| services.mpd.settings.bind_to_address | The address for the daemon to listen on
|
| services.pid-fan-controller.settings.heatSources.*.wildcardPath | Path of the heat source's hwmon temp_input file
|
| services.warpgate.settings.mysql.external_port | The MySQL listener is reachable via this port externally.
|
| services.nvme-rs.settings.thresholds.wear_warning | Wear warning threshold (%)
|
| nixpkgs.buildPlatform | Specifies the platform on which NixOS should be built
|
| services.livekit.settings.rtc.port_range_end | End of UDP port range for WebRTC
|
| services.headscale.settings.tls_cert_path | Path to already created certificate.
|
| services.grafana.provision.dashboards.settings.apiVersion | Config file version.
|
| services.nvme-rs.settings.thresholds.temp_warning | Temperature warning threshold (°C)
|
| services.grafana.provision.alerting.contactPoints.settings | Grafana contact points configuration in Nix
|
| services.tor.relay.onionServices.<name>.settings.HiddenServiceExportCircuitID | See torrc manual.
|
| users.mysql.pam | Settings for pam_mysql
|
| services.anubis.defaultOptions.settings.OG_PASSTHROUGH | Whether to enable Open Graph tag passthrough
|
| services.headscale.settings.dns.extra_records | Extra DNS records to expose to clients.
|
| services.pretalx.database.createLocally | Whether to automatically set up the database on the local DBMS instance
|
| services.angrr.settings.temporary-root-policies.<name>.priority | Priority of this policy
|
| services.nextcloud-spreed-signaling.settings.https.listen | IP and port to listen on for HTTPS requests, in the format of ip:port
|
| services.librenms.enableLocalBilling | Enable billing Cron-Jobs on the local instance
|
| services.listmonk.database.settings."privacy.exportable" | List of fields which can be exported through an automatic export request
|
| services.dependency-track.settings."alpine.database.username" | Specifies the username to use when authenticating to the database.
|
| services.chhoto-url.settings.hash_algorithm | The hash algorithm to use for passwords and API keys
|
| services.nextcloud.settings.mail_smtpport | This depends on mail_smtpmode
|
| services.dependency-track.settings."alpine.database.mode" | Defines the database mode of operation
|
| services.grafana.provision.alerting.templates.settings | Grafana templates configuration in Nix
|
| services.lldap.settings.ldap_user_email | Admin email.
|
| services.libeufin.nexus.settings.libeufin-nexusdb-postgres.CONFIG | The database connection string for the libeufin-nexus database.
|
| services.nextcloud.settings.mail_smtpname | This depends on mail_smtpauth
|
| services.tor.settings.AuthoritativeDirectory | See torrc manual.
|
| services.teamspeak3.fileTransferIP | IP on which the server instance will listen for incoming file transfer connections
|
| services.prowlarr.settings.update.automatically | Automatically download and install updates.
|
| services.whisparr.settings.update.automatically | Automatically download and install updates.
|
| services.prometheus.alertmanager-ntfy.settings | Configuration of alertmanager-ntfy
|
| services.slskd.settings.retention.transfers.download.errored | Lifespan of errored download tasks.
|
| services.grafana.provision.datasources.settings.prune | When true, provisioned datasources from this file will be deleted
automatically when removed from
services.grafana.provision.datasources.settings.datasources.
|
| services.tor.relay.onionServices.<name>.settings.HiddenServiceAllowUnknownPorts | See torrc manual.
|
| services.automysqlbackup.settings | automysqlbackup configuration
|
| services.hddfancontrol.settings.<drive-bay-name>.disks | Drive(s) to get temperature from
Can also use command substitution to automatically grab all matching drives; such as all scsi (sas) drives
|
| services.nextcloud.settings.mail_smtpauth | This depends on mail_smtpmode
|
| services.warpgate.settings.sso_providers.*.label | SSO provider name displayed on login page.
|
| services.prometheus.exporters.fritz.settings.log_level | Log level to use for the exporter.
|
| services.headscale.settings.oidc.allowed_users | Users allowed to authenticate even if not in allowedDomains.
|
| services.opensearch.settings."plugins.security.disabled" | Whether to enable the security plugin,
plugins.security.ssl.transport.keystore_filepath or
plugins.security.ssl.transport.server.pemcert_filepath and
plugins.security.ssl.transport.client.pemcert_filepath
must be set for this plugin to be enabled.
|
| services.sourcehut.settings."lists.sr.ht::worker".reject-mimetypes | Comma-delimited list of Content-Types to reject
|
| services.autosuspend.settings.suspend_cmd | The command to execute in case the host shall be suspended
|
| services.nextcloud-spreed-signaling.settings.backend.timeout | Timeout in seconds for requests to the backend
|
| services.lasuite-docs.collaborationServer.settings | Configuration options of collaboration server
|
| services.prometheus.exporters.nginxlog.settings.consul | Consul integration options
|
| services.tor.relay.onionServices.<name>.settings.HiddenServiceDirGroupReadable | See torrc manual.
|
| services.lldap.settings.jwt_secret_file | Path to a file containing the JWT secret.
|
| services.tuned.settings.update_interval | Update interval for dynamic tuning (in seconds).
|
| services.prometheus.exporters.lnd.lndHost | lnd instance gRPC address:port.
|
| services.sabnzbd.settings.misc.bandwidth_perc | Percentage of bandwidth_max that sabnzbd is allowed to use.
0 means no limit.
|
| services.grafana.provision.alerting.muteTimings.settings.apiVersion | Config file version.
|
| services.sabnzbd.settings.ntfosd.ntfosd_enable | Whether to enable NotifyOSD alerts
|
| services.autosuspend.settings.wakeup_cmd | The command to execute for scheduling a wake up of the system
|
| services.tor.settings.V3AuthoritativeDirectory | See torrc manual.
|
| services.suricata.settings.dpdk.interfaces.*.interface | See upstream docs: docs/capture-hardware/dpdk and docs/configuration/suricata-yaml.html#data-plane-development-kit-dpdk.
|
| services.prometheus.alertmanager-ntfy.settings.http.addr | The address to listen on.
|
| services.slskd.settings.retention.transfers.upload.cancelled | Lifespan of cancelled upload tasks.
|
| services.slskd.settings.retention.transfers.upload.succeeded | Lifespan of succeeded upload tasks.
|
| services.quickwit.settings.listen_address | Listen address of Quickwit.
|
| services.headscale.settings.prefixes.allocation | Strategy used for allocation of IPs to nodes, available options:
- sequential (default): assigns the next free IP from the previous given IP.
- random: assigns the next free IP from a pseudo-random IP generator (crypto/rand).
|
| services.grafana.provision.alerting.muteTimings.settings.muteTimes.*.name | Name of the mute time interval, must be unique
|
| services.openssh.settings.AuthorizedPrincipalsFile | Specifies a file that lists principal names that are accepted for certificate authentication
|
| services.postfix-tlspol.settings.server.socket-permissions | Permissions to the UNIX socket, if configured.
Due to hardening on the systemd unit the socket can never be created world readable/writable.
|
| services.headscale.settings.dns.extra_records.*.name | DNS record name.
|
| services.headscale.settings.dns.extra_records.*.type | DNS record type.
|
| services.nextcloud-spreed-signaling.settings.etcd.endpoints | List of static etcd endpoints to connect to.
|
| services.lasuite-docs.collaborationServer.settings.PORT | Port used by collaboration server to listen to
|
| services.jitsi-meet.videobridge.enable | Jitsi Videobridge instance and configure it to connect to Prosody
|
| services.grafana.provision.alerting.policies.settings.apiVersion | Config file version.
|
| services.system76-scheduler.settings.cfsProfiles.default.latency | sched_latency_ns.
|
| services.nipap.settings.auth.default_backend | Name of auth backend to use by default.
|
| services.matrix-appservice-irc.settings.ircService.mediaProxy.signingKeyPath | Path to the signing key file for authenticated media.
|
| services.matrix-appservice-irc.settings.homeserver.domain | The 'domain' part for user IDs on this home server
|
| services.opentelemetry-collector.settings | Specify the configuration for Opentelemetry Collector in Nix
|
| services.matrix-appservice-irc.settings.ircService.mediaProxy.ttlSeconds | Lifetime in seconds, that generated URLs stay valid
|
| services.system76-scheduler.settings.cfsProfiles.default.preempt | Preemption mode.
|
| services.public-inbox.settings.publicinbox.wwwlisting | Controls which lists (if any) are listed for when the root
public-inbox URL is accessed over HTTP.
|
| services.prometheus.exporters.script.settings.scripts.*.script | Shell script to execute when metrics are requested.
|
| services.system76-scheduler.settings.cfsProfiles.default.nr-latency | sched_nr_latency.
|
| services.matrix-continuwuity.settings.global.address | Addresses (IPv4 or IPv6) to listen on for connections by the reverse proxy/tls terminator
|
| services.kanidm.serverSettings.domain | The domain that Kanidm manages
|
| services.kerberos_server.settings.module | Modules to obtain Kerberos configuration from.
|
| services.kerberos_server.settings.realms | The realm(s) to serve keys for.
|
| services.crowdsec.settings.console.configuration | Attributes inside the console.yaml file.
|
| services.warpgate.settings.http.cookie_max_age | How long until logged in cookie expires.
|
| security.pam.u2f.settings.interactive | Set to prompt a message and wait before testing the presence of a U2F device
|
| services.pgbouncer.settings.pgbouncer.listen_port | Which port to listen on
|
| services.your_spotify.enableLocalDB | Whether to enable a local mongodb instance.
|
| services.pgbouncer.settings.pgbouncer.pool_mode | Specifies when a server connection can be reused by other clients.
session
Server is released back to pool after client disconnects
|
| services.minidlna.settings.root_container | Use a different container as the root of the directory tree presented to clients.
|
| services.grafana.settings.database.max_open_conn | The maximum number of open connections to the database.
|
| services.grafana.provision.alerting.rules.settings.groups.*.interval | Interval that the rule group should be evaluated at
|
| services.tlsrpt.reportd.settings.sender_address | Sender address used for reports.
|
| services.grafana.settings.security.cookie_secure | Set to true if you host Grafana behind HTTPS.
|
| services.grafana.settings.database.max_idle_conn | The maximum number of connections in the idle connection pool.
|
| services.chhoto-url.settings.redirect_method | The redirect method to use.
|
| services.grafana.provision.alerting.muteTimings.settings.deleteMuteTimes | List of mute time intervals that should be deleted.
|
| services.grafana.provision.datasources.settings.apiVersion | Config file version.
|