Server Branch
The server branch contains headless defaults for machines that should not inherit the full desktop profile.
Up: branches
Down: server leaves | server host composition
What the branch collects
config.my.branches.server = {
description = "Dendritic server branch for headless host defaults.";
};
The main server leaf enables SSH, disables password authentication, configures a firewall, enables fail2ban, sets basic Nix features, and installs a compact operational package set.
Why it is separate
Servers have different defaults from workstations. They usually need SSH enabled, NetworkManager disabled, fewer desktop packages, and a narrower firewall.
Keeping this in a dedicated branch prevents desktop defaults from accidentally shaping server machines.