Update to latest nixpkgs stable, and autorestart syncthing to prevent leaks

flake.lock

@@ -1949,11 +1949,11 @@
     },
     "nixpkgs-stable_2": {
       "locked": {
-        "lastModified": 1701952659,
-        "narHash": "sha256-TJv2srXt6fYPUjxgLAL0cy4nuf1OZD4KuA1TrCiQqg0=",
+        "lastModified": 1708831307,
+        "narHash": "sha256-0iL/DuGjiUeck1zEaL+aIe2WvA3/cVhp/SlmTcOZXH4=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "b4372c4924d9182034066c823df76d6eaf1f4ec4",
+        "rev": "5bf1cadb72ab4e77cb0b700dab76bcdaf88f706b",
         "type": "github"
       },
       "original": {
@@ -2045,11 +2045,11 @@
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1708475490,
-        "narHash": "sha256-g1v0TsWBQPX97ziznfJdWhgMyMGtoBFs102xSYO4syU=",
+        "lastModified": 1708807242,
+        "narHash": "sha256-sRTRkhMD4delO/hPxxi+XwLqPn8BuUq6nnj4JqLwOu0=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "0e74ca98a74bc7270d28838369593635a5db3260",
+        "rev": "73de017ef2d18a04ac4bfd0c02650007ccb31c2a",
         "type": "github"
       },
       "original": {
@@ -2274,11 +2274,11 @@
     },
     "nixpkgs_7": {
       "locked": {
-        "lastModified": 1701952659,
-        "narHash": "sha256-TJv2srXt6fYPUjxgLAL0cy4nuf1OZD4KuA1TrCiQqg0=",
+        "lastModified": 1708831307,
+        "narHash": "sha256-0iL/DuGjiUeck1zEaL+aIe2WvA3/cVhp/SlmTcOZXH4=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "b4372c4924d9182034066c823df76d6eaf1f4ec4",
+        "rev": "5bf1cadb72ab4e77cb0b700dab76bcdaf88f706b",
         "type": "github"
       },
       "original": {

home/global.nix

@@ -39,6 +39,10 @@ in
         inputs.neovim-nightly-overlay.overlay;
 
     config.allowUnfree = true;
+
+    config.permittedInsecurePackages = [
+      "electron-25.9.0"
+    ];
   };
   # }}}
   # {{{ Enable the home-manager and git clis

hosts/nixos/common/optional/services/syncthing.nix

@@ -27,6 +27,9 @@ in
     };
   };
 
+  # Syncthing seems to leak memory, so we want to restart it daily.
+  systemd.services.syncthing.serviceConfig.RuntimeMaxSec = "1d";
+
   # I'm not sure this is needed anymore, I just know I got some ownership errors at some point.
   systemd.tmpfiles.rules = [ "d ${dataDir} - ${user} ${group} -" ];
 }