{
  services.fwupd = {
    enable = true;
    extraRemotes = [ "lvfs-testing" ];
    uefiCapsuleSettings = {
      "DisableCapsuleUpdateOnDisk" = true;
    };
  };
}