nixconfig/modules/nixos/system/hw/base/default.nix

{ ... }: {
  services.fwupd.enable = false; # Note: run inside a nix-shell
  hardware.enableAllFirmware = true;
}