Core Leaves
cells/core/ contains NixOS-side leaves for base system behavior and security behavior.
Up: cells
Down: boot | Nix settings | users | networking | security | packages | locale | power
What this subtree does
Core leaves attach to two main branches.
base: boot, Nix settings, users, packages, locale, and power.security: networking policy and host hardening.
Why this split matters
Base leaves make the system usable. Security leaves make the system safer and more explicit. Keeping them separate lets a host or profile reason about foundational behavior and hardening behavior independently.
Leaf pattern
_: {
config.my.branches.base.nixosModules = [
({ pkgs, ... }: {
environment.systemPackages = [ pkgs.curl ];
})
];
}The file contributes a NixOS module to a branch. It does not import itself into a host directly.