| services.maddy.primaryDomain | Primary MX domain to use
|
| services.devpi-server.primaryUrl | Url for the primary node
|
| services.xserver.xrandrHeads.*.primary | Whether this head is treated as the primary monitor,
|
| services.autorandr.profiles.<name>.config.<name>.primary | Whether output should be marked as primary
|
| users.users.<name>.group | The user's primary group.
|
| fonts.packages | List of primary font packages.
|
| users.extraUsers.<name>.group | The user's primary group.
|
| services.xserver.xrandrHeads | Multiple monitor configuration, just specify a list of XRandR
outputs
|
| services.ntfy-sh.group | Primary group of ntfy-sh user.
|
| services.gocd-agent.group | If the default user "gocd-agent" is configured then this is the primary
group of that user.
|
| boot.loader.grub.entryOptions | Options applied to the primary NixOS menu entry.
|
| services.jenkins.group | If the default user "jenkins" is configured then this is the primary
group of that user.
|
| services.gocd-server.group | If the default user "gocd-server" is configured then this is the primary group of that user.
|
| services.diod.userdb | This option disables password/group lookups
|
| services.outline.user | User under which the service should run
|
| services.gitolite.group | Primary group of the Gitolite user account.
|
| services.legit.settings | The primary legit configuration
|
| services.jenkinsSlave.group | If the default slave agent user "jenkins" is configured then this is
the primary group of that user.
|
| services.hickory-dns.settings.zones.*.zone_type | One of:
- "Primary" (the master, authority for the zone).
- "Secondary" (the slave, replicated from the primary).
- "External" (a cached zone that queries other nameservers)
|
| security.duosec.groups | If specified, Duo authentication is required only for users
whose primary group or supplementary group list matches one
of the space-separated pattern lists
|
| services.sftpgo.settings | The primary sftpgo configuration
|
| services.infinoted.group | What to call the primary group of the dedicated user under which infinoted is run
|
| services.devpi-server.secretFile | Path to a shared secret file used for synchronization,
Required for all nodes in a replica/primary setup.
|
| services.buildbot-master.group | Primary group of buildbot user.
|
| services.buildbot-worker.group | Primary group of buildbot Worker user.
|
| services.pipewire.audio.enable | Whether to use PipeWire as the primary sound server
|
| services.patroni.settings | The primary patroni configuration
|
| services.traefik.group | Primary group under which Traefik runs
|
| services.postfix.enableSmtp | Whether to enable the smtp service configured in the master.cf
|
| services.nsd.zones.<name>.allowAXFRFallback | If NSD as secondary server should be allowed to AXFR if the primary
server does not allow IXFR.
|
| services.netbird.tunnels.<name>.name | Primary name for use (as a suffix) in:
- systemd service name,
- hardened user name and group,
- systemd
*Directory= names,
- desktop application identification,
|
| services.netbird.clients.<name>.name | Primary name for use (as a suffix) in:
- systemd service name,
- hardened user name and group,
- systemd
*Directory= names,
- desktop application identification,
|
| services.miredo.serverAddress | The hostname or primary IPv4 address of the Teredo server
|
| services.nsd.zones.<name>.notify | This primary server will notify all given secondary servers about
zone changes
|
| services.matrix-synapse.settings | The primary synapse configuration
|
| networking.hostId | The 32-bit host ID of the machine, formatted as 8 hexadecimal characters
|
| services.hatsu.settings.HATSU_PRIMARY_ACCOUNT | The primary account of your instance (eg 'example.com').
|
| services.prosody.httpFileShare.http_host | To avoid an additional DNS record and certificate, you may set this option to your primary domain (e.g. "example.com")
or use a reverse proxy to handle the HTTP for that domain.
|
| services.traefik.dynamic.files | Dynamic configuration files to write
|
| services.nginx.upstreams.<name>.servers.<name>.backup | Marks the server as a backup server
|
| services.nsd.zones.<name>.outgoingInterface | This address will be used for zone-transfer requests if configured
as a secondary server or notifications in case of a primary server
|
| services.influxdb2.provision.initialSetup.bucket | Primary bucket name
|
| services.userborn.passwordFilesLocation | The location of the original password files
|
| services.nsd.zones.<name>.allowNotify | Listed primary servers are allowed to notify this secondary server
|
| services.kanidm.provision.persons.<name>.mailAddresses | Mail addresses
|
| services.influxdb2.provision.initialSetup.username | Primary username
|
| virtualisation.qemu.consoles | The output console devices to pass to the kernel command line via the
console parameter, the primary console is the last
item of this list
|
| services.keepalived.vrrpInstances.<name>.unicastSrcIp | Default IP for binding vrrpd is the primary IP on interface
|
| services.influxdb2.provision.initialSetup.passwordFile | Password for primary user
|
| services.nextcloud.config.objectstore.s3.enable | Whether to enable S3 object storage as primary storage
|
| services.influxdb2.provision.initialSetup.organization | Primary organization name
|
| services.cloudflared.tunnels.<name>.edgeIPVersion | Specifies the IP address version (IPv4 or IPv6) used to establish a connection between cloudflared and the Cloudflare global network
|
| services.postgresqlWalReceiver.receivers.<name>.slot | Require pg_receivewal to use an existing replication slot (see
Section 26.2.6 of the PostgreSQL manual)
|
| security.allowSimultaneousMultithreading | Whether to allow SMT/hyperthreading
|
| services.matrix-synapse.settings.tls_certificate_path | PEM encoded X509 certificate for TLS
|
| services.devpi-server.replica | Run node as a replica
|