| services.strongswan-swanctl.package | The strongswan package to use.
|
| services.prometheus.scrapeConfigs.*.kubernetes_sd_configs.*.oauth2.scopes | Scopes for the token request.
|
| services.thinkfan.enable | Whether to enable thinkfan, a fan control program.
This module targets IBM/Lenovo thinkpads by default, for
other hardware you will have configure it more carefully.
|
| services.ntfy-sh.environmentFile | Path to a file containing extra ntfy environment variables in the systemd EnvironmentFile
format
|
| services.pgbouncer.package | The pgbouncer package to use.
|
| services.mailpit.instances | Configure mailpit instances
|
| services.prometheus.retentionTime | How long to retain samples in storage.
|
| services.radicle.httpd.nginx.locations.<name>.basicAuthFile | Basic Auth password file for a vhost
|
| services.openssh.listenAddresses | List of addresses and ports to listen on (ListenAddress directive
in config)
|
| services.peertube.redis.host | Redis host.
|
| services.rss2email.interval | How often to check the feeds, in systemd interval format
|
| services.prefect.workerPools.<name>.installPolicy | install policy for the worker (always, if-not-present, never, prompt)
|
| services.prometheus.exporters.nut.user | User name under which the nut exporter shall be run.
|
| services.nntp-proxy.upstreamMaxConnections | Upstream server maximum allowed concurrent connections
|
| services.openvscode-server.userDataDir | Specifies the directory that user data is kept in
|
| services.prometheus.scrapeConfigs.*.uyuni_sd_configs.*.oauth2 | Optional OAuth 2.0 configuration
|
| services.sftpgo.settings.ftpd.bindings.*.port | The port for serving FTP requests
|
| services.softether.package | The softether package to use.
|
| services.rstudio-server.serverWorkingDir | Default working directory for server (server-working-dir in rserver.conf).
|
| services.reposilite.settings.defaultFrontend | Whether to enable the default included frontend with a dashboard.
|
| services.nullmailer.config.defaultdomain | The content of this attribute is appended to any host name that
does not contain a period (except localhost), including defaulthost
and idhost
|
| services.prometheus.exporters.pgbouncer.user | User name under which the pgbouncer exporter shall be run.
|
| services.prometheus.exporters.shelly.user | User name under which the shelly exporter shall be run.
|
| services.prometheus.scrapeConfigs.*.scaleway_sd_configs.*.proxy_url | Optional proxy URL.
|
| services.ntp.servers | The set of NTP servers from which to synchronise.
|
| services.tiddlywiki.listenOptions | Parameters passed to --listen command
|
| services.prometheus.exporters.mqtt.listenAddress | Address to listen on.
|
| services.quassel.interfaces | The interfaces the Quassel daemon will be listening to
|
| services.tftpd.path | Where the tftp server files are stored.
|
| services.opencloud.enable | Whether to enable OpenCloud.
|
| services.prometheus.scrapeConfigs.*.docker_sd_configs.*.tls_config.server_name | ServerName extension to indicate the name of the server.
http://tools.ietf.org/html/rfc4366#section-3.1
|
| services.prometheus.scrapeConfigs.*.basic_auth.username | HTTP username
|
| services.prometheus.scrapeConfigs.*.tls_config.insecure_skip_verify | Disable validation of the server certificate.
|
| services.mysql.initialDatabases | List of database names and their initial schemas that should be used to create databases on the first startup
of MySQL
|
| services.snipe-it.nginx.listen.*.proxyProtocol | Enable PROXY protocol.
|
| services.portunus.ldap.suffix | The DN of the topmost entry in your LDAP directory
|
| services.netbird.clients.<name>.openInternalFirewall | Opens up internal firewall ports for the NetBird's network interface.
|
| services.prometheus.exporters.smokeping.firewallFilter | Specify a filter for iptables to use when
services.prometheus.exporters.smokeping.openFirewall
is true
|
| services.tautulli.enable | Whether to enable Tautulli Plex Monitor.
|
| services.linkwarden.enable | Whether to enable Linkwarden.
|
| services.netbird.server.management.extraOptions | Additional options given to netbird-mgmt as commandline arguments.
|
| services.prometheus.exporters.py-air-control.port | Port to listen on.
|
| services.tarsnap.archives.<name>.printStats | Print global archive statistics upon completion
|
| services.thermald.debug | Whether to enable debug logging.
|
| services.readarr.settings.log.analyticsEnabled | Send Anonymous Usage Data
|
| services.slskd.settings | Application configuration for slskd
|
| services.prometheus.scrapeConfigs.*.digitalocean_sd_configs.*.authorization | Optional Authorization header configuration.
|
| services.sonarr.settings.server.port | Port Number
|
| services.radicle.ci.broker.settings.triggers.*.adapter | Adapter name.
|
| services.nagios.virtualHost.sslServerKey | Path to server SSL certificate key.
|
| services.peertube.user | User account under which Peertube runs.
|
| services.prometheus.exporters.postfix.listenAddress | Address to listen on.
|
| services.prometheus.scrapeConfigs.*.kuma_sd_configs.*.proxy_url | Optional proxy URL.
|
| services.rsync.jobs.<name>.user | The name of an existing user account under which the rsync process should run.
|
| services.tomcat.sharedLibs | List containing JAR files or directories with JAR files which are libraries shared by the web applications
|
| services.prometheus.exporters.imap-mailstat.accounts.<name>.serveraddress | mailserver name or address
|
| services.suricata.settings.threshold-file | Suricata threshold configuration file.
|
| services.tlp.settings | Options passed to TLP
|
| services.mainsail.nginx.rejectSSL | Whether to listen for and reject all HTTPS connections to this vhost
|
| services.prosody.modules.private | Private XML storage (for room bookmarks, etc.)
|
| services.ncps.cache.lru.scheduleTimeZone | The name of the timezone to use for the cron schedule
|
| services.tor.relay.onionServices.<name>.settings.HiddenServiceExportCircuitID | See torrc manual.
|
| services.paperless.configureNginx | Whether to configure nginx as a reverse proxy.
|
| services.nagios.virtualHost.adminAddr | E-mail address of the server administrator.
|
| services.squid.package | The squid package to use.
|
| services.logrotate.settings.<name>.files | Single or list of files for which rules are defined
|
| services.radicle.httpd.nginx.quic | Whether to enable the QUIC transport protocol
|
| services.prometheus.exporters.php-fpm.openFirewall | Open port in firewall for incoming connections.
|
| services.lighttpd.collectd.enable | Whether to enable collectd subservice accessible at http://yourserver/collectd.
|
| services.monica.mail.encryption | SMTP encryption mechanism to use.
|
| services.nifi.listenHost | Bind to an ip for Apache NiFi web-ui.
|
| services.tsmBackup.enable | Whether to enable automatic backups with the
IBM Storage Protect (Tivoli Storage Manager, TSM) client
|
| services.prometheus.exporters.mail.listenAddress | Address to listen on.
|
| services.prometheus.scrapeConfigs.*.linode_sd_configs.*.basic_auth.username | HTTP username
|
| services.postfix-tlspol.enable | Whether to enable postfix-tlspol.
|
| services.prometheus.exporters.snmp.enableConfigCheck | Whether to run a correctness check for the configuration file
|
| services.thanos.query-frontend.log.level | Log filtering level
|
| services.maddy.ensureAccounts | List of IMAP accounts which get automatically created
|
| services.snapserver.settings | Snapserver configuration
|
| services.peertube-runner.enabledJobTypes | Job types that this runner will execute.
|
| services.postgrest.settings.server-port | The TCP port to bind the web server.
|
| services.movim.h2o.host | Set the host address for this virtual host
|
| services.ncps.cache.lock.retry.initialDelay | Initial retry delay for distributed locks.
|
| services.unclutter.excluded | Names of windows where unclutter should not apply
|
| services.prometheus.exporters.process.listenAddress | Address to listen on.
|
| services.prometheus.exporters.dmarc.extraFlags | Extra commandline options to pass to the dmarc exporter.
|
| services.routinator.settings | Configuration for Routinator 3000, see https://routinator.docs.nlnetlabs.nl/en/stable/manual-page.html#configuration-file for options.
|
| services.public-inbox.http.args | Command-line arguments to pass to public-inbox-httpd(1).
|
| services.movim.nginx.onlySSL | Whether to enable HTTPS and reject plain HTTP connections
|
| services.snapper.configs.<name>.TIMELINE_CLEANUP | Defines whether the timeline cleanup algorithm should be run for the config.
|
| services.prometheus.exporters.unpoller.enable | Whether to enable the prometheus unpoller exporter.
|
| services.nats.validateConfig | If true, validate nats config at build time
|
| services.resolved.settings.Resolve.DNSOverTLS | Whether to use TLS encryption for DNS queries
|
| services.opkssh.providers.<name>.issuer | Issuer URI
|
| services.outline.maximumImportSize | The maximum size of document imports
|
| services.prometheus.exporters.collectd.enable | Whether to enable the prometheus collectd exporter.
|
| services.roon-server.openFirewall | Open ports in the firewall for the server.
|
| services.subsonic.port | The port on which Subsonic will listen for
incoming HTTP traffic
|
| services.maubot.package | The maubot package to use.
|
| services.thermald.package | The thermald package to use.
|