{ lib, ... }:

{
  hardware.cpu.intel.updateMicrocode = lib.mkDefault true;

  # https://github.com/NixOS/nixpkgs/issues/18356
  boot.blacklistedKernelModules = [ "nouveau" ];
}