From beb78c710441f475f1b03437a381f75fb0e788d6 Mon Sep 17 00:00:00 2001
From: Vincent Ambo <mail@tazj.in>
Date: Mon, 12 Sep 2022 16:25:45 +0300
Subject: [PATCH] feat(ops/modules): deploy tvixbolt to tvixbolt.tvl.su

Change-Id: I534cf918fc3e03ce8c14cf15f6d3280b6a657c8d
Reviewed-on: https://cl.tvl.fyi/c/depot/+/6536
Reviewed-by: tazjin <tazjin@tvl.su>
Autosubmit: tazjin <tazjin@tvl.su>
Tested-by: BuildkiteCI
---
 corp/website/content.md             |  7 +++++++
 ops/machines/whitby/default.nix     |  1 +
 ops/modules/www/tvixbolt.tvl.su.nix | 19 +++++++++++++++++++
 3 files changed, 27 insertions(+)
 create mode 100644 ops/modules/www/tvixbolt.tvl.su.nix

diff --git a/corp/website/content.md b/corp/website/content.md
index f7ca9786f..8582bb3a4 100644
--- a/corp/website/content.md
+++ b/corp/website/content.md
@@ -17,6 +17,11 @@ example:
 * Software development in various languages (Rust, Common Lisp,
   Erlang, Java and more)
 
+We also provide some services on this page:
+
+* [tvixbolt][], a web-frontend for the [Tvix][] evaluator
+* ... and other services listed on the community homepage
+
 We might be able to help you with other things on request.
 
 Note: We are still in the process of getting started and have limited
@@ -24,3 +29,5 @@ capacity at the moment. If you would like our help, please reach out
 at **contact {at} tvl.su** for a discussion.
 
 [tvl-fyi]: https://tvl.fyi
+[Tvix]: https://cs.tvl.fyi/depot/-/tree/tvix
+[tvixbolt]: https://tvixbolt.tvl.su
diff --git a/ops/machines/whitby/default.nix b/ops/machines/whitby/default.nix
index eeba2f354..a7688423c 100644
--- a/ops/machines/whitby/default.nix
+++ b/ops/machines/whitby/default.nix
@@ -44,6 +44,7 @@ in
     (mod "www/status.tvl.su.nix")
     (mod "www/tazj.in.nix")
     (mod "www/todo.tvl.fyi.nix")
+    (mod "www/tvixbolt.tvl.su.nix")
     (mod "www/tvl.fyi.nix")
     (mod "www/tvl.su.nix")
     (mod "www/wigglydonke.rs.nix")
diff --git a/ops/modules/www/tvixbolt.tvl.su.nix b/ops/modules/www/tvixbolt.tvl.su.nix
new file mode 100644
index 000000000..7adddd123
--- /dev/null
+++ b/ops/modules/www/tvixbolt.tvl.su.nix
@@ -0,0 +1,19 @@
+{ depot, ... }:
+
+{
+  imports = [
+    ./base.nix
+  ];
+
+  config = {
+    services.nginx.virtualHosts."tvixbolt.tvl.su" = {
+      root = depot.corp.tvixbolt;
+      enableACME = true;
+      forceSSL = true;
+
+      extraConfig = ''
+        add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
+      '';
+    };
+  };
+}