25.11

modules/base/default.nix

@@ -173,13 +173,13 @@ in
             tcpdump
             testssl
             dnsutils
-            curlHTTP3
+            curl
             bandwhich
             bridge-utils
             speedtest-cli
             nix-output-monitor
 
-            config.boot.kernelPackages.perf
+            perf
             config.boot.kernelPackages.vm-tools
           ]
         ];

modules/base/sshd/default.nix

@@ -1,6 +1,5 @@
 {
   lib,
-  config,
   myData,
   ...
 }:

modules/profiles/desktop/default.nix

@@ -71,10 +71,10 @@ in
         package = pkgs.pulseaudioFull;
       };
 
-      logind = {
-        powerKey = "suspend";
-        powerKeyLongPress = "poweroff";
-        lidSwitchExternalPower = "ignore";
+      logind.settings.Login = {
+        HandlePowerKey = "suspend";
+        HandlePowerKeyLongPress = "poweroff";
+        HandleLidSwitchExternalPower = "ignore";
       };
 
       avahi = {
@@ -224,7 +224,7 @@ in
       qalculate-qt # qalculate
       google-chrome
       wirelesstools
-      poppler_utils
+      poppler-utils
       squashfsTools
       joplin-desktop
       aspellDicts.en
@@ -238,7 +238,7 @@ in
       netsurf-browser
       man-pages-posix
       gnome-calculator
-      libsForQt5.okular
+      kdePackages.okular
       nvtopPackages.amd
       age-plugin-yubikey
       nvtopPackages.intel
@@ -330,11 +330,11 @@ in
         gtk = {
           enable = true;
           theme = {
-            package = pkgs.plasma5Packages.breeze-gtk;
+            package = pkgs.kdePackages.breeze-gtk;
             name = "Breeze";
           };
           cursorTheme = {
-            package = pkgs.plasma5Packages.breeze-icons;
+            package = pkgs.kdePackages.breeze-icons;
             name = "Breeze_Snow";
           };
           iconTheme = {

modules/profiles/desktop/plasma.nix

@@ -67,7 +67,7 @@ let
     attrs:
     let
       args = configToArgs attrs;
-      argToCommand = arg: "${pkgs.plasma5Packages.kconfig}/bin/kwriteconfig5 ${arg}";
+      argToCommand = arg: "${pkgs.kdePackages.kconfig}/bin/kwriteconfig6 ${arg}";
       commands = builtins.map argToCommand args;
     in
     lib.strings.concatStringsSep "\n" commands;

modules/profiles/workstation/default.nix

@@ -66,7 +66,7 @@ in
         wasmtime
         bpftrace
         hyperfine
-        sloccount
+        loccount
         tesseract
         postgresql
         gcc_latest

modules/profiles/xfce4/default.nix

@@ -1,6 +1,5 @@
 {
   lib,
-  config,
   ...
 }:
 {

modules/services/frigate/default.nix

@@ -126,11 +126,15 @@ in
             days = 2;
             mode = "all";
           };
-          events = {
-            pre_capture = 5;
-            post_capture = 5;
+          alerts = {
             retain = {
-              default = 5;
+              days = 5;
+              mode = "motion";
+            };
+          };
+          detections = {
+            retain = {
+              days = 5;
               mode = "motion";
             };
           };

modules/services/immich/default.nix

@@ -42,6 +42,13 @@ in
       enable = true;
       port = myData.ports.immich-server;
 
+      # Database configuration for NixOS 25.11
+      database = {
+        enable = true;
+        enableVectorChord = true; # New vector search backend (recommended)
+        enableVectors = false; # Disable deprecated pgvecto-rs
+      };
+
       # N.B. as of 24.11 default redis socket has permissions incompatible
       # with how immich is configured.
       # If immich can't find/connect to redis, it will fail on boot, so it's

modules/services/postfix/default.nix

@@ -17,22 +17,22 @@
     services.postfix = {
       enable = true;
       enableSmtp = true;
-      networks = [
-        "127.0.0.1/8"
-        "[::ffff:127.0.0.0]/104"
-        "[::1]/128"
-        myData.subnets.tailscale.cidr
-      ];
-      hostname = "relay.jakstys.lt";
-      extraConfig = ''
-        mydestination =
-        smtpd_relay_restrictions = permit_mynetworks, reject
-        smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination
-        smtp_tls_security_level = may
-        smtpd_helo_required = yes
-        disable_vrfy_command = yes
-        header_size_limit = 4096000
-      '';
+      settings.main = {
+        mynetworks = [
+          "127.0.0.1/8"
+          "[::ffff:127.0.0.0]/104"
+          "[::1]/128"
+          myData.subnets.tailscale.cidr
+        ];
+        myhostname = "relay.jakstys.lt";
+        mydestination = "";
+        smtpd_relay_restrictions = "permit_mynetworks, reject";
+        smtpd_recipient_restrictions = "permit_mynetworks, reject_unauth_destination";
+        smtp_tls_security_level = "may";
+        smtpd_helo_required = "yes";
+        disable_vrfy_command = "yes";
+        header_size_limit = "4096000";
+      };
     };
   };
 }