migrate to 25.11; remove teamspeak and jellyfin player due to webkit deprecation;

add busybox since its basically expected by some programs (comes with xz)
make virtualisation a proper module so i can flip between docker and podman (i will make podman work one day i swear)
add waydroid back in
electrum is busted for now
make resharper a bit more modular
add new firefox bs

configuration/base/default.nix

@@ -6,6 +6,7 @@
     ./location-time.nix
     ./networking.nix
     ./nix-settings.nix
+    ./oomd.nix
     ./pipewire.nix
     ./programs.nix
   ];

configuration/base/networking.nix

@@ -5,9 +5,6 @@
   # Pick only one of the below networking options.
   # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
   networking = {
-    nftables = {
-      enable = true;
-    };
     networkmanager = {
       # Easiest to use and most distros use this by default.
       enable = true;

configuration/base/nix-settings.nix

@@ -1,4 +1,4 @@
-{ ... }:
+{ inputs, ... }:
 
 {
   nixpkgs.config.allowUnfree = true;
@@ -6,6 +6,8 @@
   nix.settings.auto-optimise-store = true;
   nix.gc.automatic = true;
   nix.gc.options = "--delete-older-than 7d";
+  # https://github.com/nix-community/nixd/blob/main/nixd/docs/configuration.md
+  nix.nixPath = [ "nixpkgs=${inputs.nixpkgs}" ];
 
   programs.nix-ld = {
     enable = true;

configuration/base/oomd.nix

@@ -0,0 +1,10 @@
+{ ... }:
+
+{
+  systemd.oomd = {
+    enable = true;
+    enableRootSlice = true;
+    enableSystemSlice = true;
+    enableUserSlices = true;
+  };
+}

configuration/base/programs.nix

@@ -19,8 +19,8 @@
 
     rar
     zstd
-    xz
     p7zip
+    busybox
 
     libva-utils
     smartmontools

configuration/modules/gaming.nix

@@ -35,4 +35,9 @@
   };
 
   programs.cdemu.enable = true; # Remember to add users to the cdrom group for this to work
+
+  environment.systemPackages = with pkgs;[
+    lsfg-vk
+    lsfg-vk-ui
+  ];
 }

configuration/modules/i18n.nix

@@ -0,0 +1,24 @@
+{ pkgs, ... }:
+
+{
+  # Install Japanese IME MOZC
+  i18n.inputMethod = {
+    enable = true;
+    type = "fcitx5";
+    # ibus = {
+    #   engines = with pkgs.ibus-engines; [ mozc anthy ];
+    #   panel = "${pkgs.kdePackages.plasma-desktop}/libexec/kimpanel-ibus-panel";
+    # };
+    fcitx5 = {
+      waylandFrontend = true;
+      addons = with pkgs; [
+        fcitx5-mozc
+        fcitx5-anthy
+      ];
+    };
+  };
+
+  environment.systemPackages = [
+    pkgs.kdePackages.fcitx5-configtool
+  ];
+}

configuration/modules/laptop.nix

@@ -1,20 +1,20 @@
 { ... }:
 
 {
-  services.power-profiles-daemon.enable = false;
+  services.power-profiles-daemon.enable = true;
-  services.tlp = {
+  # services.tlp = {
-    enable = true;
+  #   enable = true;
-    settings = {
+  #   settings = {
-      RESTORE_DEVICE_STATE_ON_STARTUP = 1;
+  #     RESTORE_DEVICE_STATE_ON_STARTUP = 1;
-      USB_AUTOSUSPEND = 0;
+  #     USB_AUTOSUSPEND = 0;
-      PLATFORM_PROFILE_ON_AC = "performance";
+  #     PLATFORM_PROFILE_ON_AC = "performance";
-      PLATFORM_PROFILE_ON_BAT = "low-power";
+  #     PLATFORM_PROFILE_ON_BAT = "low-power";
-      CPU_ENERGY_PERF_POLICY_ON_AC = "performance";
+  #     CPU_ENERGY_PERF_POLICY_ON_AC = "performance";
-      CPU_ENERGY_PERF_POLICY_ON_BAT = "balance_power";
+  #     CPU_ENERGY_PERF_POLICY_ON_BAT = "balance_power";
-      CPU_BOOST_ON_AC = 1;
+  #     CPU_BOOST_ON_AC = 1;
-      CPU_BOOST_ON_BAT = 0;
+  #     CPU_BOOST_ON_BAT = 0;
-    };
+  #   };
-  };
+  # };
 
   # Enable touchpad support (enabled by default in most desktopManagers).
   services.libinput.enable = true;

configuration/modules/virtualisation.nix

@@ -1,6 +1,13 @@
-{ pkgs, ... }:
+{ pkgs, lib, config, ... }:
 
+with lib;
 {
+  options.virtualisation.containerManagement = mkOption {
+    type = types.enum [ "docker" "podman" ];
+    default = "docker";
+  };
+
+  config = {
     virtualisation = {
       containers = {
         # Enable common container config files in /etc/containers
@@ -10,30 +17,37 @@
         enable = true;
         qemu = {
           vhostUserPackages = [ pkgs.virtiofsd ];
-        ovmf.enable = true;
         };
       };
-    # podman = {
+      # remember to add the necessary users to the podman group
-    #   enable = true;
+      podman = {
-    #   dockerSocket.enable = true;
+        enable = if (config.virtualisation.containerManagement == "podman") then true else false;
-    #   dockerCompat = true;
+        dockerSocket.enable = true;
-    #   defaultNetwork.settings.dns_enabled = true;
+        dockerCompat = true;
-    # };
+        defaultNetwork.settings.dns_enabled = true;
+      };
       # remember to add the necessary users to the docker group
       docker = {
-      enable = true;
+        enable = if (config.virtualisation.containerManagement == "docker") then true else false;
         storageDriver = "btrfs";
       };
-    # waydroid = {
+      waydroid = {
-    #   enable = true;
+        enable = true;
-    # };
+        package = pkgs.waydroid-nftables;
+      };
     };
     programs.virt-manager.enable = true;
-  # environment.systemPackages = with pkgs;[
+
-  #   docker-compose
+    environment.systemPackages = with pkgs;[
-  #   # podman-compose
+      waydroid-helper
-  #   podman-tui
+    ] ++ optionals (config.virtualisation.containerManagement == "podman") [
-  #   podman-desktop
+      docker-compose
-  # ];
+      # podman-compose
+      podman-tui
+      podman-desktop
+    ] ++ optionals (config.virtualisation.containerManagement == "docker") [
+      lazydocker
+    ];
+  };
 }
 

devices/deck/flake.nix

@@ -1,10 +1,10 @@
 {
   inputs = {
-    nixpkgs.url = "github:nixos/nixpkgs/nixos-25.05?shallow=1";
+    nixpkgs.url = "github:nixos/nixpkgs/nixos-25.11?shallow=1";
-    nixpkgs-unstable.url = "github:nixos/nixpkgs/nixos-unstable?shallow=1"; # use by inputs.nixpkgs-unstable.legacyPackages."${pkgs.system}".[package name]
+    nixpkgs-unstable.url = "github:nixos/nixpkgs/nixos-unstable?shallow=1"; # use by inputs.nixpkgs-unstable.legacyPackages."${pkgs.stdenv.hostPlatform.system}".[package name]
 
     home-manager = {
-      url = "github:nix-community/home-manager/release-25.05?shallow=1";
+      url = "github:nix-community/home-manager/release-25.11?shallow=1";
       inputs.nixpkgs.follows = "nixpkgs";
     };
 
@@ -19,6 +19,7 @@
       url = "github:numtide/system-manager?shallow=1";
       inputs.nixpkgs.follows = "nixpkgs";
     };
+
     nix-system-graphics = {
       url = "github:soupglasses/nix-system-graphics?shallow=1";
       inputs.nixpkgs.follows = "nixpkgs";

devices/starlite/flake.nix

@@ -1,10 +1,10 @@
 {
   inputs = {
-    nixpkgs.url = "github:nixos/nixpkgs/nixos-25.05?shallow=1";
+    nixpkgs.url = "github:nixos/nixpkgs/nixos-25.11?shallow=1";
-    nixpkgs-unstable.url = "github:nixos/nixpkgs/nixos-unstable?shallow=1"; # use by inputs.nixpkgs-unstable.legacyPackages."${pkgs.system}".[package name]
+    nixpkgs-unstable.url = "github:nixos/nixpkgs/nixos-unstable?shallow=1"; # use by inputs.nixpkgs-unstable.legacyPackages."${pkgs.stdenv.hostPlatform.system}".[package name]
 
     home-manager = {
-      url = "github:nix-community/home-manager/release-25.05?shallow=1";
+      url = "github:nix-community/home-manager/release-25.11?shallow=1";
       inputs.nixpkgs.follows = "nixpkgs";
     };
 

devices/tuxedo/configuration.nix

@@ -17,6 +17,7 @@
       ../../configuration/modules/virtualisation.nix
       ../../configuration/modules/gaming.nix
       ../../configuration/modules/kde.nix
+      ../../configuration/modules/i18n.nix
     ];
 
   networking.hostName = "tuxedo"; # Define your hostname.
@@ -32,7 +33,9 @@
     "ntsync"
   ];
 
-  services.hardware.openrgb.enable = true;
+  # services.hardware.openrgb.enable = true;
+
+  virtualisation.containerManagement = "docker";
 
   fileSystems."/mnt/HDD2" = {
     fsType = "ext4";
@@ -64,9 +67,6 @@
   environment.systemPackages = with pkgs;[
     distrobox
     gpu-screen-recorder-gtk
-
-    inputs.nixpkgs-unstable.legacyPackages."${pkgs.system}".lsfg-vk
-    inputs.nixpkgs-unstable.legacyPackages."${pkgs.system}".lsfg-vk-ui
   ];
 
   # Define a user account. Don't forget to set a password with ‘passwd’.
@@ -80,6 +80,7 @@
       "podman"
       "cdrom"
       "wireshark"
+      "kvm" # for android studio
     ]; # Enable ‘sudo’ for the user.
     linger = true;
   };

devices/tuxedo/flake.lock

@@ -7,11 +7,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1760701190,
+        "lastModified": 1764110879,
-        "narHash": "sha256-y7UhnWlER8r776JsySqsbTUh2Txf7K30smfHlqdaIQw=",
+        "narHash": "sha256-xanUzIb0tf3kJ+PoOFmXEXV1jM3PjkDT/TQ5DYeNYRc=",
         "owner": "nix-community",
         "repo": "disko",
-        "rev": "3a9450b26e69dcb6f8de6e2b07b3fc1c288d85f5",
+        "rev": "aecba248f9a7d68c5d1ed15de2d1c8a4c994a3c5",
         "type": "github"
       },
       "original": {
@@ -27,16 +27,16 @@
         ]
       },
       "locked": {
-        "lastModified": 1758463745,
+        "lastModified": 1764177491,
-        "narHash": "sha256-uhzsV0Q0I9j2y/rfweWeGif5AWe0MGrgZ/3TjpDYdGA=",
+        "narHash": "sha256-dhX2abFWxeXab3Aad4Pg1xGtn9W84/qetNXfmYUwktw=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "3b955f5f0a942f9f60cdc9cacb7844335d0f21c3",
+        "rev": "2217780c39169a9c77915200137550c2ef0fa974",
         "type": "github"
       },
       "original": {
         "owner": "nix-community",
-        "ref": "release-25.05",
+        "ref": "release-25.11",
         "repo": "home-manager",
         "type": "github"
       }
@@ -48,11 +48,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1760846226,
+        "lastModified": 1763870992,
-        "narHash": "sha256-xmU8kAsRprJiTGBTaGrwmjBP3AMA9ltlrxHKFuy5JWc=",
+        "narHash": "sha256-NPyc76Wxmv/vAsXJ8F+/8fXECHYcv2YGSqdiSHp/F/A=",
         "owner": "nix-community",
         "repo": "nix-index-database",
-        "rev": "5024e1901239a76b7bf94a4cd27f3507e639d49e",
+        "rev": "d7423982c7a26586aa237d130b14c8b302c7a367",
         "type": "github"
       },
       "original": {
@@ -66,11 +66,11 @@
         "nixpkgs": "nixpkgs"
       },
       "locked": {
-        "lastModified": 1760925854,
+        "lastModified": 1764208554,
-        "narHash": "sha256-mUEWKL7IMA0gzZlP5V/C6bFU12PcQWs1J/5Ucwzp9wY=",
+        "narHash": "sha256-9cHI5OyIcTuaWYrgq3ng7W0q+wgX8II2fkqCHNot5jY=",
         "owner": "nix-community",
         "repo": "nix-vscode-extensions",
-        "rev": "ffbbd7f46ff61967e8ad010dc08e31385abbc483",
+        "rev": "8cd52edf9dea91d1610c50b494dc20636b61b862",
         "type": "github"
       },
       "original": {
@@ -97,11 +97,11 @@
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1760878510,
+        "lastModified": 1763966396,
-        "narHash": "sha256-K5Osef2qexezUfs0alLvZ7nQFTGS9DL2oTVsIXsqLgs=",
+        "narHash": "sha256-6eeL1YPcY1MV3DDStIDIdy/zZCDKgHdkCmsrLJFiZf0=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "5e2a59a5b1a82f89f2c7e598302a9cacebb72a67",
+        "rev": "5ae3b07d8d6527c42f17c876e404993199144b6a",
         "type": "github"
       },
       "original": {
@@ -113,16 +113,16 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1760862643,
+        "lastModified": 1764020296,
-        "narHash": "sha256-PXwG0TM7Ek87DNx4LbGWuD93PbFeKAJs4FfALtp7Wo0=",
+        "narHash": "sha256-6zddwDs2n+n01l+1TG6PlyokDdXzu/oBmEejcH5L5+A=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "33c6dca0c0cb31d6addcd34e90a63ad61826b28c",
+        "rev": "a320ce8e6e2cc6b4397eef214d202a50a4583829",
         "type": "github"
       },
       "original": {
         "owner": "nixos",
-        "ref": "nixos-25.05",
+        "ref": "nixos-25.11",
         "repo": "nixpkgs",
         "type": "github"
       }

devices/tuxedo/flake.nix

@@ -1,10 +1,10 @@
 {
   inputs = {
-    nixpkgs.url = "github:nixos/nixpkgs/nixos-25.05?shallow=1";
+    nixpkgs.url = "github:nixos/nixpkgs/nixos-25.11?shallow=1";
-    nixpkgs-unstable.url = "github:nixos/nixpkgs/nixos-unstable?shallow=1"; # use by inputs.nixpkgs-unstable.legacyPackages."${pkgs.system}".[package name]
+    nixpkgs-unstable.url = "github:nixos/nixpkgs/nixos-unstable?shallow=1"; # use by inputs.nixpkgs-unstable.legacyPackages."${pkgs.stdenv.hostPlatform.system}".[package name]
 
     home-manager = {
-      url = "github:nix-community/home-manager/release-25.05?shallow=1";
+      url = "github:nix-community/home-manager/release-25.11?shallow=1";
       inputs.nixpkgs.follows = "nixpkgs";
     };
 

devices/tuxedo/home.nix

@@ -1,4 +1,4 @@
-{ pkgs, config, ... }:
+{ pkgs, config, inputs, ... }:
 
 {
   imports = [
@@ -34,12 +34,14 @@
     teamspeak6-client
 
     # media
-    jellyfin-media-player
+    # TODO: disabled due to qt5-web-engine vulnerable https://github.com/NixOS/nixpkgs/pull/435067
+    # jellyfin-media-player
     haruna
 
     # misc
-    electrum
+    # TODO: uncomment when ecdsa is updated
-    syncthing
+    # https://github.com/NixOS/nixpkgs/pull/456881
+    # electrum
     dbeaver-bin
     ruffle
     popsicle
@@ -70,6 +72,14 @@
         screenshot-directory = "/mnt/HDD2/Pictures/";
       };
     };
+
+    topgrade = {
+      settings = {
+        misc = {
+          ignore_failures = [ "containers" ];
+        };
+      };
+    };
   };
 
   systemd.user = {

home-manager/base/terminal.nix

@@ -51,10 +51,14 @@ with lib;
         enableFishIntegration = true;
       };
 
+      delta = {
+        enable = true;
+        enableGitIntegration = true;
+      };
+
       git = {
         enable = true;
-        delta.enable = true;
+        settings = {
-        extraConfig = {
           credential = {
             helper = [ "cache --timeout 21600" "${pkgs.git-credential-manager}/bin/git-credential-manager" "${pkgs.git-credential-oauth}/bin/git-credential-oauth" ];
             credentialStore = "secretservice";
@@ -174,6 +178,24 @@ with lib;
         settings = mkMerge [{
           misc = {
             assume_yes = true;
+            disable = [
+              "android_studio"
+              "jetbrains_aqua"
+              "jetbrains_clion"
+              "jetbrains_datagrip"
+              "jetbrains_dataspell"
+              "jetbrains_gateway"
+              "jetbrains_goland"
+              "jetbrains_idea"
+              "jetbrains_mps"
+              "jetbrains_phpstorm"
+              "jetbrains_pycharm"
+              "jetbrains_rider"
+              "jetbrains_rubymine"
+              "jetbrains_rustrover"
+              "jetbrains_toolbox"
+              "jetbrains_webstorm"
+            ];
           };
         }
           (mkIf (nixUpdateLocation != null) {

home-manager/default.nix

@@ -1,4 +1,4 @@
-{ pkgs, inputs, lib, ... }:
+{ pkgs, lib, ... }:
 
 {
   imports = [
@@ -11,11 +11,15 @@
     thunderbird
     qbittorrent
     libreoffice-qt
-    inputs.nixpkgs-unstable.legacyPackages."${pkgs.system}".joplin-desktop
+    # 25.11 Can move to stable when https://github.com/NixOS/nixpkgs/pull/460058 gets backported
+    joplin-desktop
 
     # comms   
-    teamspeak_client
+    # TODO: disabled due to qt5-web-engine vulnerable https://github.com/NixOS/nixpkgs/pull/435067
+    # teamspeak3
+    teamspeak6-client
     discord
+    vesktop
 
     # media
     strawberry
@@ -31,6 +35,12 @@
     };
   };
 
+  xdg.configFile."capacitor/sysconfig.json".text = lib.generators.toJSON { } {
+    machine = "00000000-0000-0000-0000-000000000000";
+    signup = false;
+    telemetry = false;
+  };
+
   home.sessionVariables = {
     NIXOS_OZONE_WL = "1";
   };

home-manager/development/android.nix

@@ -0,0 +1,36 @@
+# { pkgs, ... }:
+
+# let
+#   androidEnv = pkgs.androidenv.override { licenseAccepted = true; };
+#   androidComp = (
+#     androidEnv.composeAndroidPackages {
+#       toolsVersion = null;
+#       includeEmulator = true;
+#       includeNDK = true;
+#       platformVersions = [
+#         "latest"
+#         "25"
+#       ];
+#       includeSystemImages = true;
+#       systemImageTypes = [
+#         "default"
+#       ];
+#       abiVersions = [
+#         "x86_64"
+#         "armeabi-v7a"
+#         "arm64-v8a"
+#       ];
+#     }
+#   );
+#   android-studio = (pkgs.android-studio.withSdk androidComp.androidsdk);
+# in
+# {
+#   home.sessionVariables = {
+#     ANDROID_HOME = "${androidComp.androidsdk}/libexec/android-sdk";
+#     ANDROID_SDK_ROOT = "${androidComp.androidsdk}/libexec/android-sdk";
+#     ANDROID_NDK_ROOT = "${androidComp.androidsdk}/libexec/android-sdk/ndk-bundle";
+#   };
+#   home.packages = [
+#     pkgs.android-studio
+#   ];
+# }

home-manager/development/default.nix

@@ -2,6 +2,7 @@
 
 {
   imports = [
+    # ./android.nix
     ./dotnet.nix
     ./games.nix
     ./helix.nix

home-manager/development/vscode.nix

@@ -3,17 +3,18 @@
 let
   openvsx = inputs.nix-vscode-extensions.extensions.x86_64-linux.open-vsx;
   vscode-marketplace = inputs.nix-vscode-extensions.extensions.x86_64-linux.vscode-marketplace;
+  resharper-code-version = "0.0.15";
 
   resharper-code = (pkgs.vscode-utils.buildVscodeMarketplaceExtension {
     mktplcRef = {
       name = "resharper-code";
-      version = "0.0.12";
+      version = resharper-code-version;
       publisher = "jetbrains";
     };
     vsix = builtins.fetchurl {
       name = "jetbrains.resharper-code.zip";
-      url = "https://download.jetbrains.com/product?code=VSCRS&latest&distribution=linuxX64&type=eap";
+      url = "https://download.jetbrains.com/product?code=VSCRS&latest&distribution=linuxX64&type=eap&version=${resharper-code-version}";
-      sha256 = "sha256:05zmr3r2yid8r5hdh1km7kfl3cwlsf9nnccigyzhs14j5k7q0kjc";
+      sha256 = "sha256:eef138c4fdd035031577f4c483c2155c4dd5ce91cfd1b9a2489c138aeb6cb99e";
     };
   }).overrideAttrs (old: {
     nativeBuildInputs = old.nativeBuildInputs ++ [ pkgs.makeBinaryWrapper ];

home-manager/firefox/firefox-profile.nix

@@ -61,8 +61,12 @@
     # browser links should be new tab
     "browser.link.open_newwindow.restriction" = 0;
 
-    # allow custom search enginers
+    # allow custom search engines
     "browser.urlbar.update2.engineAliasRefresh" = true;
+    # do not retrieve suggestions as you type https://blog.mozilla.org/en/firefox/better-search-suggestions/
+    "browser.urlbar.quicksuggest.online.enabled" = false;
+    # do not trim http
+    "browser.urlbar.trimURLs" = false;
 
     # force enable hardware accel
     "media.hardware-video-decoding.force-enabled" = true;
@@ -88,16 +92,13 @@
     # restore tabs on startup
     "browser.startup.page" = 3;
 
-    # do not trim http
-    "browser.urlbar.trimURLs" = false;
-
     # open in new tabs
     "browser.tabs.loadBookmarksInTabs" = true;
-    "browser.search.openintab" = true;
-    "browser.urlbar.openintab" = true;
 
     # AI
     "browser.ml.chat.page" = false;
+    # AI tab groups
+    "browser.tabs.groups.smart.userEnabled" = false;
 
     /* Arkenfox Begin */
 
@@ -176,12 +177,12 @@
     "browser.contentblocking.category" = "strict";
   };
   userChrome = ''
-    /* For old sidebar */
+    /* Remove old sidebar header */
     #sidebar-box[sidebarcommand="treestyletab_piro_sakura_ne_jp-sidebar-action"] #sidebar-header {
       display: none;
     }
 
-    /* Remove sidebar revamp */
+    /* Remove sidebar revamp header */
     #sidebar-panel-header {
       display: none;
     }

home-manager/gaming.nix

@@ -1,7 +1,7 @@
 { pkgs, inputs, ... }:
 
 let
-  pkgs_unstable = inputs.nixpkgs-unstable.legacyPackages."${pkgs.system}";
+  pkgs_unstable = inputs.nixpkgs-unstable.legacyPackages."${pkgs.stdenv.hostPlatform.system}";
 
   # https://simpler-website.pages.dev/html/2021/1/wine-environment-variables/#wineesync
   wine-wrapped = (pkgs.writeShellApplication {
@@ -72,9 +72,15 @@ in
   programs = {
     mangohud = {
       enable = true;
+      enableSessionWide = true;
       settings = {
         preset = 1;
       };
+      settingsPerApplication = {
+        mpv = {
+          no_display = true;
+        };
+      };
     };
   };
 }