diff --git a/hosts/rpi-5/containers.nix b/hosts/rpi-5/containers.nix
new file mode 100644
index 0000000..593b9f8
--- /dev/null
+++ b/hosts/rpi-5/containers.nix
@@ -0,0 +1,7 @@
+{ ... }:
+let
+
+in
+{
+
+}
diff --git a/hosts/rpi-5/nixos.nix b/hosts/rpi-5/nixos.nix
index 7d034bf..660b42f 100644
--- a/hosts/rpi-5/nixos.nix
+++ b/hosts/rpi-5/nixos.nix
@@ -16,12 +16,34 @@ in
   imports = [
     rpi-pi.nixosModules.raspberry-pi
     rpi-pi.nixosModules.sd-image
+    ./containers.nix
   ];
   nix.settings = {
     substituters = [ "https://nix-community.cachix.org" ];
     trusted-public-keys = [ "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=" ];
   };
 
+  services.traefik = {
+    enable = true;
+
+    staticConfigOptions = {
+      entryPoints = {
+        web = {
+          address = "0.0.0.0:80";
+          asDefault = true;
+        };
+        traefik = {
+          address = ":8081";
+        };
+      };
+      api.dashboard = true;
+      api.insecure = true;
+    };
+  };
+
+  # TEMP
+  networking.firewall.enable = false;
+
   users = {
     mutableUsers = false;
     users.doloro = {
@@ -33,8 +55,14 @@ in
       ];
       initialPassword = "meowmeowmeow";
     };
+    users.root = {
+      initialPassword = "rootmeow";
+      openssh.authorizedKeys.keys = [
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE/4h+WCBBW82puv8SMdUbkWymF4amEMuZitgFztB6oZ" # laptop pub key
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBaa6Z5qtBSLEz+A4fQGYPfkOISsRQlmKkVbcx2zxML7" # pc pub key
+      ];
+    };
   };
-  users.users.root.initialPassword = "root";
 
   networking.hostName = "nixos-001-rp5";