| services.firezone.server.provision.accounts.<name>.resources.<name>.filters | A list of filter to restrict traffic
|
| services.firezone.server.provision.accounts.<name>.resources.<name>.address | The address of this resource
|
| services.matrix-synapse.settings.listeners.*.resources.*.compress | Whether synapse should compress HTTP responses to clients that support it
|
| services.icingaweb2.modules.monitoring.backends.<name>.resource | Name of the IDO resource
|
| services.firezone.server.provision.accounts.<name>.resources.<name>.filters.*.ports | Either a single port or port range to allow
|
| services.borgmatic.settings.source_directories | List of source directories and files to backup
|
| services.firezone.server.provision.accounts.<name>.resources.<name>.filters.*.ports.*.to | The end of the port range, inclusive.
|
| services.hadoop.yarn.resourcemanager.restartIfChanged | Automatically restart the service on config change
|
| services.firezone.server.provision.accounts.<name>.resources.<name>.filters.*.ports.*.from | The start of the port range, inclusive.
|
| services.firezone.server.provision.accounts.<name>.resources.<name>.gatewayGroups | A list of gateway groups (sites) which can reach the resource and may be used to connect to it.
|
| services.firezone.server.provision.accounts.<name>.resources.<name>.filters.*.protocol | The protocol to allow
|
| services.icingaweb2.modules.monitoring.transports.<name>.resource | SSH identity resource for the remote transport
|
| services.firezone.server.provision.accounts.<name>.resources.<name>.addressDescription | An optional description for resource address, usually a full link to the resource including a schema.
|
| services.prometheus.scrapeConfigs.*.relabel_configs.*.source_labels | The source labels select values from existing labels
|
| services.matrix-synapse.workers.<name>.worker_listeners.*.resources | List of HTTP resources to serve on this listener.
|
| services.borgmatic.configurations.<name>.source_directories | List of source directories and files to backup
|
| services.matrix-synapse.workers.<name>.worker_listeners.*.resources.*.names | List of resources to host on this listener.
|
| services.firezone.server.provision.accounts.<name>.features.internet_resource | Whether to enable the internet_resource feature for this account.
|
| services.matrix-synapse.workers.<name>.worker_listeners.*.resources.*.compress | Whether synapse should compress HTTP responses to clients that support it
|
| services.grafana.settings.security.data_source_proxy_whitelist | Define a whitelist of allowed IP addresses or domains, with ports,
to be used in data source URLs with the Grafana data source proxy
|
| services.maubot.settings.server.override_resource_path | Override path from where to load UI resources.
|
| services.go2rtc.settings.streams | Stream source configuration
|
| services.prometheus.remoteWrite.*.write_relabel_configs.*.source_labels | The source labels select values from existing labels
|
| services.sourcehut.settings."hg.sr.ht".clone_bundle_threshold | .hg/store size (in MB) past which the nightly job generates clone bundles.
|
| services.firezone.server.provision.accounts.<name>.features.multi_site_resources | Whether to enable the multi_site_resources feature for this account.
|
| hardware.nvidia.open | Whether to enable the open source NVIDIA kernel module.
|
| services.odoo.enable | Whether to enable odoo, an open source ERP and CRM system.
|
| boot.loader.grub.extraFiles | A set of files to be copied to /boot
|
| services.prometheus.scrapeConfigs.*.metric_relabel_configs.*.source_labels | The source labels select values from existing labels
|
| services.maddy.enable | Whether to enable Maddy, a free an open source mail server.
|
| services.komga.enable | Whether to enable Komga, a free and open source comics/mangas media server.
|
| services.snipe-it.enable | Whether to enable snipe-it, a free open source IT asset/license management system.
|
| networking.ucarp.srcIp | Source (real) IP address of this host.
|
| services.geoclue2.enableStatic | Whether to enable the static source
|
| services.zammad.enable | Whether to enable Zammad, a web-based, open source user support/ticketing solution.
|
| services.cockroachdb.package | The cockroachdb package to use
|
| services.thanos.rule.alert.query-url | The external Thanos Query URL that would be set in all alerts 'Source' field.
|
| services.tayga.ipv4.address | The source IPv4 address of the TAYGA server.
|
| services.tayga.ipv6.address | The source IPv6 address of the TAYGA server.
|
| programs.obs-studio.enable | Whether to enable Free and open source software for video recording and live streaming.
|
| services.traccar.enable | Whether to enable Traccar, an open source GPS tracking system.
|
| services.thanos.rule.labels | Labels to be applied to all generated metrics
|
| nixpkgs.pkgs | If set, the pkgs argument to all NixOS modules is the value of
this option, extended with nixpkgs.overlays, if
that is also set
|
| services.opengfw.enable | Whether to enable OpenGFW, A flexible, easy-to-use, open source implementation of GFW on Linux
.
|
| programs.dms-shell.plugins.<name>.src | Source of the plugin package or path
|
| programs.fish.vendor.config.enable | Whether fish should source configuration snippets provided by other packages.
|
| services.firefly-iii.enable | Whether to enable Firefly III: A free and open source personal finance manager.
|
| services.gpsd.devices | List of devices that gpsd should subscribe to
|
| boot.loader.systemd-boot.extraFiles | A set of files to be copied to $BOOT
|
| programs.htop.settings | Extra global default configuration for htop
which is read on first startup only
|
| services.docuseal.enable | Whether to enable DocuSeal, open source document signing.
|
| services.ferretdb.enable | Whether to enable FerretDB, an Open Source MongoDB alternative.
|
| services.vmalert.enable | Wether to enable VictoriaMetrics's vmalert.
vmalert evaluates alerting and recording rules against a data source, sends notifications via Alertmanager.
|
| services.chromadb.enable | Whether to enable ChromaDB, an open-source AI application database..
|
| services.qui.settings | qui configuration options
|
| services.airsonic.enable | Whether to enable Airsonic, the Free and Open Source media streaming server (fork of Subsonic and Libresonic).
|
| xdg.icons.fallbackCursorThemes | Names of the fallback cursor themes, in order of preference, to be used when no other icon source can be found
|
| services.amule.settings.eMule.UDPPort | UDP port for eD2k traffic (searches, source exchange) and all Kad network communication
|
| services.discourse.enable | Whether to enable Discourse, an open source discussion platform.
|
| services.ntp.restrictSource | The restriction flags to be set on source
|
| services.headscale.enable | Whether to enable headscale, Open Source coordination server for Tailscale.
|
| services.geoclue2.enableWifi | Whether to enable WiFi source.
|
| services.geoclue2.enableCDMA | Whether to enable CDMA source.
|
| programs.localsend.enable | Whether to enable localsend, an open source cross-platform alternative to AirDrop.
|
| services.znapzend.zetup.<name>.enable | Whether to enable this source.
|
| services.geoclue2.enable3G | Whether to enable 3G source.
|
| services.syncthing.enable | Whether to enable Syncthing, a self-hosted open-source alternative to Dropbox and Bittorrent Sync.
|
| services.sks.webroot | Source directory (will be symlinked, if not null) for the files the
built-in webserver should serve
|
| services.syncoid.localSourceAllow | Permissions granted for the services.syncoid.user user
for local source datasets
|
| services.logmein-hamachi.enable | Whether to enable LogMeIn Hamachi, a proprietary
(closed source) commercial VPN software.
|
| services.spiped.config.<name>.encrypt | Take unencrypted connections from the
source socket and send encrypted
connections to the target socket.
|
| services.spiped.config.<name>.decrypt | Take encrypted connections from the
source socket and send unencrypted
connections to the target socket.
|
| services.znapzend.zetup.<name>.dataset | The dataset to use for this source.
|
| services.geoclue2.enableModemGPS | Whether to enable Modem-GPS source.
|
| hardware.deviceTree.kernelPackage | Kernel package where device tree include directory is from
|
| services.ebusd.device | Use DEV as eBUS device [/dev/ttyUSB0]
|
| services.suwayomi-server.enable | Whether to enable Suwayomi, a free and open source manga reader server that runs extensions built for Tachiyomi.
|
| services.snapserver.streams | The definition for an input source.
|
| boot.loader.limine.additionalFiles | A set of files to be copied to /boot
|
| boot.loader.refind.additionalFiles | A set of files to be copied to /boot
|
| services.privatebin.enable | Whether to enable Privatebin: A minimalist, open source online
pastebin where the server has zero knowledge of pasted data..
|
| services.lubelogger.enable | Whether to enable LubeLogger, a self-hosted, open-source, web-based vehicle maintenance and fuel milage tracker.
|
| services.rke2.images | List of derivations that provide container images
|
| services.dashy.enable | Whether to enable Dashy, a highly customizable, easy to use, privacy-respecting dashboard app
|
| networking.interfaces.<name>.tempAddress | When IPv6 is enabled with SLAAC, this option controls the use of
temporary address (aka privacy extensions) on this
interface
|
| services.znapzend.zetup.<name>.presnap | Command to run before snapshots are taken on the source dataset,
e.g. for database locking/flushing
|
| services.journald.remote.output | The location of the output journal
|
| services.sabnzbd.allowConfigWrite | By default we create the sabnzbd configuration read-only,
which keeps the nixos configuration as the single source
of truth
|
| services.znapzend.features.skipIntermediates | Whether to enable the skipIntermediates feature to send a single increment
between latest common snapshot and the newly made one
|
| hardware.tuxedo-drivers.enable | Whether to enable The tuxedo-drivers driver enables access to the following on TUXEDO notebooks:
- Driver for Fn-keys
- SysFS control of brightness/color/mode for most TUXEDO keyboards
- Hardware I/O driver for TUXEDO Control Center
For more inforation it is best to check at the source code description: https://gitlab.com/tuxedocomputers/development/packages/tuxedo-drivers
.
|
| services.spiped.config.<name>.waitForDNS | Wait for DNS
|
| services.nsd.ratelimit.ratelimit | Max qps allowed from any query source.
0 means unlimited
|
| services.firewalld.settings.IPv6_rpfilter | Performs reverse path filtering (RPF) on IPv6 packets as per RFC 3704
|
| services.qbittorrent.extraArgs | Extra arguments passed to qbittorrent
|
| services.znapzend.zetup.<name>.postsnap | Command to run after snapshots are taken on the source dataset,
e.g. for database unlocking
|
| services.geoclue2.staticAltitude | Altitude in meters to use for the static source.
|
| services.geoclue2.staticLatitude | Latitude to use for the static source
|
| services.geoclue2.staticAccuracy | Accuracy radius in meters to use for the static source.
|
| boot.loader.grub.extraGrubInstallArgs | Additional arguments passed to grub-install
|
| services.ntpd-rs.useNetworkingTimeServers | Use source time servers from networking.timeServers in config.
|