From f6df01667a13a25f62d5dfdb958c41fae1789c8e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Matej=20Jane=C5=BEi=C4=8D?= <janezic.mj@gmail.com>
Date: Fri, 20 Feb 2026 15:11:06 +0100
Subject: [PATCH] feat: add live-iso host

---
 hosts/live-iso/configuration.nix | 47 ++++++++++++++++++++++++++++++++
 1 file changed, 47 insertions(+)
 create mode 100644 hosts/live-iso/configuration.nix

diff --git a/hosts/live-iso/configuration.nix b/hosts/live-iso/configuration.nix
new file mode 100644
index 0000000..fffecce
--- /dev/null
+++ b/hosts/live-iso/configuration.nix
@@ -0,0 +1,47 @@
+{ pkgs, lib, ... }:
+{
+  # Use zstd instead of xz for compressing the liveUSB image, it's 6x faster and 15% bigger.
+  isoImage.squashfsCompression = "zstd -Xcompression-level 6";
+
+  services.openssh = {
+    enable = true;
+    ports = [ 22 ];
+    settings = {
+      PasswordAuthentication = false;
+      AllowUsers = null;
+      PermitRootLogin = "no";
+      StreamLocalBindUnlink = "yes";
+    };
+  };
+
+  networking = {
+    useDHCP = true;
+    firewall.allowedTCPPorts = [ 22 ];
+  };
+
+  users = {
+    groups.matej = {
+      gid = 1000;
+    };
+    users.matej = {
+      group = "matej";
+      uid = 1000;
+      isNormalUser = true;
+      home = "/home/matej";
+      createHome = true;
+      password = "burek123";
+      extraGroups = [
+        "wheel"
+        "users"
+      ];
+      openssh.authorizedKeys.keys = [
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICQGLdINKzs+sEy62Pefng0bcedgU396+OryFgeH99/c janezicmatej"
+      ];
+    };
+  };
+
+  # boot.extraModulePackages = [ pkgs.linuxPackages.r8125 ];
+  # boot.blacklistedKernelModules = [ "r8169" ];
+
+  system.stateVersion = "25.05";
+}