{ ... }:

{
  boot.kernelParams = [
    "intel_iommu=on"
    "vfio-pci.ids=1b21:1242"
  ];
  boot.initrd.kernelModules = [
    "vfio"
    "vfio_pci"
    "vfio_iommu_type1"
    "iommufd"
  ];
  services.udev.extraRules = ''
    SUBSYSTEM=="vfio", MODE="660", GROUP="wheel"
  '';
}