numbus-server-module/modules/hardware/cpu.nix

{ config, ... }:

{
  config = {
    hardware.enableRedistributableFirmware = true;
    hardware.cpu.intel.updateMicrocode = true;
    hardware.cpu.amd.updateMicrocode = true;
  };
}