nixconfig/modules/nixos/system/hw/base/default.nix

{ ... }: {
  services.fwupd.enable = true;
  hardware.enableAllFirmware = true;
}