| services.netbird.server.management.settings | Configuration of the netbird management server
|
| services.prosody.ssl.key | Path to the key file.
|
| services.prometheus.scrapeConfigs.*.marathon_sd_configs.*.tls_config.cert_file | Certificate file for client cert authentication to the server.
|
| services.prometheus.scrapeConfigs.*.puppetdb_sd_configs.*.tls_config.cert_file | Certificate file for client cert authentication to the server.
|
| services.prometheus.scrapeConfigs.*.scaleway_sd_configs.*.tls_config.cert_file | Certificate file for client cert authentication to the server.
|
| services.filesender.database.port | Database port.
|
| services.filesender.database.name | Database name.
|
| services.filesender.database.user | Database user.
|
| services.blockbook-frontend.<name>.configFile | Location of the blockbook configuration file.
|
| services.resolved.domains | A list of domains
|
| programs.msmtp.accounts | Named accounts and their respective configurations
|
| services.prometheus.exporters.sabnzbd.servers.*.apiKeyFile | The path to a file containing the API key
|
| services.vsftpd.rsaCertFile | RSA certificate file.
|
| services.mastodon.secretKeyBaseFile | Path to file containing the secret key base
|
| services.fedimintd.<name>.nginx.config.basicAuthFile | Basic Auth password file for a vhost
|
| boot.loader.grub.extraConfig | Additional GRUB commands inserted in the configuration file
just before the menu entries.
|
| services.firezone.server.smtp.passwordFile | File containing the password for the given username
|
| services.filebrowser.package | The filebrowser package to use.
|
| services.haven.environmentFile | Path to a file containing sensitive environment variables
|
| services.nullmailer.remotesFile | Path to the remotes control file
|
| services.xserver.xkb.extraLayouts.<name>.typesFile | The path to the xkb types file
|
| services.headscale.settings.policy.path | If the mode is set to "file", the path to a
HuJSON file containing ACL policies.
|
| services.vault.tlsKeyFile | TLS private key file
|
| services.nghttpx.tls.crt | Path to the TLS certificate file.
|
| services.nghttpx.tls.key | Path to the TLS key file.
|
| services.filesender.settings | Configuration options used by FileSender
|
| services.easytier.instances.<name>.configFile | Path to easytier config file
|
| services.plikd.enable | Whether to enable plikd, a temporary file upload system.
|
| services.crowdsec.localConfig.profiles | A list of profiles to enable
|
| services.ntp.extraConfig | Additional text appended to ntp.conf.
|
| services.prometheus.exporters.restic.rcloneConfigFile | Path to the file containing rclone configuration
|
| services.lasuite-meet.livekit.keyFile | LiveKit key file holding one or multiple application secrets
|
| services.athens.tlsCertFile | Path to the TLS certificate file.
|
| services.mediatomb.customCfg | Allow the service to create and use its own config file inside the dataDir as
configured by services.mediatomb.dataDir
|
| services.athens.netrcPath | Path to the .netrc file.
|
| services.locate.output | The database file to build.
|
| services.pdfding.database.passwordFile | File containing POSTGRES_PASSWORD
|
| services.autorandr.profiles.<name>.hooks | Profile hook scripts.
|
| users.groups.<name>.members | The user names of the group members, added to the
/etc/group file.
|
| services.ncps.netrcFile | The path to netrc file for upstream authentication
|
| services.prometheus.scrapeConfigs.*.ec2_sd_configs.*.profile | Named AWS profile used to connect to the API.
|
| services.prometheus.scrapeConfigs.*.openstack_sd_configs.*.tls_config.key_file | Key file for client cert authentication to the server.
|
| services.ndppd.routeTTL | This tells 'ndppd' how often to reload the route file /proc/net/ipv6_route,
in milliseconds.
|
| services.yarr.authFilePath | Path to a file containing username:password. null means no authentication required to use the service.
|
| services.murmur.logFile | Path to the log file for Murmur daemon
|
| services.vault.tlsCertFile | TLS certificate file
|
| services.prosody.ssl.cert | Path to the certificate file.
|
| services.cfssl.dbConfig | Certificate db configuration file
|
| services.dashy.settings | Settings serialized into user-data/conf.yml before build
|
| services.nextcloud.config.adminpassFile | The full path to a file that contains the admin's password
|
| services.tsidp.environmentFile | Path to an environment file loaded for the tsidp service
|
| services.pleroma.configs | Pleroma public configuration
|
| services.mongodb.pidFile | Location of MongoDB pid file
|
| users.users.<name>.subUidRanges | Subordinate user ids that user is allowed to use
|
| users.users.<name>.subGidRanges | Subordinate group ids that user is allowed to use
|
| services.home-assistant.configWritable | Whether to make configuration.yaml writable
|
| services.davis.mail.dsnFile | A file containing the mail DSN for sending emails
|
| services.dnsmasq.settings | Configuration of dnsmasq
|
| services.traccar.settings | config.xml configuration as a Nix attribute set
|
| services.blockbook-frontend.<name>.certFile | To enable SSL, specify path to the name of certificate files without extension
|
| services.prometheus.scrapeConfigs.*.http_sd_configs.*.basic_auth.password_file | HTTP password file
|
| services.prometheus.scrapeConfigs.*.kuma_sd_configs.*.basic_auth.password_file | HTTP password file
|
| services.qbittorrent.profileDir | the path passed to qbittorrent via --profile.
|
| security.pam.ussh.caFile | By default pam-ussh reads the trusted user CA keys
from /etc/ssh/trusted_user_ca
|
| services.prometheus.exporters.sql.configFile | Path to configuration file.
|
| services.oauth2-proxy.tls.key | Path to private key file.
|
| services.apache-kafka.configFiles.log4jProperties | Kafka log4j property configuration file path
|
| services.prometheus.scrapeConfigs.*.openstack_sd_configs.*.tls_config.cert_file | Certificate file for client cert authentication to the server.
|
| programs.nix-index.enable | Whether to enable nix-index, a file database for nixpkgs.
|
| services.lirc.options | LIRC default options described in man:lircd(8) (lirc_options.conf)
|
| services.kanidm.provision.extraJsonFile | A JSON file for provisioning persons, groups & systems
|
| services.newt.environmentFile | Path to a file containing sensitive environment variables for Newt
|
| services.angrr.settings.profile-policies | Profile GC root policies.
|
| services.gitea.camoHmacKeyFile | Path to a file containing the camo HMAC key.
|
| services.jupyterhub.extraConfig | Extra contents appended to the jupyterhub configuration
Jupyterhub configuration is a normal python file using
Traitlets. https://jupyterhub.readthedocs.io/en/stable/getting-started/config-basics.html
|
| services.couchdb.logFile | Specifies the location of file for logging output.
|
| services.movim.secretFile | The secret file to be sourced for the .env settings.
|
| services.opengfw.logFile | File to write the output to instead of systemd.
|
| services.xserver.xkb.extraLayouts.<name>.compatFile | The path to the xkb compat file
|
| services.cloudflared.certificateFile | Account certificate file, necessary to create, delete and manage tunnels
|
| services.castopod.database.passwordFile | A file containing the password corresponding to
services.castopod.database.user
|
| services.cron.cronFiles | A list of extra crontab files that will be read and appended to the main
crontab file when the cron service starts.
|
| services.prometheus.exporters.json.configFile | Path to configuration file.
|
| services.prometheus.exporters.ipmi.configFile | Path to configuration file.
|
| networking.networkmanager.ensureProfiles.profiles | Declaratively define NetworkManager profiles
|
| services.seafile.initialAdminPassword | Seafile Seahub Admin Account initial password
|
| services.gns3-server.ssl.keyFile | Private key file for the certificate.
|
| services.mastodon.vapidPublicKeyFile | Path to file containing the public key used for Web Push
Voluntary Application Server Identification
|
| services.murmur.logToFile | Whether to enable logging to a file instead of journald, which is stored in /var/log/murmur.
|
| systemd.mounts.*.options | Options used to mount the file system.
|
| services.nar-serve.enable | Whether to enable serving NAR file contents via HTTP.
|
| programs.thunar.enable | Whether to enable Thunar, the Xfce file manager.
|
| security.sudo.extraConfig | Extra configuration text appended to sudoers.
|
| services.soju.extraConfig | Lines added verbatim to the generated configuration file.
|
| services.bacula-fd.enable | Whether to enable the Bacula File Daemon.
|
| services.airsonic.war | Airsonic war file to use.
|
| services.prometheus.scrapeConfigs.*.http_sd_configs.*.tls_config.ca_file | CA certificate to validate API server certificate with.
|
| services.prometheus.scrapeConfigs.*.kuma_sd_configs.*.tls_config.ca_file | CA certificate to validate API server certificate with.
|
| services.prometheus.exporters.mail.configFile | Specify the mailexporter configuration file to use.
|
| services.xserver.xkb.extraLayouts.<name>.symbolsFile | The path to the xkb symbols file
|