{ ... }:
{
  services.traefik = {
    enable = true;
    staticConfigOptions = {
      api = { insecure = true; };
      entryPoints = {
        http = { address = ":80"; };
        web = { address = ":30000"; };
      };
    };
  };
  networking.firewall = { enable = true; allowedTCPPorts = [ 80 443 30000 ]; };
}