Everything is updateable through fwupd, so it's enabled by default.
To get the latest firmware, run:
$ fwupdmgr refresh
$ fwupdmgr updateTo unlock your LUKS disk encryption with an onscreen touch keyboard, you can use unl0kr.
This module will automatically included the necessary kernel modules in initrd to make touchpad and touchscreen work when boot.initrd.unl0kr.enable = true.
Example configuration:
{
boot.initrd.systemd.enable = true;
boot.initrd.unl0kr.enable = true;
boot.initrd.luks.devices."cryptroot" = {
device = "/dev/disk/by-uuid/YOUR-UUID-HERE";
};
}