systems/machines/hermes/cpu.nix

{ config, lib, ... }:

{
  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
}