# server.list — extra packages installed via apt after base install. # Server variant: hardened headless, SSH-only. ufw fail2ban auditd apparmor apparmor-utils apparmor-profiles apparmor-profiles-extra libpam-pwquality dropbear-initramfs cryptsetup-initramfs htop vim tmux