infra/users/builder.nix

{ config, lib, pkgs, keys, ... }: {
  users.users.builder = {
    isSystemUser = true;
    group = "builder";
    home = "/var/empty";
    createHome = false;
    shell = "${pkgs.shadow}/bin/nologin";
    openssh.authorizedKeys.keys = with keys; [
      users.builder.main
    ];
  };
  users.groups.builder = {};
}