feat: configure nil_ls

flake.lock

@@ -720,11 +720,11 @@
     },
     "master": {
       "locked": {
-        "lastModified": 1719764577,
-        "narHash": "sha256-304HNA/XvmyfD7JZfpqF4dEBnbUYci/gMZvDThXmYkE=",
+        "lastModified": 1719834384,
+        "narHash": "sha256-M6Vr7LbYeesXrG3hjAExzIfYFxrncrs1dpnp7zdeUN4=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "19581e2ce8bc43f898ef724f8072ebf62bebb325",
+        "rev": "c08bd9add4732d87fde747e15b8fc053dfd1234b",
         "type": "github"
       },
       "original": {

modules/programs/hyprland/_config.nix

@@ -226,7 +226,7 @@ in
 
   # Lid open/close
   bindl=,switch:on:Lid Switch,exec,monitors="$(hyprctl monitors | grep -c '^Monitor')" && hyprctl keyword monitor "eDP-1, disable" && [ "$monitors" = 1 ] && loginctl lock-session
-  bindl=,switch:off:Lid Switch,exec, hyprctl keyword monitor "eDP-1, prefered, auto"
+  bindl=,switch:off:Lid Switch,exec, hyprctl keyword monitor "eDP-1, preferred, auto"
 
   # Extra Config
   ${cfg.extraConfig}

modules/programs/nvim/plugins/lua/nvim-lspconfig.lua

@@ -49,10 +49,10 @@ local on_attach_def = function(client, bufnr)
         l = {
           function()
             lsp_lines.toggle()
-            if vim.diagnostic.is_disabled() then
-              vim.diagnostic.enable()
-            else
+            if vim.diagnostic.is_enabled() then
               vim.diagnostic.disable()
+            else
+              vim.diagnostic.enable()
             end
           end,
           "LSP lines",
@@ -123,7 +123,6 @@ local servers = {
   "bashls",
   "gleam",
   "gopls",
-  "nil_ls",
   "pylsp",
   "ruff_lsp",
   "templ",
@@ -133,6 +132,16 @@ for _, lsp in ipairs(servers) do
   lspconfig_setup(lsp, {})
 end
 
+lspconfig_setup("nil_ls", {
+  settings = {
+    flake = {
+      autoArchive = true,
+      autoEvalInputs = true,
+      nixpkgsInputName = "nixpkgs",
+    },
+  },
+})
+
 lspconfig_setup("nixd", {
   settings = {
     nixd = {

modules/security/default.nix

@@ -1,5 +1,6 @@
 { config
 , lib
+, pkgs
 , ...
 }: {
   ## System security tweaks
@@ -69,6 +70,7 @@
 
   # SSH
   services.openssh = {
+    package = pkgs.master.openssh; # HACK: to fix CVE-2024-6387
     settings = {
       # Disable ssh password login
       PasswordAuthentication = lib.mkDefault false;