nixconfig/modules/nixos/system/hw/base/default.nix

{ ... }: { services.fwupd.enable = true; }