init config

modules/hardware/intel-cpu.nix

@@ -0,0 +1,11 @@
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  options.lumpiasty.intelCpu = lib.mkEnableOption "Enable intel CPU";
+
+  config = lib.mkIf config.lumpiasty.intelCpu {
+    nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+    # hardware.cpu.intel.updateMicrocode = true;
+    boot.kernelModules = [ "kvm-intel" ];
+  };
+}

modules/hardware/no-mitigations.nix

@@ -0,0 +1,11 @@
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  options.lumpiasty.noMitigations = lib.mkEnableOption "Disable mitigations";
+
+  config = lib.mkIf config.lumpiasty.noMitigations {
+    boot.kernelParams = [
+      "mitigations=off"
+    ];
+  };
+}