1  { config, pkgs, ... }:
 2  
 3  {
 4    boot = {
 5      initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usb_storage" "usbhid" "sd_mod" ];
 6      kernelModules = [ "kvm-intel" ];
 7      extraModulePackages = [ ];
 8      kernelParams = [
 9        "kvm_intel.nested=1"
10        "intel_iommu=on"
11      ];
12      loader.efi.canTouchEfiVariables = true;
13    };
14    hardware = {
15      cpu.intel.updateMicrocode = true;
16    };
17  }