Server Branch

The server branch contains headless defaults for machines that should not inherit the full desktop profile.

Up: branches

Down: server leaves | server host composition

What this branch does

config.my.branches.server = {
  description = "Dendritic server branch for headless host defaults.";
};

The main server leaf enables SSH, disables password authentication, configures a firewall, enables fail2ban, sets basic Nix features, and installs a compact operational package set.

Why it exists

Servers have different defaults from workstations. They usually need SSH enabled, NetworkManager disabled, fewer desktop packages, and a narrower firewall.

Keeping this in a dedicated branch prevents desktop defaults from accidentally shaping server machines.