diff --git a/roles/server/forgejo.nix b/roles/server/forgejo.nix
index 3dd1ff3..3d15f08 100644
--- a/roles/server/forgejo.nix
+++ b/roles/server/forgejo.nix
@@ -10,6 +10,8 @@
       };
       server = {
         ROOT_URL = "http://git.everest.sable-pancake.ts.net";
+        START_SSH_SERVER = true;
+        SSH_PORT = 4222;
       };
     };
   };
diff --git a/roles/server/traefik.nix b/roles/server/traefik.nix
index 9550bb2..d611211 100644
--- a/roles/server/traefik.nix
+++ b/roles/server/traefik.nix
@@ -20,7 +20,14 @@
 		};
 	};
 
-	systemd.units.tailscaled.requiredBy = [ "traefik.service" ];
+	systemd = {
+		units.tailscaled.requiredBy = [ "traefik.service" ];
+		# We have somewhat frequent power outages, and our ISP router takes
+		# ages to boot up. If I don't add a delay, traefik tries to bind to
+		# the tailscale interface before it's ready, making it crash too much
+		# in too little time
+		services.traefik.serviceConfig.RestartSec = 120;
+	};
 
 	networking.firewall.allowedTCPPorts = [ 80 8080 ];
 }