From 36106c37fd3817d44b0947fc877eed05f6a48894 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Matej=20Jane=C5=BEi=C4=8D?= <janezic.mj@gmail.com>
Date: Mon, 30 Mar 2026 01:31:16 +0200
Subject: [PATCH] feat: allow root ssh login for iso

---
 hosts/iso/configuration.nix | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/hosts/iso/configuration.nix b/hosts/iso/configuration.nix
index 5639516..6a7b733 100644
--- a/hosts/iso/configuration.nix
+++ b/hosts/iso/configuration.nix
@@ -1,10 +1,16 @@
-_: {
+{ lib, ... }:
+{
   image.modules.iso-installer = {
     isoImage.squashfsCompression = "zstd -Xcompression-level 6";
   };
 
   # live iso: passwordless login and sudo
   users.users.matej.initialHashedPassword = "";
+  users.users.root.openssh.authorizedKeys.keys = [
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICQGLdINKzs+sEy62Pefng0bcedgU396+OryFgeH99/c janezicmatej"
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDk00+Km03epQXQs+xEwwH3zcurACzkEH+kDOPBw6RQe openpgp:0xB095D449"
+  ];
+  services.openssh.settings.PermitRootLogin = lib.mkForce "prohibit-password";
   security.sudo.wheelNeedsPassword = false;
 
   system.stateVersion = "25.05";