draft AZ-PRM-1 config

hosts/AZ-PRM-1/services/n8n.nix

@@ -0,0 +1,26 @@
+{config, ...}: {
+  services.n8n = {
+    enable = true;
+    webhookUrl = "https://wf.az-group.com";
+  };
+  systemd.services.n8n.serviceConfig = {
+    EnvironmentFile = ["${config.age.secrets.n8n-env.path}"];
+  };
+  # Traefik configuration specific to n8n
+  services.traefik.dynamicConfigOptions.http = {
+    services.n8n.loadBalancer.servers = [
+      {
+        url = "http://localhost:5678/";
+      }
+    ];
+
+    routers.n8n = {
+      rule = "Host(`wf.i.az-intec.com`)";
+      tls = {
+        certResolver = "ionos";
+      };
+      service = "n8n";
+      entrypoints = "websecure";
+    };
+  };
+}