| services.strongswan-swanctl.swanctl.connections.<name>.aggressive | Enables Aggressive Mode instead of Main Mode with Identity
Protection
|
| services.pangolin.baseDomain | Your base fully qualified domain name (without any subdomains).
|
| services.borgmatic.configurations.<name>.repositories.*.path | Path to the repository
|
| services.tomcat.virtualHosts | List consisting of a virtual host name and a list of web applications to deploy on each virtual host
|
| services.shellhub-agent.preferredHostname | Set the device preferred hostname
|
| services.thanos.rule.alert.label-drop | Labels by name to drop before sending to alertmanager
|
| services.misskey.reverseProxy.webserver.nginx.locations.<name>.recommendedUwsgiSettings | Enable recommended uwsgi settings.
|
| services.misskey.reverseProxy.webserver.nginx.locations.<name>.recommendedProxySettings | Enable recommended proxy settings.
|
| services.strongswan-swanctl.swanctl.connections.<name>.over_time | Hard IKE_SA lifetime if rekey/reauth does not complete, as time
|
| networking.wireguard.interfaces.<name>.privateKey | Base64 private key generated by wg genkey
|
| services.athens.storage.s3.bucket | Bucket name for the S3 storage backend.
|
| services.strongswan-swanctl.swanctl.connections.<name>.remote_port | Remote UDP port for IKE communication
|
| boot.binfmt.registrations.<name>.recognitionType | Whether to recognize executables by magic number or extension.
|
| services.xserver.videoDriver | The name of the video driver for your graphics card
|
| services.strongswan-swanctl.swanctl.connections.<name>.ppk_required | Whether a Postquantum Preshared Key (PPK) is required for this connection
|
| networking.wireguard.interfaces.<name>.allowedIPsAsRoutes | Determines whether to add allowed IPs as routes or not.
|
| services.borgmatic.configurations.<name>.repositories.*.label | Label to the repository
|
| services.influxdb2.provision.organizations.<name>.description | Optional description for the organization.
|
| virtualisation.interfaces.<name>.assignIP | Automatically assign an IP address to the network interface using the same scheme as
virtualisation.vlans.
|
| services.factorio.stateDirName | Name of the directory under /var/lib holding the server's data
|
| networking.interfaces.<name>.tempAddress | When IPv6 is enabled with SLAAC, this option controls the use of
temporary address (aka privacy extensions) on this
interface
|
| services.samba-wsdd.workgroup | Set workgroup name (default WORKGROUP).
|
| services.smokeping.linkStyle | DNS name for the urls generated in the cgi.
|
| _module.args | Additional arguments passed to each module in addition to ones
like lib, config,
and pkgs, modulesPath
|
| services.xserver.displayManager.lightdm.greeter.package | The LightDM greeter to login via
|
| networking.openconnect.interfaces.<name>.gateway | Gateway server to connect to.
|
| hardware.fw-fanctrl.config.strategies.<name>.fanSpeedUpdateFrequency | How often the fan speed should be updated in seconds
|
| services.shairport-sync.user | User account name under which to run shairport-sync
|
| services.factorio.saveName | The name of the savegame that will be used by the server
|
| networking.wireless.networks.<name>.priority | By default, all networks will get same priority group (0)
|
| services.strongswan-swanctl.swanctl.connections.<name>.local_port | Local UDP port for IKE communication
|
| services.prefect.databaseName | database name for postgres only
|
| services.corosync.clusterName | Name of the corosync cluster.
|
| containers.<name>.allowedDevices.*.modifier | Device node access modifier
|
| services.prosody.httpFileShare.domain | Domain name for a http_file_share service.
|
| services.strongswan-swanctl.swanctl.connections.<name>.dpd_timeout | Charon by default uses the normal retransmission mechanism and timeouts to
check the liveness of a peer, as all messages are used for liveness
checking
|
| services.bird-lg.frontend.servers | Server name prefixes.
|
| services.kapacitor.defaultDatabase.username | The username to connect to the remote InfluxDB server
|
| services.avahi.nssmdns4 | Whether to enable the mDNS NSS (Name Service Switch) plug-in for IPv4
|
| virtualisation.allInterfaces.<name>.assignIP | Automatically assign an IP address to the network interface using the same scheme as
virtualisation.vlans.
|
| services.autorandr.matchEdid | Match displays based on edid instead of name
|
| services.slskd.nginx.http3 | Whether to enable the HTTP/3 protocol
|
| services.movim.nginx.http3 | Whether to enable the HTTP/3 protocol
|
| services.davis.nginx.http3 | Whether to enable the HTTP/3 protocol
|
| networking.openconnect.interfaces.<name>.privateKey | Private key to authenticate with.
|
| services.httpd.extraModules | Additional Apache modules to be used
|
| networking.interfaces.<name>.ipv6.addresses.*.prefixLength | Subnet mask of the interface, specified as the number of
bits in the prefix (64).
|
| networking.interfaces.<name>.ipv4.addresses.*.prefixLength | Subnet mask of the interface, specified as the number of
bits in the prefix (24).
|
| services.strongswan-swanctl.swanctl.connections.<name>.rekey_time | IKE rekeying refreshes key material using a Diffie-Hellman exchange, but
does not re-check associated credentials
|
| hardware.fw-fanctrl.config.strategies.<name>.movingAverageInterval | Interval (seconds) of the last temperatures to use to calculate the average temperature
|
| services.tlsrpt.collectd.settings.socketname | Path at which the UNIX socket will be created.
|
| services.nullmailer.config.defaulthost | The content of this attribute is appended to any address that
is missing a host name
|
| services.prosody.uploadHttp.domain | Domain name for the http-upload service
|
| services.outline.storage.region | AWS S3 region name.
|
| security.ipa.shells | List of shells which binaries should be installed to /bin/
|
| services.xserver.displayManager.session | List of sessions supported with the command used to start each
session
|
| services.prometheus.exporters.sql.configuration.jobs.<name>.connections | A list of connection strings of the SQL servers to scrape metrics from
|
| services.tlsrpt.reportd.settings.organization_name | Name of the organization sending out the reports.
|
| services.keyd.keyboards | Configuration for one or more device IDs
|
| networking.sits.<name>.encapsulation.type | Select the encapsulation type:
-
6in4: the IPv6 packets are encapsulated using the
6in4 protocol (formerly known as SIT, RFC 4213);
-
gue: the IPv6 packets are encapsulated in UDP packets
using the Generic UDP Encapsulation (GUE) scheme;
-
foo: the IPv6 packets are encapsulated in UDP packets
using the Foo over UDP (FOU) scheme.
|
| services.jigasi.defaultJvbRoomName | Name of the default JVB room that will be joined if no special header is included in SIP invite.
|
| users.extraUsers.<name>.hashedPassword | Specifies the hashed password for the user
|
| services.strongswan-swanctl.swanctl.connections.<name>.keyingtries | Number of retransmission sequences to perform during initial
connect
|
| services.matrix-synapse.log | Default configuration for the loggers used by matrix-synapse and its workers
|
| services.snipe-it.nginx.http3 | Whether to enable the HTTP/3 protocol
|
| services.strongswan-swanctl.swanctl.connections.<name>.unique | Connection uniqueness policy to enforce
|
| virtualisation.fileSystems.<name>.overlay.workdir | The path to the workdir
|
| services.usbrelayd.clientName | Name, your client connects as.
|
| services.discourse.admin.fullName | The admin user's full name.
|
| services.consul.interface.bind | The name of the interface to pull the bind_addr from.
|
| services.grafana.settings.database.server_cert_name | The common name field of the certificate used by the mysql or postgres server
|
| networking.openconnect.interfaces.<name>.protocol | Protocol to use.
|
| virtualisation.credentials.<name>.source | Source file on the host containing the credential data.
|
| services.freshrss.virtualHost | Name of the caddy/nginx virtualhost to use and setup.
|
| services.soju.acceptProxyIP | Allow the specified IPs to act as a proxy
|
| services.synergy.client.screenName | Use the given name instead of the hostname to identify
ourselves to the server.
|
| boot.zfs.forceImportAll | Forcibly import all ZFS pool(s)
|
| networking.ipips.<name>.encapsulation.type | Select the encapsulation type:
-
ipip to create an IPv4 within IPv4 tunnel (RFC 2003).
-
4in6 to create a 4in6 tunnel (RFC 2473);
-
ip6ip6 to create an IPv6 within IPv6 tunnel (RFC 2473);
For encapsulating IPv6 within IPv4 packets, see
the ad-hoc networking.sits option.
|
| networking.supplicant.<name>.userControlled.enable | Allow normal users to control wpa_supplicant through wpa_gui or wpa_cli
|
| services.matrix-synapse.workers.<name>.worker_listeners.*.resources | List of HTTP resources to serve on this listener.
|
| services.nix-serve.secretKeyFile | The path to the file used for signing derivation data
|
| networking.networkmanager.ensureProfiles.profiles.<name>.connection.id | This is the name that will be displayed by NetworkManager and GUIs.
|
| services.miredo.interfaceName | Name of the network tunneling interface.
|
| services.mqtt2influxdb.mqtt.username | Username used to connect to the MQTT server.
|
| services.shairport-sync.group | Group account name under which to run shairport-sync
|
| services.rspamd.overrides | Overridden configuration files, written into /etc/rspamd/override.d/{name}.
|
| services.mattermost.siteName | Name of this Mattermost site.
|
| services.unpoller.influxdb.db | Database name
|
| users.users.<name>.password | Specifies the (clear text) password for the user
|
| services.prometheus.exporters.mqtt.mqttUsername | Username which should be used to authenticate against the MQTT broker.
|
| services.autossh.sessions.*.user | Name of the user the AutoSSH session should run as
|
| services.synergy.server.screenName | Use the given name instead of the hostname to identify
this screen in the configuration.
|
| services.prometheus.exporters.dmarc.imap.username | Login username for the IMAP connection.
|
| services.victorialogs.basicAuthUsername | Basic Auth username used to protect VictoriaLogs instance by authorization
|
| services.athens.storage.minio.bucket | Bucket name for the minio storage backend.
|
| services.suricata.settings.logging.outputs.file.filename | Filename of the logfile.
|
| services.zabbixWeb.nginx.virtualHost | Nginx configuration can be done by adapting services.nginx.virtualHosts.<name>
|
| services.zabbixWeb.httpd.virtualHost | Apache configuration can be done by adapting services.httpd.virtualHosts.<name>
|
| virtualisation.fileSystems.<name>.encrypted.enable | The block device is backed by an encrypted one, adds this device as a initrd luks entry.
|
| networking.wg-quick.interfaces.<name>.peers.*.presharedKeyFile | File pointing to preshared key as generated by wg genpsk
|