diff --git a/.gitea/workflows/flake.yaml b/.gitea/workflows/flake.yaml
index 84fa6cf..1667866 100644
--- a/.gitea/workflows/flake.yaml
+++ b/.gitea/workflows/flake.yaml
@@ -11,14 +11,16 @@ jobs:
   flake:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
       - name: Prepare for Nix installation
         run: |
           apt-get update
           apt-get install -y sudo
       - uses: cachix/install-nix-action@v26
       - name: lint
-        run: nix fmt
+        run: |
+          nix fmt
+          git diff --exit-code
       - name: flake check
         run: nix flake check --all-systems
         timeout-minutes: 10
diff --git a/hosts/be.lt.ts.hillion.co.uk/hardware-configuration.nix b/hosts/be.lt.ts.hillion.co.uk/hardware-configuration.nix
index 77f1060..d1be912 100644
--- a/hosts/be.lt.ts.hillion.co.uk/hardware-configuration.nix
+++ b/hosts/be.lt.ts.hillion.co.uk/hardware-configuration.nix
@@ -5,7 +5,8 @@
 
 {
   imports =
-    [ (modulesPath + "/installer/scan/not-detected.nix")
+    [
+      (modulesPath + "/installer/scan/not-detected.nix")
     ];
 
   boot.initrd.availableKernelModules = [ "xhci_pci" "nvme" "usbhid" "usb_storage" "sd_mod" ];
@@ -14,18 +15,21 @@
   boot.extraModulePackages = [ ];
 
   fileSystems."/" =
-    { device = "tmpfs";
+    {
+      device = "tmpfs";
       fsType = "tmpfs";
       options = [ "mode=0755" ];
     };
 
   fileSystems."/boot" =
-    { device = "/dev/disk/by-uuid/D184-A79B";
+    {
+      device = "/dev/disk/by-uuid/D184-A79B";
       fsType = "vfat";
     };
 
   fileSystems."/nix" =
-    { device = "/dev/disk/by-uuid/3fdc1b00-28d5-41dd-b8e0-fa6b1217f6eb";
+    {
+      device = "/dev/disk/by-uuid/3fdc1b00-28d5-41dd-b8e0-fa6b1217f6eb";
       fsType = "btrfs";
       options = [ "subvol=nix" ];
     };
@@ -33,7 +37,8 @@
   boot.initrd.luks.devices."root".device = "/dev/disk/by-uuid/c8ffa91a-5152-4d84-8995-01232fd5acd6";
 
   fileSystems."/data" =
-    { device = "/dev/disk/by-uuid/3fdc1b00-28d5-41dd-b8e0-fa6b1217f6eb";
+    {
+      device = "/dev/disk/by-uuid/3fdc1b00-28d5-41dd-b8e0-fa6b1217f6eb";
       fsType = "btrfs";
       options = [ "subvol=data" ];
     };