feat(ops/modules): deploy tvixbolt to tvixbolt.tvl.su

Change-Id: I534cf918fc3e03ce8c14cf15f6d3280b6a657c8d
Reviewed-on: https://cl.tvl.fyi/c/depot/+/6536
Reviewed-by: tazjin <tazjin@tvl.su>
Autosubmit: tazjin <tazjin@tvl.su>
Tested-by: BuildkiteCI

corp/website/content.md

@@ -17,6 +17,11 @@ example:
 * Software development in various languages (Rust, Common Lisp,
   Erlang, Java and more)
 
+We also provide some services on this page:
+
+* [tvixbolt][], a web-frontend for the [Tvix][] evaluator
+* ... and other services listed on the community homepage
+
 We might be able to help you with other things on request.
 
 Note: We are still in the process of getting started and have limited
@@ -24,3 +29,5 @@ capacity at the moment. If you would like our help, please reach out
 at **contact {at} tvl.su** for a discussion.
 
 [tvl-fyi]: https://tvl.fyi
+[Tvix]: https://cs.tvl.fyi/depot/-/tree/tvix
+[tvixbolt]: https://tvixbolt.tvl.su

ops/machines/whitby/default.nix

@@ -44,6 +44,7 @@ in
     (mod "www/status.tvl.su.nix")
     (mod "www/tazj.in.nix")
     (mod "www/todo.tvl.fyi.nix")
+    (mod "www/tvixbolt.tvl.su.nix")
     (mod "www/tvl.fyi.nix")
     (mod "www/tvl.su.nix")
     (mod "www/wigglydonke.rs.nix")

ops/modules/www/tvixbolt.tvl.su.nix

@@ -0,0 +1,19 @@
+{ depot, ... }:
+
+{
+  imports = [
+    ./base.nix
+  ];
+
+  config = {
+    services.nginx.virtualHosts."tvixbolt.tvl.su" = {
+      root = depot.corp.tvixbolt;
+      enableACME = true;
+      forceSSL = true;
+
+      extraConfig = ''
+        add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
+      '';
+    };
+  };
+}