Add firmware updating through fwupd via the Linux Vendor firmware Service (LVFS).

nix/configuration/configuration.nix

@@ -49,6 +49,7 @@
     ./roles/steam
     ./roles/latex
     ./roles/launch_keyboard
+    ./roles/lvfs
     ./roles/nvme
   ];
 

nix/configuration/roles/lvfs/default.nix

@@ -0,0 +1,33 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+
+{
+  imports = [ ];
+
+  config = lib.mkMerge [
+    {
+      services.fwupd.enable = true;
+
+      environment.persistence."/persist" = lib.mkIf (!config.me.buildingIso) {
+        hideMounts = true;
+        directories = [
+          {
+            directory = "/var/lib/fwupd";
+            user = "root";
+            group = "root";
+            mode = "0755";
+          }
+        ];
+      };
+    }
+    (lib.mkIf config.me.graphical {
+      environment.systemPackages = with pkgs; [
+        gnome-firmware
+      ];
+    })
+  ];
+}