Arg, fucking port forwarding is shit

config/domains/rus.selby.ca.nix

@@ -2,4 +2,4 @@
 
 {
 
-}
+}

config/hosts.nix

@@ -26,6 +26,8 @@
       domain = "rus.selby.ca";
       site = "russell";
       profile = "server";
+      ssh-pubkey =
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB07Jf/NB4OlFSEI/eLJlNLA2sM9cHw1hX43r43nQ7a5";
     };
 
     downstairs-desktop = {
@@ -43,6 +45,8 @@
       domain = "rus.selby.ca";
       site = "russell";
       profile = "desktop";
+      ssh-pubkey =
+        "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBPqyDT/JqTxWZbpOXzy1Sxba2z2hNzt2BqjLspPvJLVc9zks1GMlnKAY5Nb7y7oi+CzeZMU+KAa069wZ/mYvpas=";
     };
 
     france = {
@@ -59,6 +63,8 @@
       domain = "fudo.org";
       site = "portage";
       profile = "server";
+      ssh-pubkey =
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA1COad5NSK3mi66WK5uWf79NLMf5rk350kvJGsEdDmn";
     };
 
     google-wifi = {
@@ -96,6 +102,8 @@
       domain = "sea.fudo.org";
       site = "seattle";
       profile = "server";
+      ssh-pubkey =
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHT8Uf6m8ZrSn4nmPyIO+JWLbgXJGX4jJTk0wfqDzzjb";
     };
 
     plato = {
@@ -111,6 +119,8 @@
       domain = "rus.selby.ca";
       site = "russell";
       profile = "server";
+      ssh-pubkey =
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGuClWAtkOMBOVFAFFdWosCT8NvuJBps46P4RV+Qqz4b";
     };
 
     procul = {

config/hosts/plato.nix

@@ -27,6 +27,8 @@ with lib; {
       "L /root/.ssh/id_rsa - - - - /state/root/ssh/id_rsa"
       "L /root/.ssh/id_rsa.pub - - - - /state/root/ssh/id_rsa.pub"
       "L /root/.ssh/known_hosts - - - - /state/root/ssh/known_hosts"
+      "L /etc/ssh/ssh_host_ed25519_key - - - - /state/ssh/ssh_host_ed25519_key"
+      "L /etc/ssh/ssh_host_rsa_key - - - - /state/ssh/ssh_host_rsa_key"
     ];
 
     services = {

config/profiles/common.nix

@@ -59,7 +59,10 @@ in {
       };
     };
 
-    fail2ban.enable = true;
+    fail2ban = {
+      enable = true;
+      bantime-increment.enable = true;
+    };
 
     xserver = {
       layout = "us";