From a51a6e9add36f7735a8a022e9bc59b9da1d869ff Mon Sep 17 00:00:00 2001
From: prescientmoon <git@moonythm.dev>
Date: Wed, 28 Feb 2024 07:16:41 +0100
Subject: [PATCH] Update to latest nixpkgs stable, and autorestart syncthing to
 prevent leaks

---
 flake.lock                                     | 18 +++++++++---------
 home/global.nix                                |  4 ++++
 .../common/optional/services/syncthing.nix     |  3 +++
 3 files changed, 16 insertions(+), 9 deletions(-)

diff --git a/flake.lock b/flake.lock
index d3652e6..0fde9a6 100644
--- a/flake.lock
+++ b/flake.lock
@@ -1949,11 +1949,11 @@
     },
     "nixpkgs-stable_2": {
       "locked": {
-        "lastModified": 1701952659,
-        "narHash": "sha256-TJv2srXt6fYPUjxgLAL0cy4nuf1OZD4KuA1TrCiQqg0=",
+        "lastModified": 1708831307,
+        "narHash": "sha256-0iL/DuGjiUeck1zEaL+aIe2WvA3/cVhp/SlmTcOZXH4=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "b4372c4924d9182034066c823df76d6eaf1f4ec4",
+        "rev": "5bf1cadb72ab4e77cb0b700dab76bcdaf88f706b",
         "type": "github"
       },
       "original": {
@@ -2045,11 +2045,11 @@
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1708475490,
-        "narHash": "sha256-g1v0TsWBQPX97ziznfJdWhgMyMGtoBFs102xSYO4syU=",
+        "lastModified": 1708807242,
+        "narHash": "sha256-sRTRkhMD4delO/hPxxi+XwLqPn8BuUq6nnj4JqLwOu0=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "0e74ca98a74bc7270d28838369593635a5db3260",
+        "rev": "73de017ef2d18a04ac4bfd0c02650007ccb31c2a",
         "type": "github"
       },
       "original": {
@@ -2274,11 +2274,11 @@
     },
     "nixpkgs_7": {
       "locked": {
-        "lastModified": 1701952659,
-        "narHash": "sha256-TJv2srXt6fYPUjxgLAL0cy4nuf1OZD4KuA1TrCiQqg0=",
+        "lastModified": 1708831307,
+        "narHash": "sha256-0iL/DuGjiUeck1zEaL+aIe2WvA3/cVhp/SlmTcOZXH4=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "b4372c4924d9182034066c823df76d6eaf1f4ec4",
+        "rev": "5bf1cadb72ab4e77cb0b700dab76bcdaf88f706b",
         "type": "github"
       },
       "original": {
diff --git a/home/global.nix b/home/global.nix
index a84a6ea..4f99f9b 100644
--- a/home/global.nix
+++ b/home/global.nix
@@ -39,6 +39,10 @@ in
         inputs.neovim-nightly-overlay.overlay;
 
     config.allowUnfree = true;
+
+    config.permittedInsecurePackages = [
+      "electron-25.9.0"
+    ];
   };
   # }}}
   # {{{ Enable the home-manager and git clis
diff --git a/hosts/nixos/common/optional/services/syncthing.nix b/hosts/nixos/common/optional/services/syncthing.nix
index 4be9fc8..b4eb9ed 100644
--- a/hosts/nixos/common/optional/services/syncthing.nix
+++ b/hosts/nixos/common/optional/services/syncthing.nix
@@ -27,6 +27,9 @@ in
     };
   };
 
+  # Syncthing seems to leak memory, so we want to restart it daily.
+  systemd.services.syncthing.serviceConfig.RuntimeMaxSec = "1d";
+
   # I'm not sure this is needed anymore, I just know I got some ownership errors at some point.
   systemd.tmpfiles.rules = [ "d ${dataDir} - ${user} ${group} -" ];
 }