Add youtube-dl
Enable fail2ban service

By default it provides protection for SSH (although you have to see the
nixos module implementation to know that, or browse the log).
Remove unneeded "umask" setting from transmission service

The "umask = 2" setting is now ensured by the nixos module, no need to
have it in configuration.nix anymore.