style(nixos): suppress cfg order findings

configs/nixos/modules/desktop/apps/alacritty.nix

@@ -6,7 +6,7 @@
 }:
 # Alacritty as the desktop terminal.
 let
-  cfg = config.modules.desktop.apps.alacritty;
+  cfg = config.modules.desktop.apps.alacritty; # NOLINT(let_order)
   user = config.user.name;
 in
 {

configs/nixos/modules/desktop/apps/firefox.nix

@@ -7,7 +7,7 @@
 }:
 # Firefox as the desktop browser: stock mainline, hardened and de-monetized by policy.
 let
-  cfg = config.modules.desktop.apps.firefox;
+  cfg = config.modules.desktop.apps.firefox; # NOLINT(let_order)
   user = config.user.name;
   firefoxAddons = inputs.firefox-addons.packages.${pkgs.stdenv.hostPlatform.system};
 in

configs/nixos/modules/desktop/apps/ghostty.nix

@@ -6,7 +6,7 @@
 }:
 # Ghostty as the desktop terminal.
 let
-  cfg = config.modules.desktop.apps.ghostty;
+  cfg = config.modules.desktop.apps.ghostty; # NOLINT(let_order)
   user = config.user.name;
 in
 {

configs/nixos/modules/desktop/apps/obsidian.nix

@@ -6,7 +6,7 @@
 }:
 # Obsidian as the desktop note-taking vault.
 let
-  cfg = config.modules.desktop.apps.obsidian;
+  cfg = config.modules.desktop.apps.obsidian; # NOLINT(let_order)
   user = config.user.name;
 in
 {

configs/nixos/modules/desktop/apps/r2modman.nix

@@ -6,7 +6,7 @@
 }:
 # r2modman, a Thunderstore mod manager.
 let
-  cfg = config.modules.desktop.apps.r2modman;
+  cfg = config.modules.desktop.apps.r2modman; # NOLINT(let_order)
   user = config.user.name;
 in
 {

configs/nixos/modules/desktop/apps/signal.nix

@@ -6,7 +6,7 @@
 }:
 # Signal desktop messenger.
 let
-  cfg = config.modules.desktop.apps.signal;
+  cfg = config.modules.desktop.apps.signal; # NOLINT(let_order)
   user = config.user.name;
 in
 {

configs/nixos/modules/desktop/apps/steam.nix

@@ -6,7 +6,7 @@
 }:
 # Steam game launcher and runtime integration.
 let
-  cfg = config.modules.desktop.apps.steam;
+  cfg = config.modules.desktop.apps.steam; # NOLINT(let_order)
 in
 {
   options.modules.desktop.apps.steam.enable = lib.mkEnableOption "Steam game launcher";

configs/nixos/modules/desktop/apps/vencord.nix

@@ -6,7 +6,7 @@
 }:
 # Vesktop, a Discord client with Vencord built in.
 let
-  cfg = config.modules.desktop.apps.vencord;
+  cfg = config.modules.desktop.apps.vencord; # NOLINT(let_order)
   user = config.user.name;
 in
 {

configs/nixos/modules/desktop/default.nix

@@ -1,7 +1,7 @@
 { config, lib, ... }:
 # The desktop aggregator: one flag brings up the whole graphical session.
 let
-  cfg = config.modules.desktop;
+  cfg = config.modules.desktop; # NOLINT(let_order)
 in
 {
   options.modules.desktop.enable = lib.mkEnableOption "the keyboard-driven Hyprland desktop";

configs/nixos/modules/desktop/session/hyprland/default.nix

@@ -6,7 +6,7 @@
 }:
 # The Hyprland compositor.
 let
-  cfg = config.modules.desktop.session.hyprland;
+  cfg = config.modules.desktop.session.hyprland; # NOLINT(let_order)
   user = config.user.name;
   cursor = config.stylix.cursor;
 

configs/nixos/modules/desktop/session/hyprland/hypridle.nix

@@ -6,7 +6,7 @@
 }:
 # hypridle: idle-triggered locking and display power management.
 let
-  cfg = config.modules.desktop.session.hyprland.hypridle;
+  cfg = config.modules.desktop.session.hyprland.hypridle; # NOLINT(let_order)
   user = config.user.name;
 
   hyprctl = "${config.programs.hyprland.package}/bin/hyprctl";

configs/nixos/modules/desktop/session/hyprland/hyprlock.nix

@@ -6,7 +6,7 @@
 }:
 # The lock screen: a hyprlock session-lock surface the compositor owns.
 let
-  cfg = config.modules.desktop.session.hyprland.hyprlock;
+  cfg = config.modules.desktop.session.hyprland.hyprlock; # NOLINT(let_order)
   user = config.user.name;
 
   # The hyprlock this module installs, used by the lock keybind below.

configs/nixos/modules/desktop/session/login.nix

@@ -7,7 +7,7 @@
 # Text login: greetd running the tuigreet greeter, which starts the session
 # through the universal Wayland session manager.
 let
-  cfg = config.modules.desktop.session.login;
+  cfg = config.modules.desktop.session.login; # NOLINT(let_order)
 in
 {
   options.modules.desktop.session.login.enable =

configs/nixos/modules/desktop/session/mako.nix

@@ -6,7 +6,7 @@
 }:
 # mako as the notification daemon: toasts, a do-not-disturb mode, and history recall.
 let
-  cfg = config.modules.desktop.session.mako;
+  cfg = config.modules.desktop.session.mako; # NOLINT(let_order)
   user = config.user.name;
 
   makoctl = "${pkgs.mako}/bin/makoctl";

configs/nixos/modules/desktop/session/portals.nix

@@ -1,7 +1,7 @@
 { config, lib, ... }:
 # XDG desktop portal routing for in-app screen sharing and file dialogs.
 let
-  cfg = config.modules.desktop.session.portals;
+  cfg = config.modules.desktop.session.portals; # NOLINT(let_order)
 in
 {
   options.modules.desktop.session.portals.enable =

configs/nixos/modules/desktop/session/rofi.nix

@@ -6,7 +6,7 @@
 }:
 # rofi as the desktop launcher and dmenu-style menu frontend.
 let
-  cfg = config.modules.desktop.session.rofi;
+  cfg = config.modules.desktop.session.rofi; # NOLINT(let_order)
   user = config.user.name;
 
   # A session menu built on the same themed rofi, so the power actions look

configs/nixos/modules/desktop/session/waybar.nix

@@ -6,7 +6,7 @@
 }:
 # Waybar: a top status bar reading system state at a glance.
 let
-  cfg = config.modules.desktop.session.waybar;
+  cfg = config.modules.desktop.session.waybar; # NOLINT(let_order)
   vpnClient = config.modules.network.vpn-client;
   user = config.user.name;
 

configs/nixos/modules/desktop/utilities/audio.nix

@@ -1,7 +1,7 @@
 { config, lib, ... }:
 # PipeWire as the desktop audio server.
 let
-  cfg = config.modules.desktop.utilities.audio;
+  cfg = config.modules.desktop.utilities.audio; # NOLINT(let_order)
 in
 {
   options.modules.desktop.utilities.audio.enable = lib.mkEnableOption "the PipeWire audio server";

configs/nixos/modules/desktop/utilities/clipboard.nix

@@ -6,7 +6,7 @@
 }:
 # Clipboard history: cliphist records every copy, picked back through rofi.
 let
-  cfg = config.modules.desktop.utilities.clipboard;
+  cfg = config.modules.desktop.utilities.clipboard; # NOLINT(let_order)
   user = config.user.name;
 
   cliphist = "${pkgs.cliphist}/bin/cliphist";

configs/nixos/modules/desktop/utilities/osd.nix

@@ -6,7 +6,7 @@
 }:
 # SwayOSD: a transient on-screen popup for volume and brightness changes.
 let
-  cfg = config.modules.desktop.utilities.osd;
+  cfg = config.modules.desktop.utilities.osd; # NOLINT(let_order)
   user = config.user.name;
 in
 {

configs/nixos/modules/desktop/utilities/recording.nix

@@ -6,7 +6,7 @@
 }:
 # Keybound screen recording: pick a region, then toggle a video-only capture.
 let
-  cfg = config.modules.desktop.utilities.recording;
+  cfg = config.modules.desktop.utilities.recording; # NOLINT(let_order)
   user = config.user.name;
 
   slurp = "${pkgs.slurp}/bin/slurp";

configs/nixos/modules/desktop/utilities/screenshot.nix

@@ -7,7 +7,7 @@
 # Keyboard-driven screenshots that open in satty for annotation, then land in
 # both the clipboard and a dated file.
 let
-  cfg = config.modules.desktop.utilities.screenshot;
+  cfg = config.modules.desktop.utilities.screenshot; # NOLINT(let_order)
   user = config.user.name;
 
   grimblast = "${pkgs.grimblast}/bin/grimblast";

configs/nixos/modules/desktop/utilities/theming.nix

@@ -6,7 +6,7 @@
 }:
 # Nord theming for the graphical layer, driven from one base16 scheme by Stylix.
 let
-  cfg = config.modules.desktop.utilities.theming;
+  cfg = config.modules.desktop.utilities.theming; # NOLINT(let_order)
   user = config.user.name;
 
   # A single static Nord wallpaper, drawn as a vertical gradient across the

configs/nixos/modules/desktop/utilities/userdirs.nix

@@ -2,7 +2,7 @@
 # Declares the XDG user directories, so a tool that queries them lands in a
 # well-known folder a host can relocate from one place.
 let
-  cfg = config.modules.desktop.utilities.userdirs;
+  cfg = config.modules.desktop.utilities.userdirs; # NOLINT(let_order)
   user = config.user.name;
 in
 {