flake: update to 25.11. Breaks worf/darwin.

hosts/worf/configuration.nix

@@ -111,13 +111,6 @@
     };
 
 
-    # firewall settings
-    alf = {
-      # 0 = disabled 1 = enabled 2 = blocks all connections except for essential services
-      globalstate = 1;
-      loggingenabled = 0;
-    };
-
     # dock settings
     dock = {
       autohide = true;
@@ -133,12 +126,16 @@
     };
   };
 
+  # firewall settings
+  networking.applicationFirewall = {
+    enable = true;
+    blockAllIncoming = true;
+  };
+
   system.keyboard = {
     enableKeyMapping = true;
     remapCapsLockToControl = true;
   };
 
-  # nix.package = pkgs.nix;
-
   system.stateVersion = 5;
 }