a lower and upper time value (in HH:MM format) which
constitute a time window during which reboots are allowed after an upgrade
|
| services.librespeed.domain | If not null, this will add an entry to services.librespeed.servers and
configure librespeed to use TLS.
|
| services.libinput.touchpad.dev | Path for touchpad device
|
| services.bookstack.nginx.acmeRoot | Directory for the ACME challenge, which is public
|
| services.kanboard.nginx | With this option, you can customize an NGINX virtual host which already
has sensible defaults for Kanboard
|
| services.syncplay.passwordFile | Path to the file that contains the server password
|
| services.nsd.zones.<name>.zoneStats | When set to something distinct to null NSD is able to collect
statistics per zone
|
| services.thanos.query.grpc-address | Listen ip:port address for gRPC endpoints (StoreAPI)
|
| services.thanos.store.grpc-address | Listen ip:port address for gRPC endpoints (StoreAPI)
|
| services.github-runners.<name>.user | User under which to run the service
|
| services.kanata.keyboards.<name>.port | Port to run the TCP server on. null will not run the server.
|
| programs.sway.package | The sway package to use
|
| services.jenkins.plugins | A set of plugins to activate
|
| services.rss2email.feeds.<name>.to | Email address to which to send feed items
|
| services.matomo.nginx | With this option, you can customize an nginx virtualHost which already has sensible defaults for Matomo
|
| services.xserver.synaptics.dev | Path for touchpad device
|
| nix.buildMachines.*.protocol | The protocol used for communicating with the build machine
|
| boot.loader.grub.mirroredBoots.*.efiSysMountPoint | The path to the efi system mount point
|
| services.thanos.compact.http-address | Listen host:port for HTTP endpoints
|
| services.thanos.receive.http-address | Listen host:port for HTTP endpoints
|
| services.tinc.networks.<name>.name | The name of the node which is used as an identifier when communicating
with the remote nodes in the mesh
|
| services.thanos.sidecar.http-address | Listen host:port for HTTP endpoints
|
| services.trickster.instance-id | Instance ID for when running multiple processes (default null).
|
| services.thanos.rule.query.sd-dns-interval | Interval between DNS resolutions
|
| services.minetest-server.configPath | Path to the config to use
|
| systemd.user.targets.<name>.enable | If set to false, this unit will be a symlink to
/dev/null
|
| systemd.services.<name>.enable | If set to false, this unit will be a symlink to
/dev/null
|
| systemd.user.sockets.<name>.enable | If set to false, this unit will be a symlink to
/dev/null
|
| services.icingaweb2.roles | roles.ini contents
|
| services.postfix.settings.main | The main.cf configuration file as key value set
|
| services.thanos.rule.tsdb.block-duration | Block duration for TSDB block
|
| services.thanos.query-frontend.log.level | Log filtering level
|
| services.jirafeau.nginxConfig.acmeRoot | Directory for the ACME challenge, which is public
|
| services.dolibarr.nginx | With this option, you can customize an nginx virtual host which already has sensible defaults for Dolibarr
|
| services.apache-kafka.settings."broker.id" | Broker ID. -1 or null to auto-allocate in zookeeper mode.
|
| services.thanos.query.store.sd-dns-interval | Interval between DNS resolutions
|
| services.thanos.compact.startAt | When this option is set to a systemd.time
specification the Thanos compactor will run at the specified period
|
| services.thanos.rule.tsdb.retention | Block retention time on local disk
|
| services.sks.webroot | Source directory (will be symlinked, if not null) for the files the
built-in webserver should serve
|
| services.immich.settings | Configuration for Immich
|
| fileSystems.<name>.overlay.upperdir | The path to the upperdir
|
| services.thanos.rule.query.sd-interval | Refresh interval to re-read file SD files. (used as a fallback)
Defaults to 5m in Thanos
when set to null.
|
| services.zabbixWeb.httpd.virtualHost.acmeRoot | Directory for the acme challenge which is PUBLIC, don't put certs or keys in here
|
| services.zabbixWeb.nginx.virtualHost.acmeRoot | Directory for the ACME challenge, which is public
|
| services.dokuwiki.sites.<name>.acl | Access Control Lists: see https://www.dokuwiki.org/acl
Mutually exclusive with services.dokuwiki.aclFile
Set this to a value other than null to take precedence over aclFile option
|
| nixpkgs.flake.source | The path to the nixpkgs sources used to build the system
|
| services.icingaweb2.virtualHost | Name of the nginx virtualhost to use and setup
|
| services.pulseaudio.tcp.port | TCP connection port
|
| services.drupal.sites.<name>.virtualHost.acmeRoot | Directory for the acme challenge which is PUBLIC, don't put certs or keys in here
|
| hardware.block.defaultScheduler | Default block I/O scheduler
|
| security.tpm2.fapi.ekCertLess | A switch to disable Endorsement Key (EK) certificate verification
|
| services.thanos.store.sync-block-duration | Repeat interval for syncing the blocks between local and remote view
|
| services.vsftpd.userlistFile | Newline separated list of names to be allowed/denied if userlistEnable
is true
|
| services.komodo-periphery.configFile | Path to the periphery configuration file
|
| networking.fooOverUDP.<name>.protocol | Protocol number of the encapsulated packets
|
| services.tuned.settings.sections | attribute set of section of an INI file (attrs of INI atom (null, bool, int, float or string))
|
| services.restic.backups.<name>.timerConfig | When to run the backup
|
| services.thanos.sidecar.grpc-address | Listen ip:port address for gRPC endpoints (StoreAPI)
|
| services.thanos.receive.grpc-address | Listen ip:port address for gRPC endpoints (StoreAPI)
|
| services.github-runners.<name>.workDir | Working directory, available as $GITHUB_WORKSPACE during workflow runs
and used as a default for repository checkouts
|
| systemd.user.services.<name>.enable | If set to false, this unit will be a symlink to
/dev/null
|
| environment.shellAliases | An attribute set that maps aliases (the top level attribute names in
this option) to command strings or directly to build outputs
|
| services.discourse.database.host | Discourse database hostname. null means
“prefer local unix socket connection”.
|
| services.icecream.scheduler.netName | Network name for the icecream scheduler
|
| programs.river-classic.package | The river-classic package to use
|
| services.dockerRegistry.storagePath | Docker registry storage path for the filesystem storage backend
|
| services.thanos.query.store.sd-interval | Refresh interval to re-read file SD files
|
| services.ntopng.redis.createInstance | Local Redis instance name
|
| services.icecream.daemon.hostname | Hostname of the daemon in the icecream infrastructure
|
| services.dawarich.sidekiqThreads | Worker threads used by the dawarich-sidekiq-all service
|
| services.openafsClient.globalCellServDBFile | Global CellServDB file to be deployed
|
| services.mastodon.sidekiqThreads | Worker threads used by the mastodon-sidekiq-all service
|
| services.powerdns-admin.secretKeyFile | The secret used to create cookies
|
| services.duplicity.cleanup.maxAge | If non-null, delete all backup sets older than the given time
|
| services.invidious.database.host | The database host Invidious should use
|
| services.logcheck.ignoreCron.<name>.timeArgs | "min hr dom mon dow" crontab time args, to auto-create a cronjob too
|
| services.thanos.downsample.log.level | Log filtering level
|
| services.radicle.httpd.nginx | With this option, you can customize an nginx virtual host which already has sensible defaults for radicle-httpd
|
| services.duplicity.frequency | Run duplicity with the given frequency (see
systemd.time(7) for the format)
|
| services.avahi.allowInterfaces | List of network interfaces that should be used by the avahi-daemon
|
| services.dragonflydb.maxMemory | The maximum amount of memory to use for storage (in bytes).
null means this will be automatically set.
|
| services.thanos.store.max-time | End of time range limit to serve
|
| services.protonmail-bridge.logLevel | Log level of the Proton Mail Bridge service
|
| services.tuned.settings.globalSection | global section of an INI file (attrs of INI atom (null, bool, int, float or string))
|
| services.tor.relay.onionServices.<name>.path | Path where to store the data files of the hidden service
|
| services.thanos.store.min-time | Start of time range limit to serve
|
| services.rsyncd.settings.sections | attribute set of section of an INI file (attrs of INI atom (null, bool, int, float or string))
|
| services.sympa.database.host | Database host address
|
| services.biboumi.settings.db_name | The name of the database to use
|
| services.duplicity.cleanup.maxIncr | If non-null, delete incremental sets of all backups sets that are
older than the count:th last full backup (in other words, keep only
old full backups and not their increments).
|
| services.ipfs-cluster.secretFile | File containing the cluster secret in the format of EnvironmentFile as described by
systemd.exec(5)
|
| services.onlyoffice.jwtSecretFile | Path to a file that contains the secret to sign web requests using JSON Web Tokens
|
| systemd.automounts.*.enable | If set to false, this unit will be a symlink to
/dev/null
|
| systemd.watchdog.rebootTime | The amount of time which can elapse after a reboot has been triggered
before a watchdog hardware device will automatically reboot the system
|
| services.duplicity.cleanup.maxFull | If non-null, delete all backups sets that are older than the count:th last full
backup (in other words, keep the last count full backups and
associated incremental sets).
|
| services.borgbackup.jobs.<name>.wrapper | Name of the wrapper that is installed into PATH
|
| services.thanos.query-frontend.http-address | Listen host:port for HTTP endpoints
|