Merge master into staging-next

  Refer to the [GNOME release notes](https://release.gnome.org/49/) for more details.

- FirewallD support has been added. It can be configured both as a standalone service (through `services.firewalld`), and as a backend to the existing `networking.firewall` options.

- `networking.firewall` now has a `backend` option for choosing which backend to use.

## New Modules {#sec-release-25.11-new-modules}

<!-- To avoid merge conflicts, consider adding your item at an arbitrary place in the list instead. -->

- [umami](https://github.com/umami-software/umami), a simple, fast, privacy-focused alternative to Google Analytics. Available with [services.umami](#opt-services.umami.enable).

- [FirewallD](https://firewalld.org/), a firewall daemon with D-Bus interface providing a dynamic firewall. Available as [services.firewalld](#opt-services.firewalld.enable) and a [networking.firewall.backend](#opt-networking.firewall.backend).

- [FileBrowser](https://filebrowser.org/), a web application for managing and sharing files. Available as [services.filebrowser](#opt-services.filebrowser.enable).

- Options under [networking.getaddrinfo](#opt-networking.getaddrinfo.enable) are now allowed to declaratively configure address selection and sorting behavior of `getaddrinfo` in dual-stack networks.

  imports = [

    ./disk.nix

    ./firmware.nix

    ./graphics

    ./keyboard.nix

    ./networking

    ./system.nix

    '';

  };

  config = {

  config = lib.mkIf (config.hardware.facter.reportPath != null) {

    boot.initrd.availableKernelModules = config.hardware.facter.detected.boot.disk.kernelModules;

  };

}

  hasIntelCpu = facterLib.hasIntelCpu report;

in

{

  config = lib.mkIf isBaremetal {

  config = lib.mkIf (config.hardware.facter.reportPath != null && isBaremetal) {

    # none (e.g. bare-metal)

    # provide firmware for devices that might not have been detected by nixos-facter

    hardware.enableRedistributableFirmware = lib.mkDefault true;

{ lib, config, ... }:

let

  facterLib = import ../lib.nix lib;

  cfg = config.hardware.facter.detected.graphics.amd;

in

{

  options.hardware.facter.detected.graphics = {

    amd.enable = lib.mkEnableOption "Enable the AMD Graphics module" // {

      default = builtins.elem "amdgpu" (

        facterLib.collectDrivers (config.hardware.facter.report.hardware.graphics_card or [ ])

      );

      defaultText = "hardware dependent";

    };

  };

  config = lib.mkIf (config.hardware.facter.reportPath != null && cfg.enable) {

    services.xserver.videoDrivers = [ "modesetting" ];

  };

}