nixpkgs/nixos/modules/hardware/cpu/intel-microcode.nix

{ config, lib, pkgs, ... }:

with lib;

{

  ###### interface

  options = {

    hardware.cpu.intel.updateMicrocode = mkOption {
      default = false;
      type = types.bool;
      description = ''
        Update the CPU microcode for Intel processors.
      '';
    };

  };


  ###### implementation

  config = mkIf config.hardware.cpu.intel.updateMicrocode {
    hardware.firmware = [ "${pkgs.microcodeIntel}/lib/firmware" ];
    boot.kernelModules = [ "microcode" ];
  };

}