niksos/hosts/common/optional/cpu/intel.nix

{
    hardware.cpu.intel.updateMicrocode = true;

    services.thermald.enable = true;
}