feat: upgrade to NixOS 25.11

- Update nixpkgs and home-manager to 25.11 release
- Update flake dependencies
- Migrate git config to settings attribute
- Replace deprecated packages (mpc-cli -> mpc, vaapiIntel -> intel-vaapi-driver)
- Fix system references to use stdenv.hostPlatform.system
- Add crowdsec module overrides
- Remove android-udev-rules from fuchsia
- Configure SSH with enableDefaultConfig = false
- Update zsh dotDir to use config.xdg.configHome

nixos/common/users/sajenim/xmonad/default.nix

@@ -15,7 +15,7 @@
       # Picture viewer
       pkgs.xfce.ristretto
       # Install our XMonad and Xmobar configuration
-      inputs.xmonad-config.packages.${pkgs.system}.default
+      inputs.xmonad-config.packages.${pkgs.stdenv.hostPlatform.system}.default
     ];
   };
 

nixos/fuchsia/services/udev/default.nix

@@ -1,7 +1,6 @@
 {pkgs, ...}: {
   # Enable necessary udev rules.
   services.udev.packages = with pkgs; [
-    android-udev-rules
     openrgb
     unstable.qmk-udev-rules
   ];

nixos/viridian/hardware-configuration.nix

@@ -39,10 +39,10 @@
     enable = true;
     extraPackages = with pkgs; [
       intel-media-driver
-      vaapiIntel
-      vaapiVdpau
       libvdpau-va-gl
+      libva-vdpau-driver
       intel-compute-runtime
+      intel-vaapi-driver
     ];
   };
 

nixos/viridian/services/crowdsec/default.nix

@@ -15,6 +15,11 @@ in {
     inputs.crowdsec.overlays.default
   ];
 
+  disabledModules = [
+    "services/security/crowdsec.nix"
+    "services/security/crowdsec-firewall-bouncer.nix"
+  ];
+
   age.secrets.enrollment-key = {
     rekeyFile = ./enrollment_key.age;
     owner = "crowdsec";