i should probably narrow the rules to match specifically things destined for the ovpns address, but for now this should work.
machines
hosts
- shorter. - congruent with `nixos-rebuild .` choosing what to build based on `hostname`. - more widely used within other nix repos i've seen. - more accurate in the case that i migrate a host to a different machine (which i plan to do with servo).
