Rules passed to OpenGFW. Example rules

The ordered audit rules, with each string appearing as one line of the audit.rules file.

Declarative configuration of firewall rules

udev rules to include in the initrd only

Rules for creation, deletion and cleaning of volatile and temporary files automatically

A list of the given alerting or recording rules against configured "datasource.url" compatible with Prometheus HTTP API for vmalert to execute

The rule statement configures a GNU Rush rule

Global user rules for creation, deletion and cleaning of volatile and temporary files automatically

Path to file containing OpenGFW rules.

Whether to enable logging for the rule.

Name of the rule.

Alerting and/or Recording rules to evaluate at runtime.

Expr Language expression using analyzers and functions.

Rich rules for the zone.

Per-user rules for creation, deletion and cleaning of volatile and temporary files automatically

The USBGuard daemon will load this as the policy rule set

Window class translation rules. /etc/X11/imwheelrc is generated based on this config which means this config is global for all users

Action of the rule. Supported actions

Which package to copy default rules,types,cgroups from.

This is a rule that the target address is to match against

This is the target address is to match against

A list of the given alerting or recording rules against configured "datasource.url" compatible with Prometheus HTTP API for vmalert to execute

Modification of specified packets when using the modify action. Available modifiers

Name of the modifier.

Arguments passed to the modifier.

Declarative configuration of networkd-dispatcher rules

Path to YAML rules configuration

Interface to use when method is iface.

static: Immediately answer any Neighbor Solicitation Messages (if they match the IP rule). iface: Forward the Neighbor Solicitation Message through the specified interface and only respond if a matching Neighbor Advertisement Message is received. auto: Same as iface, but instead of manually specifying the outgoing interface, check for a matching route in /proc/net/ipv6_route.

Grafana rules configuration in Nix

Shell commands executed on specified operational states.

The path to load specific local geoip/geosite db files

List of names of the systemd-networkd operational states which should trigger the script

The ruleset file to be used with nftables

List of rule groups to import or update.

Name of the rule group

Config file version.

List of alert rule UIDs that should be deleted.

Unique identifier for the rule

Organization ID, default = 1

Name of the folder the rule group will be stored in

Additional bot rules appended to the policy

Additional bot rules appended to the policy

Interval that the rule group should be evaluated at

Add logging rules right before reject and drop rules in the INPUT, FORWARD and OUTPUT chains for the default rules and also final reject and drop rules in zones for the configured link-layer packet type.

Additional udev rules

Path to geoip.dat.

The ruleset to be used with nftables

Path to geosite.dat.

List of rules to be added to /etc/xdg/pay-respects/rules. pay-respects will read the contents of these generated rules to recommend command corrections

Define specific rules to be in the sudoers file

Define specific rules to be in the sudoers file

If false (the default), this is up to the user to declare the firewall rules

Define specific rules to be set in the /etc/doas.conf file

Path to the files with alerting and/or recording rules.

Path to the files with alerting and/or recording rules.

Labels to treat as a replica indicator along which data is deduplicated

List of packages containing systemd-tmpfiles rules

Whether to enable udev rules and software for Lian Li Uni Controllers.

Packages added to the PATH environment variable when executing programs from Udev rules.

coreutils, gnu{sed,grep}, util-linux and config.systemd.package are automatically included.

Whether to enable udev rules for Ledger devices.

File which contains the rules to handle UPS events.

Hub collections, parsers, AppSec rules, etc.

Whether to enable lvm2.

Ingress rules

Whether to install Light backlight control command and udev rules granting access to members of the "video" group.

Whether to enable PN5xx kernel module with udev rules, libnfc-nci userland, and optional ifdnfc-nci PC/SC driver.

Rules for specific window types.

Network that we proxy. (Legacy option, use services.ndppd.proxies.<interface>.rules.<network> instead)

Whether to enable udev rules for devices supported by libftdi.

Whether to enable Ferm Firewall. Warning: Enabling this service WILL disable the existing NixOS firewall! Default firewall rules provided by packages are not considered at the moment.

This sets up a listener, that will listen for any Neighbor Solicitation messages, and respond to them according to a set of rules.

Depending on the local firewall/NAT rules, you might need to force Miredo to use a fixed UDP port and or IPv4 address.

List of packages containing udev rules

Defines how users authenticate themselves to the server

Enables udev rules for BladeRF devices

Whether to enable udev rules for Saleae Logic devices.

Rules to write in 'nixRules.rules'

Whether to enable the msr (Model-Specific Registers) kernel module and configure udev rules for its devices (usually /dev/cpu/*/msr).

Any polkit rules to be added to config (in JavaScript ;-)

Rules that control the opacity of windows, in format PERCENT:PATTERN.

Specify the rules for which files to read on the host

Enables udev rules for Nitrokey devices.

Path of file to link to /etc/rspamd/rspamd.local.lua for local rules written in Lua

This option defines extra ignore rules.

Whether to include Anubis's default bot detection rules via the (data)/meta/default-config.yaml import

Whether to include Anubis's default bot detection rules via the (data)/meta/default-config.yaml import

Extra CSS rules to apply on top of the GTK theme

Per-user rules for creation, deletion and cleaning of volatile and temporary files automatically.

Group for Ubertooth's udev rules.

Enables Glasgow udev rules and ensures 'plugdev' group exists

Whether to enable minipro and its udev rules

Wether to enable VictoriaMetrics's vmalert.

vmalert evaluates alerting and recording rules against a data source, sends notifications via Alertmanager.

List of hub appsec rules to install

Whether to allow traffic on the loopback interface

This option defines extra ignore rules for cronjobs.

Directories with extra rules.

Extra nftables rules to prepend to the generated ones

Path to PCAP replay file

Enables rtl-sdr udev rules, ensures 'plugdev' group exists, and blacklists DVB kernel modules