Server: add traefik

roles/server/default.nix

@@ -14,5 +14,6 @@
 		./beep.nix
 		./wireguard.nix
 		./tailscale.nix
+		./traefik.nix
 	];
 }

roles/server/traefik.nix

@@ -0,0 +1,16 @@
+{ config, ... }:
+
+{
+	services.traefik = {
+		enable = true;
+		staticConfigOptions = {
+			# Enable the web ui
+			api.insecure = true;
+			api.dashboard = true;
+			entryPoints = {
+				http = { address = ":80"; };
+			};
+		};
+	};
+	networking.firewall.allowedTCPPorts = [ 80 8080 ];
+}