diff --git a/nix/iso/flake.lock b/nix/iso/flake.lock
new file mode 100644
index 0000000..badb288
--- /dev/null
+++ b/nix/iso/flake.lock
@@ -0,0 +1,27 @@
+{
+  "nodes": {
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1767325753,
+        "narHash": "sha256-yA/CuWyqm+AQo2ivGy6PlYrjZBQm7jfbe461+4HF2fo=",
+        "owner": "nixos",
+        "repo": "nixpkgs",
+        "rev": "64049ca74d63e971b627b5f3178d95642e61cedd",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nixos",
+        "ref": "nixos-25.11",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "root": {
+      "inputs": {
+        "nixpkgs": "nixpkgs"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}
diff --git a/nix/iso/flake.nix b/nix/iso/flake.nix
new file mode 100644
index 0000000..b27b65b
--- /dev/null
+++ b/nix/iso/flake.nix
@@ -0,0 +1,34 @@
+{
+  description = "NixOS ISO";
+
+  inputs = {
+    nixpkgs.url = "github:nixos/nixpkgs?ref=nixos-25.11";
+  };
+
+  outputs =
+    { nixpkgs, ... }:
+    {
+      nixosConfigurations = {
+        iso = nixpkgs.lib.nixosSystem {
+          system = "x86_64-linux";
+          modules = [
+            "${nixpkgs}/nixos/modules/installer/cd-dvd/installation-cd-minimal.nix"
+            ../modules/keys.nix
+            (
+              {
+                config,
+                ...
+              }:
+              {
+                users.users = {
+                  nixos.openssh.authorizedKeys.keys = config.authorized_ssh;
+                  root.openssh.authorizedKeys.keys = config.authorized_ssh;
+                };
+                services.openssh.enable = true;
+              }
+            )
+          ];
+        };
+      };
+    };
+}