lukas/nixos-config
Archived
1
0
Fork 1
Code Issues Pull requests Releases Wiki Activity
This repository has been archived on 2026-09-17. You can view files and clone it, but you cannot make any changes to its state, such as pushing and creating new issues, pull requests or comments.
nixos-config/hosts/user
History
Exact
pijukka 5407a1d235 Atomare Self-Close-Sessions, Eskalationskette und Reviewer-Schwelle für Herdr-Rollen 
Self-Close: Pane-Wrapper (herdr-self-close.nix), Rollenverträge und
Claude-Settings für graphics/administrator/agent-manager/orga, mit
Regressionstests in agents/tests/roles.sh. Reviewer bleibt bewusst
ausgeschlossen (read-only, keine Aktivierungsfreigabe).

Eskalationsentwurf (docs/herdr-eskalation-review-entwurf.md) freigegeben:
Reviewer-Pflicht ab Risikoschwelle statt bei jedem Diff, Agent-Manager
zusätzlich zum Administrator als Fixer für Rollenvertrags-Blocker
(agent-manager.md 2.0.0 -> 2.1.0), Rückfrage-Kanal zunächst nur als
Pilot bei Orga (orga.md 2.0.0 -> 2.1.0). Details in
docs/herdr-orchestration.md.

Begleitende Infrastruktur: agent-codex/orga-agent/finance-agent-Worker,
orga-agent-Client und hdm.0ff.space-Klon-Doku. graphify-out/, .agents/
und nvim.log neu gitignored (lokale Tool-Ausgabe/Debris, kein Repo-Inhalt).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011uSxdbo8zykSeH5WCMmbvp
2026-09-01 19:33:39 +02:00
..
builder.nix secrets: remove plaintext credentials 2026-07-28 01:26:10 +02:00
drone.nix Atomare Self-Close-Sessions, Eskalationskette und Reviewer-Schwelle für Herdr-Rollen 2026-09-01 19:33:39 +02:00
README.md docs: write pinix/blunix/user READMEs, reorganize blunix's traefik-*.nix 2026-07-31 12:05:17 +02:00

README.md

Users

Two declarative user accounts, shared across hosts via hosts/globalServices/default.nix's mkVariableModules/import wiring:

  • drone (drone.nix) — the account this whole platform actually runs as: the admin tmux session on blunix, the agent-codex services, pinix's recovery checkout. bash shell.
  • builder (builder.nix) — a separate human-facing account, zsh shell, with its own home-manager profile wired up only on tnix (home/tnix/builder.nix). Not the same thing as the Builder role in agent-codex — that runs as drone (see hosts/blunix/localServices/agent-codex.nix, User = "drone").

Both carry the same set of authorized SSH keys (personal devices: iPad, iPhone, tnix, blunix/pinix host keys) and both are in wheel + docker — docker is currently dead weight on every host: docker.nix in hosts/globalServices/ is commented out, so no Docker daemon actually runs anywhere these groups take effect.