init config

modules/hardware/no-mitigations.nix

@@ -0,0 +1,11 @@
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  options.lumpiasty.noMitigations = lib.mkEnableOption "Disable mitigations";
+
+  config = lib.mkIf config.lumpiasty.noMitigations {
+    boot.kernelParams = [
+      "mitigations=off"
+    ];
+  };
+}