diff --git a/.gitea/workflows/iso-builder.yml b/.gitea/workflows/iso-builder.yml
index ac0a46d..55d4229 100644
--- a/.gitea/workflows/iso-builder.yml
+++ b/.gitea/workflows/iso-builder.yml
@@ -44,24 +44,24 @@ jobs:
 
       - name: Build ${{ matrix.host }} ISO (direct from flake)
         run: |
-          nix build --print-out-paths --no-link \
+          nix build --print-out-paths \
             .#nixosConfigurations.${{ matrix.host }}-iso.config.system.build.isoImage \
             --out-link result-iso 2>&1 | tee /tmp/nix-build.log
-          # The .iso file is inside the build result
+          # The .iso file is inside the build result (result-iso is a symlink)
           mkdir -p iso-result
-          ISO_SRC=$(find result-iso -name '*.iso' -type f | head -n 1)
+          ISO_SRC=$(find -L result-iso -name '*.iso' -type f | head -n 1)
           if [ -z "$ISO_SRC" ]; then
             echo "No ISO found — checking build output for clues..."
             cat /tmp/nix-build.log
             ls -la result-iso/ || true
-            find result-iso -maxdepth 3 -type f 2>/dev/null || true
+            find -L result-iso -maxdepth 3 -type f 2>/dev/null || true
             exit 1
           fi
           cp "$ISO_SRC" "iso-result/"
 
       - name: Show ${{ matrix.host }} ISO info
         run: |
-          ISO_SRC=$(find iso-result -name '*.iso' -type f | head -n 1)
+          ISO_SRC=$(find -L iso-result -name '*.iso' -type f | head -n 1)
           if [ -z "$ISO_SRC" ]; then
             echo "No ISO found under iso-result"
             ls -la iso-result || true
@@ -77,7 +77,7 @@ jobs:
         run: |
           set -euo pipefail
           mkdir -p iso-result/artifact
-          ISO_SRC=$(find iso-result -name '*.iso' -type f | head -n 1)
+          ISO_SRC=$(find -L iso-result -name '*.iso' -type f | head -n 1)
           if [ -z "$ISO_SRC" ]; then
             echo "No ISO found under iso-result"
             ls -la iso-result || true