All right it looks like I kind of helped myself here.
Except that it is
sudo yunohost update user [username] -p
and to reset the ip that nextcloud excluded:
sudo -u nextcloud php --define apc.enable_cli=1 occ security:bruteforce:reset [ip.ad.re.ss]
This stuff gives me heart attacks.