Release 25.11 ("Xantusia", 2025.11/??)

Highlights

Secure boot support can now be enabled for the Limine bootloader through {option}boot.loader.limine.secureBoot.enable. Bootloader install script signs the bootloader, then kernels are hashed during system rebuild and written to a config. This allows Limine to boot only the kernels installed through NixOS system.

gtklock, a GTK-based lockscreen for Wayland. Available as programs.gtklock.
Chrysalis, a graphical configurator for Kaleidoscope-powered keyboards. Available as programs.chrysalis.
Pi-hole, a DNS sinkhole for advertisements based on Dnsmasq. Available as services.pihole-ftl, and services.pihole-web for the web GUI and API.
FileBrowser, a web application for managing and sharing files. Available as services.filebrowser.
LACT, a GPU monitoring and configuration tool, can now be enabled through services.lact.enable. Note that for LACT to work properly on AMD GPU systems, you need to enable hardware.amdgpu.overdrive.enable.
Broadcast Box, a WebRTC broadcast server. Available as services.broadcast-box.
Draupnir, a Matrix moderation bot. Available as services.draupnir.
SuiteNumérique Docs, a collaborative note taking, wiki and documentation web platform and alternative to Notion or Outline. Available as services.lasuite-docs.

dwl, a compact, hackable compositor for Wayland based on wlroots. Available as programs.dwl.

The services.polipo module has been removed as polipo is unmaintained and archived upstream.
The Pocket ID module ([services.pocket-id][#opt-services.pocket-id.enable]) and package (pocket-id) has been updated to 1.0.0. Some environment variables have been changed or removed, see the migration guide.
renovate was updated to v40. See the upstream release notes for breaking changes.

services.clamsmtp is unmaintained and was removed from Nixpkgs.
services.dnscrypt-proxy2 gains a package option to specify dnscrypt-proxy package to use.
amdgpu kernel driver overdrive mode can now be enabled by setting hardware.amdgpu.overdrive.enable and customized through hardware.amdgpu.overdrive.ppfeaturemask. This allows for fine-grained control over the GPU's performance and maybe required by overclocking softwares like Corectrl and Lact. These new options replace old options such as {option}programs.corectrl.gpuOverclock.enable and {option}programs.tuxclocker.enableAMD.