From afe0841e9d696d3ac8ff447909c416c48ba90836 Mon Sep 17 00:00:00 2001
From: Vincent Ambo <tazjin@google.com>
Date: Sun, 7 Jun 2020 19:30:52 +0100
Subject: [PATCH] feat(ops/nixos): Add module for configuring Gerrit for the
 repo

---
 ops/nixos/camden/default.nix          | 20 +++++++++++++++++++-
 ops/nixos/modules/monorepo-gerrit.nix | 16 ++++++++++++++++
 third_party/default.nix               |  1 +
 3 files changed, 36 insertions(+), 1 deletion(-)
 create mode 100644 ops/nixos/modules/monorepo-gerrit.nix

diff --git a/ops/nixos/camden/default.nix b/ops/nixos/camden/default.nix
index 9496d14b5..5db84ef50 100644
--- a/ops/nixos/camden/default.nix
+++ b/ops/nixos/camden/default.nix
@@ -9,6 +9,8 @@ in lib.fix(self: {
   imports = [
     ../modules/depot.nix
     ../modules/hound.nix
+    ../modules/monorepo-gerrit.nix
+    "${pkgs.nixpkgsSrc}/nixos/modules/services/web-apps/gerrit.nix"
   ];
   depot = depot;
 
@@ -108,7 +110,6 @@ in lib.fix(self: {
     (with depot; [
       fun.idual.script
       fun.idual.setAlarm
-      third_party.honk
       third_party.pounce
     ]) ++
 
@@ -230,6 +231,11 @@ in lib.fix(self: {
       group = "nginx";
       webroot = "/var/lib/acme/acme-challenge";
       postRun = "systemctl reload nginx";
+      extraDomains = {
+        "cl.tvl.fyi" = null;
+        "code.tvl.fyi" = null;
+        "cs.tvl.fyi" = null;
+      };
     };
   };
 
@@ -395,6 +401,18 @@ in lib.fix(self: {
         }
       '';
     };
+
+    virtualHosts.gerrit = {
+      serverName = "cl.tvl.fyi";
+      useACMEHost = "tvl.fyi";
+      forceSSL = true;
+
+      extraConfig = ''
+        location / {
+          proxy_pass http://localhost:4778;
+        }
+      '';
+    };
   };
 
   # Timer units that can be started with systemd-run to set my alarm.
diff --git a/ops/nixos/modules/monorepo-gerrit.nix b/ops/nixos/modules/monorepo-gerrit.nix
new file mode 100644
index 000000000..2b8e5e773
--- /dev/null
+++ b/ops/nixos/modules/monorepo-gerrit.nix
@@ -0,0 +1,16 @@
+# Gerrit configuration for the TVL monorepo
+{ pkgs, config, lib, ... }:
+
+{
+  services.gerrit = {
+    enable = true;
+    listenAddress = "[::]:4778"; # 4778 - grrt
+    serverId = "4fdfa107-4df9-4596-8e0a-1d2bbdd96e36";
+    settings = {
+      core.packedGitLimit = "100m";
+      log.jsonLogging = true;
+      log.textLogging = false;
+      # TODO: gitweb config
+    };
+  };
+}
diff --git a/third_party/default.nix b/third_party/default.nix
index 9b62ede4d..822d9f323 100644
--- a/third_party/default.nix
+++ b/third_party/default.nix
@@ -58,6 +58,7 @@ let
       fira-mono
       fontconfig
       freetype
+      gerrit
       gettext
       glibc
       gmock