nixos-hardware/common/cpu/intel/cpu-only.nix

{ config, lib, ... }:
{
  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
}