add microcode updates

Signed-off-by: Xe <me@christine.website>

common/default.nix

@@ -1,5 +1,5 @@
 { config, lib, pkgs, ... }: {
-  imports = [ ./users ];
+  imports = [ ./users ./microcode.nix ];
 
   boot.cleanTmpDir = true;
   boot.kernelModules = [ "wireguard" ];

common/microcode.nix

@@ -0,0 +1,13 @@
+{ config, lib, ... }: {
+  options = {
+    within.microcode = {
+      enable = lib.mkEnableOption "Enables CPU Microcode updates";
+      vendor = lib.mkOption { type = lib.types.enum [ "intel" "amd" ]; };
+    };
+  };
+
+  config = lib.mkIf config.within.microcode.enable {
+    hardware.cpu.intel.updateMicrocode = (config.cadey.cpu.vendor == "intel");
+    hardware.cpu.amd.updateMicrocode = (config.cadey.cpu.vendor == "amd");
+  };
+}

hardware/alrest/default.nix

@@ -30,10 +30,10 @@
   services.zfs.autoSnapshot.enable = true;
   services.zfs.trim.enable = true;
 
-  # cadey.cpu = {
-  #   enable = true;
-  #   vendor = "intel";
-  # };
+  within.microcode = {
+    enable = true;
+    vendor = "intel";
+  };
 
   security.sudo.wheelNeedsPassword = false;