diff --git a/roles/traefik.nix b/roles/traefik.nix
index 094be8e..b4be4f2 100644
--- a/roles/traefik.nix
+++ b/roles/traefik.nix
@@ -37,6 +37,7 @@
           routes = roleRoutes ++ hostRoutes;
         in
         {
+          deployment.tags = [ "infra" ];
           networking.firewall.allowedTCPPorts = [
             80
             443