{
  lib,
  config,
  modulesPath,
  ...
}: {
  imports = with lib.nixosModules; [
    (modulesPath + "/installer/cd-dvd/installation-cd-minimal.nix")

    secrets
    networking
    locale
    users
    overlays
    nix
    version

    ssh

    dk1-hardware
  ];

  sops.age.keyFile = "/iso/key";

  networking = {
    hostName = "dk1-iso";
    wireless.enable = false;
    networkmanager.ensureProfiles.profiles.home.ipv4
      .address1 = "192.168.0.200/24";
  };

  users.users.nixos = {
    hashedPassword = null;
    hashedPasswordFile = config.sops.secrets.user-password.path;
  };

  services = {
    openssh.settings.PermitRootLogin = lib.mkForce "without-password";
    getty = {
      helpLine = lib.mkForce "";
      autologinUser = lib.mkForce null;
    };
  };
}