chore: use features in iso

features/neovim.nix

@@ -16,51 +16,54 @@
         };
       };
 
-      config = {
-        # only disable when stylix is present (loaded by desktop feature)
-        stylix.targets.neovim.enable = lib.mkIf (options ? stylix) false;
+      config = lib.mkMerge [
+        (lib.optionalAttrs (options ? stylix) {
+          # disable stylix neovim target when stylix is present (loaded by desktop feature)
+          stylix.targets.neovim.enable = false;
+        })
+        {
+          xdg.configFile."nvim" = lib.mkIf (config.neovim.dotfiles != null) {
+            source = config.neovim.dotfiles;
+          };
 
-        xdg.configFile."nvim" = lib.mkIf (config.neovim.dotfiles != null) {
-          source = config.neovim.dotfiles;
-        };
+          programs.neovim = {
+            enable = true;
+            vimAlias = true;
+            defaultEditor = true;
+            package = inputs.neovim-nightly-overlay.packages.${pkgs.stdenv.hostPlatform.system}.default;
 
-        programs.neovim = {
-          enable = true;
-          vimAlias = true;
-          defaultEditor = true;
-          package = inputs.neovim-nightly-overlay.packages.${pkgs.stdenv.hostPlatform.system}.default;
+            extraPackages = with pkgs; [
+              gcc
+              luajit
+              nodejs_22
+              tree-sitter
+              gnumake
+              osc
 
-          extraPackages = with pkgs; [
-            gcc
-            luajit
-            nodejs_22
-            tree-sitter
-            gnumake
-            osc
+              fd
+              ripgrep
+              bat
+              delta
 
-            fd
-            ripgrep
-            bat
-            delta
+              pyright
+              typescript-language-server
+              lua-language-server
+              gopls
+              nil
+              nixd
 
-            pyright
-            typescript-language-server
-            lua-language-server
-            gopls
-            nil
-            nixd
+              nixpkgs-fmt
+              stylua
+            ];
 
-            nixpkgs-fmt
-            stylua
-          ];
-
-          extraWrapperArgs = [
-            "--suffix"
-            "LD_LIBRARY_PATH"
-            ":"
-            "${lib.makeLibraryPath [ pkgs.stdenv.cc.cc.lib ]}"
-          ];
-        };
-      };
+            extraWrapperArgs = [
+              "--suffix"
+              "LD_LIBRARY_PATH"
+              ":"
+              "${lib.makeLibraryPath [ pkgs.stdenv.cc.cc.lib ]}"
+            ];
+          };
+        }
+      ];
     };
 }

features/user-matej.nix

@@ -12,6 +12,8 @@ in
   nixos =
     { pkgs, ... }:
     {
+      programs.zsh.enable = true;
+
       users.users.matej = {
         uid = 1000;
         isNormalUser = true;

flake/hosts.nix

@@ -67,6 +67,7 @@ in
     # nixos-rebuild build-image --image-variant install-iso --flake .#iso
     iso = mkHost "iso" {
       system = "x86_64-linux";
+      user = "matej";
       features = [
         "openssh"
       ];
@@ -84,6 +85,8 @@ in
         "vm-9p-automount"
         "docker"
         "neovim"
+        "claude"
+        "dev"
       ];
     };
   };

hosts/iso/configuration.nix

@@ -1,32 +1,11 @@
-{
-  userKeys,
-  ...
-}:
-{
+_: {
   image.modules.iso-installer = {
     isoImage.squashfsCompression = "zstd -Xcompression-level 6";
   };
 
-  networking.firewall.allowedTCPPorts = [ 22 ];
-
-  users = {
-    groups.matej = {
-      gid = 1000;
-    };
-    users.matej = {
-      group = "matej";
-      uid = 1000;
-      isNormalUser = true;
-      home = "/home/matej";
-      createHome = true;
-      password = "burek123";
-      extraGroups = [
-        "wheel"
-        "users"
-      ];
-      openssh.authorizedKeys.keys = userKeys.sshAuthorizedKeys or [ ];
-    };
-  };
+  # live iso: passwordless login and sudo
+  users.users.matej.initialHashedPassword = "";
+  security.sudo.wheelNeedsPassword = false;
 
   system.stateVersion = "25.05";
 }