diff --git a/cluster-config/README.md b/cluster-config/README.md
new file mode 100644
index 0000000..518d9fe
--- /dev/null
+++ b/cluster-config/README.md
@@ -0,0 +1,11 @@
+# Nomad Cluster Configuration
+
+This directory contains configuration relating to the configuration of the cluster including:
+- node pools
+- agent config
+
+## Node Pools
+
+[Node pools](https://developer.hashicorp.com/nomad/docs/concepts/node-pools) are a way to group nodes together into logical groups which jobs can target that can be used to enforce where allocations are placed.
+
+e.g. [`ingress-pool.hcl`](./ingress-pool.hcl) is a node pool that is used for ingress nodes such as the [bastion-vm](https://docs.redbrick.dcu.ie/aperture/bastion-vm/). Any jobs that are defined to use `node_pool = "ingress"` such as `traefik.hcl` and `gate-proxy.hcl` will only be assigned to one of the nodes in the `ingress` node pool (i.e. the [bastion VM](https://docs.redbrick.dcu.ie/aperture/bastion-vm/))
diff --git a/cluster-config/ingress-pool.hcl b/cluster-config/ingress-pool.hcl
new file mode 100644
index 0000000..69996aa
--- /dev/null
+++ b/cluster-config/ingress-pool.hcl
@@ -0,0 +1,3 @@
+node_pool "ingress" {
+  description = "Nodes for ingress to aperture. e.g. bastion-vm"
+}
diff --git a/jobs/traefik.hcl b/jobs/traefik.hcl
index 03ed7b1..7074f9c 100644
--- a/jobs/traefik.hcl
+++ b/jobs/traefik.hcl
@@ -1,12 +1,8 @@
 job "traefik" {
   datacenters = ["aperture"]
+  node_pool = "ingress"
   type        = "service"
 
-  constraint {
-    attribute = "${attr.unique.hostname}"
-    value = "bastion-vm"
-  }
-
   group "traefik" {
     network {
       port "http"{