{ pkgs, lib, ... }: { isoImage.squashfsCompression = "gzip -Xcompression-level 1"; systemd.services.sshd.wantedBy = lib.mkForce ["multi-user.target"]; networking.networkmanager.enable = false; services.openssh.openFirewall = lib.mkForce true; }