# Users

Two declarative user accounts, shared across hosts via
`hosts/globalServices/default.nix`'s `mkVariableModules`/import wiring:

- **`drone`** (`drone.nix`) — the account this whole platform actually
  runs as: the admin `tmux` session on blunix, the agent-codex services,
  pinix's recovery checkout. `bash` shell.
- **`builder`** (`builder.nix`) — a separate human-facing account, `zsh`
  shell, with its own home-manager profile wired up only on `tnix`
  (`home/tnix/builder.nix`). Not the same thing as the Builder *role* in
  `agent-codex` — that runs as `drone` (see
  `hosts/blunix/localServices/agent-codex.nix`, `User = "drone"`).

Both carry the same set of authorized SSH keys (personal devices: iPad,
iPhone, tnix, blunix/pinix host keys) and both are in `wheel` + `docker`
— `docker` is currently dead weight on every host: `docker.nix` in
`hosts/globalServices/` is commented out, so no Docker daemon actually
runs anywhere these groups take effect.