diff --git a/config/ansible/tasks/servers/cifs.yml b/config/ansible/tasks/servers/cifs.yml
index f3087bc..646af88 100644
--- a/config/ansible/tasks/servers/cifs.yml
+++ b/config/ansible/tasks/servers/cifs.yml
@@ -18,7 +18,7 @@
     dest: /root/.smbcredentials
     content: |
       username=u451316
-      password={{ lookup('onepassword', '5j5y5axfjr3f3sn5nixb6htg4y', field='password', vault='j7nmhqlsjmp2r6umly5t75hzb4') | default('CHANGE_ME') }}
+      password={{ lookup('onepassword', '5j5y5axfjr3f3sn5nixb6htg4y', vault='j7nmhqlsjmp2r6umly5t75hzb4') | default('CHANGE_ME') }}
     mode: '0600'
 
 - name: Add fstab entry for storage-box
diff --git a/config/ansible/tasks/servers/services/golink/golink.yml b/config/ansible/tasks/servers/services/golink/golink.yml
new file mode 100644
index 0000000..e6c5bcf
--- /dev/null
+++ b/config/ansible/tasks/servers/services/golink/golink.yml
@@ -0,0 +1,20 @@
+---
+- name: Ensure golink data directory exists
+  ansible.builtin.file:
+    path: /mnt/storage-box/golink/data
+    state: directory
+    mode: '0755'
+    owner: '1000'
+    group: '100'
+
+- name: Deploy golink docker container
+  community.docker.docker_container:
+    name: golink
+    image: ghcr.io/tailscale/golink:main
+    restart_policy: unless-stopped
+    env:
+      PUID: '1000'
+      PGID: '100'
+      TS_AUTHKEY: "{{ lookup('onepassword', '4gsgavajnxfpcrjvbkqhoc4drm', vault='j7nmhqlsjmp2r6umly5t75hzb4') }}"
+    volumes:
+      - /mnt/storage-box/golink/data:/home/nonroot