{...}: {
  # Intel CPU: microcode updates (applied via initrd at boot).
  flake.nixosModules.cpuIntel = {...}: {
    hardware.cpu.intel.updateMicrocode = true;
    hardware.enableRedistributableFirmware = true;
  };
}