| services.prometheus.exporters.mysqld.telemetryPath | Path under which to expose metrics.
|
| services.prometheus.exporters.mikrotik.configFile | Path to a mikrotik exporter configuration file
|
| documentation.man.mandoc.manPath | Change the paths included in the MANPATH environment variable,
i. e. the directories where man(1)
looks for section-specific directories of man pages
|
| services.etebase-server.settings.global.secret_file | The path to a file containing the secret
used as django's SECRET_KEY.
|
| services.archisteamfarm.ipcPasswordFile | Path to a file containing the password
|
| services.k3s.autoDeployCharts | Auto deploying Helm charts that are installed by the k3s Helm controller
|
| services.namecoind.trustedNodes | List of the only peer IP addresses to connect to
|
| users.extraUsers.<name>.initialHashedPassword | Specifies the initial hashed password for the user, i.e. the
hashed password assigned if the user does not already
exist
|
| services.opentelemetry-collector.configFile | Specify a path to a configuration file that Opentelemetry Collector should use.
|
| services.prometheus.exporters.borgmatic.configFile | The path to the borgmatic config file
|
| virtualisation.podman.networkSocket.tls.cacert | Path to CA certificate to use for client authentication.
|
| services.anuko-time-tracker.nginx.locations.<name>.recommendedProxySettings | Enable recommended proxy settings.
|
| services.anuko-time-tracker.nginx.locations.<name>.recommendedUwsgiSettings | Enable recommended uwsgi settings.
|
| services.mjpg-streamer.user | mjpg-streamer user name.
|
| services.rss-bridge.pool | Name of phpfpm pool that is used to run web-application
|
| services.prosody.muc.*.domain | Domain name of the MUC
|
| services.forgejo.dump.file | Filename to be used for the dump
|
| services.cloudflared.tunnels.<name>.certificateFile | Account certificate file, necessary to create, delete and manage tunnels
|
| services.kanidm.provision.systems.oauth2.<name>.enableLocalhostRedirects | Allow localhost redirects
|
| networking.openconnect.interfaces.<name>.extraOptions | Extra config to be appended to the interface config
|
| services.kerberos_server.settings.realms.<name>.acl.*.target | The principals that 'access' applies to.
|
| services.syncplay.maxUsernameLength | Maximum number of characters in a username.
|
| services.postgresql.ensureUsers.*.ensureClauses.login | Grants the user, created by the ensureUser attr, login permissions
|
| services.prometheus.exporters.unbound.unbound.host | Path to the unbound control socket
|
| services.bitwarden-directory-connector-cli.secrets.ldap | Path to file that contains LDAP password for user in {option}`ldap.username
|
| services.homepage-dashboard.environmentFile | The path to an environment file that contains environment variables to pass
to the homepage-dashboard service, for the purpose of passing secrets to
the service
|
| programs.singularity.enableExternalLocalStateDir | Whether to use top-level directories as LOCALSTATEDIR
instead of the store path ones
|
| services.influxdb2.provision.organizations.<name>.buckets | Buckets to provision in this organization.
|
| services.hadoop.hdfs.namenode.extraFlags | Extra command line flags to pass to HDFS NameNode
|
| services.strongswan-swanctl.swanctl.connections.<name>.vips | List of virtual IPs to request in IKEv2 configuration payloads or IKEv1
Mode Config
|
| services.zoneminder.hostname | The hostname on which to listen.
|
| services.bookstack.nginx.locations.<name>.recommendedUwsgiSettings | Enable recommended uwsgi settings.
|
| services.bookstack.nginx.locations.<name>.recommendedProxySettings | Enable recommended proxy settings.
|
| services.pid-fan-controller.settings.fans.*.wildcardPath | Wildcard path of the hwmon pwm file
|
| services.limesurvey.nginx.virtualHost.sslCertificate | Path to server SSL certificate.
|
| services.warpgate.settings.postgres.certificate | Path to PostgreSQL listener certificate.
|
| services.prometheus.exporters.imap-mailstat.accounts.<name>.starttls | set to true for using STARTTLS to start a TLS connection
|
| services.postgresqlWalReceiver.receivers.<name>.postgresqlPackage | The postgresql package to use.
|
| services.kanidm.provision.systems.oauth2.<name>.allowInsecureClientDisablePkce | Disable PKCE on this oauth2 resource server to work around insecure clients
that may not support it
|
| networking.openconnect.interfaces.<name>.certificate | Certificate to authenticate with.
|
| services.postgresqlWalReceiver.receivers.<name>.environment | Environment variables passed to the service
|
| services.influxdb2.provision.organizations.<name>.present | Whether to ensure that this organization is present or absent.
|
| services.selfoss.pool | Name of existing phpfpm pool that is used to run web-application
|
| services.resilio.deviceName | Name of the Resilio Sync device.
|
| services.mastodon.smtp.user | SMTP login name.
|
| services.asusd.auraConfigs | The content of /etc/asusd/aura_.ron
|
| services.dawarich.smtp.user | SMTP login name.
|
| services.flannel.iface | Interface to use (IP or name) for inter-host communication
|
| boot.initrd.luks.devices | The encrypted disk that should be opened before the root
filesystem is mounted
|
| services.lasuite-meet.domain | Domain name of the meet instance.
|
| services.lasuite-docs.domain | Domain name of the docs instance.
|
| users.mysql.pam.logging.msgColumn | The name of the column in the log table to which the description
of the performed operation is stored.
|
| users.mysql.pam.passwordColumn | The name of the column that contains a (encrypted) password string.
|
| services.strongswan-swanctl.swanctl.pools | Section defining named pools
|
| hardware.nvidia-container-toolkit.disable-hooks | List of hooks to disable when generating the CDI specification
|
| services.rke2.autoDeployCharts | Auto deploying Helm charts that are installed by the rke2 Helm controller
|
| services.authelia.instances.<name>.settings.telemetry.metrics.address | The address to listen on for metrics
|
| services.peertube-runner.instancesToRegister.<name>.runnerDescription | Runner description declared to the PeerTube instance.
|
| services.limesurvey.nginx.virtualHost.locations.<name>.proxyWebsockets | Whether to support proxying websocket connections with HTTP/1.1.
|
| services.onlyoffice.hostname | FQDN for the OnlyOffice instance.
|
| services.linkwarden.environmentFile | Path of a file with extra environment variables to be loaded from disk
|
| services.athens.downloadMode | Defines how Athens behaves when a module@version
is not found in storage
|
| security.pam.sshAgentAuth.authorizedKeysFiles | A list of paths to files in OpenSSH's authorized_keys format, containing
the keys that will be trusted by the pam_ssh_agent_auth module
|
| virtualisation.podman.networkSocket.tls.key | Path to the private key corresponding to the server certificate
|
| virtualisation.containerd.configFile | Path to containerd config file
|
| networking.wireguard.interfaces.<name>.peers.*.presharedKeyFile | File pointing to preshared key as generated by wg genpsk
|
| services.strongswan-swanctl.swanctl.authorities.<name>.crl_uris | List of CRL distribution points (ldap, http, or file URI)
|
| services.pgadmin.emailServer.username | SMTP server username for email delivery
|
| services.multipath.blacklist_exceptions | This section defines which devices should be included in the
multipath topology discovery, despite being listed in the
blacklist section.
|
| services.postgresqlWalReceiver.receivers.<name>.statusInterval | Specifies the number of seconds between status packets sent back to the server
|
| services.prometheus.exporters.tibber.apiTokenPath | Add here the path to your personal Tibber API Token ('Bearer Token') File
|
| services.rmfakecloud.environmentFile | Path to an environment file loaded for the rmfakecloud service
|
| services.lubelogger.environmentFile | Path to a file containing extra LubeLogger config options in the systemd EnvironmentFile format
|
| services.prometheus.exporters.unbound.telemetryPath | Path under which to expose metrics.
|
| services.prometheus.exporters.mongodb.telemetryPath | Metrics expose path
|
| services.prometheus.exporters.dovecot.telemetryPath | Path under which to expose metrics.
|
| services.nextcloud.config.objectstore.s3.usePathStyle | Required for some non-Amazon S3 implementations
|
| services.prometheus.exporters.postfix.telemetryPath | Path under which to expose metrics.
|
| services.prometheus.exporters.varnish.telemetryPath | Path under which to expose metrics.
|
| services.cloudflare-ddns.credentialsFile | Path to a file containing the Cloudflare API authentication token
|
| services.mautrix-meta.instances.<name>.registrationServiceUnit | The registration service that generates the registration file
|
| services.misskey.reverseProxy.webserver.nginx.locations.<name>.fastcgiParams | FastCGI parameters to override
|
| services.discourse.admin.username | The admin user username.
|
| services.vikunja.frontendHostname | The Hostname under which the frontend is running.
|
| systemd.automounts.*.wantedBy | Units that want (i.e. depend on) this unit
|
| services.nixops-dns.domain | Fake domain name to resolve to NixOps virtual machines
|
| services.nscd.enable | Whether to enable the Name Service Cache Daemon
|
| services.pretix.nginx.domain | The domain name under which to set up the virtual host.
|
| services.saunafs.masterHost | IP or hostname name of master host.
|
| services.spiped.config | Configuration for a secure pipe daemon
|
| services.dolibarr.domain | Domain name of your server.
|
| services.jicofo.xmppDomain | Domain name of the XMMP server to which to connect as a component
|
| security.tpm2.fapi.profileName | Name of the default cryptographic profile chosen from the profile_dir directory.
|
| services.wiki-js.settings.db.db | Name of the database to use.
|
| xdg.portal.config | Sets which portal backend should be used to provide the implementation
for the requested interface
|
| services.strongswan-swanctl.swanctl.pools.<name>.split_exclude | Address or CIDR subnets
StrongSwan default: []
|
| services.strongswan-swanctl.swanctl.pools.<name>.split_include | Address or CIDR subnets
StrongSwan default: []
|
| services.limesurvey.nginx.virtualHost.sslCertificateKey | Path to server SSL certificate key.
|
| services.prometheus.exporters.pgbouncer.webConfigFile | Path to configuration file that can enable TLS or authentication.
|
| services.jirafeau.nginxConfig.locations.<name>.recommendedProxySettings | Enable recommended proxy settings.
|