| hardware.sane.brscan4.netDevices.<name>.model | The model of the network device.
|
| hardware.sane.brscan5.netDevices.<name>.model | The model of the network device.
|
| programs.projecteur.enable | Whether to enable projecteur, an application for the Logitech Spotlight device (and similar).
|
| services.multipath.pathGroups.*.alias | The name of the multipath device
|
| services.libinput.touchpad.dev | Path for touchpad device
|
| fileSystems.<name>.depends | List of paths that should be mounted before this one
|
| programs.feedbackd.theme-package | The feedbackd-device-themes package to use.
|
| programs.i3lock.u2fSupport | Whether to enable U2F support in the i3lock program
|
| hardware.trackpoint.ext_dev | Disable or enable external pointing device.
|
| hardware.cpu.intel.sgx.provision.group | Group to assign to the SGX provisioning device.
|
| programs.noisetorch.enable | Whether to enable noisetorch (+ setcap wrapper), a virtual microphone device with noise suppression.
|
| services.xserver.synaptics.dev | Path for touchpad device
|
| containers.<name>.allowedDevices.*.node | Path to device node
|
| hardware.sane.brscan5.netDevices.<name>.name | The friendly name you give to the network device
|
| services.jack.loopback.dmixConfig | For music production software that still doesn't support JACK natively you
would like to put buffer/period adjustments here
to decrease dmix device latency.
|
| security.pam.u2f.settings.cue | By default pam-u2f module does not inform user
that he needs to use the u2f device, it just waits without a prompt
|
| hardware.sane.brscan4.netDevices.<name>.name | The friendly name you give to the network device
|
| networking.bonds.<name>.miimon | DEPRECATED, use driverOptions
|
| boot.loader.generic-extlinux-compatible.useGenerationDeviceTree | Whether to generate Device Tree-related directives in the
extlinux configuration
|
| services.multipath.devices.*.fast_io_fail_tmo | Specify the number of seconds the SCSI layer will wait after a problem has been
detected on a FC remote port before failing I/O to devices on that remote port
|
| services.multipath.devices.*.delay_wait_checks | This option is deprecated, and mapped to san_path_err_recovery_time
|
| systemd.watchdog.runtimeTime | The amount of time which can elapse before a watchdog hardware device
will automatically reboot the system
|
| services.jack.loopback.enable | Create ALSA loopback device, instead of using PCM plugin
|
| services.multipath.devices.*.product_blacklist | Products with the given vendor matching this string are blacklisted
|
| services.persistent-evdev.enable | Whether to enable virtual input devices that persist even if the backing device is hotplugged.
|
| systemd.watchdog.kexecTime | The amount of time which can elapse when kexec is being executed before
a watchdog hardware device will automatically reboot the system
|
| hardware.cpu.intel.sgx.provision.enable | Whether to enable access to the Intel SGX provisioning device.
|
| services.multipath.defaults | This section defines default values for attributes which are used
whenever no values are given in the appropriate device or multipath
sections.
|
| services.libinput.mouse.clickMethod | Enables a click method
|
| services.multipath.overrides | This section defines values for attributes that should override the
device-specific settings for all devices.
|
| networking.networkmanager.wifi.macAddress | Set the MAC address of the interface.
"XX:XX:XX:XX:XX:XX": MAC address of the interface"permanent": Use the permanent MAC address of the device"preserve": Don’t change the MAC address of the device upon activation"random": Generate a randomized value upon each connect"stable": Generate a stable, hashed MAC address"stable-ssid": Generate a stable MAC addressed based on Wi-Fi network
|
| services.multipath.devices.*.delay_watch_checks | This option is deprecated, and mapped to san_path_err_forget_rate
|
| services.hostapd.radios.<name>.channel | The channel to operate on
|
| services.xserver.wacom.enable | Whether to enable the Wacom touchscreen/digitizer/tablet
|
| networking.networkmanager.ethernet.macAddress | Set the MAC address of the interface.
"XX:XX:XX:XX:XX:XX": MAC address of the interface"permanent": Use the permanent MAC address of the device"preserve": Don’t change the MAC address of the device upon activation"random": Generate a randomized value upon each connect"stable": Generate a stable, hashed MAC address
|
| hardware.openrazer.batteryNotifier | Settings for device battery notifications.
|
| systemd.watchdog.rebootTime | The amount of time which can elapse after a reboot has been triggered
before a watchdog hardware device will automatically reboot the system
|
| networking.wlanInterfaces.<name>.type | The type of the WLAN interface
|
| networking.enableIntel2200BGFirmware | Turn on this option if you want firmware for the Intel
PRO/Wireless 2200BG to be loaded automatically
|
| swapDevices.*.randomEncryption.keySize | Set the encryption key size for the plain device
|
| services.gpsd.readonly | Whether to enable the broken-device-safety, otherwise
known as read-only mode
|
| boot.initrd.luks.mitigateDMAAttacks | Unless enabled, encryption keys can be easily recovered by an attacker with physical
access to any machine with PCMCIA, ExpressCard, ThunderBolt or FireWire port
|
| hardware.sane.brscan4.netDevices.<name>.nodename | The node name of the device
|
| hardware.sane.brscan5.netDevices.<name>.nodename | The node name of the device
|
| services.shellhub-agent.keepAliveInterval | Determine the interval to send the keep alive message to
the server
|
| services.vwifi.client.serverAddress | The address of the server
|
| hardware.nvidia.prime.intelBusId | Bus ID of the Intel GPU
|
| services.gmediarender.audioDevice | The audio device to use.
|
| virtualisation.rootDevice | The path (inside the VM) to the device containing the root filesystem.
|
| swapDevices.*.encrypted.keyFile | Path to a keyfile used to unlock the backing encrypted
device
|
| boot.specialFileSystems.<name>.depends | List of paths that should be mounted before this one
|
| virtualisation.tpm.enable | Whether to enable a TPM device in the virtual machine with a driver, using swtpm.
|
| services.btrfs.autoScrub.fileSystems | List of paths to btrfs filesystems to regularly call btrfs scrub on
|
| hardware.nvidia.prime.nvidiaBusId | Bus ID of the NVIDIA GPU
|
| hardware.nvidia.prime.amdgpuBusId | Bus ID of the AMD APU
|
| services.libinput.touchpad.clickMethod | Enables a click method
|
| services.usbguard.implicitPolicyTarget | How to treat USB devices that don't match any rule in the policy
|
| fileSystems.<name>.encrypted.keyFile | Path to a keyfile used to unlock the backing encrypted
device
|
| boot.loader.systemd-boot.consoleMode | The resolution of the console
|
| services.multipath.devices.*.user_friendly_names | If set to "yes", using the bindings file /etc/multipath/bindings
to assign a persistent and unique alias to the multipath, in the
form of mpath
|
| services.nbd.server.exports.<name>.allowAddresses | IPs and subnets that are authorized to connect for this device
|
| services.fwupd.daemonSettings.DisabledDevices | List of device GUIDs to be disabled.
|
| services.multipath.devices.*.path_grouping_policy | The default path grouping policy to apply to unspecified multipaths
|
| boot.loader.limine.secureBoot.enable | Whether to use sign the limine binary with sbctl.
This requires you to already have generated the keys and enrolled them with sbctl
|
| hardware.nvidia.prime.offload.offloadCmdMainProgram | Specifies the CLI name of the hardware.nvidia.prime.offload.enableOffloadCmd
convenience script for offloading programs to an nvidia device.
|
| boot.initrd.luks.reusePassphrases | When opening a new LUKS device try reusing last successful
passphrase
|
| swapDevices.*.randomEncryption.allowDiscards | Whether to allow TRIM requests to the underlying device
|
| virtualisation.kvmgt.vgpus.<name>.uuid | UUID(s) of VGPU device
|
| virtualisation.bootLoaderDevice | The path (inside th VM) to the device to boot from when legacy booting.
|
| services.shellhub-agent.preferredHostname | Set the device preferred hostname
|
| services.plex.accelerationDevices | A list of device paths to hardware acceleration devices that Plex should
have access to
|
| networking.interfaces.<name>.virtualOwner | In case of a virtual device, the user who owns it.
null will not set owner, allowing access to any user.
|
| services.neard.settings.General.ConstantPoll | Enable constant polling
|
| services.buffyboard.settings.input.pointer | Enable or disable the use of a hardware mouse or other pointing device.
|
| services.borgbackup.jobs.<name>.removableDevice | Whether the repo (which must be local) is a removable device.
|
| programs.tuxclocker.enabledNVIDIADevices | Enable NVIDIA GPU controls for a device by index
|
| containers.<name>.allowedDevices.*.modifier | Device node access modifier
|
| boot.tmp.zramSettings.compression-algorithm | The compression algorithm to use for the zram device
|
| hardware.block.defaultSchedulerExclude | Device name pattern to exclude from default scheduler assignment
through config.hardware.block.defaultScheduler and
config.hardware.block.defaultSchedulerRotational
|
| virtualisation.kvmgt.vgpus | Virtual GPUs to be used in Qemu
|
| hardware.nvidia.prime.offload.enableOffloadCmd | Whether to enable adding a nvidia-offload convenience script to environment.systemPackages
for offloading programs to an nvidia device
|
| virtualisation.qemu.virtioKeyboard | Enable the virtio-keyboard device.
|
| services.syncthing.overrideFolders | Whether to delete the folders which are not configured via the
folders option
|
| services.easytier.instances.<name>.settings.ipv4 | IPv4 cidr address of this peer in the virtual network
|
| services.keepalived.vrrpInstances.<name>.virtualIps.*.dev | The name of the device to add the address to.
|
| security.allowUserNamespaces | Whether to allow creation of user namespaces
|
| services.immich.accelerationDevices | A list of device paths to hardware acceleration devices that immich should
have access to
|
| networking.interfaces.<name>.ipv4.routes.*.type | Type of the route
|
| networking.interfaces.<name>.ipv6.routes.*.type | Type of the route
|
| virtualisation.bootPartition | The path (inside the VM) to the device containing the EFI System Partition (ESP)
|
| networking.interfaces.<name>.wakeOnLan.policy | The Wake-on-LAN policy
to set for the device
|
| services.libinput.mouse.accelProfile | Sets the pointer acceleration profile to the given profile
|
| hardware.openrazer.batteryNotifier.percentage | At what battery percentage the device should reach before
sending notifications.
|
| virtualisation.fileSystems.<name>.autoFormat | If the device does not currently contain a filesystem (as
determined by blkid), then automatically
format it with the filesystem type specified in
fsType
|
| services.multipath.devices.*.san_path_err_threshold | If set to a value greater than 0, multipathd will watch paths and check
how many times a path has been failed due to errors
|
| hardware.nvidia.modesetting.enable | Whether to enable kernel modesetting when using the NVIDIA proprietary driver
|
| programs.nix-required-mounts.presets.nvidia-gpu.enable | Whether to enable Declare the support for derivations that require an Nvidia GPU to be
available, e.g. derivations with requiredSystemFeatures = [ "cuda" ]
|
| services.prometheus.exporters.unpoller.log.debug | Whether to enable debug logging including line numbers, high resolution timestamps, per-device logs.
|
| services.syncthing.settings.options.limitBandwidthInLan | Whether to apply bandwidth limits to devices in the same broadcast domain as the local device.
|
| services.usbguard.restoreControllerDeviceState | The USBGuard daemon modifies some attributes of controller
devices like the default authorization state of new child device
instances
|