Got ssh working properly with dynamic hosts, exposed normal http[s] ports for the crowd server.