traefik: initial configuration

I want to run traefik on the NAS, so I can reach grafana and other
future services running on that host.

To manage TLS, we use let's encrypt with a DNS challenge. For this to
work we need a service account configuration, that is encrypted with
age.

1 files changed, 3 insertions, 0 deletions

diff --git a/secrets.nix b/secrets.nix
index 64c60c0..3d50744 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -15,4 +15,7 @@ in {
 
   "secrets/network/tahoe/wireguard_privatekey.age".publicKeys =
     [ fcuny_aptos aptos tahoe ];
+
+  "secrets/traefik/gcp_service_account.json.age".publicKeys =
+    [ fcuny_aptos aptos tahoe ];
 }