| services.umurmur.settings.ca_path | Path to your SSL CA certificate.
|
| services.mx-puppet-discord.settings | config.yaml configuration as a Nix attribute set
|
| services.open-web-calendar.settings | Configuration for the server
|
| services.snips-sh.settings | The configuration of snips-sh is done through environment variables,
therefore you must use upper snake case (e.g. SNIPS_HTTP_INTERNAL)
|
| services.stalwart-mail.settings | Configuration options for the Stalwart email server
|
| services.suricata.settings.af-xdp | Linux high speed af-xdp capture support, see
docs/capture-hardware/af-xdp.
|
| services.gancio.settings.log_path | Directory Gancio logs into
|
| services.fediwall.settings.showMedia | Show media in posts
|
| services.navidrome.settings.Port | Port to run Navidrome on.
|
| services.tinyproxy.settings.Port | Specify which port to listen to.
|
| services.pinnwand.settings.footer | The footer in raw HTML.
|
| services.yggdrasil.settings | Configuration for yggdrasil, as a structured Nix attribute set
|
| services.biboumi.settings.admin | The bare JID of the gateway administrator
|
| services.prowlarr.settings | Attribute set of arbitrary config options
|
| services.whisparr.settings | Attribute set of arbitrary config options
|
| services.hedgedoc.settings.path | Path to UNIX domain socket to listen on
If specified, host and port will be ignored.
|
| services.sympa.domains.<name>.settings | The robot.conf configuration file as key value set
|
| services.matrix-synapse.settings | The primary synapse configuration
|
| services.hickory-dns.settings.zones.*.zone | Zone name, like "example.com", "localhost", or "0.0.127.in-addr.arpa".
|
| services.tinc.networks.<name>.settings | Configuration of the Tinc daemon for this network
|
| services.ntfy-sh.settings.base-url | Public facing base URL of the service
This setting is required for any of the following features:
- attachments (to return a download URL)
- e-mail sending (for the topic URL in the email footer)
- iOS push notifications for self-hosted servers
(to calculate the Firebase poll_request topic)
- Matrix Push Gateway (to validate that the pushkey is correct)
|
| services.zram-generator.settings | Configuration for zram-generator,
see https://github.com/systemd/zram-generator for documentation.
|
| services.frigate.settings.cameras | Attribute set of cameras configurations.
https://docs.frigate.video/configuration/cameras
|
| services.xonotic.settings.sv_motd | Text displayed when players join the server.
|
| services.blackfire-agent.settings | See https://blackfire.io/docs/up-and-running/configuration/agent
|
| security.loginDefs.settings.TTYPERM | The terminal permissions: the login tty will be owned by the TTYGROUP group,
and the permissions will be set to TTYPERM
|
| services.caddy.settings | Structured configuration for Caddy to generate a Caddy JSON configuration file
|
| services.apache-kafka.settings."broker.id" | Broker ID. -1 or null to auto-allocate in zookeeper mode.
|
| services.scion.scion-control.settings | scion-control configuration
|
| services.gancio.settings.hostname | The domain name under which the server is reachable.
|
| services.kanboard.phpfpm.settings | Options for kanboard's PHPFPM pool.
|
| services.inadyn.settings.forced-update | Duration (in seconds) after which an update is forced.
|
| services.tor.settings.KeyDirectory | See torrc manual.
|
| services.tor.settings.ClientPreferIPv6DirPort | See torrc manual.
|
| services.tor.settings.ReducedExitPolicy | See torrc manual.
|
| services.inadyn.settings.provider.<name>.include | File to include additional settings for this provider from.
|
| services.headscale.settings | Overrides to config.yaml as a Nix attribute set
|
| services.suricata.settings.app-layer | app-layer configuration, see upstream docs.
|
| services.zwave-js.settings.storage.cacheDir | Cache directory
|
| services.angrr.settings.owned-only | Only monitors owned symbolic link target of GC roots.
- "auto": behaves like true for normal users, false for root.
- "true": only monitor GC roots owned by the current user.
- "false": monitor all GC roots.
|
| security.loginDefs.settings.DEFAULT_HOME | Indicate if login is allowed if we can't cd to the home directory.
|
| services.slskd.settings.web.url_base | The base path in the url for web requests.
|
| services.suwayomi-server.settings | Configuration to write to server.conf
|
| services.warpgate.settings.mysql.key | Path to MySQL listener private key.
|
| services.mchprs.settings.address | Address for the server
|
| services.go2rtc.settings.streams | Stream source configuration
|
| services.openssh.settings.LogLevel | Gives the verbosity level that is used when logging messages from sshd(8)
|
| services.part-db.settings.DATABASE_URL | The postgresql database server to connect to
|
| services.postgrest.settings.db-uri | libpq connection parameters as documented in:
https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-PARAMKEYWORDS
The settings.db-uri.password and settings.db-uri.passfile options are blocked
|
| services.opensearch.settings | OpenSearch configuration.
|
| services.wgautomesh.settings | Configuration for wgautomesh.
|
| services.imaginary.settings | Command line arguments passed to the imaginary executable, stripped of
the prefix -
|
| hardware.bluetooth.settings | Set configuration for system-wide bluetooth (/etc/bluetooth/main.conf)
|
| services.easytier.instances.<name>.settings | Settings to generate easytier-‹name›.toml
|
| services.peering-manager.settings | Configuration options to set in configuration.py
|
| services.peroxide.settings.UserPortImap | The port on which to listen for IMAP connections.
|
| services.peroxide.settings.UserPortSmtp | The port on which to listen for SMTP connections.
|
| services.acme-dns.settings.general.nsname | Zone name server.
|
| services.tor.settings.ControlPortWriteToFile | See torrc manual.
|
| services.tor.settings.ServerDNSResolvConfFile | See torrc manual.
|
| services.tor.settings.DisableNetwork | See torrc manual.
|
| services.maubot.settings.admins | List of administrator users
|
| services.evremap.settings.phys | The physical device name to listen on
|
| services.tsidp.settings.enableFunnel | Use Tailscale Funnel to make tsidp available on the public internet so it works with SaaS products.
|
| services.gateone.settingsDir | Path of configuration files for GateOne.
|
| services.livekit.ingress.settings | LiveKit Ingress configuration
|
| services.peertube-runner.settings | Configuration for peertube-runner
|
| services.umami.settings.DATABASE_URL | Connection string for the database
|
| services.openssh.settings.DenyUsers | If specified, login is denied for all listed users
|
| services.bookstack.settings.DB_PORT | The port your database is listening at.
|
| services.omnom.settings.server.address | Server address.
|
| security.auditd.plugins.<name>.settings | Plugin-specific config file to link to /etc/audit/.conf
|
| services.openssh.settings.AllowUsers | If specified, login is allowed only for the listed users
|
| services.hedgedoc.settings.db | Specify the configuration for sequelize
|
| services.mosquitto.listeners.*.settings | Additional settings for this listener.
|
| services.keycloak.settings.https-port | On which port Keycloak should listen for new HTTPS connections.
|
| services.gemstash.settings.db_url | The database to connect to when using postgres, mysql, or mysql2.
|
| services.suricata.settings.run-as.group | Run Suricata with a specific group-id.
|
| services.pds.settings.PDS_REPORT_SERVICE_DID | DID of mod service
|
| services.bluesky-pds.settings.PDS_BSKY_APP_VIEW_DID | DID of bsky frontend
|
| services.go-csp-collector.settings.port | The port to listen on.
|
| services.litestream.settings | See the documentation.
|
| services.rebuilderd.settings | Configuration for rebuilderd (rebuilderd.conf)
|
| services.dnscrypt-proxy2.settings | Attrset that is converted and passed as TOML config file
|
| services.nezha-agent.settings.uuid | Must be set to a unique identifier, preferably a UUID according to
RFC 4122
|
| services.acme-dns.settings.general.domain | Domain name to serve the requests off of.
|
| services.oncall.settings.db.conn.kwargs.host | Database host.
|
| services.misskey.settings.chmodSocket | The file access mode of the UNIX socket.
|
| services.pretix.settings.pretix.logdir | Directory for storing log files.
|
| services.oncall.settings.db.conn.kwargs.user | Database user.
|
| services.suricata.settings.af-packet | Linux high speed capture support.
|
| services.dsnet.settings.Networks | The CIDR networks that should route through this server
|
| programs.openvpn3.netcfg.settings | Options stored in /etc/openvpn3/netcfg.json configuration file
|
| services.frigate.settings.ffmpeg.path | Package providing the ffmpeg and ffprobe executables below the bin/ directory.
|
| services.bookstack.settings.DB_HOST | The IP or hostname which hosts your database.
|
| services.anuko-time-tracker.settings.helpLink | Help link from the main menu.
|
| services.gancio.settings.db.database | Name of the PostgreSQL database
|
| services.karma.settings.listen.address | Hostname or IP to listen on.
|
| services.tor.settings.DownloadExtraInfo | See torrc manual.
|
| services.tor.settings.DataDirectory | See torrc manual.
|