{ ... }: {
  hardware.enableRedistributableFirmware = true;
  hardware.enableAllFirmware = true;
  hardware.cpu.intel.updateMicrocode = true;
  hardware.cpu.amd.updateMicrocode = true;
  hardware.ksm.enable = true;
  hardware.wirelessRegulatoryDatabase = true;
}