update zen browser to 1.19.8b

flake.lock

@@ -50,11 +50,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1772408722,
+        "lastModified": 1775087534,
-        "narHash": "sha256-rHuJtdcOjK7rAHpHphUb1iCvgkU3GpfvicLMwwnfMT0=",
+        "narHash": "sha256-91qqW8lhL7TLwgQWijoGBbiD4t7/q75KTi8NxjVmSmA=",
         "owner": "hercules-ci",
         "repo": "flake-parts",
-        "rev": "f20dc5d9b8027381c474144ecabc9034d6a839a3",
+        "rev": "3107b77cd68437b9a76194f0f7f9c55f2329ca5b",
         "type": "github"
       },
       "original": {
@@ -185,11 +185,11 @@
     },
     "nixpkgs_3": {
       "locked": {
-        "lastModified": 1774106199,
+        "lastModified": 1775423009,
-        "narHash": "sha256-US5Tda2sKmjrg2lNHQL3jRQ6p96cgfWh3J1QBliQ8Ws=",
+        "narHash": "sha256-vPKLpjhIVWdDrfiUM8atW6YkIggCEKdSAlJPzzhkQlw=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "6c9a78c09ff4d6c21d0319114873508a6ec01655",
+        "rev": "68d8aa3d661f0e6bd5862291b5bb263b2a6595c9",
         "type": "github"
       },
       "original": {

modules/fonts.nix

@@ -1,10 +1,11 @@
-{ inputs, ... }: {
+{...}: {
-	flake.nixosModules.fonts = {pkgs, ...}: {
+  flake.nixosModules.fonts = {pkgs, ...}: {
-		fonts.packages = with pkgs; [
+    fonts.packages = with pkgs; [
-			nerd-fonts.iosevka-term-slab
+      nerd-fonts.iosevka-term-slab
-			nerd-fonts.iosevka
+      nerd-fonts.iosevka
-			nerd-fonts.fira-mono
+      nerd-fonts.fira-mono
-			nerd-fonts.fira-code
+      nerd-fonts.fira-code
-		];
+      nerd-fonts.proggy-clean-tt
-	};
+    ];
+  };
 }

modules/hosts/nixos.nix

@@ -32,7 +32,18 @@ in {
     boot.kernelPackages = pkgs.linuxPackages_latest;
 
     # Custom EDID override for Samsung 240Hz on DP-1
-    boot.kernelParams = ["drm.edid_firmware=DP-1:edid/g80.bin"];
+    # Extreme mt7921e fallback: disable PCIe ASPM globally
+    boot.kernelParams = [
+      "drm.edid_firmware=DP-1:edid/g80.bin"
+      "pcie_aspm=off"
+    ];
+
+    # mt7921e stability tweaks
+    boot.extraModprobeConfig = ''
+      options mt7921e disable_aspm=Y
+      options mt7921e disable_clc=Y
+    '';
+
     hardware.firmware = [
       (pkgs.runCommand "g80-edid-firmware" {} ''
         install -Dm444 ${../assets/edid/g80.bin} $out/lib/firmware/edid/g80.bin
@@ -46,6 +57,21 @@ in {
     networking.networkmanager = {
       enable = true;
       wifi.powersave = false;
+      settings.device."wifi.scan-rand-mac-address" = "no";
+    };
+
+    # Work around mt7921e getting stuck after suspend/resume
+    environment.etc."systemd/system-sleep/99-mt7921e-reset" = {
+      text = ''
+        #!/bin/sh
+        case "$1" in
+          post)
+            ${pkgs.kmod}/bin/modprobe -r mt7921e || true
+            ${pkgs.kmod}/bin/modprobe mt7921e
+            ;;
+        esac
+      '';
+      mode = "0755";
     };
 
     # LocalSend
@@ -135,8 +161,14 @@ in {
     # Allow unfree
     nixpkgs.config.allowUnfree = true;
 
-    # Enable flakes
+    # Use Lix as the system Nix implementation
-    nix.settings.experimental-features = ["nix-command" "flakes"];
+    nix.package = pkgs.lixPackageSets.stable.lix;
+
+    # Enable flakes + restrict who can submit builds to the daemon
+    nix.settings = {
+      experimental-features = ["nix-command" "flakes"];
+      allowed-users = ["root" flakeConfig.username];
+    };
 
     # Auto-unlock gnome-keyring on login
     security.pam.services.login.enableGnomeKeyring = true;

modules/packages.nix

@@ -6,6 +6,7 @@
       nerdfetch
       libnotify
       alacritty
+      foot
       fzf
       autojump
       yazi
@@ -29,6 +30,9 @@
       jjui
       bat
       localsend
+      # postman
+      bruno
+      bruno-cli
     ];
 
     systemd.user.services.handy = {

modules/pkgs/zen-browser.nix

@@ -1,11 +1,11 @@
 {lib, ...}: {
   perSystem = {pkgs, ...}: let
     pname = "zen-browser";
-    version = "1.19.6b";
+    version = "1.19.8b";
 
     src = pkgs.fetchurl {
       url = "https://github.com/zen-browser/desktop/releases/download/${version}/zen-x86_64.AppImage";
-      hash = "sha256-rtY0P3IJ+Du63RfwVnWbhAJHyw/zHKUFXJbDRCyryoY=";
+      hash = "sha256-pKhA75haGSo53WpZsjQl5Ja9m6R/utm6cdbYag7bQDQ=";
     };
 
     appimageContents = pkgs.appimageTools.extract {inherit pname version src;};