5407a1d235
Self-Close: Pane-Wrapper (herdr-self-close.nix), Rollenverträge und Claude-Settings für graphics/administrator/agent-manager/orga, mit Regressionstests in agents/tests/roles.sh. Reviewer bleibt bewusst ausgeschlossen (read-only, keine Aktivierungsfreigabe). Eskalationsentwurf (docs/herdr-eskalation-review-entwurf.md) freigegeben: Reviewer-Pflicht ab Risikoschwelle statt bei jedem Diff, Agent-Manager zusätzlich zum Administrator als Fixer für Rollenvertrags-Blocker (agent-manager.md 2.0.0 -> 2.1.0), Rückfrage-Kanal zunächst nur als Pilot bei Orga (orga.md 2.0.0 -> 2.1.0). Details in docs/herdr-orchestration.md. Begleitende Infrastruktur: agent-codex/orga-agent/finance-agent-Worker, orga-agent-Client und hdm.0ff.space-Klon-Doku. graphify-out/, .agents/ und nvim.log neu gitignored (lokale Tool-Ausgabe/Debris, kein Repo-Inhalt). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011uSxdbo8zykSeH5WCMmbvp
36 lines
1.3 KiB
Nix
36 lines
1.3 KiB
Nix
{
|
|
pkgs,
|
|
...
|
|
}: {
|
|
users.users.drone = {
|
|
isNormalUser = true;
|
|
description = "builder";
|
|
extraGroups = [
|
|
"wheel"
|
|
"docker"
|
|
];
|
|
shell = pkgs.zsh;
|
|
openssh.authorizedKeys.keys = [
|
|
############
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILrZETtzrSfkomL9H31SuyQJ8O39ujMIjsCkbjL4DgxM"
|
|
#ipad
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDiL1HC9SzfP1Bm3ZDU3QOKEIfyRVry1e+G5egtw9/hA mobile@localhost"
|
|
#ssh iphone
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFcWcFktM6blTjTyGh7iw7Dp7oTt18kebJWqWbw+48xQ mobile@localhost"
|
|
#moshi iphone
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG/k8lPcm7nP0plnAcl0tR6VQSDCtvJl9fqhQlt11cS6 moshi"
|
|
#root tnix
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICb7MnxZch2IfxkFhKjGWkAVeAENJFEFaMk91UQTiQBf root@tnix"
|
|
#blunix
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIByyKW+cgtXpir9qhLMyoBOjQj932es1Yr3/BxqTHU6J drone@blunix"
|
|
];
|
|
};
|
|
|
|
# drone has no home-manager profile, so ~/.zshrc doesn't exist -- without
|
|
# it, interactive zsh runs the zsh-newuser-install wizard on every login.
|
|
# An empty file (never overwritten once it exists) is enough to skip it;
|
|
# actual config comes from /etc/zshrc (hosts/globalServices/zsh.nix).
|
|
systemd.tmpfiles.rules = [
|
|
"f /home/drone/.zshrc 0644 drone users - -"
|
|
];
|
|
}
|