Locked myself out of a a server, no fallback, rookie mistake. Spent rest of day fixing up ansible playbooks so I don't have to care about that. Wipe and start again. Not using contaners due to hardware constraints and heterogeneous boxes rules out easy nixos usage, so ansible it is.